Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.mft
File:                     PQaSnY1eH2juI-yj-UjP96LklbM.mft (raw, json)
Hash identifier:          UB7WPkcQlP+2xyBV8+UbEyEV4TNXfH4z55jvbKOd1Wo=
Subject key identifier:   70:B9:33:8D:22:CC:21:C1:DE:0C:A8:C4:59:86:48:6A:4A:1A:17:DF
Authority key identifier: 3D:06:92:9D:8D:5E:1F:68:EE:23:EC:A3:F9:48:CF:F7:A2:E4:95:B3
Certificate issuer:       /CN=A91DDCD9/serialNumber=3D06929D8D5E1F68EE23ECA3F948CFF7A2E495B3
Certificate serial:       7A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQaSnY1eH2juI-yj-UjP96LklbM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.mft
Manifest number:          0C04
Signing time:             Wed 20 May 2026 19:08:40 +0000
Manifest this update:     Wed 20 May 2026 19:08:39 +0000
Manifest next update:     Wed 27 May 2026 19:08:39 +0000
Files and hashes:         1: PQaSnY1eH2juI-yj-UjP96LklbM.crl (hash: jloNBqIB6A7+VJpRS/nW2k+LUaBOXCt8/SAuzyV6yiY=)
                          2: 41D7A1D4AB0511F0AD64C814C4F9AE02.roa (hash: rShfJxqE0h5coYqcR6ikXPA4HtTIMuqnQcLhGpxQm7o=)
                          3: 4140D222AB0511F0AD64C814C4F9AE02.roa (hash: lm+nFcqH0a+9WsNgR01SH0qMnw/FVhg7/KwG6EmLyBA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.crl
                          rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQaSnY1eH2juI-yj-UjP96LklbM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 19:08:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DDCD9, serialNumber=3D06929D8D5E1F68EE23ECA3F948CFF7A2E495B3
        Validity
            Not Before: May 20 19:08:39 2026 GMT
            Not After : May 27 19:08:39 2026 GMT
        Subject: CN=6a0e06b7-0e26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f3:0d:4f:bd:c9:c6:96:45:73:91:2d:a2:25:
                    a2:cc:72:32:a0:ab:69:95:1e:0a:76:98:c9:e9:8a:
                    96:50:03:14:24:31:bd:04:f9:0d:cc:90:3a:93:a6:
                    84:35:35:52:8c:ee:d8:55:aa:59:12:04:ab:1e:0e:
                    d9:4d:8a:b8:33:88:88:5a:f9:8b:be:ce:ee:e6:1f:
                    28:0b:92:31:6e:0e:db:c2:2b:ff:c7:ac:83:b3:82:
                    b9:c4:5d:b8:d5:c7:6d:64:43:15:bc:22:08:1c:8b:
                    d6:9c:c2:6b:14:3d:ad:d6:96:96:97:e0:09:5c:0f:
                    cf:92:74:e1:cc:52:80:6c:c1:5b:b2:85:a2:a5:71:
                    24:d2:fb:d2:69:da:bf:7f:76:2d:4f:ae:09:f5:49:
                    71:4e:c5:85:46:a7:f2:8d:99:62:1b:8e:85:ef:14:
                    bd:45:c0:2d:aa:7c:52:1c:1e:e8:c8:2b:50:47:b0:
                    13:9c:1e:a9:e9:0a:da:d4:98:01:8b:d8:d5:82:f8:
                    ce:ea:d0:54:0a:8e:15:05:55:9c:33:20:4f:1b:05:
                    3b:61:de:1a:88:bd:7f:72:33:36:56:84:ae:9f:29:
                    59:64:e1:e8:e1:a3:50:b1:2e:4a:86:5f:63:1d:6c:
                    93:3d:e0:99:37:b0:a8:c1:5c:22:a2:46:8f:de:b9:
                    21:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:B9:33:8D:22:CC:21:C1:DE:0C:A8:C4:59:86:48:6A:4A:1A:17:DF
            X509v3 Authority Key Identifier:
                keyid:3D:06:92:9D:8D:5E:1F:68:EE:23:EC:A3:F9:48:CF:F7:A2:E4:95:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQaSnY1eH2juI-yj-UjP96LklbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:12:e9:20:d3:53:1a:64:b2:e7:a7:d3:27:56:e5:a7:2f:e4:
         90:00:a5:41:35:5e:a2:d5:9c:f6:bf:1e:39:08:b5:25:41:2d:
         98:20:1e:a2:09:cf:88:f3:f3:a2:98:ec:dc:31:8d:94:7f:28:
         4b:e7:f0:80:32:4e:4b:1e:4c:13:d4:40:2f:4d:2e:f0:82:53:
         71:43:08:f8:17:02:98:e2:f2:eb:c1:49:ac:47:5f:09:54:42:
         2d:36:8a:ea:47:69:4c:19:40:bf:ca:7b:3e:22:aa:29:16:34:
         8f:2e:9a:f6:69:b5:b8:d3:0c:3d:a1:8b:52:63:7b:6c:d7:ce:
         31:15:32:32:21:ca:5d:86:e1:38:be:8e:3f:7c:0c:62:62:02:
         cc:68:e5:5d:3e:3c:a4:4a:8e:c1:84:ca:6c:9c:43:df:29:eb:
         57:7e:26:ea:4f:44:4d:fd:d3:e2:83:5b:87:98:55:1b:19:6e:
         57:4f:b4:18:37:6b:ff:de:bb:3d:c3:6d:43:46:a7:9e:f4:41:
         3c:a4:b3:65:28:90:f1:5f:d4:9c:5b:8b:ca:01:da:64:c2:84:
         3c:dd:8d:a7:22:5a:49:1f:00:3b:c9:6f:ae:15:01:06:26:3b:
         34:7c:a7:9f:a8:91:de:c3:1b:fd:d1:e6:bd:7d:84:ce:e9:63:
         2e:d9:a1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:19:31 2026 by rpki-client