Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFA25/70F978F2E07511F0A5642F05396F56BC/zHDYc0KJ0wWlIzqZsJzXi4_WZks.mft
File:                     zHDYc0KJ0wWlIzqZsJzXi4_WZks.mft (raw, json)
Hash identifier:          IXnAl3aVRD3K5bAkPG7sF82yV3icIMSUmDn72HrdsYg=
Subject key identifier:   96:54:5A:D6:35:F8:89:80:18:72:55:F1:90:9D:83:4A:69:DF:9A:D3
Authority key identifier: CC:70:D8:73:42:89:D3:05:A5:23:3A:99:B0:9C:D7:8B:8F:D6:66:4B
Certificate issuer:       /CN=A91DFA25/serialNumber=CC70D8734289D305A5233A99B09CD78B8FD6664B
Certificate serial:       56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHDYc0KJ0wWlIzqZsJzXi4_WZks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFA25/70F978F2E07511F0A5642F05396F56BC/zHDYc0KJ0wWlIzqZsJzXi4_WZks.mft
Manifest number:          53
Signing time:             Tue 19 May 2026 08:09:37 +0000
Manifest this update:     Tue 19 May 2026 08:09:36 +0000
Manifest next update:     Tue 26 May 2026 08:09:36 +0000
Files and hashes:         1: zHDYc0KJ0wWlIzqZsJzXi4_WZks.crl (hash: 5Tj/wWV7LMQMPJsCVhUhT8Q2j16FXEBOl2bsxOq0cbE=)
                          2: 9E283D22E07A11F0AD28F7913A6F56BC.roa (hash: zM/gqOyVFktPoDA/WeuwpVQb7+CuTjfIizkBCA5c5Lg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFA25/70F978F2E07511F0A5642F05396F56BC/zHDYc0KJ0wWlIzqZsJzXi4_WZks.crl
                          rsync://rpki.apnic.net/member_repository/A91DFA25/70F978F2E07511F0A5642F05396F56BC/zHDYc0KJ0wWlIzqZsJzXi4_WZks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHDYc0KJ0wWlIzqZsJzXi4_WZks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 May 2026 08:09:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFA25, serialNumber=CC70D8734289D305A5233A99B09CD78B8FD6664B
        Validity
            Not Before: May 19 08:09:36 2026 GMT
            Not After : May 26 08:09:36 2026 GMT
        Subject: CN=6a0c1ac0-ccec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:72:bd:e6:9b:24:5b:fa:e1:da:f9:30:57:a0:
                    df:e6:e8:37:06:8d:45:d6:2d:96:3e:96:f1:86:39:
                    c7:91:8e:8b:94:ee:c7:41:d3:7b:66:17:72:78:24:
                    45:d0:19:49:50:70:20:65:11:f8:e4:12:4b:ad:0d:
                    d0:90:09:5e:fa:90:b2:b8:7c:89:14:8b:da:ca:b9:
                    7c:47:af:76:7b:39:5f:ab:c1:a6:11:55:c5:af:d7:
                    03:ba:64:dc:c5:6d:03:11:4d:72:2f:f2:16:51:f6:
                    53:a0:4f:28:16:be:1c:b8:0c:57:78:45:b8:23:ce:
                    7d:24:ee:b4:2c:bb:5c:a0:38:77:f3:e1:6a:7b:dd:
                    c1:2e:56:c7:44:1a:51:10:b5:ba:c2:ef:c7:55:3b:
                    6b:13:6f:37:8a:f3:c8:93:5f:2e:8b:05:74:25:77:
                    82:30:64:e7:e7:3d:7a:e2:a2:4f:a0:79:0b:11:93:
                    c6:97:18:ac:df:ed:0c:67:da:ec:e3:f7:da:a3:63:
                    f9:78:76:70:a6:4e:47:d6:57:61:ae:90:fa:57:9d:
                    df:40:be:ba:f0:68:41:c6:96:16:f3:49:72:72:46:
                    ec:73:1e:5b:21:6d:1a:47:d7:b1:d7:3e:1a:d6:ad:
                    6f:9d:7a:6b:01:ae:93:9e:90:7d:68:ea:f0:53:6d:
                    d9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:54:5A:D6:35:F8:89:80:18:72:55:F1:90:9D:83:4A:69:DF:9A:D3
            X509v3 Authority Key Identifier:
                keyid:CC:70:D8:73:42:89:D3:05:A5:23:3A:99:B0:9C:D7:8B:8F:D6:66:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFA25/70F978F2E07511F0A5642F05396F56BC/zHDYc0KJ0wWlIzqZsJzXi4_WZks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHDYc0KJ0wWlIzqZsJzXi4_WZks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFA25/70F978F2E07511F0A5642F05396F56BC/zHDYc0KJ0wWlIzqZsJzXi4_WZks.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:bb:6c:59:2b:1d:51:77:67:44:aa:e9:51:22:eb:d8:51:68:
         88:24:b7:cb:c4:55:b5:6c:27:f4:17:69:00:22:68:29:1f:97:
         95:e4:3e:a2:6c:8c:c3:92:f0:e1:39:ae:ae:8b:68:cc:5b:63:
         ea:55:42:6c:25:74:15:77:99:a1:da:3b:27:3e:7d:54:f0:49:
         e2:12:d3:c7:68:f6:b5:39:ad:b3:b8:e0:25:40:ca:e0:16:4f:
         4b:63:10:fc:94:90:af:3c:6c:b5:18:6b:7d:dc:1b:fa:87:57:
         69:67:19:a0:66:fc:15:7f:75:4e:19:45:64:e8:08:ee:cc:bf:
         37:75:72:7b:5d:66:79:f4:b6:ab:bd:99:d6:ba:ca:ac:e0:5b:
         88:5a:79:91:9a:12:5d:7c:09:0a:36:79:cd:39:59:17:d8:5b:
         e0:ef:37:38:4c:f8:fe:bc:dc:fb:2b:62:4d:f7:2f:4d:ef:45:
         f4:cd:7c:b7:ea:38:d4:b7:13:96:91:f4:aa:81:ac:6d:72:bd:
         fc:e7:fb:63:ef:44:7a:3b:26:32:78:24:14:a6:07:e2:80:0b:
         d6:f7:95:7b:e5:77:9b:de:40:b4:74:15:2f:03:ee:03:db:6e:
         fd:2b:04:63:89:d9:cc:22:9e:e2:38:a2:f8:cf:a9:51:14:3f:
         fd:02:c0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:39:11 2026 by rpki-client