Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft
File:                     AchYGBCI4bnFd13KDEuum5_1d7M.mft (raw, json)
Hash identifier:          DTjuLv6y5oE8D8cTWWl8SVnSzC5ciR1OBiB/5baae/c=
Subject key identifier:   05:E4:A7:B9:7B:CB:71:D6:7D:32:B5:98:A8:8E:96:4D:6D:77:38:44
Authority key identifier: 01:C8:58:18:10:88:E1:B9:C5:77:5D:CA:0C:4B:AE:9B:9F:F5:77:B3
Certificate issuer:       /CN=A91D5979/serialNumber=01C858181088E1B9C5775DCA0C4BAE9B9FF577B3
Certificate serial:       97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AchYGBCI4bnFd13KDEuum5_1d7M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft
Manifest number:          94
Signing time:             Thu 21 May 2026 07:36:59 +0000
Manifest this update:     Thu 21 May 2026 07:36:58 +0000
Manifest next update:     Thu 28 May 2026 07:36:58 +0000
Files and hashes:         1: AchYGBCI4bnFd13KDEuum5_1d7M.crl (hash: zZa9Ugk7I++Mib1d/u0V+qoOoEu5FrpogzdF4bFwvmw=)
                          2: A80352FA7F2711F0AC85D327C4F9AE02.roa (hash: soDV/PEqeB7K5BGg9JE4t87sCM0x5IJxHwVBfeX+piI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.crl
                          rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AchYGBCI4bnFd13KDEuum5_1d7M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 07:36:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151 (0x97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5979, serialNumber=01C858181088E1B9C5775DCA0C4BAE9B9FF577B3
        Validity
            Not Before: May 21 07:36:58 2026 GMT
            Not After : May 28 07:36:58 2026 GMT
        Subject: CN=6a0eb61b-c663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:c5:46:9f:80:c1:15:72:1d:4d:e0:5d:b0:f6:
                    a9:2f:3e:7c:8e:71:f8:3f:21:d8:af:53:c0:7e:5a:
                    cf:7b:9d:a9:43:79:35:b1:31:91:d2:ff:e5:32:4d:
                    eb:0d:9c:41:c9:e9:30:fe:e5:6f:0d:73:73:bf:18:
                    bd:60:1a:5a:a1:ea:bd:1d:ad:91:2f:5b:09:b8:cf:
                    8e:11:1c:0f:45:7a:5f:47:36:07:6e:b1:42:02:9b:
                    c6:55:0f:14:18:e4:7b:99:a5:72:d2:05:50:a0:ac:
                    fd:46:ec:82:84:7a:a2:79:2a:f6:8d:c0:ae:18:9c:
                    b0:0c:f8:7a:83:79:dc:37:8d:f1:57:34:35:da:a7:
                    2b:cb:1e:07:5e:cd:c1:67:9e:0c:b9:e7:8e:50:62:
                    1a:40:8e:6d:fd:f4:c7:a3:04:5e:c3:50:c0:dc:22:
                    13:86:3c:89:07:36:c9:48:48:40:19:56:28:75:5e:
                    a0:38:a6:1c:4f:b2:50:a4:80:44:dc:52:bc:ff:be:
                    e1:c4:3c:19:ef:d5:7b:37:c3:94:1b:d2:a2:e7:3f:
                    be:c4:42:b2:33:88:5d:ff:2b:b2:11:4c:0f:03:e8:
                    73:21:28:f7:0c:90:2b:54:41:7b:23:cc:b9:a4:a0:
                    c7:5c:1d:e9:c6:5b:02:94:80:f2:1d:65:19:d3:c7:
                    7d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E4:A7:B9:7B:CB:71:D6:7D:32:B5:98:A8:8E:96:4D:6D:77:38:44
            X509v3 Authority Key Identifier:
                keyid:01:C8:58:18:10:88:E1:B9:C5:77:5D:CA:0C:4B:AE:9B:9F:F5:77:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AchYGBCI4bnFd13KDEuum5_1d7M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:02:1e:db:d4:b0:8d:2c:09:78:a0:b5:b7:3c:16:79:2c:b9:
         15:f5:b4:27:5f:c5:9f:80:14:8b:a9:fe:73:59:fa:93:f4:11:
         c0:0b:8a:90:c4:84:bb:c2:6d:ff:a7:b9:74:f1:92:42:13:87:
         e8:f6:d6:1c:db:fd:c1:f6:b4:5e:79:dd:37:e4:ee:8a:c8:0f:
         81:9f:99:2d:fe:18:6e:17:64:d0:c1:4a:6e:a9:49:36:45:b1:
         c9:6b:b6:99:46:80:b6:bc:c5:84:ae:fd:7c:75:09:7a:a1:dd:
         1b:37:1b:63:be:2c:08:1f:3c:8e:3f:22:1f:d6:0b:28:22:fc:
         1a:2c:25:c0:32:a2:68:95:c2:1e:43:2e:07:e7:20:e0:ba:7a:
         71:16:44:1c:a8:d9:f6:64:d4:0f:e8:7c:aa:4b:43:a5:5c:83:
         32:82:e9:52:b0:5d:33:f1:08:d7:3c:ba:15:da:e3:be:54:7d:
         d9:ca:7a:3b:5d:12:14:b3:82:e6:45:a2:cd:41:50:d2:d2:56:
         87:3f:96:b8:6d:96:ae:c3:48:6a:45:7a:53:07:5e:d4:60:50:
         4b:b2:b5:59:52:6c:be:fd:5c:86:fb:b4:01:98:71:d7:15:7a:
         b0:40:39:26:45:0f:2c:a4:6d:3c:9d:b5:a0:23:3d:13:94:94:
         dc:a7:4a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:15:55 2026 by rpki-client