Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.mft
File:                     67Vu9aQ9Hla4rmw179-QarhdJ1U.mft (raw, json)
Hash identifier:          wA9xEuOiDZU/z6abULToMhOctemJ+4CF2TCdFuXwTfI=
Subject key identifier:   32:AA:28:2C:79:14:C2:0C:9F:16:A8:9F:B8:2F:A7:DA:2E:19:FC:BB
Authority key identifier: EB:B5:6E:F5:A4:3D:1E:56:B8:AE:6C:35:EF:DF:90:6A:B8:5D:27:55
Certificate issuer:       /CN=A91DC8C8/serialNumber=EBB56EF5A43D1E56B8AE6C35EFDF906AB85D2755
Certificate serial:       02A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67Vu9aQ9Hla4rmw179-QarhdJ1U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.mft
Manifest number:          02A2
Signing time:             Thu 21 May 2026 01:36:53 +0000
Manifest this update:     Thu 21 May 2026 01:36:53 +0000
Manifest next update:     Thu 28 May 2026 01:36:53 +0000
Files and hashes:         1: 67Vu9aQ9Hla4rmw179-QarhdJ1U.crl (hash: GBSDkda/O+XhGn0Yzs4Uiep0jHj51Kta/T/Y7sFRhVc=)
                          2: 376CBBEA504411ED83277887C4F9AE02.roa (hash: iFgAxWIqhMXkANK5iK8yEgu/dYZgeUc6ccGlbZDOQPc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.crl
                          rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67Vu9aQ9Hla4rmw179-QarhdJ1U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 01:36:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 681 (0x2a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC8C8, serialNumber=EBB56EF5A43D1E56B8AE6C35EFDF906AB85D2755
        Validity
            Not Before: May 21 01:36:53 2026 GMT
            Not After : May 28 01:36:53 2026 GMT
        Subject: CN=6a0e61b5-acc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fb:d3:18:42:7e:bb:c5:d3:d5:fa:ea:2b:11:
                    70:5f:d7:44:c6:61:39:8e:cf:03:ae:53:fd:e0:c8:
                    44:d7:8e:ec:04:8a:1f:63:d2:f2:8d:2d:f4:4e:8d:
                    9b:70:d9:ad:84:7b:60:72:70:21:1e:df:23:b9:37:
                    19:a6:b3:07:3e:ba:4b:6d:91:6a:e5:68:d6:65:ce:
                    fa:18:97:d7:1e:4b:ee:00:d2:9a:c7:1e:75:9b:86:
                    bd:65:ec:49:53:28:f9:01:46:e1:33:9e:4d:11:75:
                    9e:9a:af:a3:de:e4:df:a4:d8:4d:c1:8b:5e:f8:a3:
                    27:eb:29:e2:d0:43:f7:20:8d:7e:d5:95:2e:5b:44:
                    a6:01:cc:d9:a9:04:c8:3a:00:43:0f:c8:c4:fe:53:
                    d4:e3:bc:5c:3f:1c:d1:c0:ca:07:b7:50:eb:e0:b6:
                    bf:47:af:46:83:79:ce:3f:be:6e:38:1c:bb:5d:83:
                    2e:32:21:51:e1:c9:ad:3c:e5:bb:cc:3d:0d:b6:5f:
                    c5:4a:0a:96:bd:66:b1:3f:a7:1f:cd:58:ff:ec:fc:
                    77:c9:61:55:25:a7:c0:95:3d:ed:08:27:56:c5:b4:
                    58:d8:84:09:9c:ac:6f:08:72:c0:87:80:aa:bb:0e:
                    ae:1d:1f:b3:70:e8:be:1b:f0:af:58:8d:33:2c:60:
                    81:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:AA:28:2C:79:14:C2:0C:9F:16:A8:9F:B8:2F:A7:DA:2E:19:FC:BB
            X509v3 Authority Key Identifier:
                keyid:EB:B5:6E:F5:A4:3D:1E:56:B8:AE:6C:35:EF:DF:90:6A:B8:5D:27:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67Vu9aQ9Hla4rmw179-QarhdJ1U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:3c:29:0b:14:e7:ec:ad:c6:a1:ed:23:fd:16:a7:8e:ca:56:
         55:76:29:89:89:f2:be:49:52:6d:9a:a2:fe:91:b6:f1:bd:f2:
         e6:f2:2c:ed:66:c5:fc:2c:06:d6:7b:49:9d:0f:c9:27:e1:59:
         75:bc:6d:6b:bd:7b:ed:e5:af:33:3c:c2:35:32:c2:9c:e2:94:
         f8:e7:73:b9:38:eb:c3:7f:d6:0a:63:02:d3:83:3b:0a:54:30:
         d8:10:a9:bd:d0:a8:45:eb:d8:a4:db:89:51:df:55:9d:54:ce:
         aa:91:4f:da:52:e7:ee:c3:62:a4:30:3c:82:d0:75:5b:7a:0e:
         1b:f2:5b:7c:c2:04:0e:c0:b5:b8:d5:d0:6b:e4:a9:c2:22:7b:
         80:04:0d:cd:22:4a:6f:23:97:50:e0:f7:de:6c:c4:6b:35:a5:
         73:07:44:1b:f4:32:6f:1c:53:f4:26:f7:3e:2c:51:32:cc:6c:
         5e:53:29:77:18:c1:83:41:cd:f3:00:d5:49:70:21:71:c3:74:
         23:2c:63:37:3c:4e:45:e0:a2:1a:60:e5:d3:c7:60:05:a6:d8:
         e9:4b:11:62:9f:d5:99:a2:9c:77:97:a0:52:ca:b6:fb:a7:a2:
         35:dc:a8:a6:f2:72:6e:a7:a5:3e:50:83:a2:80:75:ef:c4:61:
         50:c4:c9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:19:18 2026 by rpki-client