Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.mft
File:                     _XxIEch8Vm71Xtqw50P_BmufqGY.mft (raw, json)
Hash identifier:          Kv8MFoQ3TfuWgArmFttSJ2EEGeASbgdTv+LTv2H+jzQ=
Subject key identifier:   8F:29:48:E9:9B:1A:AB:12:C3:2D:0E:5F:81:FA:13:8A:4A:CA:1E:29
Authority key identifier: FD:7C:48:11:C8:7C:56:6E:F5:5E:DA:B0:E7:43:FF:06:6B:9F:A8:66
Certificate issuer:       /CN=A91935EA/serialNumber=FD7C4811C87C566EF55EDAB0E743FF066B9FA866
Certificate serial:       1754
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XxIEch8Vm71Xtqw50P_BmufqGY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.mft
Manifest number:          1746
Signing time:             Wed 20 May 2026 16:36:07 +0000
Manifest this update:     Wed 20 May 2026 16:36:06 +0000
Manifest next update:     Wed 27 May 2026 16:36:06 +0000
Files and hashes:         1: _XxIEch8Vm71Xtqw50P_BmufqGY.crl (hash: VS2mnHn3P1L5lhYvC+VkBfeXIvSdak1iHDD5XFmWm6M=)
                          2: 01B2AC1E064111E8A62EF586C4F9AE02.roa (hash: n3LIJOsHlARAi65lnMhL3wL2TR8QPk4sPY0Xr04F6l0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.crl
                          rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XxIEch8Vm71Xtqw50P_BmufqGY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 16:36:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5972 (0x1754)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91935EA, serialNumber=FD7C4811C87C566EF55EDAB0E743FF066B9FA866
        Validity
            Not Before: May 20 16:36:06 2026 GMT
            Not After : May 27 16:36:06 2026 GMT
        Subject: CN=6a0de2f6-ead6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5e:ef:de:51:de:57:65:70:18:fe:12:99:23:
                    a1:66:1b:a0:b1:d6:29:9b:18:be:3f:9a:fe:07:2d:
                    2b:83:48:78:9a:58:e4:98:60:d5:15:ed:1b:31:67:
                    3f:a4:07:97:72:a3:34:e2:3b:81:3e:2b:c1:41:71:
                    dc:62:be:97:8d:27:2f:1f:f3:43:48:0e:99:82:01:
                    eb:54:95:01:bf:8e:3d:fb:42:90:78:86:97:3c:6b:
                    26:50:3c:58:a0:1e:c9:7a:a8:36:7f:a8:80:28:54:
                    c6:20:14:39:6e:89:19:dd:1c:70:c6:0a:91:d3:2f:
                    62:1d:c1:dc:51:02:f1:06:20:e4:55:a6:e2:27:ed:
                    99:33:80:e8:3c:55:f7:34:b4:ee:9a:06:23:b8:c0:
                    0a:5a:7d:30:cb:d6:e4:a9:d1:cd:03:1e:d9:ca:7e:
                    d2:3e:18:98:ae:ca:32:56:99:fd:25:07:0a:e8:a1:
                    fe:e9:f1:24:c0:ea:8d:c9:c9:dd:59:ed:83:fc:ca:
                    b3:0c:64:fe:4b:6e:e1:54:50:f0:71:0b:ee:44:a8:
                    0b:6d:91:bc:50:8d:c8:4e:7e:23:1c:dd:16:d4:44:
                    ac:99:da:16:69:7e:a5:f2:1b:13:89:ff:5d:53:93:
                    3a:0b:c8:51:f2:34:54:cd:91:5d:e3:24:d3:03:2a:
                    6a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:29:48:E9:9B:1A:AB:12:C3:2D:0E:5F:81:FA:13:8A:4A:CA:1E:29
            X509v3 Authority Key Identifier:
                keyid:FD:7C:48:11:C8:7C:56:6E:F5:5E:DA:B0:E7:43:FF:06:6B:9F:A8:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XxIEch8Vm71Xtqw50P_BmufqGY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:de:c3:3c:8f:a8:3e:bd:64:5a:0f:ad:b1:a2:b5:ab:27:1b:
         1c:a3:6b:27:bd:af:4d:6b:e2:49:fa:37:e3:32:fa:3d:e8:e4:
         c6:29:13:de:4d:c8:af:18:60:fb:31:fc:9b:0d:05:75:f8:76:
         ff:8c:a4:62:de:33:f1:23:2c:9d:6d:66:f3:32:dd:ac:b4:75:
         1b:88:32:97:69:81:a4:33:01:09:c0:9f:66:02:3f:db:4a:bd:
         4a:c3:07:83:ea:68:54:6c:e6:53:ca:99:25:25:6b:54:fc:2b:
         88:4c:29:f7:aa:46:48:6f:61:84:4a:56:2c:bd:2f:e5:dc:b8:
         e8:e9:c3:11:79:11:8f:e7:78:68:3f:45:be:01:6f:74:65:48:
         7a:33:04:7a:80:e3:2f:3f:c9:4a:c4:a0:e7:89:0b:98:1c:1e:
         59:6a:54:b5:d4:b3:d2:ed:b1:02:90:3d:02:5a:09:6a:c4:71:
         98:74:03:1b:34:28:02:7d:b6:76:51:6a:01:6a:d1:a7:be:68:
         a6:05:8a:d3:cf:12:e8:44:fb:b2:4c:4a:6f:07:8f:08:27:82:
         39:49:80:7b:81:0d:41:6e:a2:73:94:0f:43:bb:f5:94:95:44:
         44:35:66:ea:33:47:b9:26:07:df:33:91:42:7b:19:53:30:bb:
         f0:cc:bd:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:54:03 2026 by rpki-client