Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.mft
File:                     csG8nD23m0PzVvI_lWiEjJz7jdU.mft (raw, json)
Hash identifier:          laSNe/r5Xd/xTMaA7gjxEQQOCGkifHFW6a6VeXXe8jg=
Subject key identifier:   0C:F6:3B:61:F2:2A:CD:69:F4:98:DA:08:85:05:85:9A:47:CA:4D:83
Authority key identifier: 72:C1:BC:9C:3D:B7:9B:43:F3:56:F2:3F:95:68:84:8C:9C:FB:8D:D5
Certificate issuer:       /CN=A91820CE/serialNumber=72C1BC9C3DB79B43F356F23F9568848C9CFB8DD5
Certificate serial:       075E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/csG8nD23m0PzVvI_lWiEjJz7jdU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.mft
Manifest number:          0756
Signing time:             Wed 20 May 2026 21:44:00 +0000
Manifest this update:     Wed 20 May 2026 21:44:00 +0000
Manifest next update:     Wed 27 May 2026 21:44:00 +0000
Files and hashes:         1: csG8nD23m0PzVvI_lWiEjJz7jdU.crl (hash: jZaoGlelBi0NnKFY1aAkOv7fHdQ+tgZdp/R0z3jcBf0=)
                          2: EB292D8A6BF811EB8E899650C4F9AE02.roa (hash: atWWdhdNCGzw5vFDKmVi5w9vnS6VXFuLxeYuDlcE0MA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.crl
                          rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/csG8nD23m0PzVvI_lWiEjJz7jdU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 21:43:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1886 (0x75e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91820CE, serialNumber=72C1BC9C3DB79B43F356F23F9568848C9CFB8DD5
        Validity
            Not Before: May 20 21:44:00 2026 GMT
            Not After : May 27 21:44:00 2026 GMT
        Subject: CN=6a0e2b20-de4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5d:ce:9c:18:5c:d8:72:48:f0:94:01:7f:8b:
                    61:81:92:a8:a1:d7:4e:f2:9c:1a:05:47:df:68:c3:
                    6d:39:90:f6:67:57:82:07:74:39:ae:4a:e3:f6:49:
                    08:95:c0:f3:72:ed:0e:4c:15:68:cb:5a:63:da:cf:
                    00:19:39:5a:f0:c9:18:71:62:fc:e5:6a:4e:39:28:
                    96:f0:a3:28:7a:40:e2:61:1e:aa:22:5c:0a:2c:f6:
                    fc:6b:c1:f9:1c:a3:f0:10:91:46:06:5a:f3:74:aa:
                    a1:2d:87:bb:00:a8:ba:cc:a3:3d:a7:05:da:05:d5:
                    86:ce:c8:32:cb:33:4a:af:60:c9:5f:91:a9:24:22:
                    76:63:b6:70:f5:43:8d:40:43:3d:1b:cd:db:22:86:
                    4d:71:33:5e:4b:e6:ef:93:99:a2:76:34:41:2a:c1:
                    cc:e9:d9:64:9f:5c:b8:fa:3d:20:a8:18:52:4c:7f:
                    f5:bb:4f:d3:18:da:ca:3a:58:af:fd:9c:82:97:c6:
                    06:74:b8:fd:cf:9f:ac:5e:9e:c7:e0:18:0c:dc:53:
                    da:93:36:b8:0c:18:ba:39:2e:9b:60:cf:eb:96:18:
                    e8:42:0e:8a:22:70:f6:e3:40:c8:c3:10:bd:52:0f:
                    98:6c:05:d4:a8:1b:66:64:d7:15:2f:6f:ba:4e:68:
                    6f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F6:3B:61:F2:2A:CD:69:F4:98:DA:08:85:05:85:9A:47:CA:4D:83
            X509v3 Authority Key Identifier:
                keyid:72:C1:BC:9C:3D:B7:9B:43:F3:56:F2:3F:95:68:84:8C:9C:FB:8D:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/csG8nD23m0PzVvI_lWiEjJz7jdU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:36:74:5f:7f:1c:7d:94:fd:4f:5f:92:4c:17:62:b1:6c:cb:
         38:b7:7c:6c:4e:bf:62:4a:48:68:31:7b:cb:ac:7a:cc:76:8c:
         57:db:2b:19:9d:7c:45:2c:7d:eb:9a:8f:93:f2:e9:53:2a:38:
         f4:17:65:3c:05:19:37:41:24:80:19:01:40:b1:d8:44:a6:26:
         e7:2a:50:4d:9b:d0:1d:b3:1e:65:d9:6d:68:49:43:3e:a9:8e:
         46:e8:f2:3d:c4:e0:93:bb:09:09:ff:c9:c6:2e:a0:d1:e4:b9:
         ec:75:e6:d0:fd:1a:01:c4:2f:03:df:fe:4b:68:7a:07:98:8d:
         37:12:dd:57:f6:65:c3:30:ed:a1:35:47:ca:c7:fa:ef:9b:5a:
         04:2a:1b:8b:2e:ec:e1:b4:cf:7a:22:dd:0e:6a:cc:75:66:32:
         88:7d:23:a9:2e:a6:1c:19:7f:94:38:29:f8:14:17:1b:cd:7e:
         06:70:c7:15:c4:00:fe:47:b3:b4:44:9e:4d:d0:d4:f8:bc:5c:
         8b:01:3c:cc:a5:c8:8b:d0:e7:11:90:fd:79:81:a2:c0:7d:00:
         5f:37:e9:50:e8:a2:6a:4c:79:00:3e:20:e8:4f:3b:b1:06:9d:
         c7:54:fe:0f:25:a4:00:7b:e5:34:3a:d1:9f:31:50:12:6c:0e:
         15:97:b3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:39:05 2026 by rpki-client