Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft
File:                     0QwglvtdswSr0vmfRaKUiCktNyE.mft (raw, json)
Hash identifier:          /ZgUKU8WY/oW37w1ZC7fRsBk0x/qZ8XmetTTv3iuzZA=
Subject key identifier:   1E:C5:49:FE:51:40:97:C7:F0:A2:92:D6:28:98:A3:EB:F9:30:71:30
Authority key identifier: D1:0C:20:96:FB:5D:B3:04:AB:D2:F9:9F:45:A2:94:88:29:2D:37:21
Certificate issuer:       /CN=A91C68AD/serialNumber=D10C2096FB5DB304ABD2F99F45A29488292D3721
Certificate serial:       0143
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0QwglvtdswSr0vmfRaKUiCktNyE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft
Manifest number:          0133
Signing time:             Thu 21 May 2026 05:36:47 +0000
Manifest this update:     Thu 21 May 2026 05:36:47 +0000
Manifest next update:     Thu 28 May 2026 05:36:47 +0000
Files and hashes:         1: 0QwglvtdswSr0vmfRaKUiCktNyE.crl (hash: GW3JGG1CDPLroOctoXJwhjYPwMtAW+gHLxASIAfC0fA=)
                          2: 1E0CBABEC99B11F0BD75C310C4F9AE02.roa (hash: XT1f5iHkb8m++28/fpiYZLplpEUsgc7c8BPU0gRXDvg=)
                          3: 1D9F5104C99B11F092A1C310C4F9AE02.roa (hash: ZvIqaTrMx4lREhhOll5OEYiWwpf2XdBASEHvDBRAKLs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.crl
                          rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0QwglvtdswSr0vmfRaKUiCktNyE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 05:36:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 323 (0x143)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C68AD, serialNumber=D10C2096FB5DB304ABD2F99F45A29488292D3721
        Validity
            Not Before: May 21 05:36:47 2026 GMT
            Not After : May 28 05:36:47 2026 GMT
        Subject: CN=6a0e99ef-29ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:65:d8:3c:19:ad:91:15:af:a9:52:d6:44:e2:
                    b7:3e:f0:87:ab:91:d3:4c:45:60:69:a3:7e:98:02:
                    d0:59:e3:f0:fe:b1:2a:5d:d3:0e:71:9a:2c:d1:da:
                    b6:6e:70:1c:cb:95:53:48:b8:35:3c:81:17:08:ac:
                    ce:93:a0:b1:11:af:84:9a:39:f9:01:94:96:65:17:
                    f0:37:08:10:70:05:65:d0:cd:d6:7e:a4:4c:59:8b:
                    fe:89:18:97:e2:de:72:40:7a:8b:02:0f:fa:d9:e0:
                    68:90:d2:7a:da:a7:d9:3d:9d:61:1f:3e:05:eb:4b:
                    67:e0:b1:78:e0:d3:1d:bc:3c:a2:65:15:e6:d7:0d:
                    8c:5c:38:d1:59:22:74:40:98:4c:bb:9b:f4:d8:27:
                    b1:ec:3a:10:e2:f1:aa:bc:40:c0:75:88:98:d6:7f:
                    75:37:d6:7c:fb:2b:22:66:cf:7e:6c:3f:91:10:30:
                    f6:9a:b4:50:8d:2e:a9:a1:d6:9c:a2:91:08:06:7b:
                    17:dc:b7:15:e3:6f:7d:56:70:30:ca:d3:72:ba:54:
                    74:86:05:9d:8a:90:09:d6:4e:90:1d:c8:83:71:09:
                    e2:04:83:25:5d:50:c6:d7:4f:20:98:d6:08:a2:9c:
                    72:b8:cb:35:4e:56:dc:95:5b:38:2e:f2:03:c2:43:
                    63:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C5:49:FE:51:40:97:C7:F0:A2:92:D6:28:98:A3:EB:F9:30:71:30
            X509v3 Authority Key Identifier:
                keyid:D1:0C:20:96:FB:5D:B3:04:AB:D2:F9:9F:45:A2:94:88:29:2D:37:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0QwglvtdswSr0vmfRaKUiCktNyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:d7:17:13:f3:57:12:fd:41:8f:f3:95:a4:8e:38:4e:c5:97:
         e3:fa:c9:8e:8e:60:a2:98:20:18:0d:85:62:19:e0:fb:b6:11:
         d3:d3:06:89:31:30:92:66:44:da:dd:ab:23:6c:00:5c:71:bc:
         c7:5d:31:c9:32:a2:e8:ae:88:c9:1e:be:ae:85:90:b6:8e:2f:
         0d:ab:d7:7d:ce:33:40:d5:00:63:ad:31:7d:c2:b6:25:d5:56:
         00:d5:07:ce:b9:fe:4d:ac:44:64:50:3e:c6:e8:87:cb:06:ab:
         48:cc:fe:5d:ca:a7:23:92:1f:66:71:19:ba:1e:45:c1:10:40:
         08:a4:e2:d1:3b:20:4e:ab:4c:13:de:3a:81:81:f8:83:ad:8a:
         52:d7:1c:1e:79:58:bb:cb:67:f5:41:e6:2f:cc:9f:3a:26:fa:
         25:12:40:16:56:d7:f2:d0:ca:f0:3f:b7:13:74:fe:84:f0:67:
         b2:4b:9c:62:b1:91:5c:6d:a5:0f:bb:cb:ca:9d:d4:8c:2a:ec:
         a1:c3:29:84:42:12:52:4f:a9:ff:ed:6d:9e:00:a8:19:00:32:
         ed:5d:ee:f3:7d:78:6b:81:9e:3f:d1:0a:34:0f:68:90:ac:32:
         b4:7c:c3:0b:a4:76:a3:a9:c7:05:7c:a6:58:13:c4:16:53:60:
         05:93:84:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:39:02 2026 by rpki-client