Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft
File:                     K1F8a3njzrA4nUGrxeziEH_sU_s.mft (raw, json)
Hash identifier:          tnwV6AJEyVV5Kp2iHGKp6XjSmkSW3xry05n9WUjGbdQ=
Subject key identifier:   9C:45:85:52:73:16:C7:EE:3C:34:4F:E8:E8:82:94:3B:7D:22:A3:24
Authority key identifier: 2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB
Certificate issuer:       /CN=A91E2A61/serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB
Certificate serial:       0476
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft
Manifest number:          0460
Signing time:             Fri 15 May 2026 00:16:25 +0000
Manifest this update:     Fri 15 May 2026 00:16:24 +0000
Manifest next update:     Fri 22 May 2026 00:16:24 +0000
Files and hashes:         1: K1F8a3njzrA4nUGrxeziEH_sU_s.crl (hash: HNTWfQKyGvd237oPoKRuwMKTIthH4i6DYVK9HxXKipg=)
                          2: 457D2B5A28DC11ED839D6243C4F9AE02.roa (hash: +Csg2HOJepirMsB8Vzghrd3DehAyOhqy3cud4l2RxN8=)
                          3: 0E1EAB66961011ECA540626AC4F9AE02.roa (hash: Hk1kLc16bFyVSqCk3vaZyzmEpQAFNe8SSUO2IPtxM1U=)
                          4: B0F9178297B811ECA8AA4230C4F9AE02.roa (hash: aCuYK0mgowCd/JFxG2trGhyPvdOUhFVgYIy44ZAWkes=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl
                          rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 May 2026 00:16:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1142 (0x476)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2A61, serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB
        Validity
            Not Before: May 15 00:16:24 2026 GMT
            Not After : May 22 00:16:24 2026 GMT
        Subject: CN=6a0665d8-5772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e6:a7:8a:26:11:03:4f:64:03:9b:d6:79:3f:
                    cc:3c:51:b5:45:b2:09:1f:0e:16:4b:f1:5d:80:1c:
                    26:23:57:4c:4f:ad:3d:5a:de:8b:df:df:aa:20:36:
                    08:1d:d9:52:c5:27:2b:78:d9:96:9d:d0:fc:c1:fc:
                    43:22:be:38:69:09:33:e4:6f:9d:28:21:b0:3d:63:
                    94:35:50:d3:b2:23:57:4a:02:a6:ad:f5:a3:80:0b:
                    33:0c:0a:58:51:d6:47:27:9c:8d:2f:77:15:ae:77:
                    6b:3a:a0:1e:90:4f:f1:82:fe:a1:bf:87:0f:53:03:
                    99:11:ae:5d:dc:71:03:a7:76:20:9c:2d:97:12:20:
                    1b:07:5a:c7:5a:11:ab:cb:e0:ae:5a:18:1b:fc:8b:
                    d8:8f:1d:2e:41:55:a0:b2:d5:69:25:b2:5f:4a:49:
                    f1:b2:a5:f8:4f:b9:7b:10:ad:c8:36:87:c1:45:bc:
                    9a:5f:8c:67:0e:f1:9b:a3:2a:63:af:73:2b:95:9a:
                    3b:ca:bf:b7:5a:6a:ba:47:44:33:ad:51:26:ab:0c:
                    99:cf:86:9d:65:85:1d:a6:6a:56:af:7e:0c:e0:fd:
                    38:ae:f2:44:7b:2c:98:cd:61:99:67:5c:f7:19:c8:
                    5c:03:ec:9c:39:3f:fc:02:6a:84:3b:2d:a4:91:6f:
                    a1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:45:85:52:73:16:C7:EE:3C:34:4F:E8:E8:82:94:3B:7D:22:A3:24
            X509v3 Authority Key Identifier:
                keyid:2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:ff:69:85:15:15:ff:de:7a:7b:dc:a3:53:0d:2a:30:fc:56:
         99:b7:20:58:8a:ad:9a:d6:76:a0:52:30:5d:7f:48:44:68:b0:
         6a:d9:a5:0a:9e:24:c5:62:1e:5f:1f:4e:22:55:aa:3f:da:ff:
         00:ef:85:05:07:25:70:f8:2f:22:05:8e:c6:5a:be:ef:1d:3c:
         42:e4:b3:af:72:10:2d:73:38:fa:b2:fd:2d:ff:9f:63:da:51:
         c9:a5:a2:f7:94:09:48:b2:a5:ce:80:9c:3a:25:24:41:57:66:
         28:1e:e5:63:4e:b2:b0:d0:ea:12:23:83:77:cf:ca:78:f7:95:
         7b:15:e4:75:8b:83:40:76:01:3a:2c:c0:fa:d5:46:be:a7:b2:
         06:e1:a3:e7:07:5e:17:cc:0e:7a:40:5d:16:a6:e0:a0:8d:f8:
         71:7d:9f:0c:12:7d:cc:7f:e7:26:eb:10:7a:bc:b8:92:8c:5f:
         6b:3f:c6:99:40:2a:71:28:51:df:2b:2a:47:79:61:d5:19:6c:
         63:17:84:e0:81:34:43:42:a4:e5:bd:a2:34:5c:6d:16:ae:16:
         fe:c1:48:26:ea:be:70:55:75:8e:b3:0a:48:04:62:42:f2:39:
         71:31:d5:0c:00:f5:3a:2f:d2:8f:e6:4c:4f:6c:ab:fe:54:46:
         8d:fa:e3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:13:12 2026 by rpki-client