Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft
File:                     reE11eBNSWNwmzymv8AQttD5fK8.mft (raw, json)
Hash identifier:          E/zGBG+Jza833uLOhScbtQ7YiZGwr/6eiNXtqr4OipU=
Subject key identifier:   88:43:ED:19:25:70:0E:A3:82:04:92:01:B6:16:42:72:A3:64:96:DA
Authority key identifier: AD:E1:35:D5:E0:4D:49:63:70:9B:3C:A6:BF:C0:10:B6:D0:F9:7C:AF
Certificate issuer:       /CN=A91B7A06/serialNumber=ADE135D5E04D4963709B3CA6BFC010B6D0F97CAF
Certificate serial:       1369
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft
Manifest number:          1353
Signing time:             Wed 20 May 2026 16:59:12 +0000
Manifest this update:     Wed 20 May 2026 16:59:12 +0000
Manifest next update:     Wed 27 May 2026 16:59:12 +0000
Files and hashes:         1: reE11eBNSWNwmzymv8AQttD5fK8.crl (hash: RH+prJLNQGvko5aTwRL0cVQMcH8VFnBieGmAAqHefWE=)
                          2: F7B1497E987F11ED9E1F4D0FC4F9AE02.roa (hash: rcdSLdQwLYJ2Vz+RACiGDvkwIFouXEi+FG0VRiUjp4o=)
                          3: F8E415E2987F11ED9E1F4D0FC4F9AE02.roa (hash: +sUGjUzklaHkDx1+tYPnVEh2t1t6I+IkTvFT5vdfme8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.crl
                          rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 16:59:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4969 (0x1369)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7A06, serialNumber=ADE135D5E04D4963709B3CA6BFC010B6D0F97CAF
        Validity
            Not Before: May 20 16:59:12 2026 GMT
            Not After : May 27 16:59:12 2026 GMT
        Subject: CN=6a0de860-2852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2b:57:55:ba:29:49:67:c5:d7:3c:75:80:a8:
                    a1:04:cd:e2:3b:ec:a6:8b:cf:18:ef:72:3d:f2:da:
                    a3:21:ba:44:fd:08:6f:5f:4e:4b:c7:17:46:35:2e:
                    34:13:6a:d0:3c:7b:10:98:a5:9b:33:9c:88:42:4d:
                    a5:88:2c:9a:65:ac:00:af:ec:63:44:bf:df:3b:a1:
                    df:4a:53:53:43:72:f9:16:c9:db:48:fe:bc:d5:8f:
                    cb:43:2f:68:8a:72:b7:be:69:69:bd:fa:4b:4c:f9:
                    b6:49:74:9d:9b:ac:8e:ae:44:2f:79:29:4b:62:84:
                    7d:ba:5f:e0:62:cf:44:af:6b:5e:a4:18:e6:02:0b:
                    ec:76:97:47:1e:01:46:5d:73:c5:70:8d:c0:39:55:
                    e1:25:59:54:01:0f:27:cf:09:ba:f6:5f:c0:7b:74:
                    25:df:d9:4a:21:2b:31:63:b9:03:98:5f:22:09:92:
                    01:11:20:13:50:5c:c5:fc:f0:5b:25:8e:19:87:ad:
                    fd:9a:88:68:29:86:99:f2:1b:47:4e:12:62:9a:35:
                    5a:2c:73:12:c7:a5:5b:ff:d2:d1:7b:9c:65:7f:dc:
                    2a:b8:b0:72:62:b4:8f:ca:75:d9:2a:9e:ba:3e:c2:
                    6a:ae:11:ef:0c:20:50:2c:f5:e7:73:53:14:ff:18:
                    30:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:43:ED:19:25:70:0E:A3:82:04:92:01:B6:16:42:72:A3:64:96:DA
            X509v3 Authority Key Identifier:
                keyid:AD:E1:35:D5:E0:4D:49:63:70:9B:3C:A6:BF:C0:10:B6:D0:F9:7C:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:15:42:23:4b:3f:b5:b9:38:14:e7:5b:ab:8b:e1:a8:79:3f:
         0d:a7:50:b2:e5:57:e8:49:d3:65:b0:2f:44:63:17:e4:98:a5:
         50:f1:60:8b:11:3b:36:97:f0:bf:34:7f:b5:0a:b3:2c:e8:30:
         5c:37:6d:d9:70:f5:d3:41:bd:c4:73:c7:68:ef:94:b5:ca:56:
         cf:da:73:d8:c6:f1:de:84:d0:bf:3b:db:1f:5c:c6:51:9e:85:
         51:76:68:cd:63:4c:5e:71:de:d9:6d:37:32:45:fa:70:77:2f:
         d7:a1:8a:52:d2:21:eb:c1:47:96:5f:ef:e8:45:d6:be:4a:8e:
         c6:d7:1e:c6:29:87:5e:bf:b2:bc:5c:60:3f:a7:fa:8d:b3:4e:
         b2:3d:45:63:13:63:98:98:19:85:82:3d:25:07:78:9a:2b:3c:
         81:9a:21:4d:0d:11:71:c7:b5:ec:b3:b6:26:d6:1d:b8:db:6c:
         bf:05:e6:76:4f:eb:d5:fe:e7:be:7e:2e:3e:1a:a4:1a:3d:b3:
         6e:0e:ba:e6:b8:7c:1d:bd:3a:ba:3a:33:4a:b0:79:b2:fa:e0:
         c3:27:a7:84:3e:b1:d9:41:4a:29:ba:d3:3c:57:64:07:42:16:
         86:9c:d4:22:fc:12:0c:f9:08:7f:ea:c0:d5:a9:02:18:d0:b1:
         bd:5c:aa:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:19:31 2026 by rpki-client