Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft
File:                     9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft (raw, json)
Hash identifier:          Mzfmv7rilfTu4vknFehKPbWJvHUKpuLufCV034mcwac=
Subject key identifier:   23:EC:F6:09:EF:BC:C0:7D:16:0B:BC:32:F2:6A:9E:9A:B8:E1:E9:6A
Authority key identifier: F4:40:18:18:1E:E5:C6:24:0E:13:94:39:5A:5C:CC:4D:2F:62:31:A4
Certificate issuer:       /CN=A91BDD82/serialNumber=F44018181EE5C6240E1394395A5CCC4D2F6231A4
Certificate serial:       0201
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft
Manifest number:          1145
Signing time:             Wed 20 May 2026 17:34:27 +0000
Manifest this update:     Wed 20 May 2026 17:34:27 +0000
Manifest next update:     Wed 27 May 2026 17:34:27 +0000
Files and hashes:         1: 9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl (hash: vB5OhsD2Brdf2KLV7ntXffiQsPFQO07hHPIx5z/eWak=)
                          2: 324967826D8D11EE9883B985C4F9AE02.roa (hash: eNZGXS/zqJii4r7Dp4wSHUyscFNYWSRreo4HbBsG1r8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 17:34:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 513 (0x201)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDD82, serialNumber=F44018181EE5C6240E1394395A5CCC4D2F6231A4
        Validity
            Not Before: May 20 17:34:27 2026 GMT
            Not After : May 27 17:34:27 2026 GMT
        Subject: CN=6a0df0a3-08f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ed:dc:57:f6:d8:b6:1d:26:05:fb:c0:83:77:
                    7f:79:8d:6d:07:1d:36:51:2e:6f:1d:79:fc:f7:d4:
                    3b:23:4a:d0:1b:b6:54:c0:f0:8d:8b:b5:22:da:3b:
                    bb:b3:7b:59:95:e4:19:36:c7:51:49:08:dd:b1:ee:
                    8d:67:a0:4a:32:f0:d8:92:0f:c2:fb:f9:a2:c4:7d:
                    db:cd:b6:36:26:d4:55:b6:94:b3:d4:33:35:c5:26:
                    04:8e:77:df:bf:ad:13:27:c4:b6:aa:2f:7a:f7:fb:
                    7f:20:1a:72:07:be:92:b6:9d:e7:1d:ea:cd:2a:57:
                    de:8a:e6:13:01:5d:7f:6f:a0:2b:e6:17:d7:f7:93:
                    1d:d7:b4:55:c4:e9:83:ba:d6:07:a8:a2:53:b0:da:
                    a5:57:e0:9c:19:41:9b:ab:41:ca:91:89:4b:f3:a6:
                    54:0c:d7:0f:ca:da:3b:f3:75:76:b8:ed:df:72:47:
                    30:a0:88:2e:56:f2:5d:ff:10:77:80:27:8b:21:ff:
                    e8:28:cf:8a:58:80:11:44:0a:27:7a:7a:3c:01:8c:
                    dd:a1:17:4b:65:a3:ca:bc:5e:d9:c5:9d:73:77:1b:
                    93:d5:f3:ee:5e:02:cc:b2:eb:6a:2b:43:40:cc:7b:
                    9f:27:3e:a6:cb:ef:fd:35:96:71:56:d2:77:40:c8:
                    ad:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:EC:F6:09:EF:BC:C0:7D:16:0B:BC:32:F2:6A:9E:9A:B8:E1:E9:6A
            X509v3 Authority Key Identifier:
                keyid:F4:40:18:18:1E:E5:C6:24:0E:13:94:39:5A:5C:CC:4D:2F:62:31:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:87:ed:ca:20:f2:0f:82:93:9d:af:d3:4d:34:3e:63:ca:c0:
         98:80:30:50:93:bc:b1:28:28:13:9a:6a:0c:e5:ea:39:3e:6e:
         db:94:3d:15:71:35:67:f4:60:0a:46:2f:0b:c2:f9:c6:31:bf:
         c2:9f:f4:68:d6:f5:71:fd:de:33:11:ad:d5:00:cd:4a:8e:8c:
         20:3b:63:61:c8:2e:ea:9f:5c:30:5b:45:c4:44:a5:3d:67:65:
         67:02:eb:ba:8b:5c:ac:d0:e5:0a:60:a7:25:62:3c:6b:04:09:
         a1:ce:f1:69:45:2e:85:b9:9a:4a:c5:8e:ac:c1:62:ad:24:2c:
         a2:23:1b:15:d1:64:be:b0:98:8f:d6:45:4c:e9:d1:c1:77:85:
         97:4a:1b:1d:ed:5b:67:dd:6f:59:93:7f:ac:53:f6:55:1c:25:
         5c:b4:fa:98:c2:80:63:48:18:35:30:ef:b6:3c:a9:24:8d:0f:
         f0:c1:a6:c2:07:16:ef:f6:86:ef:1a:e4:8a:f4:19:2c:4f:91:
         7f:ab:56:27:d6:57:ba:08:5a:26:04:1c:6d:6e:76:86:3d:44:
         f2:46:3a:a0:c8:a2:f3:fe:75:9b:b7:89:33:23:cc:07:78:d6:
         dd:be:38:c3:8c:b7:8d:51:82:68:5d:b3:3b:2b:9c:50:1e:37:
         58:8a:a6:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:39:56 2026 by rpki-client