Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft
File:                     K1N18tBgdUbVH2UR9hvEoYl0_eI.mft (raw, json)
Hash identifier:          1gLj55yAdgu3rPKK7NFcB/oylmxnV3Yi6nT0mho9Myo=
Subject key identifier:   6C:36:22:EB:E7:92:D9:02:29:E4:CB:AB:D9:E5:5F:AD:5D:A9:A4:A7
Authority key identifier: 2B:53:75:F2:D0:60:75:46:D5:1F:65:11:F6:1B:C4:A1:89:74:FD:E2
Certificate issuer:       /CN=A91EF19E/serialNumber=2B5375F2D0607546D51F6511F61BC4A18974FDE2
Certificate serial:       3579
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft
Manifest number:          3566
Signing time:             Wed 20 May 2026 14:23:50 +0000
Manifest this update:     Wed 20 May 2026 14:23:50 +0000
Manifest next update:     Wed 27 May 2026 14:23:50 +0000
Files and hashes:         1: K1N18tBgdUbVH2UR9hvEoYl0_eI.crl (hash: QKeZ0Fqx4wfh7opDN4rV/kgWnTzJl8TcNJo4zMYVb9s=)
                          2: FACC58F855C411E9A0FEF781C4F9AE02.roa (hash: B+l8TJuzuBfxkWLiU727TKBvSyJyZhyj59n2Kpa5X6s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.crl
                          rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 14:23:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13689 (0x3579)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF19E, serialNumber=2B5375F2D0607546D51F6511F61BC4A18974FDE2
        Validity
            Not Before: May 20 14:23:50 2026 GMT
            Not After : May 27 14:23:50 2026 GMT
        Subject: CN=6a0dc3f6-b126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7d:c0:13:4b:c7:bc:e4:4b:77:5d:25:5c:8d:
                    ec:73:8d:6d:03:5d:f7:ec:aa:18:c7:c2:94:74:be:
                    22:5d:b1:fb:8f:c5:da:88:3c:53:44:2f:eb:4a:86:
                    55:21:f5:43:ba:0b:1f:54:ad:5b:9e:33:5f:43:5a:
                    65:30:1a:52:19:26:06:26:f4:b1:8e:ff:d0:77:19:
                    c2:06:76:e5:a7:db:99:51:dd:b1:db:a8:c6:ca:84:
                    34:ce:41:ee:a2:f8:75:8c:ba:bb:98:08:2e:9a:d4:
                    78:31:f0:62:56:55:5b:56:71:69:a6:3a:b4:87:ba:
                    84:1d:4e:1f:b1:72:73:5a:dc:a5:80:5b:9d:79:23:
                    f0:5c:70:4d:98:bd:3a:28:6e:c9:ca:66:5f:d1:e5:
                    b5:d8:b7:06:f1:c3:6b:e4:51:b3:7b:a6:9a:09:86:
                    ab:ce:6f:aa:c5:cc:ac:4a:26:3f:99:a2:ed:94:fe:
                    4a:e4:87:35:8a:17:14:c6:0e:1c:ba:c0:c4:91:ee:
                    8e:5b:2c:80:0c:4c:9e:87:40:b3:d2:a0:53:4a:0e:
                    53:48:48:6c:ab:8a:14:1f:ce:89:04:1e:59:4a:d9:
                    f7:0a:b4:fb:09:07:7f:33:d6:d4:67:47:ee:0b:dd:
                    fd:98:3e:b7:99:eb:e0:04:a1:bb:b8:56:2f:44:c9:
                    54:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:36:22:EB:E7:92:D9:02:29:E4:CB:AB:D9:E5:5F:AD:5D:A9:A4:A7
            X509v3 Authority Key Identifier:
                keyid:2B:53:75:F2:D0:60:75:46:D5:1F:65:11:F6:1B:C4:A1:89:74:FD:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:59:22:27:f4:5b:3f:75:32:dd:d9:a2:4f:61:b3:22:a5:61:
         d2:b9:ff:b1:07:89:fe:6b:66:7e:d6:87:cb:d4:9e:1b:04:ae:
         b7:b9:9e:a6:ba:8f:1b:0b:81:4f:43:1f:4d:88:73:59:69:8d:
         65:ce:cf:37:94:0d:1c:52:ad:a6:4d:52:23:98:62:39:2f:bb:
         50:be:5f:33:83:c1:58:6b:fa:e2:ff:db:03:e0:de:5c:94:72:
         56:b8:e0:d3:2a:08:80:13:ee:d8:3d:e2:49:8e:4e:2a:49:f6:
         f6:b7:04:fa:38:8a:61:8f:0e:ae:28:18:4e:1d:73:b7:b1:6e:
         b0:19:b4:13:a6:d0:1a:b2:97:77:5f:40:4a:8a:5a:a1:85:5a:
         5d:50:e0:c1:62:c3:04:6c:7b:7b:34:f0:e8:74:38:3e:17:32:
         f9:62:ab:1e:d4:e1:73:9e:62:bc:e0:28:4b:fd:48:47:25:e3:
         8f:47:d0:df:69:91:d2:cc:3f:ef:e6:ca:bd:ab:7e:1d:ee:e8:
         c7:ae:37:75:21:39:60:66:4b:a1:14:d2:d8:44:2d:37:d3:c8:
         e1:5f:2f:e1:cd:67:bf:19:49:7c:c3:f0:9f:58:75:05:83:ab:
         10:29:ea:54:aa:23:55:be:0c:d3:2c:78:f5:e4:0d:e2:6a:c8:
         24:63:1d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:52 2026 by rpki-client