Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.mft
File:                     V5ly5g6m9GOEiRrQ4_QXkMgIBfE.mft (raw, json)
Hash identifier:          PI21/kDr3miLwCaFBSy7ASeeh/LWvzrZMvW3efQOE+w=
Subject key identifier:   97:C1:FC:DB:BA:9A:88:3C:35:A1:EC:5B:45:A5:7B:4F:C0:84:C9:04
Authority key identifier: 57:99:72:E6:0E:A6:F4:63:84:89:1A:D0:E3:F4:17:90:C8:08:05:F1
Certificate issuer:       /CN=A919C1A2/serialNumber=579972E60EA6F46384891AD0E3F41790C80805F1
Certificate serial:       02B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.mft
Manifest number:          02AA
Signing time:             Thu 21 May 2026 01:33:30 +0000
Manifest this update:     Thu 21 May 2026 01:33:30 +0000
Manifest next update:     Thu 28 May 2026 01:33:30 +0000
Files and hashes:         1: V5ly5g6m9GOEiRrQ4_QXkMgIBfE.crl (hash: AdWD3aYuKEv7mBGrJ+RKDIgwtO/3PYSmiUDoUWkQNbQ=)
                          2: 46B3DF5A46E111EDB39B8526C4F9AE02.roa (hash: H39g8dr+SeKDcbalwcxYhJxFV4J5TXxdT3MCN2geYeM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.crl
                          rsync://rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 01:33:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 690 (0x2b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C1A2, serialNumber=579972E60EA6F46384891AD0E3F41790C80805F1
        Validity
            Not Before: May 21 01:33:30 2026 GMT
            Not After : May 28 01:33:30 2026 GMT
        Subject: CN=6a0e60ea-f882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:42:d9:ff:91:10:a0:6c:73:b5:f5:e6:02:98:
                    7e:60:f4:2c:ca:c6:87:5f:22:2b:1c:a8:95:2c:37:
                    74:65:3d:4c:97:0a:35:45:3d:0d:c1:c1:13:5c:af:
                    c7:e4:da:1f:9a:f4:a0:83:1b:80:f6:ab:16:e1:88:
                    29:d5:c0:2b:55:0e:50:21:17:d5:c7:9d:89:e2:bf:
                    60:45:f5:5a:e3:52:df:10:2e:bc:46:95:35:1c:ab:
                    fc:cb:cc:4e:53:07:05:fd:bd:87:58:53:71:31:40:
                    d2:81:c6:8f:c1:b8:20:b1:22:bb:1e:e7:4c:e4:e9:
                    c9:b6:fe:67:a1:46:47:1d:d5:05:ea:e1:b6:3c:a3:
                    00:3b:6a:32:45:08:4e:1d:14:07:b2:5c:27:53:b4:
                    63:13:dc:16:a8:2b:a5:23:cc:66:e7:1d:23:26:8c:
                    dd:3a:06:1a:d9:fa:87:1a:46:c2:60:ff:8a:06:ed:
                    b7:81:0b:9a:8b:a7:96:5a:1f:71:ae:44:2a:49:4d:
                    90:e3:3e:4a:9e:35:a4:95:68:cd:44:3e:e9:79:f8:
                    cd:2a:ef:3d:14:45:5e:1c:5c:14:a3:3a:f7:4a:d0:
                    8e:b3:95:59:15:d5:6a:d3:2e:4c:57:8e:e4:5c:be:
                    4d:6b:40:64:39:ff:e9:6d:38:53:84:64:a2:94:61:
                    0b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C1:FC:DB:BA:9A:88:3C:35:A1:EC:5B:45:A5:7B:4F:C0:84:C9:04
            X509v3 Authority Key Identifier:
                keyid:57:99:72:E6:0E:A6:F4:63:84:89:1A:D0:E3:F4:17:90:C8:08:05:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:0a:be:0c:b9:46:4e:a1:28:3d:0d:36:84:5f:8e:a4:28:10:
         41:b1:ce:bc:8d:3d:1e:c3:1e:08:e8:5e:78:52:13:24:4d:61:
         cf:33:04:15:86:99:50:b7:df:e2:6c:87:6d:03:16:fe:5d:fb:
         3c:8d:1e:18:30:f1:60:ce:4a:62:30:6a:57:bf:bd:b8:b5:8d:
         7f:58:2b:e6:2d:23:e1:c7:68:9e:72:3b:9c:76:cc:cd:c0:f0:
         dc:13:fd:13:45:48:49:07:1a:4f:77:b7:59:f8:0d:69:b3:ee:
         fd:2e:fd:b8:e5:b7:f0:bf:cc:5c:e6:fe:b8:e1:6b:43:40:cb:
         4b:d1:3b:a9:b1:2e:0d:e4:5d:12:e6:a1:11:bc:3d:56:e9:d9:
         fe:03:76:92:51:74:ba:a1:1e:e2:5f:f1:d7:c7:83:1d:db:7c:
         0e:d2:94:bf:84:74:8c:c6:39:7f:4e:dd:db:10:2a:31:e4:05:
         d2:b5:4a:f0:7d:5c:db:93:17:4e:ab:e0:c7:89:1f:4d:7e:53:
         c4:3f:21:f1:ea:ac:be:3d:dd:d5:d7:d3:85:8d:67:f8:cb:f6:
         ef:c2:b3:e3:3d:5a:23:18:3d:4a:2e:72:0d:2f:13:f7:1a:da:
         d1:be:8c:21:8c:bd:f9:ee:1f:72:49:bf:b1:0d:0b:b2:4e:ec:
         0a:81:38:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:23:30 2026 by rpki-client