Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D08D8/CACCAC00232D11F19923DA77A3833773/mT30slnW8G6m6DO22jLrJ_SWtOk.mft
File:                     mT30slnW8G6m6DO22jLrJ_SWtOk.mft (raw, json)
Hash identifier:          +xuY7oNVBSXM/ZYVLVQtCSyJomIFcCQhbZGwovUWY64=
Subject key identifier:   DE:6F:B5:7B:CC:60:FC:F0:0F:EB:54:17:90:54:50:AA:92:D6:9E:90
Authority key identifier: 99:3D:F4:B2:59:D6:F0:6E:A6:E8:33:B6:DA:32:EB:27:F4:96:B4:E9
Certificate issuer:       /CN=A91D08D8/serialNumber=993DF4B259D6F06EA6E833B6DA32EB27F496B4E9
Certificate serial:       23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mT30slnW8G6m6DO22jLrJ_SWtOk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D08D8/CACCAC00232D11F19923DA77A3833773/mT30slnW8G6m6DO22jLrJ_SWtOk.mft
Manifest number:          22
Signing time:             Thu 21 May 2026 08:58:12 +0000
Manifest this update:     Thu 21 May 2026 08:58:11 +0000
Manifest next update:     Thu 28 May 2026 08:58:11 +0000
Files and hashes:         1: mT30slnW8G6m6DO22jLrJ_SWtOk.crl (hash: 1mAYSJx6/Ez6PxR0q+2BvfuAqmMFMCQXScapcQu0uWQ=)
                          2: 60258848232F11F1A5D005B1A3833773.roa (hash: Nihi/qwVLuSv2EdjQJXKm6V9kEbeM4dBc82siJFhY2o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D08D8/CACCAC00232D11F19923DA77A3833773/mT30slnW8G6m6DO22jLrJ_SWtOk.crl
                          rsync://rpki.apnic.net/member_repository/A91D08D8/CACCAC00232D11F19923DA77A3833773/mT30slnW8G6m6DO22jLrJ_SWtOk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mT30slnW8G6m6DO22jLrJ_SWtOk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 08:58:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D08D8, serialNumber=993DF4B259D6F06EA6E833B6DA32EB27F496B4E9
        Validity
            Not Before: May 21 08:58:11 2026 GMT
            Not After : May 28 08:58:11 2026 GMT
        Subject: CN=6a0ec924-a77a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:80:0f:c4:25:1a:f6:1f:10:2c:40:92:5a:a0:
                    a7:c2:26:1c:9f:f6:4d:bd:a2:f0:b6:76:9e:9c:a0:
                    37:01:e9:9a:53:b5:58:3d:34:92:29:7f:a0:91:f6:
                    46:af:19:1d:a2:a0:3e:c3:c1:09:64:2d:d9:09:6b:
                    eb:a5:75:92:68:2b:1c:ea:a0:ea:8f:87:c7:61:5b:
                    3a:dc:98:f8:3e:b8:6b:c8:41:8f:71:7b:1e:0b:5e:
                    cd:54:e1:82:92:2e:3c:5b:c0:22:93:59:94:a4:83:
                    2c:a9:28:0d:d5:30:c2:86:95:97:9e:d5:1d:51:b5:
                    e4:8f:e4:48:e7:7f:e6:80:55:dd:3a:b2:12:8d:8c:
                    e7:a9:7c:2b:1b:7e:ee:36:fa:14:b2:21:62:57:30:
                    16:a6:b2:6f:8a:2c:f6:e4:c2:0e:d2:71:18:ba:57:
                    ba:47:28:89:b3:18:ff:af:17:74:e7:76:3e:3c:a5:
                    88:cf:d5:05:8b:56:5f:0a:97:15:26:80:04:f4:59:
                    3c:3b:0c:7b:bb:28:ae:02:e7:e6:41:e0:55:bd:52:
                    8f:fb:2a:66:4d:bd:76:d0:0e:26:74:31:c3:e3:73:
                    44:d5:9b:e8:59:ac:82:89:83:44:5a:c6:d6:9d:e9:
                    d6:25:6d:1c:01:38:79:d0:6a:e8:d7:e5:f0:7b:69:
                    2a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:6F:B5:7B:CC:60:FC:F0:0F:EB:54:17:90:54:50:AA:92:D6:9E:90
            X509v3 Authority Key Identifier:
                keyid:99:3D:F4:B2:59:D6:F0:6E:A6:E8:33:B6:DA:32:EB:27:F4:96:B4:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D08D8/CACCAC00232D11F19923DA77A3833773/mT30slnW8G6m6DO22jLrJ_SWtOk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mT30slnW8G6m6DO22jLrJ_SWtOk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D08D8/CACCAC00232D11F19923DA77A3833773/mT30slnW8G6m6DO22jLrJ_SWtOk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:7b:28:f9:c8:e5:82:c7:d9:66:4f:11:6e:b2:1f:6a:0a:e2:
         ce:8c:9b:2a:59:b5:ab:c0:f0:7d:f3:58:28:ef:ff:cc:2c:23:
         05:9d:56:5f:3e:00:51:86:8d:5f:d5:c7:b4:f6:17:8f:a3:a2:
         49:19:f4:ca:d7:e7:b3:7f:86:88:30:d4:75:3e:f0:4a:96:bd:
         ad:cf:a7:bc:b8:df:a4:ca:82:3f:cd:3e:92:1e:5e:59:28:c7:
         e9:d2:a3:27:00:c2:28:66:cc:e0:19:3a:01:ef:95:e0:72:f0:
         42:e0:19:85:e2:89:9c:00:00:50:ba:25:0d:bd:44:dc:ae:3f:
         6e:65:b9:bb:2e:2b:13:db:85:d6:91:4e:d4:a0:cd:ea:6e:e4:
         41:f8:79:43:fb:82:8b:a5:a8:49:01:ad:e0:bd:60:a5:7c:00:
         2f:bf:6e:7c:d9:a0:1e:03:5b:ce:5a:8b:1c:08:dd:67:51:86:
         01:88:e4:9d:92:05:47:93:14:d5:ec:43:0a:c3:5a:f1:81:27:
         d2:6c:74:e4:18:bf:31:c0:e2:6f:7b:85:94:cb:8e:56:b5:e1:
         d9:67:2a:3c:bd:cf:98:eb:03:1a:21:b9:28:3b:6e:1c:60:f4:
         d6:b8:53:8c:fb:e8:39:13:9e:06:05:a2:76:24:73:66:0c:4a:
         16:c2:01:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 12:20:50 2026 by rpki-client