Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft
File:                     gp8PQIhN2ZESEAWwfQmiy_-03sY.mft (raw, json)
Hash identifier:          QceQu57H9an8SJUXGS9Foq+ylEMhmBqpLk57DAjlhnI=
Subject key identifier:   74:1A:F4:28:20:A4:82:A2:A7:48:95:F5:BD:45:D4:C2:1A:2F:A5:B9
Authority key identifier: 82:9F:0F:40:88:4D:D9:91:12:10:05:B0:7D:09:A2:CB:FF:B4:DE:C6
Certificate issuer:       /CN=A91A16CF/serialNumber=829F0F40884DD991121005B07D09A2CBFFB4DEC6
Certificate serial:       0CB9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft
Manifest number:          0C9F
Signing time:             Thu 14 May 2026 18:35:59 +0000
Manifest this update:     Thu 14 May 2026 18:35:59 +0000
Manifest next update:     Thu 21 May 2026 18:35:59 +0000
Files and hashes:         1: gp8PQIhN2ZESEAWwfQmiy_-03sY.crl (hash: ybo+mMp1WH4vWUfQz4YTiA1GcKCnwaCVnceF69UiWBg=)
                          2: 2D2322ECF53111F0B165BC265F6F56BC.roa (hash: tZiy66LheF6UARgLL7DjkA4ZOPMuv3MTdVKtCblCRCI=)
                          3: 46D7B1B468F911EFAB3D9424C4F9AE02.roa (hash: EANYonIlLAQsD77itNqvU5Ar2XS9wRUAE//HQHxkYJ8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.crl
                          rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 21 May 2026 18:35:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3257 (0xcb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A16CF, serialNumber=829F0F40884DD991121005B07D09A2CBFFB4DEC6
        Validity
            Not Before: May 14 18:35:59 2026 GMT
            Not After : May 21 18:35:59 2026 GMT
        Subject: CN=6a06160f-c3fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6a:78:65:ea:0c:2a:3d:6c:96:92:69:73:cf:
                    86:31:65:cc:68:61:35:24:67:5b:df:61:82:ba:00:
                    f7:28:b0:c0:92:75:5c:dd:d9:3f:81:38:e5:43:56:
                    89:71:70:eb:c6:cc:58:85:cc:e6:26:78:c6:45:6a:
                    7a:8e:af:c5:ac:e8:2c:b8:6f:8a:09:55:41:3b:96:
                    7d:ea:a6:db:84:ac:db:aa:2e:d6:e5:25:37:a2:1a:
                    67:4f:e6:14:5b:06:10:48:4a:f2:15:ad:17:56:59:
                    8d:70:e0:c7:22:ef:5e:ad:4f:32:5c:5c:a7:3f:d4:
                    45:47:41:e0:36:d1:d8:be:95:60:81:90:37:09:0a:
                    d8:b6:a1:5c:f2:3b:75:85:00:9d:c9:d5:40:f7:df:
                    32:95:05:cd:66:fc:4d:98:f4:78:3d:c3:7d:f9:53:
                    34:47:ef:1e:37:42:ef:cf:da:b7:11:d6:86:eb:62:
                    44:63:81:1d:a7:ce:6a:00:07:d2:40:65:d3:0e:1f:
                    5d:d2:fa:c7:11:0e:f8:f1:d6:50:30:7d:81:7a:b0:
                    3e:e4:50:4c:76:62:e8:49:db:9f:42:0b:ca:fe:ff:
                    67:66:ed:a0:5d:eb:aa:3d:bb:a5:1f:eb:82:c1:70:
                    ab:fa:7f:b1:ea:95:09:27:f6:22:1c:ca:09:3f:02:
                    57:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:1A:F4:28:20:A4:82:A2:A7:48:95:F5:BD:45:D4:C2:1A:2F:A5:B9
            X509v3 Authority Key Identifier:
                keyid:82:9F:0F:40:88:4D:D9:91:12:10:05:B0:7D:09:A2:CB:FF:B4:DE:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:a6:0e:e6:c4:61:56:8c:32:0f:2f:ed:4c:1a:a0:8c:0e:8e:
         d2:de:a4:ed:f8:83:85:05:a0:51:5b:13:82:bf:fd:6a:13:8d:
         cd:84:79:d2:63:ad:44:58:73:c4:7d:ed:bb:16:7c:b8:96:d0:
         15:38:64:5e:89:55:79:19:9c:9b:75:8b:3c:5b:a5:5d:c1:cc:
         2d:4b:0b:6f:09:57:f4:1b:d4:76:4c:41:a2:79:2c:31:1f:79:
         48:93:07:2e:52:c2:69:d1:bd:a1:0f:e4:7c:f3:ba:df:99:59:
         f6:fe:13:80:a7:56:cd:e3:3e:f8:18:88:f2:b4:1a:82:63:51:
         63:63:50:87:60:46:c5:fd:b8:cc:d7:bc:3d:ee:3b:2d:0f:a6:
         5e:97:17:2a:fd:e7:88:60:74:10:64:ee:27:89:a5:c7:58:c2:
         bd:c1:34:ae:1c:e8:ef:8c:e5:d4:b2:99:b4:04:1d:26:e9:e0:
         5a:75:00:bd:a7:70:cb:20:2d:c4:b8:13:94:f3:c2:ab:2d:fd:
         75:49:39:38:2d:a4:9c:8f:86:e6:f4:ab:d5:af:35:50:30:ef:
         a4:da:84:ca:cd:a7:c4:b5:b8:06:da:2e:3c:eb:9d:62:4e:49:
         28:5c:54:a7:83:33:44:98:43:13:40:9c:64:c1:5a:90:7a:49:
         cb:9a:97:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 21:27:06 2026 by rpki-client