Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft
File:                     THDgIDLqWcKv1UGhhw10sEDRtqI.mft (raw, json)
Hash identifier:          kb1M/Sz/Fwv09fotLXGfB9KtRlDOfwCDmA1IzCgPULw=
Subject key identifier:   81:89:10:4B:42:46:4B:DD:F2:BA:35:A5:AB:5E:B6:04:CE:56:A0:49
Authority key identifier: 4C:70:E0:20:32:EA:59:C2:AF:D5:41:A1:87:0D:74:B0:40:D1:B6:A2
Certificate issuer:       /CN=A91D615F/serialNumber=4C70E02032EA59C2AFD541A1870D74B040D1B6A2
Certificate serial:       09D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft
Manifest number:          09C3
Signing time:             Sat 16 May 2026 19:52:51 +0000
Manifest this update:     Sat 16 May 2026 19:52:51 +0000
Manifest next update:     Sat 23 May 2026 19:52:51 +0000
Files and hashes:         1: THDgIDLqWcKv1UGhhw10sEDRtqI.crl (hash: AtfHKn7lXIvfu20uBVkuLA6TDRRg4oT9J32EczoBJSc=)
                          2: 05CABF92A64111EAB544074CC4F9AE02.roa (hash: SF124PgFJdMgEInYT/GtV8Bi1Qw6o/zRPCKi4I6lOOw=)
                          3: 193128AAD15D11EE8BD5C02BC4F9AE02.roa (hash: GsGKse+jvZV0Ypq4tt+9yydVOYc4iOZZx7JlseayyeQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.crl
                          rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 May 2026 19:52:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2514 (0x9d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D615F, serialNumber=4C70E02032EA59C2AFD541A1870D74B040D1B6A2
        Validity
            Not Before: May 16 19:52:51 2026 GMT
            Not After : May 23 19:52:51 2026 GMT
        Subject: CN=6a08cb13-e7a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d6:f5:2b:f7:95:aa:fc:33:c4:ed:10:ff:6d:
                    c7:4a:7b:94:73:90:cb:cb:16:0a:76:5a:2b:c4:42:
                    ce:e8:01:7d:42:47:b6:6b:ca:af:fb:a5:69:dc:64:
                    84:cc:61:6b:b2:8b:54:bf:ba:31:4e:5c:91:e1:a6:
                    30:f7:9f:eb:5c:77:41:d1:28:a8:49:f3:3e:96:2a:
                    22:dc:b8:2f:38:e7:c1:16:59:cb:71:74:51:63:5e:
                    cc:be:40:1b:c4:ea:52:a6:c7:8f:4e:7b:f8:98:83:
                    a0:d9:de:a7:9b:fa:61:2c:3b:ca:2d:5e:96:a2:d4:
                    6b:47:d5:08:dd:d6:ed:21:18:06:65:dd:72:74:39:
                    55:20:b9:31:a2:c5:b2:40:bb:17:55:68:20:ab:ee:
                    f9:2b:9a:70:a4:82:71:9d:c1:3d:b4:04:9f:e7:5a:
                    94:19:cb:89:0d:07:58:e9:6e:5e:91:31:b7:23:f6:
                    c8:d6:98:dd:f3:df:7c:da:ad:d4:44:b0:85:b5:80:
                    55:7e:9e:60:33:8b:7d:dc:f7:32:57:bd:e7:81:c1:
                    7c:85:68:35:50:ff:da:1d:be:ac:7c:84:84:cf:e8:
                    08:40:2f:42:44:93:29:9d:e7:b0:8f:c4:56:87:fe:
                    8d:f4:dd:d4:61:74:2a:f6:2f:70:cd:d6:1c:d8:4b:
                    0d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:89:10:4B:42:46:4B:DD:F2:BA:35:A5:AB:5E:B6:04:CE:56:A0:49
            X509v3 Authority Key Identifier:
                keyid:4C:70:E0:20:32:EA:59:C2:AF:D5:41:A1:87:0D:74:B0:40:D1:B6:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:df:14:ff:4c:d8:2b:54:91:6d:10:e4:23:bf:1c:27:c9:dd:
         02:56:98:3c:38:a6:e5:34:e8:10:79:4d:ca:67:64:72:36:d9:
         a4:a8:16:c1:62:35:3c:57:4e:03:0a:40:77:96:d6:19:c4:88:
         a6:b9:c2:2f:23:f8:fd:a2:cc:4c:4e:43:ca:0e:e6:71:4a:bd:
         8c:55:ac:f8:0e:2f:4b:8c:14:1d:4b:66:f6:de:5e:33:e2:2b:
         9c:ab:43:97:1d:a1:b2:5b:b1:a7:de:14:76:49:a0:cb:44:c3:
         ef:94:5c:4e:3d:b6:47:93:57:26:51:30:cb:d4:ee:a8:6c:67:
         e5:2e:ae:ab:74:76:ac:a4:40:c5:a0:dc:7c:e5:6d:18:5e:9c:
         8f:12:d0:42:ef:94:d5:5b:0f:b1:2e:12:ad:1a:a2:fd:d3:19:
         eb:e5:d1:f2:b2:08:35:b5:14:fc:89:25:95:ca:96:4b:6f:52:
         47:70:ad:6d:f2:78:19:77:2a:d5:8f:22:34:de:16:c4:dd:f8:
         89:1f:62:79:f3:8d:99:19:fb:32:3b:48:0c:83:32:d9:ae:51:
         48:36:0c:ca:6f:7b:d8:cd:ee:18:8f:fd:c7:77:6d:33:5c:b9:
         1d:50:48:7e:a4:cd:4a:20:17:5c:e6:6d:b6:1c:ea:c8:33:e3:
         00:1d:5d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 06:09:55 2026 by rpki-client