Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.mft
File:                     r80S80CYeM1KtEXERVRK6NqFGoQ.mft (raw, json)
Hash identifier:          UeP5FLGZXHXFdAU1/QyeWA3n9BAYUDT36n5UPrrkb2E=
Subject key identifier:   23:69:4B:8D:82:94:B6:88:79:C7:A0:7D:98:87:E2:B7:06:89:13:DD
Authority key identifier: AF:CD:12:F3:40:98:78:CD:4A:B4:45:C4:45:54:4A:E8:DA:85:1A:84
Certificate issuer:       /CN=A91F2BD9/serialNumber=AFCD12F3409878CD4AB445C445544AE8DA851A84
Certificate serial:       08BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r80S80CYeM1KtEXERVRK6NqFGoQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.mft
Manifest number:          08AC
Signing time:             Wed 20 May 2026 20:34:20 +0000
Manifest this update:     Wed 20 May 2026 20:34:19 +0000
Manifest next update:     Wed 27 May 2026 20:34:19 +0000
Files and hashes:         1: r80S80CYeM1KtEXERVRK6NqFGoQ.crl (hash: AJA29H8NS7vzu2L0ruummo/2pHL9kvsuK+/91Zt8cT4=)
                          2: 85A0A1086C9711EEA4941846C4F9AE02.roa (hash: WHxCZXb+qvGJ+dHJukHlHeAD13tXGu1jBv03TPuiuDM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.crl
                          rsync://rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r80S80CYeM1KtEXERVRK6NqFGoQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 20:34:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2238 (0x8be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2BD9, serialNumber=AFCD12F3409878CD4AB445C445544AE8DA851A84
        Validity
            Not Before: May 20 20:34:19 2026 GMT
            Not After : May 27 20:34:19 2026 GMT
        Subject: CN=6a0e1acc-d419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2c:03:a7:63:a5:f2:67:9d:d6:10:f8:3e:bd:
                    96:0b:5d:66:3c:48:99:ae:52:6b:ce:bc:13:0c:01:
                    1b:fc:19:ff:36:c0:5b:ae:4e:95:94:d1:05:4e:dc:
                    86:14:5e:1f:4a:0c:c2:9c:4e:6d:f0:e0:04:dd:19:
                    9d:3c:09:cc:54:f1:4c:ce:17:2c:50:50:dd:64:89:
                    69:6c:bd:d8:49:21:53:69:f2:59:74:e0:b2:0a:0f:
                    2b:64:0f:b2:eb:5e:74:03:4f:23:08:3f:49:9d:c3:
                    a6:3f:4d:31:23:37:95:2f:a1:b7:0a:c5:e9:61:48:
                    ee:38:a9:4e:e7:72:f0:bd:5e:0c:a0:bf:f6:61:cb:
                    bc:c0:d2:63:ec:9d:08:7e:61:7b:58:60:7a:41:dd:
                    e0:30:70:cb:a6:6f:34:48:59:1c:2a:1c:22:80:30:
                    90:95:2e:24:8f:14:52:55:f5:d0:09:aa:52:ea:62:
                    18:15:61:d8:cc:13:14:22:96:16:46:43:b7:6c:9a:
                    3e:6d:04:84:d0:e8:56:ee:03:7c:2b:80:3f:e1:5b:
                    d9:a0:7d:fc:eb:6a:9c:21:89:7e:0f:5c:6f:3e:6c:
                    8b:5e:32:74:7c:a7:d8:4c:97:aa:9f:36:5b:76:d7:
                    58:9e:f6:a0:00:44:b6:ef:83:90:30:d8:73:c7:5c:
                    a0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:69:4B:8D:82:94:B6:88:79:C7:A0:7D:98:87:E2:B7:06:89:13:DD
            X509v3 Authority Key Identifier:
                keyid:AF:CD:12:F3:40:98:78:CD:4A:B4:45:C4:45:54:4A:E8:DA:85:1A:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r80S80CYeM1KtEXERVRK6NqFGoQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:96:e1:d5:16:cf:ff:71:96:87:8d:dc:bf:57:a8:1c:a5:06:
         3e:ca:64:89:2c:b5:c5:64:6b:99:6d:ff:4f:7b:4e:0e:92:9a:
         f2:3d:d6:33:d0:9c:59:bb:49:3f:a3:17:94:7c:03:ac:92:a6:
         f2:c1:f1:13:f4:01:ca:9d:39:d5:ea:59:3f:a0:e1:3b:a3:30:
         0c:53:df:8f:ea:f4:48:7b:c9:89:ab:e5:46:5f:3d:65:b1:81:
         26:92:c7:2e:80:7b:5a:b7:8b:99:72:50:da:07:fc:4c:66:91:
         97:ce:bb:1b:6d:d1:78:59:a4:52:1d:4c:ea:ca:7e:52:3c:17:
         09:b6:9f:0a:03:04:eb:d4:54:3f:0c:9e:73:14:39:a3:9a:a0:
         c9:d5:d6:9d:2d:d4:1d:52:5b:7b:e4:4f:ed:4e:4f:e0:34:6b:
         a4:a4:a6:89:89:9b:5e:b9:c0:7b:9e:b3:ea:b9:a5:b5:0b:41:
         63:de:ab:d4:d4:85:d9:5e:22:8f:c6:ac:2c:df:b2:31:a3:14:
         27:57:45:c9:4c:29:06:7e:44:9b:64:6b:cd:22:49:a4:db:ba:
         c3:04:e7:bb:a5:97:5b:be:24:c1:05:36:a4:68:84:8c:a2:93:
         36:70:8b:f9:05:cd:5a:86:8d:b4:01:f0:64:ee:7c:5d:50:03:
         c8:1e:ea:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:54:06 2026 by rpki-client