Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft
File:                     dddb2lG8oAYPcIETI0xBReREQho.mft (raw, json)
Hash identifier:          ErQeV6rzTehn21j1FC34LemaNT8EAtff5u5NPJP1V84=
Subject key identifier:   D6:91:31:A3:02:C0:D4:43:1F:AC:48:AF:7F:90:A0:79:0A:20:68:F1
Authority key identifier: 75:D7:5B:DA:51:BC:A0:06:0F:70:81:13:23:4C:41:45:E4:44:42:1A
Certificate issuer:       /CN=A91CBB48/serialNumber=75D75BDA51BCA0060F708113234C4145E444421A
Certificate serial:       090F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dddb2lG8oAYPcIETI0xBReREQho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft
Manifest number:          0902
Signing time:             Wed 20 May 2026 20:19:29 +0000
Manifest this update:     Wed 20 May 2026 20:19:29 +0000
Manifest next update:     Wed 27 May 2026 20:19:29 +0000
Files and hashes:         1: dddb2lG8oAYPcIETI0xBReREQho.crl (hash: cg2sokaK38/HVFJLfz0aBZF6sR5K9bukqfeYphtg1sM=)
                          2: 96AC80A2CBB411EA99BB9A4DC4F9AE02.roa (hash: 4jcjYW/0FMetLdx19LfkYx1V1hLHWxOLQGODOyvAQC0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.crl
                          rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dddb2lG8oAYPcIETI0xBReREQho.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 20:19:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2319 (0x90f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CBB48, serialNumber=75D75BDA51BCA0060F708113234C4145E444421A
        Validity
            Not Before: May 20 20:19:29 2026 GMT
            Not After : May 27 20:19:29 2026 GMT
        Subject: CN=6a0e1751-8307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4e:b9:4b:54:86:70:83:52:e9:0f:78:bf:98:
                    50:c1:71:16:3a:0b:b2:cb:86:3c:73:fd:3f:29:b6:
                    85:c5:18:dc:58:59:02:57:17:db:9c:a1:64:7b:40:
                    3e:99:db:e9:9f:54:7e:2f:4a:4c:47:3c:c1:11:a8:
                    c4:64:2f:9b:6f:45:bf:5b:fa:5c:d7:5a:62:a2:7f:
                    a7:50:c6:e1:7c:cf:d0:06:a7:7d:00:ec:18:de:d9:
                    8e:53:04:d9:09:ee:72:0a:18:d8:50:83:27:15:02:
                    a6:df:fc:9a:74:8f:a8:e1:2e:5c:2e:7b:78:17:29:
                    08:93:5c:8b:31:07:cf:df:ee:e9:3d:d1:bf:db:d2:
                    42:45:1e:57:de:4e:f9:be:dd:27:c7:eb:03:af:93:
                    99:04:ee:40:a0:dd:41:d2:15:cd:9d:5e:b7:d0:59:
                    05:65:a1:4d:9e:92:c5:82:96:f7:7f:78:47:59:30:
                    6b:d7:e8:b3:f8:8f:2e:e0:08:1a:72:e5:55:60:49:
                    9d:26:4f:b3:c7:2b:90:43:69:4b:79:3d:51:7c:5d:
                    45:e2:1b:a5:2a:ad:69:d1:92:55:ef:18:91:92:d1:
                    12:64:d1:b5:5e:c5:be:1c:0a:5d:51:74:ed:e5:48:
                    be:a4:33:76:d2:46:59:4b:d3:56:5d:15:5f:29:72:
                    27:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:91:31:A3:02:C0:D4:43:1F:AC:48:AF:7F:90:A0:79:0A:20:68:F1
            X509v3 Authority Key Identifier:
                keyid:75:D7:5B:DA:51:BC:A0:06:0F:70:81:13:23:4C:41:45:E4:44:42:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dddb2lG8oAYPcIETI0xBReREQho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:d2:71:73:a4:97:66:e9:3e:c4:7f:04:3e:b2:53:4a:a0:42:
         c2:8b:7f:2b:3c:f6:ac:dd:87:ad:f6:66:d6:aa:f1:5b:45:1f:
         af:4d:7b:e8:76:55:30:95:de:47:f2:47:5f:1c:d0:10:8c:c0:
         ef:65:44:44:8b:8a:f0:8d:4f:76:a5:19:46:8e:51:2f:3b:80:
         31:46:c5:8b:82:ea:fc:33:21:e7:6a:52:e2:84:f6:02:d3:22:
         ff:5a:61:cc:8b:3f:5a:1d:20:13:10:21:83:bd:e9:41:e3:91:
         ed:01:02:94:2b:64:a8:de:4b:a9:45:36:91:40:ba:cf:34:25:
         8c:84:06:d5:d8:5c:3b:2c:94:1f:19:6f:7b:c0:44:f8:bc:14:
         9f:68:f5:e8:ae:ca:c0:bf:a4:b0:b3:2b:63:52:0d:7d:1e:0d:
         4f:fc:a8:63:f7:06:69:44:bd:4d:c3:25:62:36:d0:58:22:19:
         43:e9:6e:0d:26:84:77:0f:b2:14:2b:d4:3b:f6:00:10:50:da:
         72:2c:d1:4b:6c:f2:37:d8:de:e6:98:6c:8e:2b:62:c6:08:09:
         5a:c8:e0:9a:02:89:e7:38:fb:cb:03:4c:1d:80:38:46:3d:6a:
         fa:78:bf:eb:e5:5f:7b:70:e4:f8:47:7f:50:a1:3e:a5:8e:b7:
         62:11:57:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:54:04 2026 by rpki-client