Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.mft
File:                     AMEx5mi1_pTstDkxhHpyiqzoLUs.mft (raw, json)
Hash identifier:          C5wsRUQJL8XjHMJzheroimHglRXQ2GfxXwgP1pRohoM=
Subject key identifier:   B1:FF:9A:82:34:D9:70:51:41:64:77:6B:8C:79:5E:52:04:BB:CC:70
Authority key identifier: 00:C1:31:E6:68:B5:FE:94:EC:B4:39:31:84:7A:72:8A:AC:E8:2D:4B
Certificate issuer:       /CN=A91B253D/serialNumber=00C131E668B5FE94ECB43931847A728AACE82D4B
Certificate serial:       087B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AMEx5mi1_pTstDkxhHpyiqzoLUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.mft
Manifest number:          0873
Signing time:             Mon 04 May 2026 20:43:34 +0000
Manifest this update:     Mon 04 May 2026 20:43:34 +0000
Manifest next update:     Mon 11 May 2026 20:43:34 +0000
Files and hashes:         1: AMEx5mi1_pTstDkxhHpyiqzoLUs.crl (hash: ZXSsFO3zq9jyXb254gxmfsJKwJSOY/FokAQwOi7o4rY=)
                          2: 76EBD456F72011EA8776EC28C4F9AE02.roa (hash: aJ1rzrX52ih0nJe0c9m5UvMOZxkTO0Kam9iVSQYKSgE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.crl
                          rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AMEx5mi1_pTstDkxhHpyiqzoLUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 May 2026 22:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2171 (0x87b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B253D, serialNumber=00C131E668B5FE94ECB43931847A728AACE82D4B
        Validity
            Not Before: May  4 20:43:34 2026 GMT
            Not After : May 11 20:43:34 2026 GMT
        Subject: CN=69f904f6-f2cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f2:32:de:29:bf:13:fd:4d:2f:2c:24:05:f7:
                    14:5c:7e:14:8a:a7:09:93:ef:f9:df:4e:55:c3:16:
                    a2:54:d4:2f:51:b3:10:6d:fc:95:c2:90:0f:12:9c:
                    c0:31:b0:02:67:83:50:99:a4:ff:d7:f3:31:62:4f:
                    4e:1b:e8:8d:01:24:11:25:c4:04:81:9e:a0:82:ac:
                    90:ee:32:f0:e8:c5:9f:68:6a:f9:f1:35:bf:5d:4c:
                    a0:44:fa:54:d5:69:2c:dd:c3:33:fa:19:a8:82:ec:
                    0e:c0:3f:c3:7d:32:95:3c:d2:9c:90:b0:18:98:1b:
                    81:5e:eb:80:bc:3f:c5:3c:18:19:e6:cd:23:ce:02:
                    a1:72:0e:34:3a:c2:4f:32:95:82:c5:2f:d0:c4:45:
                    bb:64:08:e9:f4:e9:67:ff:fb:c0:fa:4b:b9:03:5d:
                    1c:19:88:13:e9:db:bf:f6:ec:13:f6:38:53:79:56:
                    eb:53:1a:24:3c:72:4d:dc:be:6f:a0:3c:9d:4c:df:
                    03:96:bc:ba:16:51:6f:ab:3b:f2:1f:79:87:6c:2c:
                    c1:9e:91:4b:bb:17:6c:cf:a6:81:b5:21:ac:2a:0c:
                    bd:ea:f7:bd:ea:c5:79:dd:28:c0:fb:bb:48:f3:d4:
                    72:fd:f1:00:c5:5c:0c:be:1a:a5:26:67:d6:49:37:
                    ac:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:FF:9A:82:34:D9:70:51:41:64:77:6B:8C:79:5E:52:04:BB:CC:70
            X509v3 Authority Key Identifier:
                keyid:00:C1:31:E6:68:B5:FE:94:EC:B4:39:31:84:7A:72:8A:AC:E8:2D:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AMEx5mi1_pTstDkxhHpyiqzoLUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B253D/86B0D73EF71F11EAAE96B225C4F9AE02/AMEx5mi1_pTstDkxhHpyiqzoLUs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:fd:b7:5e:fa:82:77:b6:78:09:3f:7e:d0:1f:9b:cc:ae:7c:
         1c:f3:33:c7:22:35:5c:4e:7b:f5:92:fa:32:97:52:f2:7c:fb:
         9b:c6:63:fb:ff:38:df:e4:3b:d3:ba:a3:49:ca:31:cf:2e:fd:
         d7:8a:c2:12:d8:04:85:0f:f9:c0:37:e2:af:6b:67:f9:fa:e2:
         72:2e:a4:c1:87:89:ff:4a:15:27:59:23:d5:96:f8:81:ee:82:
         47:4b:4e:6a:f0:60:7d:8f:bc:9e:51:55:8f:61:2a:a5:88:d9:
         37:b1:f3:c6:72:26:4c:e9:0d:fd:48:e8:8d:c1:d4:35:92:68:
         a5:59:f7:1f:b9:c8:73:62:2c:5a:70:6c:9a:3c:8f:ce:14:22:
         65:c0:9a:56:a8:06:75:f5:19:51:96:15:00:dc:b8:8b:fd:69:
         0f:df:2d:27:8b:1b:52:b2:57:04:25:01:da:39:2f:e5:f1:50:
         17:86:a3:e5:ae:b5:5b:a8:08:35:05:13:64:32:59:a7:e2:10:
         b5:cf:2e:ac:ba:50:13:2a:47:0c:44:04:bd:bf:0e:29:68:f2:
         05:da:ce:a0:98:62:de:f9:57:4f:85:6d:65:13:bc:da:28:4f:
         31:b2:e8:08:43:ec:10:63:30:df:ed:02:e8:d3:50:29:72:1c:
         38:a8:5d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 06:32:47 2026 by rpki-client