Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft
File:                     DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft (raw, json)
Hash identifier:          PiTt0pVzQpyfJhET+P687psN9CqTx9ScGjCAy8QK0WU=
Subject key identifier:   C1:92:26:6A:1B:7E:55:0E:B9:CC:89:AA:28:79:99:95:E7:29:CA:C3
Authority key identifier: 0E:66:3C:B4:90:0E:F4:D8:22:F9:9A:BD:E2:7F:A4:03:AB:9F:4C:40
Certificate issuer:       /CN=A91EDFAF/serialNumber=0E663CB4900EF4D822F99ABDE27FA403AB9F4C40
Certificate serial:       0142
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft
Manifest number:          0130
Signing time:             Thu 21 May 2026 05:42:10 +0000
Manifest this update:     Thu 21 May 2026 05:42:10 +0000
Manifest next update:     Thu 28 May 2026 05:42:10 +0000
Files and hashes:         1: DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl (hash: 9vraV405fzxhkgeLtCFdB1LtkRo7KUZ3P67Cvex/yLs=)
                          2: 5E89A9888CBD11EFBA479615C4F9AE02.roa (hash: pGkwox9umZUHoOM38loNX04qmSCRj5ejUz67/mM+dmc=)
                          3: 5D58A6368CBD11EFBA479615C4F9AE02.roa (hash: WXld54/qQpJ20SP2MF49RJrfgvRKOagSnwKZf6AK3Ng=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl
                          rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 05:42:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 322 (0x142)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDFAF, serialNumber=0E663CB4900EF4D822F99ABDE27FA403AB9F4C40
        Validity
            Not Before: May 21 05:42:10 2026 GMT
            Not After : May 28 05:42:10 2026 GMT
        Subject: CN=6a0e9b32-b69e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d9:51:c2:f1:77:09:6c:73:0a:18:97:61:c4:
                    76:36:55:87:6f:92:61:ab:95:ee:6d:50:16:d1:09:
                    95:1c:01:70:eb:2b:4b:72:d4:30:2b:13:07:11:0b:
                    ff:f3:c7:a2:34:f8:4d:ab:3e:ed:ef:64:9c:b5:d4:
                    5f:c8:cd:ab:73:6c:f3:76:8e:ed:26:79:e5:cb:24:
                    57:54:aa:a8:ff:68:f6:74:6e:19:30:14:3c:69:f9:
                    c5:03:89:3a:99:6d:b0:36:4d:a8:cd:dc:73:df:b3:
                    c3:15:77:fd:ee:73:f7:4c:d2:dd:58:4f:55:80:95:
                    4c:61:a0:8f:4e:cf:c4:9f:b2:34:9f:d5:fe:af:9e:
                    3c:e9:d0:f8:13:b9:83:0d:ec:dd:e6:38:46:84:c0:
                    4f:98:f6:b2:24:c4:d2:94:28:56:56:e8:8e:75:2a:
                    44:60:70:1c:96:a3:f2:5d:f1:37:3c:cd:db:5e:79:
                    85:42:88:f6:dd:a7:24:4b:ce:8d:4b:30:f1:84:6b:
                    2b:b9:7e:e7:0f:1b:1a:d0:83:2a:bf:79:a9:98:8f:
                    49:0c:dc:ea:be:db:ea:c1:ae:1c:d2:63:a1:c0:82:
                    3e:90:52:99:a9:20:f4:6f:bf:42:b5:a1:f4:22:ae:
                    c2:b6:4c:f3:ba:ae:cc:28:4c:12:db:89:7f:aa:87:
                    ea:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:92:26:6A:1B:7E:55:0E:B9:CC:89:AA:28:79:99:95:E7:29:CA:C3
            X509v3 Authority Key Identifier:
                keyid:0E:66:3C:B4:90:0E:F4:D8:22:F9:9A:BD:E2:7F:A4:03:AB:9F:4C:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:e4:14:f5:f0:a5:89:e3:df:f6:f5:d1:cf:12:0e:26:84:e1:
         22:7b:63:a5:f4:01:0a:0b:ce:b2:4c:72:bc:8b:95:ec:40:61:
         94:2c:eb:02:c8:ad:07:61:8e:1b:a8:14:52:e1:3c:75:19:b1:
         f6:1a:11:47:0a:19:b6:37:90:bc:71:a5:ca:e6:a9:d4:af:a7:
         1d:6e:ce:34:b3:41:35:80:00:2d:22:cf:1d:57:16:6f:89:64:
         ba:41:27:15:62:e9:8f:da:64:13:3d:74:ee:9f:5d:68:07:a2:
         a7:ad:95:f0:77:46:68:e9:78:d5:5d:3b:34:5e:10:16:14:32:
         fb:27:d5:0d:ef:fd:67:b6:9d:0c:51:b3:16:54:ea:27:a9:0d:
         d1:fd:b4:4f:28:b4:1f:d4:be:23:dd:23:8a:1d:ea:45:09:b8:
         3e:c0:ca:9a:31:34:fc:ff:5f:12:7b:cb:f7:e6:e7:c8:00:a3:
         c5:2b:17:b1:18:d8:b7:f3:17:f3:11:ea:0a:da:db:39:d4:08:
         d6:fe:bc:17:61:95:4f:b9:3b:fb:a9:94:52:18:d3:69:0c:74:
         33:e8:04:af:04:51:d1:bb:37:ce:fe:31:d9:58:3d:c4:3f:2e:
         e2:98:68:09:b2:93:56:3d:54:38:b1:e4:b0:7b:c0:42:cb:40:
         3c:97:ea:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:16:37 2026 by rpki-client