Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft
File:                     CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft (raw, json)
Hash identifier:          GjugbGRenkZi4//9s3YDYdlXkdk6kmWWiSOIyzNnbDY=
Subject key identifier:   5B:90:F5:68:3F:E8:DA:C8:C4:E3:16:17:EE:3C:C3:3A:45:54:13:04
Authority key identifier: 08:D6:8C:F4:50:07:45:37:5F:F2:CC:58:4B:A5:FB:E5:77:BE:E3:3F
Certificate issuer:       /CN=A91B8D33/serialNumber=08D68CF4500745375FF2CC584BA5FBE577BEE33F
Certificate serial:       0212
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft
Manifest number:          01FF
Signing time:             Sun 03 May 2026 03:25:31 +0000
Manifest this update:     Sun 03 May 2026 03:25:31 +0000
Manifest next update:     Sun 10 May 2026 03:25:31 +0000
Files and hashes:         1: CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl (hash: w0PUBSuwLNDO8efDaQZ3lDcXzFsPmhK83VahedAB0Jw=)
                          2: 86D7DAE6D1C211EF9AA9410EC4F9AE02.roa (hash: w4ebJqxqcYTakZgYgczYh31d+UQ4emy9J0fYQLqlsn0=)
                          3: C698E13ED1BD11EF9C00D867C4F9AE02.roa (hash: gcd1uORIwB588IprBp+ptXbcFbF7rS1AehPmjHP27TY=)
                          4: E62F8796D1BD11EFBCCC0B68C4F9AE02.roa (hash: C+zKPU7xS4ZOCm7vmpXaLXUhKiAqHKCATTbpyOC3iPI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl
                          rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 May 2026 22:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 530 (0x212)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8D33, serialNumber=08D68CF4500745375FF2CC584BA5FBE577BEE33F
        Validity
            Not Before: May  3 03:25:31 2026 GMT
            Not After : May 10 03:25:31 2026 GMT
        Subject: CN=69f6c02b-eeb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b9:46:0d:c4:d5:29:da:c5:74:10:20:0c:fb:
                    c9:d1:89:ee:8c:65:f3:fd:02:d8:50:b0:cd:60:6d:
                    12:17:0e:c5:0b:fb:76:f2:05:bd:79:69:fd:e1:e2:
                    75:37:a0:5f:c0:67:22:21:b6:8b:5d:ee:b9:48:5a:
                    17:37:5e:ff:3a:47:b0:c8:b3:d1:55:89:e0:21:56:
                    e4:59:87:54:85:7d:18:fa:4a:39:1d:c4:4d:83:21:
                    12:36:4c:35:d0:7e:90:57:5b:25:98:08:dd:cc:89:
                    11:fa:ed:71:a1:17:f2:95:4d:fd:e0:9b:c3:be:d6:
                    6a:9d:a7:b0:85:8f:51:a1:88:ff:63:c3:3d:be:b2:
                    b7:87:f8:7f:a6:3e:ad:27:8a:79:0f:3d:9e:d8:f7:
                    1a:32:00:2f:4f:59:45:18:ad:28:fd:22:12:57:6a:
                    e2:40:47:c2:00:cd:07:6d:19:ab:c1:90:a9:de:95:
                    7e:68:ee:6c:81:d0:91:42:ec:71:2b:c1:c3:b9:16:
                    5a:d9:70:37:51:14:db:e2:d2:e5:e0:44:ad:c8:24:
                    e3:25:1d:c5:72:bf:8c:13:4e:39:93:62:46:60:60:
                    e9:5e:6f:cc:67:22:3a:73:02:cf:65:c2:b5:d7:5c:
                    e9:9b:a5:e8:9f:45:fe:55:33:96:ec:ef:cf:24:bf:
                    2a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:90:F5:68:3F:E8:DA:C8:C4:E3:16:17:EE:3C:C3:3A:45:54:13:04
            X509v3 Authority Key Identifier:
                keyid:08:D6:8C:F4:50:07:45:37:5F:F2:CC:58:4B:A5:FB:E5:77:BE:E3:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:fa:61:cf:36:bf:83:de:87:b7:a0:80:84:3a:f9:ec:c3:90:
         69:d2:ea:3a:f9:38:49:38:b7:33:3f:5a:7a:dc:e8:a9:7f:6f:
         5f:a8:a3:99:c0:ef:76:bc:0c:89:66:f5:b4:8c:2e:6d:fa:b7:
         a3:5e:b4:24:34:11:27:29:18:b7:22:77:c0:43:b8:73:77:63:
         3b:d2:c1:43:ca:74:b3:af:a8:d5:60:24:5f:51:31:1b:d6:39:
         58:32:8b:0a:dd:93:a9:d5:78:c8:df:6c:9f:c2:62:bc:e3:39:
         7d:35:9a:03:33:ab:70:e0:04:07:c7:7c:82:32:e2:fc:94:9a:
         d7:4e:07:0e:68:a4:36:b7:c9:e5:2f:98:98:2a:c9:05:28:15:
         20:da:90:e2:ab:0d:99:ef:83:f7:39:54:be:b0:15:2b:99:01:
         68:98:6f:89:c1:bc:3e:10:3c:76:dc:e0:b8:51:48:e5:eb:6c:
         ae:ad:91:bd:ab:d8:8f:ea:9b:e4:ee:ad:53:f9:e5:41:c9:3c:
         41:a4:f1:59:ae:45:1b:25:da:a5:8a:a4:81:4e:b3:d8:9d:86:
         41:fe:54:bc:17:5e:60:ed:76:de:b6:a6:54:52:25:a9:af:f2:
         50:b2:38:41:e6:95:12:49:24:73:c2:e4:59:29:32:35:93:69:
         e4:bd:0a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:08:50 2026 by rpki-client