Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.mft
File:                     1sP4E3joVAB4unmUQu7b7HgOD3s.mft (raw, json)
Hash identifier:          Mq3xOBRLeehTDj2zJoomxz5fReo10M0PC6xez1Sd28w=
Subject key identifier:   38:0C:74:D8:74:4D:DE:C8:1F:61:03:71:9A:F7:64:05:B7:B7:54:AE
Authority key identifier: D6:C3:F8:13:78:E8:54:00:78:BA:79:94:42:EE:DB:EC:78:0E:0F:7B
Certificate issuer:       /CN=A91C8DD5/serialNumber=D6C3F81378E8540078BA799442EEDBEC780E0F7B
Certificate serial:       1C09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sP4E3joVAB4unmUQu7b7HgOD3s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.mft
Manifest number:          1BFD
Signing time:             Wed 20 May 2026 16:13:26 +0000
Manifest this update:     Wed 20 May 2026 16:13:25 +0000
Manifest next update:     Wed 27 May 2026 16:13:25 +0000
Files and hashes:         1: 1sP4E3joVAB4unmUQu7b7HgOD3s.crl (hash: N85NtUWg/qVMGOVCQgTjiByt5XBLtLe48JQW1JJL3Vk=)
                          2: 020A31F812B011E7A7C42661C4F9AE02.roa (hash: nc44lOcLMZ4ITfntFCsBtBPJVq4Kig5VsyDlbVHPWAw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.crl
                          rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sP4E3joVAB4unmUQu7b7HgOD3s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 16:13:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7177 (0x1c09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8DD5, serialNumber=D6C3F81378E8540078BA799442EEDBEC780E0F7B
        Validity
            Not Before: May 20 16:13:25 2026 GMT
            Not After : May 27 16:13:25 2026 GMT
        Subject: CN=6a0ddda5-a9d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:46:38:5c:0f:df:43:87:e2:1f:57:6d:ea:a4:
                    cb:93:b5:25:42:79:60:a7:91:a1:e3:bf:9d:92:bf:
                    51:76:a4:35:a6:50:58:d3:d8:b3:43:e7:36:b6:2f:
                    5c:76:59:d4:7d:16:d9:d2:82:fe:fb:0d:59:45:f3:
                    35:b1:30:39:7e:08:a4:14:40:88:20:85:4a:d8:06:
                    1d:68:cb:4e:3d:4f:a4:2e:5a:ee:5f:06:50:47:16:
                    ac:45:ce:e7:d4:34:35:87:a4:3e:5d:ba:63:d7:c7:
                    f6:7f:d2:78:ce:33:f4:21:51:d5:45:a2:91:88:f7:
                    50:c4:f8:83:87:7c:fc:24:7a:c4:5d:51:3f:e3:e7:
                    c6:87:d1:01:ab:7f:d1:3b:3d:2a:ec:ad:df:c2:ca:
                    d6:7c:a6:14:2d:60:e6:79:50:dc:59:7b:d3:45:c1:
                    57:fc:14:28:cb:49:83:5b:4a:00:bc:97:7f:e6:18:
                    f9:cd:0e:f8:84:23:4d:ce:9b:ad:1e:94:27:15:ce:
                    76:aa:14:12:3f:5b:cd:27:11:1d:70:b6:82:75:fe:
                    b6:4b:64:04:da:46:7c:e1:d9:84:8b:49:1b:18:3f:
                    5e:fa:bc:72:5d:2a:c1:5d:f4:c2:df:cc:df:38:89:
                    2f:0c:d3:70:ca:76:53:a5:60:3e:a0:ca:c7:5c:30:
                    07:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:0C:74:D8:74:4D:DE:C8:1F:61:03:71:9A:F7:64:05:B7:B7:54:AE
            X509v3 Authority Key Identifier:
                keyid:D6:C3:F8:13:78:E8:54:00:78:BA:79:94:42:EE:DB:EC:78:0E:0F:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sP4E3joVAB4unmUQu7b7HgOD3s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:f2:35:a9:ad:56:f6:62:d7:e6:14:66:14:53:ec:10:32:39:
         eb:1d:88:a4:57:3f:7c:75:8e:30:dc:56:eb:6d:87:e7:b0:7d:
         ee:a4:8e:5b:f7:be:c9:6a:cd:21:62:48:4e:d8:33:4c:26:60:
         6d:6c:10:88:fe:7f:79:01:3c:1e:70:2c:0d:1d:6a:9f:1e:ec:
         44:62:7e:c2:b4:22:50:2d:0a:72:91:24:cd:9c:9e:ab:cb:d9:
         c4:c0:33:0c:53:f6:f2:05:57:35:48:49:4b:c1:12:51:b3:dd:
         98:98:b8:21:9e:f2:b0:37:cf:c5:a8:08:d9:07:71:3c:5c:a7:
         e0:a3:c0:a4:19:f1:3a:f1:c0:67:5d:db:50:70:18:3c:2a:24:
         43:7d:f2:4c:8f:00:5f:4f:e9:db:67:ab:09:b7:0f:e8:cd:48:
         06:f7:62:5d:3d:22:13:48:49:c7:8e:24:71:c3:bf:50:15:59:
         e6:0a:66:f7:83:ac:d5:af:66:28:c6:2c:54:b8:20:4e:a3:e7:
         12:48:4e:c8:b9:87:69:dc:fb:46:2d:8b:43:28:24:13:c3:7e:
         ea:13:87:12:f8:37:b0:0e:63:fa:7a:a5:b4:df:b6:c3:c0:c5:
         24:64:dd:2e:ce:fa:85:50:c1:7c:72:80:08:ad:19:de:38:fb:
         b5:42:b5:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:53:42 2026 by rpki-client