Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft
File:                     KxuyStzbFPbix7uy2Iq62x3diY0.mft (raw, json)
Hash identifier:          zsMjgBTb504zhctRuW5ocG4ViQ3pshKeZwA+GSnQITo=
Subject key identifier:   3C:54:57:D1:5D:C7:38:18:A6:CF:C1:DD:EC:A1:7B:27:FB:2E:C9:19
Authority key identifier: 2B:1B:B2:4A:DC:DB:14:F6:E2:C7:BB:B2:D8:8A:BA:DB:1D:DD:89:8D
Certificate issuer:       /CN=A91A80D2/serialNumber=2B1BB24ADCDB14F6E2C7BBB2D88ABADB1DDD898D
Certificate serial:       03BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxuyStzbFPbix7uy2Iq62x3diY0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft
Manifest number:          03B1
Signing time:             Thu 21 May 2026 00:46:25 +0000
Manifest this update:     Thu 21 May 2026 00:46:24 +0000
Manifest next update:     Thu 28 May 2026 00:46:24 +0000
Files and hashes:         1: KxuyStzbFPbix7uy2Iq62x3diY0.crl (hash: RDnDmal/o6pnG89e1XpG8hWdPMTzZ5s3HGC0cJsJ7z0=)
                          2: 3486D47412D511EFB1EF161DC4F9AE02.roa (hash: noY77zuBNX8xTUWwrf35ANzxZz07dvvKvq+tI08iw0s=)
                          3: 95CA439CDAE211ECA14A8254C4F9AE02.roa (hash: DXFn9IbM02w7n1eFZzgRJrQaHr06yYFyVzCtJliHjPE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.crl
                          rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxuyStzbFPbix7uy2Iq62x3diY0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 00:46:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 955 (0x3bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A80D2, serialNumber=2B1BB24ADCDB14F6E2C7BBB2D88ABADB1DDD898D
        Validity
            Not Before: May 21 00:46:24 2026 GMT
            Not After : May 28 00:46:24 2026 GMT
        Subject: CN=6a0e55e1-27fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:94:6f:a0:ff:73:d1:51:c1:15:a4:ee:f3:1b:
                    ea:0f:35:db:b0:59:8b:ee:8f:88:39:c3:f5:c9:26:
                    09:22:d2:07:5a:65:df:0b:35:93:c4:b8:de:69:65:
                    6a:fd:d9:3f:74:eb:13:d3:db:17:6a:b3:17:87:82:
                    93:15:e0:e3:24:c0:f5:40:19:dc:02:14:bd:d3:eb:
                    37:95:d3:2a:3a:e5:77:18:02:23:89:a4:96:b8:25:
                    87:5b:85:f7:5b:e3:a9:37:98:69:f3:d9:32:6e:d7:
                    94:15:b2:af:88:a6:22:1d:75:90:e2:2b:a6:62:07:
                    ff:f6:70:2b:c0:27:ab:6b:c4:ab:f1:33:05:31:e5:
                    d2:23:67:07:ea:0d:ef:fd:88:9a:06:b1:63:8c:ad:
                    d4:ef:ad:f0:8a:52:8a:04:b2:fd:16:dc:b8:4a:2f:
                    70:76:10:bb:66:c0:0c:82:a4:c7:0a:2b:eb:66:c9:
                    f4:65:df:fd:d8:37:86:22:6f:b5:f9:ef:3f:a5:24:
                    92:40:19:01:2c:c5:03:cc:88:4d:6d:10:a1:04:80:
                    6b:74:1d:93:da:80:43:71:0b:31:6a:1e:25:d4:1b:
                    d5:07:57:32:c5:11:88:af:16:14:6c:24:70:0e:26:
                    ae:a9:d5:6c:01:07:63:15:1a:21:c5:e4:31:84:d2:
                    39:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:54:57:D1:5D:C7:38:18:A6:CF:C1:DD:EC:A1:7B:27:FB:2E:C9:19
            X509v3 Authority Key Identifier:
                keyid:2B:1B:B2:4A:DC:DB:14:F6:E2:C7:BB:B2:D8:8A:BA:DB:1D:DD:89:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxuyStzbFPbix7uy2Iq62x3diY0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:cc:66:54:cd:b1:32:80:ff:73:3d:76:2c:96:4a:ae:2a:32:
         00:fd:11:11:8a:2d:e8:d4:f3:da:73:10:bb:e6:cb:e7:8e:b0:
         0c:8a:f9:08:d1:f7:da:64:bd:be:96:71:b7:1d:6e:4f:b2:35:
         fa:73:b6:88:2b:1f:c1:ed:e3:e3:b8:44:c2:37:f1:a4:dc:20:
         f5:4d:56:88:d5:7b:1c:41:cc:10:0c:44:7e:bf:33:7b:67:b2:
         65:bb:6e:0e:30:91:7e:96:84:be:aa:bb:22:68:8b:34:a4:3c:
         91:4d:df:32:89:4d:cc:b3:63:79:e7:62:ad:00:2d:be:1f:49:
         41:d1:57:b1:a6:2e:55:21:96:c0:52:9d:64:48:14:a6:ac:f8:
         26:a4:92:96:11:ab:84:eb:ef:d5:eb:37:9c:21:02:56:71:7a:
         6e:df:30:e0:df:0c:6f:d4:2d:ba:ef:72:72:d4:f5:66:22:0a:
         b5:fe:67:69:ff:9e:b3:2c:26:91:7e:e4:f1:64:91:9e:8c:12:
         75:4d:7e:63:83:77:2b:d8:7d:f0:61:38:a6:36:27:0e:e0:c7:
         9c:f4:2e:53:ab:21:fe:ae:36:31:af:af:0c:cd:2f:e9:99:7d:
         1a:a9:2b:0b:20:ac:10:1c:d4:b5:62:65:79:8c:d0:18:e4:f9:
         2e:5a:fc:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:19:44 2026 by rpki-client