Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/S0w6zHYgyo0mn3fC-L5soNohdic.mft
File:                     S0w6zHYgyo0mn3fC-L5soNohdic.mft (raw, json)
Hash identifier:          +iwYBhx7LfOiESZVJtZ7HND0Yq2uLe0pi8pbykopUVs=
Subject key identifier:   01:82:C2:87:6C:D6:13:6F:31:4E:91:D9:5E:C2:73:12:83:79:06:8D
Authority key identifier: 4B:4C:3A:CC:76:20:CA:8D:26:9F:77:C2:F8:BE:6C:A0:DA:21:76:27
Certificate issuer:       /CN=A91C6CD5/serialNumber=4B4C3ACC7620CA8D269F77C2F8BE6CA0DA217627
Certificate serial:       04DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0w6zHYgyo0mn3fC-L5soNohdic.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/S0w6zHYgyo0mn3fC-L5soNohdic.mft
Manifest number:          04D4
Signing time:             Wed 20 May 2026 23:55:06 +0000
Manifest this update:     Wed 20 May 2026 23:55:05 +0000
Manifest next update:     Wed 27 May 2026 23:55:05 +0000
Files and hashes:         1: S0w6zHYgyo0mn3fC-L5soNohdic.crl (hash: Cry2xcwXd9dhXV07W7rDTSZ+7wOuKzHj5kSiyxRmxDY=)
                          2: AE0AFE846ADE11ECADF2FE5DC4F9AE02.roa (hash: toAgoicPvnytN26APU/UVJy8/sTKyifpzMMMZrUhYGw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/S0w6zHYgyo0mn3fC-L5soNohdic.crl
                          rsync://rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/S0w6zHYgyo0mn3fC-L5soNohdic.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0w6zHYgyo0mn3fC-L5soNohdic.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 23:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1245 (0x4dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6CD5, serialNumber=4B4C3ACC7620CA8D269F77C2F8BE6CA0DA217627
        Validity
            Not Before: May 20 23:55:05 2026 GMT
            Not After : May 27 23:55:05 2026 GMT
        Subject: CN=6a0e49da-4157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:99:99:e7:1e:19:02:ec:19:50:04:cf:9b:3b:
                    94:2d:f2:dd:8e:46:fd:6c:5c:50:2b:ba:93:18:b3:
                    4b:97:fe:48:5b:9e:b1:98:07:50:4a:71:1b:82:4f:
                    8a:11:2c:e9:ce:d3:01:e4:98:94:16:db:c4:b6:d5:
                    68:be:23:7b:d4:66:2e:f0:d8:5e:88:a6:ac:8d:19:
                    34:c8:68:e3:71:df:fc:6f:e4:1a:8b:11:44:fb:af:
                    72:a2:b7:45:6b:c1:6d:b8:cb:94:73:0b:5d:18:2b:
                    c3:f5:b8:6c:cf:ed:de:b6:9a:50:31:a1:65:1f:2f:
                    84:68:f8:e0:d4:2c:ec:24:82:ad:67:fd:65:82:75:
                    dd:62:c1:14:15:b8:d4:f0:1e:4f:77:bf:88:66:35:
                    6d:5e:4b:a2:ba:d2:6f:65:46:b9:a9:11:9b:d2:57:
                    35:cf:e9:dd:11:f7:50:6c:26:02:05:82:22:d9:af:
                    b9:50:20:18:b4:87:b6:57:69:8b:b5:88:50:b6:81:
                    1b:1f:30:4f:29:5b:9c:d2:e8:44:5c:db:0f:9f:18:
                    17:96:d2:fb:05:7e:40:08:ee:52:b5:fa:d8:12:55:
                    aa:16:a4:5d:e9:17:ce:ac:f9:2e:8e:2e:f9:d1:91:
                    f9:df:98:9c:e6:ea:fc:7a:16:a9:e6:71:b7:56:1a:
                    02:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:82:C2:87:6C:D6:13:6F:31:4E:91:D9:5E:C2:73:12:83:79:06:8D
            X509v3 Authority Key Identifier:
                keyid:4B:4C:3A:CC:76:20:CA:8D:26:9F:77:C2:F8:BE:6C:A0:DA:21:76:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/S0w6zHYgyo0mn3fC-L5soNohdic.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0w6zHYgyo0mn3fC-L5soNohdic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/S0w6zHYgyo0mn3fC-L5soNohdic.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:83:5b:3f:77:b0:46:f0:5a:a3:a0:16:b5:fc:1f:2a:44:ea:
         f1:97:d7:ae:18:5e:4a:f7:52:f9:cd:86:3c:96:01:3e:cf:22:
         aa:f3:5f:c3:94:29:09:9f:e6:65:6f:1d:cb:a5:28:77:7c:b3:
         92:e8:2b:2c:b2:67:6f:6c:5b:a2:64:dd:d1:65:21:a0:98:ae:
         75:92:0f:22:2e:55:b7:88:36:ec:ca:31:56:2b:52:63:08:64:
         77:a2:b8:c7:af:2e:d2:d5:a2:b6:01:72:43:3b:94:2a:06:e7:
         45:77:25:fa:b0:b4:e4:dd:62:7d:5b:ce:c4:7d:88:10:27:81:
         54:19:40:f3:b2:b1:d7:c3:a1:b9:40:87:26:76:ff:0a:02:b1:
         43:34:05:79:98:49:1e:4e:0e:0d:d8:ce:36:e0:66:d4:f9:45:
         6d:93:c7:1f:8b:de:1c:e2:9f:9d:91:a9:3b:ed:78:65:4a:3e:
         f1:c6:d6:a3:14:c7:91:b1:c6:25:0a:d0:c1:f5:a4:23:2c:f0:
         87:65:c2:70:91:34:4f:23:ab:f7:ee:fd:3d:d4:c8:67:ee:a1:
         bb:b3:34:b0:41:67:1e:d1:2a:7a:ce:4f:93:96:17:a9:c9:5a:
         2e:d6:41:78:f7:78:dd:92:51:76:d4:51:d4:aa:2a:2e:71:1d:
         52:ed:78:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:57 2026 by rpki-client