Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.mft
File:                     cFWB1AyVgaJlHlMlI42zvcs6fQU.mft (raw, json)
Hash identifier:          mu0Hix93GrQhDeCtEJj0H1nk6RpeeVEX4lc15BFvpdo=
Subject key identifier:   54:7C:F1:AB:D7:37:E2:7E:F1:5D:95:4B:23:11:23:CC:DA:6B:80:8B
Authority key identifier: 70:55:81:D4:0C:95:81:A2:65:1E:53:25:23:8D:B3:BD:CB:3A:7D:05
Certificate issuer:       /CN=A91E1D91/serialNumber=705581D40C9581A2651E5325238DB3BDCB3A7D05
Certificate serial:       0457
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFWB1AyVgaJlHlMlI42zvcs6fQU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.mft
Manifest number:          044C
Signing time:             Thu 21 May 2026 00:20:43 +0000
Manifest this update:     Thu 21 May 2026 00:20:43 +0000
Manifest next update:     Thu 28 May 2026 00:20:43 +0000
Files and hashes:         1: cFWB1AyVgaJlHlMlI42zvcs6fQU.crl (hash: sI6bQ441Ohf5IbRKZ01miqtA246Z9VUqNld6z6EnKf8=)
                          2: 6CDC639EA04411EC8A7E5E2CC4F9AE02.roa (hash: oqfIxv0udDM9rmoFtVldzIxDF/X78zCUeZiXvqN0ymQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.crl
                          rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFWB1AyVgaJlHlMlI42zvcs6fQU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 00:20:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1111 (0x457)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1D91, serialNumber=705581D40C9581A2651E5325238DB3BDCB3A7D05
        Validity
            Not Before: May 21 00:20:43 2026 GMT
            Not After : May 28 00:20:43 2026 GMT
        Subject: CN=6a0e4fdb-dd18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6f:31:ee:25:6f:0d:dc:97:ad:19:3b:9f:98:
                    05:d1:d7:06:a1:26:d9:b4:51:68:ef:0e:1d:4c:f8:
                    54:f3:98:cf:5a:7e:39:b1:17:0c:f5:66:64:7d:e6:
                    89:b0:9f:29:67:31:5a:62:1c:9c:19:24:75:4e:08:
                    c6:e8:f3:8b:10:ae:16:82:8a:83:8b:2c:33:b9:c6:
                    d9:19:45:83:23:38:59:59:71:a5:95:f3:1c:1c:e1:
                    59:6a:ca:14:4e:e1:8d:50:74:0d:6a:0a:b8:9c:92:
                    e9:f2:4d:26:67:1e:11:fd:ea:65:f0:44:45:1b:6b:
                    f7:7e:38:00:94:fb:ae:56:4a:6a:18:d4:9d:c9:ef:
                    b4:c8:12:d0:d6:44:66:c8:88:d2:53:11:e5:9a:4b:
                    67:b5:af:bb:85:dc:45:0b:31:74:14:7e:8c:50:ff:
                    31:cc:f5:64:52:3a:9a:b5:9e:51:fd:96:20:36:a3:
                    95:a8:40:45:8c:cd:b7:c3:d6:d1:4e:75:57:5b:52:
                    69:d2:0d:88:45:3a:16:61:c2:d8:e5:8c:b4:da:1f:
                    db:69:79:da:6e:ef:0a:56:43:9a:ee:c4:75:0c:5c:
                    53:60:fb:86:6b:e7:fe:6a:c2:ff:09:7b:0a:2c:1f:
                    bc:8a:76:52:57:0e:14:d2:c0:9c:02:99:a8:d8:35:
                    45:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:7C:F1:AB:D7:37:E2:7E:F1:5D:95:4B:23:11:23:CC:DA:6B:80:8B
            X509v3 Authority Key Identifier:
                keyid:70:55:81:D4:0C:95:81:A2:65:1E:53:25:23:8D:B3:BD:CB:3A:7D:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFWB1AyVgaJlHlMlI42zvcs6fQU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e4:8a:f6:8f:85:d0:e6:e6:3b:ee:fc:be:2d:c1:6c:62:12:cb:
         ac:e5:7f:c7:bd:eb:f6:35:92:a0:7d:b2:b4:27:aa:de:a6:c3:
         9f:7b:49:74:80:09:7e:8c:cf:6b:42:2c:54:31:d7:d8:37:1f:
         eb:45:45:81:51:06:0c:12:84:3e:14:69:13:93:37:0c:f0:8c:
         ee:40:b6:b5:18:6e:9c:91:9d:d7:56:42:73:40:12:7d:92:43:
         82:f5:66:2b:76:85:8e:bd:1b:b4:71:c0:de:7c:de:55:d3:3b:
         9e:ed:18:7c:b1:61:09:13:2d:3e:94:11:05:4b:03:3f:5e:73:
         31:e8:83:7b:d9:bf:cb:c1:85:fd:aa:51:69:26:8d:cd:43:3c:
         a4:d1:8a:2e:a1:30:cd:0b:b7:89:89:6b:5c:be:43:6c:89:2e:
         51:38:2a:44:1e:89:ac:1f:04:89:b1:cc:ca:f5:6b:28:43:af:
         f2:b9:93:4a:42:e3:20:b7:d0:8f:78:c6:d6:23:de:73:7f:2f:
         7f:4c:d5:3c:e1:06:54:6e:d4:6c:f3:89:77:c6:47:34:15:2a:
         85:59:60:fd:0e:08:e1:89:62:4d:95:8f:af:f4:c3:29:e9:74:
         b6:e0:b2:90:92:b6:b8:9b:99:e7:0d:d5:1f:72:69:ff:f2:ea:
         9e:24:5c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:28:50 2026 by rpki-client