Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft
File:                     rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft (raw, json)
Hash identifier:          7WW81DmZx2gEdg2GhJT5D9ut7XjVOGqVSPSfwLUUkmo=
Subject key identifier:   D6:5A:F4:F3:DA:4B:43:08:05:39:AE:A3:68:A0:4E:E7:28:DA:A1:6C
Authority key identifier: AE:0A:0F:98:A0:90:3E:01:5E:5F:C5:4C:B8:CE:08:1D:42:4D:B4:D2
Certificate issuer:       /CN=A91A85A8/serialNumber=AE0A0F98A0903E015E5FC54CB8CE081D424DB4D2
Certificate serial:       0595
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft
Manifest number:          0572
Signing time:             Wed 20 May 2026 23:23:36 +0000
Manifest this update:     Wed 20 May 2026 23:23:36 +0000
Manifest next update:     Wed 27 May 2026 23:23:36 +0000
Files and hashes:         1: rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl (hash: o+WjaCZwtgX99qIIR76zscjVegM68kwGn5IzplFYo8U=)
                          2: B016290E2CE211EC8664D47EC4F9AE02.roa (hash: iPlR9XSPR98xGGjjpYDVt+BN1ba76Ec0RZ0BPLrHZc0=)
                          3: AF91ADB42CE211EC8664D47EC4F9AE02.roa (hash: 5IBjur6W7h11nvSC9C3ig6x1AZlsiyawRHY054gkkvk=)
                          4: 14172F4C264311EEB0342B45C4F9AE02.roa (hash: G7J4NmvkxVUmCKOieqCt0qhLZaViU/M0n2XmU2IN4yw=)
                          5: 8C2F1C96367F11EEB689C243C4F9AE02.roa (hash: Iwa49PUpt2IaXfB65d55eo1rSTd0Z2R7AB96bUVn1x4=)
                          6: AEFA3DD02CE211EC8664D47EC4F9AE02.roa (hash: YN95xNIiCMWNGdl4rk75ApRqVC/9aQWMU1hl+gidJAM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl
                          rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 23:23:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1429 (0x595)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A85A8, serialNumber=AE0A0F98A0903E015E5FC54CB8CE081D424DB4D2
        Validity
            Not Before: May 20 23:23:36 2026 GMT
            Not After : May 27 23:23:36 2026 GMT
        Subject: CN=6a0e4278-0e26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:24:67:a3:63:17:d9:ed:9a:7a:00:d4:1e:71:
                    15:ff:60:fa:68:92:ad:14:c7:16:9b:b4:45:70:17:
                    fa:3e:63:a6:e1:ce:2a:fa:f5:3b:94:df:e3:d4:e9:
                    cc:e4:69:26:34:70:9c:69:9b:da:01:8b:5d:33:6a:
                    8d:c3:7b:6b:93:b9:14:fa:4a:fa:07:97:01:2d:4c:
                    66:8f:d4:b8:72:7d:b7:a6:8b:a4:12:69:06:f5:1a:
                    0a:e1:83:29:f3:3a:66:eb:85:10:c0:a5:52:0f:08:
                    a1:20:2b:28:f6:7b:9b:5b:76:92:41:1f:67:b5:4d:
                    8c:04:39:10:15:2d:58:73:9b:65:ad:42:2f:79:dc:
                    b8:b1:4e:43:90:02:c3:68:bc:25:df:54:a1:72:3f:
                    76:20:47:41:1e:d3:62:63:a2:12:2d:22:6a:0f:f2:
                    76:13:3c:6e:83:f8:83:44:d1:36:00:5a:9f:7a:8f:
                    d6:e3:9c:1f:8d:42:4a:b7:70:62:a1:ff:cd:36:bc:
                    57:a5:ab:ed:f4:c7:98:a1:60:69:4e:37:8d:96:37:
                    1c:22:fd:23:68:6d:63:99:35:dd:82:f2:d9:fe:c0:
                    78:bb:05:dc:8c:98:5d:ad:37:7d:01:90:0b:b8:9a:
                    9c:c8:6f:bf:91:09:c9:f4:9e:00:65:4c:2b:33:7d:
                    e9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:5A:F4:F3:DA:4B:43:08:05:39:AE:A3:68:A0:4E:E7:28:DA:A1:6C
            X509v3 Authority Key Identifier:
                keyid:AE:0A:0F:98:A0:90:3E:01:5E:5F:C5:4C:B8:CE:08:1D:42:4D:B4:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:da:74:2d:74:c6:16:48:9a:2a:6b:db:99:36:c0:d1:60:21:
         b5:b6:89:c9:6f:a7:b8:7e:95:1a:e4:f3:14:68:7e:0d:8b:0e:
         6f:33:a0:40:2d:ef:3d:bc:fb:ce:c2:d5:e6:83:e6:2a:45:3d:
         da:6b:7a:21:16:bd:e6:ea:7f:cf:14:48:70:60:28:b9:b8:c5:
         31:4f:07:bd:6e:8a:6e:45:76:ee:13:82:53:92:a6:26:3d:65:
         df:40:98:68:88:b3:83:d3:69:60:dc:cf:0a:53:ca:6a:94:0b:
         72:b2:67:08:c0:f2:5a:eb:a4:96:04:f5:9e:27:f9:5f:6e:ad:
         8f:92:c0:7b:74:da:5e:74:30:1c:e4:4f:13:49:a2:0f:d1:59:
         8d:3a:68:92:c8:47:9f:bf:b3:2c:f9:89:ca:4a:ca:1e:59:07:
         35:2f:19:21:65:64:02:73:7d:87:1b:43:d0:ac:d9:f9:6b:e7:
         b1:71:97:98:5f:50:d6:e0:c1:bf:b4:25:09:c5:9f:54:b5:0b:
         60:32:81:67:98:ce:5d:22:83:1a:c9:91:e1:f7:11:f1:7b:70:
         be:55:8e:33:ba:01:90:bf:77:bd:c5:47:3d:7f:b4:d3:1e:e3:
         25:9c:e0:28:81:2b:2c:26:03:d0:8b:6c:d4:cc:f8:5d:60:6b:
         75:01:22:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:16:23 2026 by rpki-client