Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft
File:                     sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft (raw, json)
Hash identifier:          C02bQhDQ4GSkQoYwRtCWlhYtjuTx/BUeR5ot+nXQfF8=
Subject key identifier:   CF:E5:AA:92:03:C6:C0:22:1F:1F:82:47:A2:48:2F:93:EC:ED:12:39
Authority key identifier: B0:F4:7A:69:6A:CD:77:C7:4A:34:73:C4:CD:17:1D:A3:72:1C:EC:D0
Certificate issuer:       /CN=A91F3099/serialNumber=B0F47A696ACD77C74A3473C4CD171DA3721CECD0
Certificate serial:       0578
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft
Manifest number:          056D
Signing time:             Wed 20 May 2026 23:26:57 +0000
Manifest this update:     Wed 20 May 2026 23:26:57 +0000
Manifest next update:     Wed 27 May 2026 23:26:57 +0000
Files and hashes:         1: sPR6aWrNd8dKNHPEzRcdo3Ic7NA.crl (hash: WQjGfzrLM7PRUwOBe6ef6E7eyhj5AjzJ2wygYHj+s4I=)
                          2: 99961F74315E11EC953A8215C4F9AE02.roa (hash: f53D5d+q3fUodPkmYKhBtis6mgmJc3a1K68eaX3leUg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.crl
                          rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 23:26:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1400 (0x578)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3099, serialNumber=B0F47A696ACD77C74A3473C4CD171DA3721CECD0
        Validity
            Not Before: May 20 23:26:57 2026 GMT
            Not After : May 27 23:26:57 2026 GMT
        Subject: CN=6a0e4341-0057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6c:f4:c2:a6:1b:98:96:eb:37:5c:6a:12:f7:
                    c7:5b:ff:36:35:ba:30:d1:23:e9:7a:a1:28:71:08:
                    dd:9b:ad:b4:1e:87:a9:5b:fc:12:29:a3:17:c8:4f:
                    f5:02:67:fc:bb:d8:de:de:97:9b:5c:7a:3e:82:cd:
                    de:3e:36:f1:09:8f:42:f2:70:b4:91:72:01:50:75:
                    85:a0:5f:8b:18:96:b3:37:bd:07:5f:b9:6d:76:64:
                    ce:52:c9:76:46:a8:45:b3:11:28:9e:0e:d8:e5:d0:
                    ff:6b:2c:06:8c:83:b5:13:d4:cc:1c:1e:b2:60:b1:
                    d0:e7:7b:f3:b4:1a:ed:22:51:63:33:a3:3a:e7:1f:
                    df:c4:85:32:79:d8:3e:a1:e1:37:0d:be:ec:1a:dd:
                    a4:5b:50:f1:19:32:30:36:9e:13:ff:54:8c:87:b2:
                    6a:05:6f:bf:be:96:f1:43:01:f1:36:8b:c3:5b:36:
                    23:8f:8a:5e:57:5b:64:1b:3e:b8:d1:cd:2e:6a:d6:
                    17:1b:b9:22:ff:46:5c:c0:39:62:05:e2:0e:27:d3:
                    5d:6c:7d:cd:b6:6e:e4:87:17:58:c4:44:f8:b4:e3:
                    e0:3c:fb:0f:a5:63:76:5d:23:15:95:c4:7f:07:95:
                    74:2c:70:21:a3:82:4a:25:2f:2c:0d:f6:aa:58:06:
                    78:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:E5:AA:92:03:C6:C0:22:1F:1F:82:47:A2:48:2F:93:EC:ED:12:39
            X509v3 Authority Key Identifier:
                keyid:B0:F4:7A:69:6A:CD:77:C7:4A:34:73:C4:CD:17:1D:A3:72:1C:EC:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:71:0c:46:04:26:d2:82:b5:88:7c:80:be:86:39:5f:9b:2a:
         83:f2:43:c2:85:ca:86:db:6a:a4:e9:d3:54:a9:1f:be:74:d4:
         62:82:1c:df:14:fa:1e:81:de:6f:d4:f9:f0:3f:81:64:6f:7a:
         1a:16:60:2f:84:ad:ec:5b:6b:5e:ca:f1:f5:14:69:e4:38:90:
         e9:62:9e:1f:cd:1a:cd:fd:89:92:f0:d6:d3:b4:e9:6f:85:41:
         32:b3:2e:da:28:78:6d:32:a7:ff:10:c4:5d:95:11:63:6f:79:
         9d:5e:9a:0e:5f:0b:a1:94:c1:57:b1:64:77:ca:54:7d:12:9a:
         80:53:0f:e2:b4:f6:e5:03:af:df:1d:c2:29:95:4a:d0:f9:80:
         aa:c9:a8:3c:91:a4:a9:7a:c3:2d:8d:61:c3:63:df:8f:95:57:
         e8:dc:51:46:60:7d:ef:ec:ee:01:5b:58:c8:f1:53:e8:35:a5:
         ef:3f:1b:3a:96:fe:ef:51:9b:6d:87:19:f3:14:0f:76:15:e2:
         69:c7:ab:a0:a4:a6:8c:5e:7b:dd:3c:06:21:a0:62:06:81:47:
         bf:85:94:06:06:06:07:e0:f7:7f:96:5c:7d:f9:3a:40:2f:18:
         18:17:d4:7e:b3:6e:00:18:ba:6c:5c:af:85:a6:29:02:b5:47:
         b4:d0:c3:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:52:04 2026 by rpki-client