Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft
File:                     jGb5wOZorJCB33ENYELfR0kLCrk.mft (raw, json)
Hash identifier:          hXzgY0PAMPtlNtSYsUStWJVrM+/5Bm7IBpMrwV8YSNI=
Subject key identifier:   B7:C3:F2:E0:05:08:34:47:72:F0:DF:21:11:8F:99:EC:1C:E7:CF:78
Authority key identifier: 8C:66:F9:C0:E6:68:AC:90:81:DF:71:0D:60:42:DF:47:49:0B:0A:B9
Certificate issuer:       /CN=A91A97F0/serialNumber=8C66F9C0E668AC9081DF710D6042DF47490B0AB9
Certificate serial:       0CF1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jGb5wOZorJCB33ENYELfR0kLCrk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft
Manifest number:          0CD9
Signing time:             Wed 20 May 2026 18:30:24 +0000
Manifest this update:     Wed 20 May 2026 18:30:24 +0000
Manifest next update:     Wed 27 May 2026 18:30:24 +0000
Files and hashes:         1: jGb5wOZorJCB33ENYELfR0kLCrk.crl (hash: rqbv0EVuW1iBv/fzPnICz1Jm7XR15mENHcGzwULtnig=)
                          2: 90576660E19711EFA11C2227C4F9AE02.roa (hash: 7H74kxzAu6eBhMbuiVdEINpAuR5nv5OCNmqiu6IXaNo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.crl
                          rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jGb5wOZorJCB33ENYELfR0kLCrk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 18:30:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3313 (0xcf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A97F0, serialNumber=8C66F9C0E668AC9081DF710D6042DF47490B0AB9
        Validity
            Not Before: May 20 18:30:24 2026 GMT
            Not After : May 27 18:30:24 2026 GMT
        Subject: CN=6a0dfdc0-5502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:da:de:c8:49:d7:c3:d2:ab:cb:dc:3a:7f:3a:
                    c3:0c:e0:76:cb:f3:a0:5e:6a:bf:e3:82:86:fd:82:
                    9c:57:d3:6f:76:bf:78:4f:01:b2:8e:fb:f1:27:d9:
                    8c:4a:f1:65:37:b9:63:56:84:2b:c8:8c:3c:7c:da:
                    c2:d8:98:83:43:bb:92:4a:3d:f2:46:24:af:d9:18:
                    ec:43:e8:d8:38:47:8b:ae:0d:63:9b:1a:dc:fa:17:
                    33:ce:ef:35:ee:97:e3:fb:ec:ef:1c:43:fb:e2:9e:
                    e0:db:85:e2:6a:6b:01:7c:ac:02:25:04:b9:56:fe:
                    cf:b5:63:f3:90:d0:7a:5e:29:ac:0b:25:e6:c6:86:
                    af:68:a6:1d:ad:41:45:c6:00:d9:0d:44:e8:c5:7a:
                    d7:85:5a:e7:7e:b6:16:b6:05:01:c4:26:c4:86:cb:
                    17:ff:cd:53:e7:a3:12:88:1b:03:92:72:cc:00:cf:
                    59:af:4c:f7:56:11:f3:59:77:cd:fe:27:f2:ef:51:
                    11:0e:f6:7f:bb:03:6a:d6:be:d3:ff:ab:d5:2d:e6:
                    5e:13:69:70:2d:4f:dc:f4:e0:d3:92:5a:c3:39:36:
                    c7:11:b2:2c:6c:37:6d:30:39:87:7a:3f:14:d1:26:
                    35:b5:95:2b:2a:43:d0:4d:92:a7:60:66:73:30:72:
                    e9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:C3:F2:E0:05:08:34:47:72:F0:DF:21:11:8F:99:EC:1C:E7:CF:78
            X509v3 Authority Key Identifier:
                keyid:8C:66:F9:C0:E6:68:AC:90:81:DF:71:0D:60:42:DF:47:49:0B:0A:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jGb5wOZorJCB33ENYELfR0kLCrk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:e2:4b:a3:41:94:4c:f1:c2:b9:ad:f0:63:cd:17:b0:cf:73:
         c7:73:a9:85:26:b6:22:21:90:65:a7:da:06:06:59:86:81:8b:
         9a:8b:49:19:3b:37:58:29:78:ad:a4:d1:59:7c:dc:9e:f1:6f:
         66:98:9c:c9:51:c8:9c:e3:2b:d5:07:3e:4f:84:d0:1e:36:76:
         22:dc:dd:31:32:df:65:57:b2:86:08:60:8a:c1:d0:80:4c:d6:
         7b:3d:03:d5:c1:cb:43:fa:b8:e8:4d:c0:14:43:a9:f5:6f:ae:
         95:b5:d1:10:97:07:11:92:d0:d9:98:cd:09:99:3d:fc:60:3a:
         a8:53:45:75:46:48:d8:37:31:d0:b9:aa:34:0c:61:ee:72:48:
         77:6c:98:cd:62:29:ed:5f:ac:41:92:1f:15:cc:79:a3:86:df:
         d5:b4:78:a5:20:e4:f0:bc:f0:88:40:6c:c5:5e:f1:06:2a:3c:
         ae:bd:bf:81:59:91:4e:01:e6:0d:48:f2:fb:b9:b4:40:ba:a8:
         23:56:06:0e:20:79:86:c7:71:b9:1e:43:ba:3d:a8:0c:51:f6:
         d2:d4:75:4d:08:d6:6e:48:02:9b:3c:aa:ab:2e:63:5d:fa:86:
         77:86:0f:ce:11:e8:3a:67:92:6b:35:39:a2:19:c4:06:51:94:
         54:0a:52:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:28:40 2026 by rpki-client