Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft
File:                     01nlbdoAA8SD861qQMCA6Qy41HI.mft (raw, json)
Hash identifier:          kE9rpp2DVee/REwxVUYsJgICwR5pNej7d5N0kH1CQWA=
Subject key identifier:   27:ED:D6:F6:30:4E:67:C0:C9:17:39:45:C3:1A:AD:9F:47:AF:DB:A3
Authority key identifier: D3:59:E5:6D:DA:00:03:C4:83:F3:AD:6A:40:C0:80:E9:0C:B8:D4:72
Certificate issuer:       /CN=A91D9B1B/serialNumber=D359E56DDA0003C483F3AD6A40C080E90CB8D472
Certificate serial:       016D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft
Manifest number:          0162
Signing time:             Thu 21 May 2026 05:00:36 +0000
Manifest this update:     Thu 21 May 2026 05:00:36 +0000
Manifest next update:     Thu 28 May 2026 05:00:36 +0000
Files and hashes:         1: 01nlbdoAA8SD861qQMCA6Qy41HI.crl (hash: uq4unHYGlSPk73B4sS1U5+mFtdrjC1BzPQi0Jt20FAc=)
                          2: 97530E023D0911EFA33E4A38C4F9AE02.roa (hash: sx9r0ziKeVv3PgPFT0H8V5/JZLvSBe+KHoBiEIdn+3Q=)
                          3: 573BE4DE3D0811EF84157B26C4F9AE02.roa (hash: 8qsCKXW1PnkeYNlCGo4/GnAMha9Fa7HghDmajg38QjM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.crl
                          rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 05:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 365 (0x16d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9B1B, serialNumber=D359E56DDA0003C483F3AD6A40C080E90CB8D472
        Validity
            Not Before: May 21 05:00:36 2026 GMT
            Not After : May 28 05:00:36 2026 GMT
        Subject: CN=6a0e9174-6a09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:29:e4:55:11:13:71:02:b2:5b:cd:3a:00:5e:
                    d0:c1:1b:03:a1:77:9c:a9:a5:40:ef:f4:7f:f4:16:
                    50:1a:3b:4c:d7:e1:c5:d5:1b:d8:1b:95:67:65:da:
                    cd:d4:08:b8:05:94:10:20:ae:6e:6b:b7:e7:a0:65:
                    65:ee:17:11:6c:66:28:57:83:71:6b:84:fc:4b:7d:
                    82:08:9d:2d:80:34:75:be:28:d2:01:0b:a8:65:64:
                    32:e0:45:ee:db:5f:e2:dd:a6:d5:d7:19:f1:b3:58:
                    da:bb:41:af:06:09:82:15:0b:c9:aa:30:94:91:ea:
                    91:29:a8:fa:83:ec:40:fe:d9:f3:ae:fb:56:8a:9c:
                    fa:4a:ff:41:18:3d:06:27:6e:58:48:1e:6c:42:d6:
                    90:bd:23:f5:b5:11:e1:d2:93:07:de:77:68:88:b6:
                    04:5d:30:b2:d6:cd:83:92:5c:35:1e:53:f9:94:74:
                    47:42:e3:2a:ba:c2:94:57:f8:54:1f:66:c7:fb:e5:
                    07:a9:1a:cd:73:6f:e1:07:e0:ca:56:13:50:c9:9d:
                    12:6d:13:6d:26:66:8f:8d:29:5a:cd:f7:12:e7:57:
                    6e:89:f3:f9:94:1c:9a:6e:04:9f:69:21:31:03:a6:
                    72:41:05:6c:68:a9:7b:fb:1a:00:8b:5e:2e:b3:6b:
                    61:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:ED:D6:F6:30:4E:67:C0:C9:17:39:45:C3:1A:AD:9F:47:AF:DB:A3
            X509v3 Authority Key Identifier:
                keyid:D3:59:E5:6D:DA:00:03:C4:83:F3:AD:6A:40:C0:80:E9:0C:B8:D4:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:a7:fe:c3:eb:b4:82:9f:52:57:21:c7:0d:18:2b:85:ac:19:
         ca:40:fc:31:05:8f:bf:e8:9f:25:0a:9c:92:11:1a:5e:f0:cc:
         5c:d6:89:15:60:05:65:66:9e:fe:17:ab:df:b8:1c:1c:24:fe:
         4f:46:1f:8d:f2:74:c8:5a:47:04:ef:f0:aa:d7:89:ff:67:7d:
         bb:c1:e6:b3:8c:b6:3d:45:9a:a5:df:9c:8f:d4:d6:19:f3:26:
         65:15:17:55:a6:76:7b:53:5e:f9:55:5e:55:24:9f:60:d1:34:
         42:2b:16:27:96:f6:65:9d:7a:1b:c8:65:89:06:ca:94:c0:18:
         36:18:a0:05:b2:ec:7e:11:e8:bf:32:78:d2:e3:a7:42:38:89:
         e0:d0:a2:bb:02:43:79:97:3a:19:0c:c6:44:a6:f8:12:d1:35:
         43:ad:f6:c1:5a:a4:14:e5:b5:ac:76:73:34:0d:af:ca:90:fa:
         29:c4:f2:4c:45:1b:14:51:16:d1:68:3b:06:6b:4b:4a:51:04:
         f1:87:ea:19:e6:1f:a8:bf:8a:03:29:17:7e:07:b4:4b:97:71:
         60:89:5f:83:41:90:e5:f5:55:49:e1:0e:66:dc:7f:72:d2:48:
         35:b4:b0:5f:fe:c4:67:cd:e6:44:2a:03:52:e3:b4:c2:0b:ed:
         f1:d0:f5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:27:43 2026 by rpki-client