Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft
File:                     N5uRyTDgoq-LgirZqVm6313dYJ8.mft (raw, json)
Hash identifier:          Au0AvzXUNX/oLQHbfL2cUyixnW7NUJaH45st2fRZMB8=
Subject key identifier:   C1:71:17:36:3E:D2:71:02:38:3C:D6:CE:CB:ED:38:37:D0:A8:B8:AC
Authority key identifier: 37:9B:91:C9:30:E0:A2:AF:8B:82:2A:D9:A9:59:BA:DF:5D:DD:60:9F
Certificate issuer:       /CN=A91AD92A/serialNumber=379B91C930E0A2AF8B822AD9A959BADF5DDD609F
Certificate serial:       01F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft
Manifest number:          01F1
Signing time:             Thu 21 May 2026 03:18:13 +0000
Manifest this update:     Thu 21 May 2026 03:18:12 +0000
Manifest next update:     Thu 28 May 2026 03:18:12 +0000
Files and hashes:         1: N5uRyTDgoq-LgirZqVm6313dYJ8.crl (hash: i5X2yyt9uVdhAFqmg+tqxBBNd4C+wBY8tsTioXhdtXk=)
                          2: 796CD35A5B5511EE8E4D2A39C4F9AE02.roa (hash: H4qSPCS4a424OujhWGbHGAYZCjn8O2kfiMo1t1dyle0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.crl
                          rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 03:18:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 501 (0x1f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AD92A, serialNumber=379B91C930E0A2AF8B822AD9A959BADF5DDD609F
        Validity
            Not Before: May 21 03:18:12 2026 GMT
            Not After : May 28 03:18:12 2026 GMT
        Subject: CN=6a0e7975-7454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e9:4d:ab:e6:01:16:a7:f6:f6:36:5a:0b:6a:
                    0b:2d:95:4d:ec:22:d4:e5:26:19:1c:77:ad:61:6e:
                    c4:0b:57:a0:96:21:ad:a8:7d:5a:f6:09:fb:cd:e5:
                    5d:b6:0d:84:14:29:ec:7a:15:06:25:93:30:1c:02:
                    dd:59:f8:39:f8:41:95:48:9b:63:27:2f:c9:1b:1a:
                    97:6a:23:5c:2e:e5:01:a2:c6:83:36:c9:f0:ce:2a:
                    2d:23:c2:12:e2:25:e2:c4:82:07:a1:d7:c3:ee:d0:
                    6a:79:6e:23:41:d4:5e:97:92:19:67:6f:52:76:d5:
                    45:46:74:d7:df:d6:3d:23:58:bf:c9:c0:d8:ab:f8:
                    db:72:bc:fc:88:0e:08:f7:13:5f:e9:2c:22:b1:6a:
                    74:f9:cb:5b:14:ec:d9:1b:3c:52:87:a5:05:3c:a3:
                    c3:63:66:6b:bc:bd:89:c2:f6:08:d6:8c:6e:8d:5f:
                    e4:35:86:3a:98:4a:45:73:35:15:c0:9c:12:49:94:
                    c3:ed:57:b2:33:22:55:b1:ac:0d:22:cb:dd:b9:a9:
                    e6:cd:af:75:f1:0b:42:41:b7:49:4a:f8:21:58:2c:
                    1a:8d:d4:10:61:81:74:4f:77:95:26:1c:fd:0f:60:
                    8b:75:12:04:7f:27:45:74:64:8f:64:4d:5e:7b:14:
                    6b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:71:17:36:3E:D2:71:02:38:3C:D6:CE:CB:ED:38:37:D0:A8:B8:AC
            X509v3 Authority Key Identifier:
                keyid:37:9B:91:C9:30:E0:A2:AF:8B:82:2A:D9:A9:59:BA:DF:5D:DD:60:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:28:b3:b0:ba:b0:a6:9c:95:3d:ff:95:f3:9c:3a:c3:56:1a:
         12:b8:16:c7:d7:29:b0:b0:6c:0b:cf:39:a9:a1:5e:6f:c0:01:
         3f:f8:38:3d:ee:33:b4:2c:b2:6a:fa:90:4a:9e:41:e3:06:f6:
         9e:8e:d4:b8:5c:80:d7:17:c0:56:70:d1:52:b5:32:89:33:89:
         ef:da:86:88:e3:df:ae:6b:13:17:92:3d:57:be:71:28:18:55:
         b7:de:63:0f:c3:3b:b9:ae:ed:61:3c:e5:17:40:a3:5a:7d:1f:
         f1:9d:ee:6e:2b:78:32:b4:b5:e1:48:f3:07:33:29:f0:e4:bd:
         d4:df:60:45:89:23:7a:ef:81:d8:17:8a:0d:f0:6c:09:c4:5b:
         33:ce:98:99:78:75:92:e6:50:75:0b:a9:eb:ff:6b:e8:89:97:
         f1:55:cb:49:89:af:7c:2a:89:8e:b3:61:fc:4e:aa:77:e2:0a:
         4a:01:38:3f:3d:6d:d3:c9:3e:85:fb:d5:ff:ab:d4:17:41:81:
         34:f8:22:e0:81:f1:0e:f6:26:62:52:34:6c:3e:4a:09:30:c1:
         c3:40:71:ab:cd:9a:0c:b5:8a:ca:90:ca:53:1f:51:6d:39:d8:
         8d:39:53:48:d5:8e:c7:ac:32:9a:ca:cb:7e:a9:02:5a:b5:d5:
         55:5a:91:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:10 2026 by rpki-client