Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.mft
File:                     jNGQoUOqLh5IcwOxPcBT7Re86x4.mft (raw, json)
Hash identifier:          KjJTvkzo7I3Ok40K7N8jSLtquQXeR2X2U2Z1cDRMSw0=
Subject key identifier:   48:38:99:C0:17:4A:87:1D:3C:96:95:AC:EA:BC:F5:B0:C6:FC:07:DB
Authority key identifier: 8C:D1:90:A1:43:AA:2E:1E:48:73:03:B1:3D:C0:53:ED:17:BC:EB:1E
Certificate issuer:       /CN=A91BDF2B/serialNumber=8CD190A143AA2E1E487303B13DC053ED17BCEB1E
Certificate serial:       BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNGQoUOqLh5IcwOxPcBT7Re86x4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.mft
Manifest number:          B6
Signing time:             Thu 21 May 2026 07:09:06 +0000
Manifest this update:     Thu 21 May 2026 07:09:06 +0000
Manifest next update:     Thu 28 May 2026 07:09:06 +0000
Files and hashes:         1: jNGQoUOqLh5IcwOxPcBT7Re86x4.crl (hash: 2SQpO2qyT2boMFuUVSBYRtROw7q7JBO0FOTdXZMZSQg=)
                          2: 653C22F441C311F0999A9935C4F9AE02.roa (hash: iIlQkxBmgXt47gVpNAYfQJLsTOog95JafpEPwLPUz/0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.crl
                          rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNGQoUOqLh5IcwOxPcBT7Re86x4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 07:09:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186 (0xba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDF2B, serialNumber=8CD190A143AA2E1E487303B13DC053ED17BCEB1E
        Validity
            Not Before: May 21 07:09:06 2026 GMT
            Not After : May 28 07:09:06 2026 GMT
        Subject: CN=6a0eaf92-bf87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:49:cd:bb:f5:df:4e:1a:28:d7:55:d6:d8:33:
                    28:25:91:4c:bc:a0:96:8e:f0:13:b5:1e:71:3b:d0:
                    53:ae:50:3c:dd:43:7f:fc:aa:ec:0e:75:b6:bc:6d:
                    52:10:ed:44:7c:27:4a:f5:5b:28:13:11:4c:3d:82:
                    05:f4:bf:93:ff:a2:72:09:23:d9:2c:a3:59:e6:17:
                    89:c4:b4:4d:05:48:cb:5a:73:df:7a:78:9f:4b:d5:
                    c4:98:98:89:7c:9e:6b:22:3d:5e:ab:4d:93:74:84:
                    a1:e9:a1:ce:16:54:1f:39:c1:22:a1:42:46:df:ff:
                    74:2f:a1:f2:96:d7:b8:c1:7c:91:f7:be:ff:83:98:
                    3e:16:2d:70:23:79:96:43:8f:64:0d:60:bc:5e:cc:
                    f8:52:61:99:d0:5d:01:64:b5:73:71:71:a6:2c:75:
                    97:9c:0a:f2:c3:58:33:ce:9c:f6:85:bb:4b:91:c4:
                    47:3d:7b:ca:64:e8:61:6a:07:a6:4a:92:2e:35:53:
                    04:17:61:88:44:26:0d:7c:56:d5:ce:5c:13:9c:0b:
                    1c:20:5c:c5:31:ca:ed:97:ec:19:9d:7a:20:55:2c:
                    6d:d2:e6:35:0c:0f:fa:88:95:40:07:92:1c:7a:df:
                    92:5b:f6:c4:79:85:c4:f3:9a:4a:f3:03:c9:1d:05:
                    52:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:38:99:C0:17:4A:87:1D:3C:96:95:AC:EA:BC:F5:B0:C6:FC:07:DB
            X509v3 Authority Key Identifier:
                keyid:8C:D1:90:A1:43:AA:2E:1E:48:73:03:B1:3D:C0:53:ED:17:BC:EB:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNGQoUOqLh5IcwOxPcBT7Re86x4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:61:12:90:23:82:15:fb:94:01:ab:56:91:a2:be:6e:22:56:
         ed:67:c4:7c:eb:94:2d:27:2a:41:ba:c2:8f:58:fd:c7:14:ec:
         56:fc:05:9d:f6:1f:9c:b4:43:b8:10:5b:63:4b:e9:70:50:25:
         6a:77:91:d9:71:3d:8d:11:f2:90:20:15:7d:15:4e:cc:9c:18:
         4d:6d:cd:4a:e8:ba:6f:54:ea:e1:fc:95:68:a7:90:c9:84:3e:
         33:1b:b8:12:6e:7b:1c:e4:ae:f7:f2:7c:05:43:91:e2:a8:09:
         e4:4b:ce:f4:4e:66:ce:ee:0d:79:69:d3:25:5f:ae:e6:a5:64:
         1f:c6:a5:14:9a:46:b2:16:df:b2:b3:1d:52:ff:17:1d:c8:61:
         a5:70:05:1c:97:1a:d0:4e:5b:be:ae:87:ee:97:c3:38:3d:3e:
         f0:de:3e:95:01:a3:61:79:ac:53:c3:27:6e:16:97:6b:d5:ba:
         24:27:ba:6a:d8:4f:6b:08:00:03:59:0d:5d:62:05:ea:e0:8f:
         0d:02:44:7d:db:3d:dc:a4:da:9d:7b:65:b1:94:90:d8:7c:8b:
         39:0f:48:7a:48:73:50:8e:e0:77:e3:88:bc:f0:31:4c:a1:c9:
         70:10:8d:a0:e5:3d:dd:33:bd:0f:e6:fc:a9:bc:ce:0c:6e:2b:
         6d:15:5d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:28:09 2026 by rpki-client