Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft
File:                     u3-5V71tGEoIkjFpTPg4nbaI_lM.mft (raw, json)
Hash identifier:          vo0JO8p/zWOtQ1UW3oyxYmAdBuAu96ymjyEewpeeX9o=
Subject key identifier:   0D:AD:36:05:62:B8:9B:B3:42:56:91:8A:CA:05:85:C0:E5:8C:D6:B5
Authority key identifier: BB:7F:B9:57:BD:6D:18:4A:08:92:31:69:4C:F8:38:9D:B6:88:FE:53
Certificate issuer:       /CN=A91F39A9/serialNumber=BB7FB957BD6D184A089231694CF8389DB688FE53
Certificate serial:       0511
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft
Manifest number:          0509
Signing time:             Wed 20 May 2026 23:44:10 +0000
Manifest this update:     Wed 20 May 2026 23:44:10 +0000
Manifest next update:     Wed 27 May 2026 23:44:10 +0000
Files and hashes:         1: u3-5V71tGEoIkjFpTPg4nbaI_lM.crl (hash: D0Dbbis/FXSPBb9/5U0F9kJGS3F0qGuwUAWDM30Kiew=)
                          2: 12702794577711ECB7FD0C6FC4F9AE02.roa (hash: E1ZhKxPEzQQ/QbldcIhGwEwKe1KS8Rg1yFxMH77UIsk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.crl
                          rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 23:44:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1297 (0x511)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F39A9, serialNumber=BB7FB957BD6D184A089231694CF8389DB688FE53
        Validity
            Not Before: May 20 23:44:10 2026 GMT
            Not After : May 27 23:44:10 2026 GMT
        Subject: CN=6a0e474a-0e85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:4e:05:8c:77:c5:b9:bc:9d:51:97:1c:53:cf:
                    76:f2:d7:85:61:5d:84:4a:29:bf:d5:78:2d:83:c8:
                    1e:d4:4d:8a:a3:d9:03:a0:be:c2:93:34:ee:cd:1e:
                    83:c8:0d:d0:60:f9:9e:81:81:6a:d2:cc:3c:e6:9d:
                    49:cc:78:11:c5:b0:ff:00:37:d4:9a:bf:56:e1:52:
                    b1:50:75:c0:87:c2:48:ed:10:55:86:40:f6:dd:45:
                    ad:2b:3c:2c:f8:ba:00:ee:69:c1:4c:96:03:2a:90:
                    67:72:b0:ea:de:19:bf:2b:b6:a9:ab:99:96:02:69:
                    7e:df:f5:8a:a0:ad:30:c8:f6:83:e7:be:6c:87:25:
                    4b:d7:78:f1:2f:5d:c3:66:68:f1:cd:f9:8c:b3:6d:
                    89:95:3e:71:c0:54:fc:b1:97:a4:f1:20:e5:0d:a5:
                    10:b3:8d:4f:d6:b9:09:cf:b4:1a:c3:09:48:a1:a1:
                    d4:29:cb:7a:bd:72:c7:87:1c:78:97:b6:cd:e4:cd:
                    bd:d0:7a:3b:bc:77:d8:16:fe:e2:9c:eb:54:7e:1e:
                    85:35:73:56:23:00:87:8a:8a:08:61:31:9f:3d:d3:
                    a8:77:65:ac:5e:d8:17:54:f3:14:35:60:23:f0:83:
                    d0:bb:04:15:30:db:57:1b:d6:a8:e1:78:da:82:8b:
                    66:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:AD:36:05:62:B8:9B:B3:42:56:91:8A:CA:05:85:C0:E5:8C:D6:B5
            X509v3 Authority Key Identifier:
                keyid:BB:7F:B9:57:BD:6D:18:4A:08:92:31:69:4C:F8:38:9D:B6:88:FE:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:4d:54:81:03:cb:fc:53:8f:80:9f:c5:9a:2d:c8:1f:00:86:
         24:7e:a9:c2:93:23:1a:70:e0:28:b0:38:c7:5f:e1:32:50:78:
         5b:4b:86:ec:66:67:d2:09:f3:60:31:9d:08:68:b5:77:6c:a7:
         0d:4c:3c:5d:22:b5:ca:f9:62:3a:a3:7b:3b:6d:0b:a0:ce:fc:
         dc:bb:c5:ae:ba:da:a9:11:49:8d:46:19:ec:68:1f:3f:c1:18:
         e9:df:23:09:40:c4:a4:b2:e4:3e:15:a1:98:15:67:81:af:ec:
         07:d0:f3:32:2a:c4:b5:ce:98:64:63:45:81:8a:c2:c1:9b:35:
         a8:ce:97:46:00:a5:1a:15:7b:d6:91:93:9a:00:b7:72:92:8b:
         af:fb:a3:b4:af:ad:3b:9a:fe:35:68:d6:35:0c:8c:47:dc:b8:
         ff:ef:c9:7e:c7:0a:62:91:d1:25:88:f3:0b:f7:d3:bb:e1:61:
         a2:96:46:3a:40:4b:fc:5e:28:d1:4b:c8:86:ea:16:c5:d2:e2:
         ab:b3:52:e7:a1:d3:80:31:3b:55:34:ff:ad:57:94:21:a8:32:
         7c:2e:d2:cf:75:69:ab:99:f8:d9:e9:36:8c:4a:33:5a:ff:1a:
         37:ad:8a:d7:64:23:3c:50:e6:18:f5:18:1c:0a:2a:b0:c3:0a:
         3f:b7:68:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:27:38 2026 by rpki-client