Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC6B1/F4A9157A088B11F1BCB153E70F3D8C67/mj2guGjFidoYRBoqcOBRSsl8QE0.mft
File:                     mj2guGjFidoYRBoqcOBRSsl8QE0.mft (raw, json)
Hash identifier:          BpN+U2bcmewe9FBzCjeFM9yyJcqMVnkVR8Byk1GSqi8=
Subject key identifier:   3E:59:5C:4A:AB:FB:CC:05:F9:33:E9:45:ED:B8:F3:BB:63:8A:55:FD
Authority key identifier: 9A:3D:A0:B8:68:C5:89:DA:18:44:1A:2A:70:E0:51:4A:C9:7C:40:4D
Certificate issuer:       /CN=A91AC6B1/serialNumber=9A3DA0B868C589DA18441A2A70E0514AC97C404D
Certificate serial:       37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj2guGjFidoYRBoqcOBRSsl8QE0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC6B1/F4A9157A088B11F1BCB153E70F3D8C67/mj2guGjFidoYRBoqcOBRSsl8QE0.mft
Manifest number:          35
Signing time:             Tue 19 May 2026 08:31:16 +0000
Manifest this update:     Tue 19 May 2026 08:31:15 +0000
Manifest next update:     Tue 26 May 2026 08:31:15 +0000
Files and hashes:         1: mj2guGjFidoYRBoqcOBRSsl8QE0.crl (hash: 6vi7F6Da6LkSm02m7MOeOG54Wuelkg55d8f16pThYsE=)
                          2: 920A3E000E0611F1A3BA1443083D8C67.roa (hash: b9zTdqNPieWG5+8wmYAln2q07Z28/oicnZ6JHHByN/Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC6B1/F4A9157A088B11F1BCB153E70F3D8C67/mj2guGjFidoYRBoqcOBRSsl8QE0.crl
                          rsync://rpki.apnic.net/member_repository/A91AC6B1/F4A9157A088B11F1BCB153E70F3D8C67/mj2guGjFidoYRBoqcOBRSsl8QE0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj2guGjFidoYRBoqcOBRSsl8QE0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 May 2026 08:31:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC6B1, serialNumber=9A3DA0B868C589DA18441A2A70E0514AC97C404D
        Validity
            Not Before: May 19 08:31:15 2026 GMT
            Not After : May 26 08:31:15 2026 GMT
        Subject: CN=6a0c1fd4-6e9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:00:77:fa:dc:76:8c:42:98:87:89:38:51:be:
                    75:49:b5:bb:ba:38:c4:f3:51:7e:27:b6:6f:d0:c3:
                    84:91:c0:ae:a2:6d:d6:aa:d7:fd:e1:9b:cd:f8:21:
                    fe:2d:e8:88:eb:c3:a4:54:4b:05:8e:b0:3c:60:fe:
                    35:94:85:69:40:e7:bc:43:99:a0:b8:2c:af:7f:91:
                    e6:7f:a2:6e:98:39:ff:96:2d:b3:71:d1:99:da:1e:
                    26:12:de:54:9b:a6:6c:2b:3e:cd:d5:f8:45:30:eb:
                    c8:d5:be:1b:61:c1:0a:7a:19:53:11:cb:c3:06:c4:
                    58:3c:5f:b3:03:9a:ec:c4:11:f8:f6:ac:5e:09:37:
                    49:be:50:05:c1:60:d8:97:ee:e0:df:48:b4:0e:28:
                    58:2c:14:63:96:0e:28:92:f4:09:72:f7:27:be:25:
                    cb:49:10:08:25:bb:12:42:ec:07:22:e2:01:08:f1:
                    71:25:8a:17:f1:ab:4e:9c:08:a1:7f:ec:a9:d0:53:
                    55:65:a2:46:ba:02:cc:91:7a:7c:0e:26:c5:0e:6c:
                    e8:26:e6:81:bd:44:93:17:fa:ff:d8:8f:b1:ae:d0:
                    d5:68:ad:56:39:c2:be:cb:57:a3:1f:3c:dc:63:cc:
                    72:10:29:e0:ef:8c:a6:9f:36:5f:bf:55:35:73:e5:
                    d3:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:59:5C:4A:AB:FB:CC:05:F9:33:E9:45:ED:B8:F3:BB:63:8A:55:FD
            X509v3 Authority Key Identifier:
                keyid:9A:3D:A0:B8:68:C5:89:DA:18:44:1A:2A:70:E0:51:4A:C9:7C:40:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC6B1/F4A9157A088B11F1BCB153E70F3D8C67/mj2guGjFidoYRBoqcOBRSsl8QE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj2guGjFidoYRBoqcOBRSsl8QE0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC6B1/F4A9157A088B11F1BCB153E70F3D8C67/mj2guGjFidoYRBoqcOBRSsl8QE0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:b0:e5:72:4c:4f:5e:2b:c2:2a:f2:34:61:d6:8f:cc:e7:ae:
         b4:c1:c0:be:97:8a:8b:75:c5:94:1a:ee:82:1d:c3:37:6b:99:
         15:00:8d:89:72:5a:f8:ba:c9:5a:30:49:81:73:08:13:d0:3a:
         41:b7:19:25:ba:bd:d8:6c:31:43:99:6f:b2:00:d1:8b:19:8d:
         38:1b:a3:6e:15:c6:86:32:c2:c6:bd:59:23:c9:15:d0:75:d1:
         f6:40:c7:96:1b:51:ef:c0:ee:f0:cb:1a:31:3e:a8:bd:95:be:
         fd:f4:9e:67:70:d5:72:45:d8:6f:39:6a:af:51:7c:85:a6:78:
         9c:7b:58:07:52:05:5f:e4:1f:fe:29:54:53:39:37:21:76:9d:
         37:12:43:b4:58:04:a5:cc:c5:43:95:e9:a9:d9:10:d4:e2:f6:
         3c:b2:bd:bb:c1:ba:fb:64:22:7d:59:41:72:76:96:31:0a:2d:
         cc:4b:60:2a:06:4a:e8:f0:b4:04:1e:80:9e:ba:d3:c4:06:be:
         cd:69:c0:32:85:18:72:7b:c0:cf:38:7f:a7:df:02:92:67:f1:
         1d:b1:77:59:41:7a:23:25:e1:30:8c:36:8a:e4:48:7b:6d:b1:
         bf:fc:6b:2a:e4:e4:f7:d5:29:86:06:ae:cf:22:78:01:f7:b4:
         0c:92:78:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:05:15 2026 by rpki-client