Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft
File:                     pWcIHaZpXdN7LCsbF6Abo95ZHss.mft (raw, json)
Hash identifier:          KuVRD/do2L8yoPSgNKf0CrpgBujDw7LpT4a80fV8Dd0=
Subject key identifier:   1D:93:D9:9F:C6:A9:35:D8:B2:04:87:47:C3:A6:B8:B4:73:A4:E0:94
Authority key identifier: A5:67:08:1D:A6:69:5D:D3:7B:2C:2B:1B:17:A0:1B:A3:DE:59:1E:CB
Certificate issuer:       /CN=A91A284E/serialNumber=A567081DA6695DD37B2C2B1B17A01BA3DE591ECB
Certificate serial:       083F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWcIHaZpXdN7LCsbF6Abo95ZHss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft
Manifest number:          0833
Signing time:             Wed 20 May 2026 21:01:59 +0000
Manifest this update:     Wed 20 May 2026 21:01:59 +0000
Manifest next update:     Wed 27 May 2026 21:01:59 +0000
Files and hashes:         1: pWcIHaZpXdN7LCsbF6Abo95ZHss.crl (hash: j/IpuGaPieLAlFEN08MjW4aOUUlrsZ7M81HDXxgGjTE=)
                          2: A3205106142511EB8FED0427C4F9AE02.roa (hash: 8fEp2+O8zmOzV0vCI6lvkCvaOZTilKPiu1usSNMcmM8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.crl
                          rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWcIHaZpXdN7LCsbF6Abo95ZHss.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 21:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2111 (0x83f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A284E, serialNumber=A567081DA6695DD37B2C2B1B17A01BA3DE591ECB
        Validity
            Not Before: May 20 21:01:59 2026 GMT
            Not After : May 27 21:01:59 2026 GMT
        Subject: CN=6a0e2147-7e29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:5f:70:3d:59:ea:b2:15:33:26:6b:a2:45:b2:
                    21:a0:19:26:6f:11:44:a9:95:84:fc:6f:ed:33:ae:
                    ca:fa:5f:a7:b7:c1:90:39:4a:1a:60:8b:6f:69:38:
                    f5:46:76:a3:89:d1:5a:7a:48:f9:10:99:04:73:32:
                    d9:67:71:ef:4e:62:88:b5:d6:95:9d:14:17:b4:28:
                    79:9d:90:44:4b:76:87:51:5b:85:23:be:f8:5d:26:
                    32:22:ee:3a:3b:5f:d6:aa:19:4c:a9:10:8f:ea:c8:
                    4e:8b:87:bd:fd:93:20:a5:ab:04:54:6a:2d:37:d0:
                    44:68:93:d4:32:c8:99:af:de:a4:af:64:12:16:bb:
                    1c:52:7b:81:c2:d5:bd:ee:fe:69:c5:bd:93:b4:a1:
                    21:63:6b:28:b5:18:76:a3:22:3c:98:fe:37:5e:37:
                    51:5c:1a:7f:55:cb:a9:45:00:4c:27:90:dc:fa:49:
                    61:4f:b0:ab:7f:3a:21:12:06:d3:4b:db:2a:25:8a:
                    0b:5d:76:10:76:e2:d8:b2:3e:de:fa:c4:d4:9a:dc:
                    a6:7b:8f:04:35:d6:43:80:21:0c:03:2f:d5:9e:3e:
                    c8:4c:89:92:52:88:49:41:2b:69:08:39:60:aa:35:
                    57:b9:d2:9b:99:46:5f:73:6b:d9:ce:37:c6:cb:0f:
                    92:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:93:D9:9F:C6:A9:35:D8:B2:04:87:47:C3:A6:B8:B4:73:A4:E0:94
            X509v3 Authority Key Identifier:
                keyid:A5:67:08:1D:A6:69:5D:D3:7B:2C:2B:1B:17:A0:1B:A3:DE:59:1E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWcIHaZpXdN7LCsbF6Abo95ZHss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:f9:bb:74:df:db:ca:3b:35:60:3c:10:e4:50:a0:ce:dc:82:
         b6:92:16:3b:f8:b9:b4:a6:b5:54:d2:1e:36:38:17:e2:aa:59:
         05:0f:ac:b6:50:e1:12:e3:93:73:e7:5e:24:8a:2d:3e:6c:a6:
         db:5b:36:32:18:46:56:46:aa:65:02:1d:c9:41:b2:0b:a9:5a:
         14:13:e9:50:72:6a:e5:51:be:d7:b4:9c:90:d9:4e:94:2d:3e:
         77:29:53:23:3a:7c:d3:18:d7:12:ab:2d:a4:81:2f:97:12:b6:
         56:e5:84:88:de:8b:df:b4:60:3a:53:60:fc:f4:da:a4:9f:72:
         b8:67:ab:3c:fc:b6:dc:99:d3:c0:7b:61:bd:0d:8d:2e:13:56:
         0a:4a:ec:2d:a9:60:71:c4:c0:2f:08:45:d3:8f:de:d3:dc:14:
         f7:da:d2:63:da:3c:80:1e:dd:9c:67:c7:aa:64:da:5c:84:d0:
         d2:f7:a3:e4:e3:ca:e8:2f:9c:2a:60:b5:13:c9:7f:be:f7:d0:
         b7:2f:32:f3:4f:c6:8a:c3:f7:30:6f:bc:7e:f8:44:63:be:3f:
         0c:72:ff:92:98:a4:cc:f2:5d:6e:12:bc:3a:6b:22:76:56:c2:
         27:37:ec:8a:0a:1a:1b:22:09:c2:bc:c2:a9:d5:d7:70:36:ef:
         8c:6a:c2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:30:46 2026 by rpki-client