Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.mft
File:                     0NDWzWh3DDh4O764QbES0FYBdKI.mft (raw, json)
Hash identifier:          3Alg935A7yPjVCaUhQv7JUYtt5UQE3cZQf7fA26pJAQ=
Subject key identifier:   03:D8:F7:AD:F1:4A:F5:72:62:74:8E:08:61:43:A2:AE:09:6A:B8:1D
Authority key identifier: D0:D0:D6:CD:68:77:0C:38:78:3B:BE:B8:41:B1:12:D0:56:01:74:A2
Certificate issuer:       /CN=A91998BE/serialNumber=D0D0D6CD68770C38783BBEB841B112D0560174A2
Certificate serial:       0953
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.mft
Manifest number:          0913
Signing time:             Sat 16 May 2026 20:19:05 +0000
Manifest this update:     Sat 16 May 2026 20:19:04 +0000
Manifest next update:     Sat 23 May 2026 20:19:04 +0000
Files and hashes:         1: 0NDWzWh3DDh4O764QbES0FYBdKI.crl (hash: JlGUoGfeDxSVINqAg4rfq5KerMbd1uVwbocHTt7u5LA=)
                          2: 577FD5BE067C11ED882FC127C4F9AE02.roa (hash: oRxcNHxks0xSpQQ3xzQ2CValnLK9KvTZJVfHvaOGSxM=)
                          3: BD1D670AA9AE11F0BAAC4E40C4F9AE02.roa (hash: GzxogbU8QiwwF++aswC6YdHu3ZoZCEYz5G0xx5UJTJQ=)
                          4: 12FD08CAC88411ECAAB5BD09C4F9AE02.roa (hash: VWFn1ywKze4+Ch1d/UV7Lhp1ynMlJZLSKyiTkidd1hM=)
                          5: 4EF79184489411ED86987260C4F9AE02.roa (hash: FW+6trj4ky9MIx0ol9teJ9/ApDWDbFtG0371+JMzJmo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.crl
                          rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 May 2026 20:19:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2387 (0x953)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91998BE, serialNumber=D0D0D6CD68770C38783BBEB841B112D0560174A2
        Validity
            Not Before: May 16 20:19:04 2026 GMT
            Not After : May 23 20:19:04 2026 GMT
        Subject: CN=6a08d139-a1f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1b:98:a8:e0:ca:82:df:1b:f8:4c:3e:f6:ac:
                    8a:f2:16:af:76:49:c1:23:ce:54:1b:ac:78:77:8a:
                    e8:c4:76:5a:8c:c6:aa:6c:37:99:0c:a2:be:0a:f5:
                    db:00:e2:59:87:b3:55:81:b5:66:4f:60:8c:42:7d:
                    6e:99:ec:2e:59:db:c0:19:94:cf:97:7f:d4:74:6b:
                    26:97:b9:c8:dc:56:2c:bc:82:45:3e:9c:2e:4f:e6:
                    59:5f:a2:38:81:ab:f7:4c:02:9e:22:83:63:9d:28:
                    4c:ca:ce:af:18:37:ef:a6:c5:cf:e1:ec:19:55:55:
                    62:b5:c2:49:46:96:90:7b:05:ad:a7:3e:70:cd:01:
                    7c:bf:3d:87:99:69:7a:56:2a:82:dd:54:dc:c0:56:
                    42:1f:f9:f1:3f:36:2c:47:18:77:bd:f8:12:ac:e6:
                    cc:a9:61:46:ec:b7:65:c8:1d:5c:cc:fe:37:a4:16:
                    fd:ee:0a:18:f4:2b:f8:65:f5:41:a1:6f:53:06:b6:
                    9d:74:1f:df:9f:00:f9:07:52:1a:72:38:95:9d:bd:
                    92:f9:e9:3c:08:69:03:59:53:66:db:f6:97:3b:fa:
                    44:25:5f:e1:ef:3c:40:6e:92:06:1e:12:5e:31:ea:
                    cf:76:ec:a6:f9:5c:1f:08:3e:6e:54:dd:12:06:59:
                    f2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D8:F7:AD:F1:4A:F5:72:62:74:8E:08:61:43:A2:AE:09:6A:B8:1D
            X509v3 Authority Key Identifier:
                keyid:D0:D0:D6:CD:68:77:0C:38:78:3B:BE:B8:41:B1:12:D0:56:01:74:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:dd:d5:af:04:e5:17:42:93:01:18:d7:c6:10:e1:ac:ce:c5:
         e0:47:19:dd:24:94:b9:9a:bf:1e:0c:4d:f7:54:36:34:40:e2:
         27:e2:c4:0a:be:ed:ee:b9:cd:d8:83:83:4b:ec:bc:b9:83:5f:
         ff:a8:de:6a:d2:6e:12:c8:4b:fb:53:39:b3:79:80:1a:9d:8a:
         d0:99:14:e1:d8:07:42:7b:74:1e:4e:af:c4:8a:59:f4:7c:5b:
         db:9c:67:b4:da:60:d6:9b:c7:02:f0:5c:b7:da:ab:4e:20:12:
         56:74:13:2f:c0:66:07:ba:bc:6f:37:f8:9c:2f:15:61:03:0a:
         5d:bd:5e:8b:6c:1a:7d:e0:9d:6c:88:ce:8c:02:8a:7c:dd:67:
         60:e6:f6:8c:9b:ba:b6:55:08:fb:04:61:39:40:c8:95:f8:f3:
         cd:be:43:fa:47:1d:67:2c:0e:02:b4:39:41:87:50:e7:c4:ba:
         20:73:29:a6:84:c6:b0:fd:13:ba:2d:24:ea:72:e1:41:51:24:
         f9:d9:38:40:ea:59:76:c2:fb:02:c4:20:b0:20:03:ef:40:4a:
         e1:70:9f:6c:f6:e3:8c:eb:c5:0c:5b:8a:3a:23:dc:ee:6e:f0:
         68:fd:d9:e4:94:79:31:a8:3e:a5:d1:f8:5b:08:d2:7f:5d:58:
         8f:3f:60:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 13:09:21 2026 by rpki-client