Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft
File:                     f2vh1aJzD8In-vyJbRNDMkF4MXk.mft (raw, json)
Hash identifier:          z7+hoZOUcR/ZI7av1TQ1+SQ832kwOJpdaJQfs2LXqmg=
Subject key identifier:   C2:13:44:06:CF:5A:BB:91:50:F0:84:9A:BC:EA:FB:3A:A4:6D:C9:85
Authority key identifier: 7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79
Certificate issuer:       /CN=A91DB4FE/serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179
Certificate serial:       094E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft
Manifest number:          0849
Signing time:             Wed 20 May 2026 22:00:52 +0000
Manifest this update:     Wed 20 May 2026 22:00:52 +0000
Manifest next update:     Wed 27 May 2026 22:00:52 +0000
Files and hashes:         1: f2vh1aJzD8In-vyJbRNDMkF4MXk.crl (hash: rdIjbkgYXT0czF4KU9myDH8/jSOdlr7ryFv0RRubCGE=)
                          2: 5A034FE6BD9011EF8EBE9D64C4F9AE02.roa (hash: F75QXCxGZr3+/SASqc++qXUU4Ak7hy/ZkNV6fX02oFA=)
                          3: 95EC5BBE0DC811F0A0561D5AC4F9AE02.roa (hash: OdJAAHZapPghT4UQJjL0KEqUGshRp+J7t4bZFZ0nS3Q=)
                          4: 284AFDA0F86011EE8DCC542DC4F9AE02.roa (hash: dT+hUVzmzkp0MF+xQqQP5dOO9l8lXm4CbzD8IR61uj0=)
                          5: DB120D6EC34A11EB9559E184C4F9AE02.roa (hash: FZxNGPEDm98WyIYelmT7Ny6KqOSVp9Hnu1QHhzseL+U=)
                          6: 71921B808DBD11EBB4566432C4F9AE02.roa (hash: 5/4YUq2O9OTal/tX146cKHyOeYhVIqDbo8MR2WNGJTA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl
                          rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 22:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2382 (0x94e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB4FE, serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179
        Validity
            Not Before: May 20 22:00:52 2026 GMT
            Not After : May 27 22:00:52 2026 GMT
        Subject: CN=6a0e2f14-efb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:17:6f:15:b1:38:c6:d6:56:e2:b6:f3:4b:36:
                    61:26:4b:b4:99:0c:46:35:77:ec:a1:d5:34:44:4a:
                    2f:fb:97:4a:50:f0:d6:7f:f0:6f:aa:08:84:47:82:
                    97:93:b0:95:a0:ed:24:0c:ff:ab:da:95:a7:a6:7a:
                    99:94:c2:06:cc:88:9c:a2:6c:bc:71:d2:ef:49:d4:
                    ec:e6:48:07:a9:c2:a6:8b:73:b8:fa:19:20:bf:03:
                    c5:c4:42:18:18:fc:d6:f6:7c:f3:8c:4f:53:c0:96:
                    a9:68:5b:49:fa:df:49:c1:0e:36:c9:21:a5:bd:65:
                    a0:66:a3:26:b4:e0:43:e3:de:3f:52:9e:42:5f:cc:
                    3b:90:e9:bf:82:47:09:05:72:c5:87:d8:e0:4a:ee:
                    42:b7:0a:e3:93:ff:2b:f1:df:3a:35:a3:b4:b5:7d:
                    08:cc:bb:3d:c1:7d:26:73:9d:78:bf:bf:ab:6c:b4:
                    fe:3e:f0:c2:16:8f:85:34:e8:6b:9d:4d:72:29:32:
                    88:4e:1d:97:64:ee:f8:9d:24:ff:79:c1:f7:9c:bb:
                    37:fe:b4:ab:fa:b1:7d:df:c0:80:85:9f:4c:f6:87:
                    b3:ed:f7:28:73:0e:2c:12:a1:30:88:bf:01:12:89:
                    9d:0d:62:7c:7b:46:0f:d0:7b:f5:84:f0:13:18:e7:
                    f0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:13:44:06:CF:5A:BB:91:50:F0:84:9A:BC:EA:FB:3A:A4:6D:C9:85
            X509v3 Authority Key Identifier:
                keyid:7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:a0:c5:3c:94:ad:74:6c:e5:23:34:dd:a8:c6:f5:7a:e3:a6:
         e0:d0:b0:3f:b2:31:78:91:51:a7:45:2a:27:d7:04:ef:3a:cb:
         a9:4f:00:74:17:41:2a:a9:33:98:9e:f8:f4:3a:e3:eb:29:88:
         dc:15:1b:b4:74:38:bb:40:d0:89:82:75:3d:99:9d:4e:d8:f3:
         3f:1d:94:fd:42:20:e3:ae:32:35:2a:30:19:e9:44:4e:b9:2c:
         18:d6:72:59:3f:54:bf:8d:b0:48:e8:7a:23:72:08:5b:79:79:
         54:7b:ba:c6:25:9e:da:0c:36:70:35:cd:5f:18:d8:1f:ed:39:
         ea:5b:f7:5e:a3:a2:bc:ca:23:ba:17:02:df:9c:54:fa:05:ff:
         34:5d:3d:74:cb:e9:c7:c6:0c:db:9c:77:8b:33:c1:16:c6:44:
         e2:d9:d9:d9:3d:6c:24:b3:c7:5a:0d:be:2f:a1:8a:26:96:08:
         30:6d:c7:67:46:f0:08:9a:be:b0:46:db:55:4e:b8:d9:8b:b4:
         f1:b3:48:77:4e:e5:ee:55:76:b5:c9:4d:f4:53:53:63:6c:85:
         1f:7b:83:2d:e1:8a:c0:ff:f7:fc:8c:8d:ef:b5:12:22:ea:e4:
         a1:36:ef:67:ad:c0:0b:1e:ae:f2:54:3b:f2:96:96:3b:74:10:
         fa:fc:d2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:14:42 2026 by rpki-client