Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft
File:                     rea1d9VLWrCQBc5hO7E2SGUuams.mft (raw, json)
Hash identifier:          QQKryYn1GvYcbMjGhzIo6Qnp7OOPt+BeIter0xWCYLA=
Subject key identifier:   4C:90:00:C3:CB:81:8A:A1:3B:F1:2B:67:F6:BC:B6:5E:11:B3:CE:AD
Authority key identifier: AD:E6:B5:77:D5:4B:5A:B0:90:05:CE:61:3B:B1:36:48:65:2E:6A:6B
Certificate issuer:       /CN=A91F4553/serialNumber=ADE6B577D54B5AB09005CE613BB13648652E6A6B
Certificate serial:       0613
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rea1d9VLWrCQBc5hO7E2SGUuams.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft
Manifest number:          060D
Signing time:             Fri 22 May 2026 22:55:12 +0000
Manifest this update:     Fri 22 May 2026 22:55:12 +0000
Manifest next update:     Fri 29 May 2026 22:55:12 +0000
Files and hashes:         1: rea1d9VLWrCQBc5hO7E2SGUuams.crl (hash: bVC0e2xkQ6fcPQFRC4yIkhOnJd15hVW8CZPEy0Ay5zs=)
                          2: A1491F7CEB7811EB9134133BC4F9AE02.roa (hash: LMpJMuYVTyY2sVa9uHYEonkQ7494tf0v3yx1gmrO5vY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.crl
                          rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rea1d9VLWrCQBc5hO7E2SGUuams.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 May 2026 22:55:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1555 (0x613)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4553, serialNumber=ADE6B577D54B5AB09005CE613BB13648652E6A6B
        Validity
            Not Before: May 22 22:55:12 2026 GMT
            Not After : May 29 22:55:12 2026 GMT
        Subject: CN=6a10ded0-d3c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:13:a5:cd:37:80:4a:60:62:5c:10:32:8c:11:
                    7f:76:e3:f4:dc:b7:30:54:18:bf:f4:15:bd:b8:d3:
                    93:77:ba:80:19:cc:e2:75:68:67:65:f9:43:4b:49:
                    5b:0f:09:50:dd:67:58:99:a2:31:9f:26:40:27:1c:
                    da:21:a1:ee:71:25:d1:d0:2b:29:cd:5d:53:10:da:
                    a3:64:57:c7:04:41:17:ad:83:01:75:0d:98:ac:03:
                    09:d4:61:d4:60:c5:fe:e7:42:42:4d:6d:3d:31:a6:
                    a2:75:99:78:fe:66:94:b4:1a:50:6d:a2:0b:d0:46:
                    1b:10:13:c4:d0:bf:44:9e:c6:72:c5:f3:5a:48:58:
                    74:c7:74:98:6d:ee:d3:ef:38:53:3c:82:5c:76:a3:
                    ea:ee:0b:a4:03:77:6e:72:04:7f:eb:ca:b8:3e:bb:
                    98:c5:b5:00:41:73:55:96:4b:ab:47:f5:16:69:7a:
                    77:de:f1:f8:d9:42:94:19:3c:51:a1:50:57:53:f4:
                    22:fe:1e:dc:e1:0e:a5:66:98:f1:79:53:a7:7a:68:
                    34:81:7b:49:60:f5:70:41:d4:12:eb:a3:4a:f4:7a:
                    08:b1:d4:3a:fe:b4:67:7e:8d:07:69:4b:c1:48:3d:
                    05:57:cb:50:2e:bc:c2:47:b1:e8:0d:f9:21:fb:1c:
                    90:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:90:00:C3:CB:81:8A:A1:3B:F1:2B:67:F6:BC:B6:5E:11:B3:CE:AD
            X509v3 Authority Key Identifier:
                keyid:AD:E6:B5:77:D5:4B:5A:B0:90:05:CE:61:3B:B1:36:48:65:2E:6A:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rea1d9VLWrCQBc5hO7E2SGUuams.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:dd:58:f2:d3:c2:97:79:5d:6f:55:86:86:23:cf:52:d5:94:
         2e:91:ff:34:28:22:65:0e:df:5f:99:9f:e4:df:fa:cf:df:89:
         9d:70:4e:0c:1d:42:71:93:af:9f:46:d1:26:b6:e9:ff:46:5f:
         9f:6e:25:49:ad:35:13:76:3b:83:92:93:b2:8f:19:d4:ae:e9:
         de:ad:4a:20:fd:01:f6:d0:c3:29:d0:10:74:36:7c:dd:2b:df:
         43:00:cf:e3:39:67:8e:58:1d:08:69:1a:f5:2a:4e:bb:85:ef:
         36:43:e2:8f:dc:08:7a:80:6b:49:d2:0e:3e:3d:9a:a6:1d:a9:
         c4:76:46:42:73:e2:04:66:40:54:7f:7b:1c:77:e7:ae:1f:4f:
         fa:19:da:53:a3:98:91:a9:ef:51:ad:f9:db:3c:c7:a5:83:76:
         3f:ee:2f:b0:89:1a:b3:23:94:49:05:88:21:03:10:c6:8e:0f:
         ca:37:50:1e:be:1e:40:99:6e:6c:ee:e5:3d:b6:cf:78:7a:d8:
         73:8d:ec:74:b2:e9:22:c0:dc:59:36:81:c8:d6:b1:9d:ce:00:
         0b:e4:cf:54:d6:28:00:8f:e0:7f:7e:b5:4b:57:5e:0c:cf:e5:
         d7:9a:03:71:83:c9:e2:e9:d1:52:db:15:68:0c:f2:9a:43:cc:
         1e:c1:f2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 09:25:25 2026 by rpki-client