Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.mft
File:                     9LfQRDuM_5tAmLuM7L7Yf86putI.mft (raw, json)
Hash identifier:          JEkFd0YjpJczufPdfBxRJt5zEVeQ/ZTC6qvFNiSMzvo=
Subject key identifier:   E3:82:03:86:22:5A:F9:EA:35:1D:33:DC:2F:84:51:65:8E:10:1E:6E
Authority key identifier: F4:B7:D0:44:3B:8C:FF:9B:40:98:BB:8C:EC:BE:D8:7F:CE:A9:BA:D2
Certificate issuer:       /CN=A91E5481/serialNumber=F4B7D0443B8CFF9B4098BB8CECBED87FCEA9BAD2
Certificate serial:       D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LfQRDuM_5tAmLuM7L7Yf86putI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.mft
Manifest number:          C8
Signing time:             Fri 29 May 2026 06:40:32 +0000
Manifest this update:     Fri 29 May 2026 06:40:32 +0000
Manifest next update:     Fri 05 Jun 2026 06:40:32 +0000
Files and hashes:         1: 9LfQRDuM_5tAmLuM7L7Yf86putI.crl (hash: w02EXgyDInOIu7g/ZD3zFFhmlI1TWiHx74U3848FeGk=)
                          2: 67818EF02BD911F09AF6B821C4F9AE02.roa (hash: KPvqeYEjrP3rW7z9OSGAJVN9ZK2zCwOeNm8vtT/hE1E=)
                          3: 67F6AC6C2BD911F09AF6B821C4F9AE02.roa (hash: GMRoxaiJwQd4I9blwc313RSuAiLyK99JqZt/L1LzUaQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.crl
                          rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LfQRDuM_5tAmLuM7L7Yf86putI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Jun 2026 06:40:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216 (0xd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5481, serialNumber=F4B7D0443B8CFF9B4098BB8CECBED87FCEA9BAD2
        Validity
            Not Before: May 29 06:40:32 2026 GMT
            Not After : Jun  5 06:40:32 2026 GMT
        Subject: CN=6a1934e0-4991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d9:25:20:38:36:6a:10:da:ab:3b:1f:a7:45:
                    d9:66:f6:c2:79:e0:63:2e:1e:07:22:98:02:3b:62:
                    ed:c9:08:a5:00:da:4e:29:40:44:08:ee:d8:9e:3d:
                    4c:12:bc:cf:13:ba:71:a7:71:52:56:02:44:33:46:
                    1a:46:cb:5c:8e:07:25:3f:67:1c:21:56:f8:08:7f:
                    4c:85:15:e3:eb:dc:38:71:02:f6:9c:ea:b8:c6:55:
                    47:f8:3d:9c:59:82:1b:b3:f4:58:c2:f2:32:73:a2:
                    e4:43:00:b3:2c:02:91:7a:0a:48:f8:3f:14:ae:fa:
                    c1:65:e6:0b:c3:b6:9f:7b:e4:bb:12:63:26:16:02:
                    90:37:6d:b4:7d:bc:7c:b9:05:0a:73:b5:a3:25:af:
                    b3:4b:91:bb:6f:00:2b:2b:49:34:52:f6:bf:96:79:
                    63:72:3e:bd:31:9f:63:da:7e:ef:9c:43:45:f5:1e:
                    41:f1:0c:9a:41:0c:b1:38:65:db:a4:12:9c:c4:6f:
                    c7:47:60:df:35:03:a5:3d:d5:0f:fe:59:57:09:c7:
                    4f:93:63:d9:9c:8d:6e:fe:15:dd:ee:89:41:da:3e:
                    6d:44:63:3b:a6:97:7f:a4:99:45:eb:2a:3f:39:29:
                    50:cd:c0:e1:78:b1:f6:17:85:96:52:69:01:9b:e6:
                    a3:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:82:03:86:22:5A:F9:EA:35:1D:33:DC:2F:84:51:65:8E:10:1E:6E
            X509v3 Authority Key Identifier:
                keyid:F4:B7:D0:44:3B:8C:FF:9B:40:98:BB:8C:EC:BE:D8:7F:CE:A9:BA:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LfQRDuM_5tAmLuM7L7Yf86putI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:52:2d:34:5e:5d:58:de:37:aa:e6:fe:fd:22:be:ec:23:6c:
         d5:fd:3a:06:b6:99:eb:7b:54:18:dc:5b:68:ab:a3:f0:5a:3c:
         6b:ff:35:dc:19:c4:2a:f8:37:7e:70:a5:48:34:f4:bb:91:27:
         33:35:f9:11:fd:fc:71:d3:56:8c:a9:f5:0d:50:05:69:aa:56:
         d9:0d:c7:98:02:50:01:4c:d9:65:b5:a4:5b:40:53:bb:5a:9c:
         7d:cf:9a:e1:bc:a9:16:9b:eb:12:f5:6e:11:d1:12:df:bc:72:
         62:3b:e6:ad:ce:3c:b5:0c:65:b2:28:87:34:a2:82:5e:21:c3:
         3d:1b:2d:7e:4a:c1:ad:05:68:c2:90:ec:c3:34:91:71:3f:c4:
         e2:d2:fe:aa:23:ee:5e:af:cb:a1:d0:3d:ff:97:10:93:05:bc:
         59:f6:a9:e5:49:a5:97:d3:c0:73:5d:77:a6:4f:ef:09:8e:93:
         87:97:8f:ba:a6:0c:ce:86:de:9e:f2:18:f0:ce:53:cf:47:3e:
         5f:81:5c:d0:aa:2b:e7:37:9c:be:eb:84:9d:c5:a9:ce:0b:6f:
         a6:85:e6:bf:8f:ae:6a:c6:aa:b1:e3:ad:f1:e5:4e:c8:2f:56:
         f5:12:11:8f:93:fc:8c:8e:7c:38:36:38:06:d0:6f:c2:d1:6e:
         54:78:cd:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 12:31:44 2026 by rpki-client