Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C175F/E1FB4B9E24D511F1BA7EBA67AB833773/amMZbMzcZmzLXDgP7RbG8O-w-10.mft
File:                     amMZbMzcZmzLXDgP7RbG8O-w-10.mft (raw, json)
Hash identifier:          axPyxK0crr3zWJvigEYlo/CpWYpBoFuJa2BUGYY3DSY=
Subject key identifier:   24:21:EE:88:FF:94:35:E0:4E:7F:43:18:4D:6D:5B:D6:FA:89:66:C3
Authority key identifier: 6A:63:19:6C:CC:DC:66:6C:CB:5C:38:0F:ED:16:C6:F0:EF:B0:FB:5D
Certificate issuer:       /CN=A91C175F/serialNumber=6A63196CCCDC666CCB5C380FED16C6F0EFB0FB5D
Certificate serial:       21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/amMZbMzcZmzLXDgP7RbG8O-w-10.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C175F/E1FB4B9E24D511F1BA7EBA67AB833773/amMZbMzcZmzLXDgP7RbG8O-w-10.mft
Manifest number:          20
Signing time:             Tue 19 May 2026 08:45:42 +0000
Manifest this update:     Tue 19 May 2026 08:45:41 +0000
Manifest next update:     Tue 26 May 2026 08:45:41 +0000
Files and hashes:         1: amMZbMzcZmzLXDgP7RbG8O-w-10.crl (hash: /RkGb6xfi2qTIU0siXB4e7FCLv6sdt/4StUmSb369rU=)
                          2: 32F3695A24D611F183242288AB833773.roa (hash: cN0LkN23o7Jd+cV1/heAkHiokcHf45cviCoxSSBhd58=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C175F/E1FB4B9E24D511F1BA7EBA67AB833773/amMZbMzcZmzLXDgP7RbG8O-w-10.crl
                          rsync://rpki.apnic.net/member_repository/A91C175F/E1FB4B9E24D511F1BA7EBA67AB833773/amMZbMzcZmzLXDgP7RbG8O-w-10.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/amMZbMzcZmzLXDgP7RbG8O-w-10.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 May 2026 08:45:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C175F, serialNumber=6A63196CCCDC666CCB5C380FED16C6F0EFB0FB5D
        Validity
            Not Before: May 19 08:45:41 2026 GMT
            Not After : May 26 08:45:41 2026 GMT
        Subject: CN=6a0c2336-6472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:75:fb:a9:9a:0f:64:e1:19:b1:d6:a2:3c:91:
                    40:1c:a6:81:f8:aa:e8:82:07:4f:36:b6:f0:d1:16:
                    7a:b7:69:53:f1:dd:d2:2b:a8:59:54:17:4e:9d:46:
                    7c:35:3f:d1:f3:2d:96:e7:ce:1e:cb:00:c3:c1:10:
                    24:fa:61:ae:11:75:b7:19:b2:2e:8f:65:7f:92:48:
                    38:74:7f:2a:b8:ea:ae:2f:b5:03:7b:1b:3c:3a:9a:
                    df:4a:c7:41:e6:42:79:d2:9b:e3:44:11:b2:35:ed:
                    3b:36:0a:60:27:f9:b3:20:b9:69:56:a6:6e:63:77:
                    4c:dd:89:81:dc:1c:bc:ec:51:e0:bf:87:9e:49:70:
                    a0:52:91:a6:44:00:58:f4:64:82:cc:05:e6:80:8d:
                    66:96:54:a2:62:a2:1f:4e:57:50:36:ef:1d:77:63:
                    a5:c1:b5:c9:76:1d:90:6c:80:87:e9:68:de:69:66:
                    e4:b0:1a:33:dd:d4:04:33:98:dd:6f:e4:75:11:ec:
                    f2:df:ea:66:94:5b:2c:e4:17:a2:77:e1:3e:2e:1e:
                    7c:eb:14:1d:7a:12:df:75:5d:7e:d0:86:d8:0e:53:
                    cb:3b:35:46:e0:13:82:12:04:ea:13:25:a8:e3:ed:
                    17:d5:c1:a5:d3:e4:7b:80:f1:5b:ad:bc:8e:58:1f:
                    59:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:21:EE:88:FF:94:35:E0:4E:7F:43:18:4D:6D:5B:D6:FA:89:66:C3
            X509v3 Authority Key Identifier:
                keyid:6A:63:19:6C:CC:DC:66:6C:CB:5C:38:0F:ED:16:C6:F0:EF:B0:FB:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C175F/E1FB4B9E24D511F1BA7EBA67AB833773/amMZbMzcZmzLXDgP7RbG8O-w-10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/amMZbMzcZmzLXDgP7RbG8O-w-10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C175F/E1FB4B9E24D511F1BA7EBA67AB833773/amMZbMzcZmzLXDgP7RbG8O-w-10.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:38:ab:e6:ea:e3:0c:37:bb:4a:81:76:b4:46:ae:19:0b:cd:
         83:9c:9f:36:ac:28:97:0f:06:2c:db:34:be:82:a6:a2:5d:0f:
         a3:66:ad:31:86:47:c4:ec:68:a4:16:f3:50:91:f9:3f:98:a6:
         a5:ca:28:76:cb:d5:74:11:21:57:9d:71:f0:3b:6d:11:92:06:
         a8:6c:bb:aa:1a:62:89:15:19:56:4f:6b:1a:42:fd:66:c2:7c:
         af:be:19:ae:a2:13:c9:a0:14:f5:c1:a6:67:cc:0a:74:07:96:
         1e:57:0c:02:d1:b0:e7:ae:8b:d5:b3:7b:56:f8:a6:88:05:87:
         05:40:c9:a1:b7:36:52:98:15:6e:84:68:3d:6c:e4:ab:d1:b5:
         80:f7:14:33:23:a8:c5:d9:5c:8c:73:43:47:1e:f9:6f:e7:ce:
         26:59:fb:c7:a3:6b:24:b4:50:55:d3:74:b1:93:92:db:66:fd:
         8b:88:d0:a8:83:1a:53:ba:e2:08:21:b8:7e:3d:46:fb:44:53:
         d9:7c:55:ce:5f:e1:be:84:35:b2:6a:25:e2:8e:b1:22:4e:1f:
         3b:66:d5:fa:d3:dd:44:1a:a0:bb:cd:4d:10:a5:e5:d6:7b:02:
         3d:e7:b4:59:dd:25:1b:f6:e5:91:f1:4a:47:e1:77:d4:0a:7c:
         0b:54:54:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:27:42 2026 by rpki-client