Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/Df2AHulmIu0X31XXqqZMce_5t70.mft
File:                     Df2AHulmIu0X31XXqqZMce_5t70.mft (raw, json)
Hash identifier:          y/iEXymRbcST5GDy83r+dGfD+1piFbU92Gnvpz3+jrE=
Subject key identifier:   84:C0:2C:50:D2:30:0C:1E:61:BB:64:6A:51:AC:D5:28:8C:6B:AA:BD
Authority key identifier: 0D:FD:80:1E:E9:66:22:ED:17:DF:55:D7:AA:A6:4C:71:EF:F9:B7:BD
Certificate issuer:       /CN=A91F4E89/serialNumber=0DFD801EE96622ED17DF55D7AAA64C71EFF9B7BD
Certificate serial:       0C40
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Df2AHulmIu0X31XXqqZMce_5t70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/Df2AHulmIu0X31XXqqZMce_5t70.mft
Manifest number:          0C37
Signing time:             Wed 20 May 2026 18:46:29 +0000
Manifest this update:     Wed 20 May 2026 18:46:29 +0000
Manifest next update:     Wed 27 May 2026 18:46:29 +0000
Files and hashes:         1: Df2AHulmIu0X31XXqqZMce_5t70.crl (hash: oE313bdwDPZSZYvid5Kt9mxzVlF1l1J2q7J4i+W4BkM=)
                          2: 72F52C962AF511EA8C989441C4F9AE02.roa (hash: y7I7T2g0mI0lsLqMSMjVPNFG5gKcdIMy2Rd0f1B2C0c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/Df2AHulmIu0X31XXqqZMce_5t70.crl
                          rsync://rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/Df2AHulmIu0X31XXqqZMce_5t70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Df2AHulmIu0X31XXqqZMce_5t70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 18:46:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3136 (0xc40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4E89, serialNumber=0DFD801EE96622ED17DF55D7AAA64C71EFF9B7BD
        Validity
            Not Before: May 20 18:46:29 2026 GMT
            Not After : May 27 18:46:29 2026 GMT
        Subject: CN=6a0e0185-6b4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:85:2b:e2:8d:53:3b:7c:6c:5e:b2:55:d7:a9:
                    bc:a1:24:2b:7e:47:54:d9:42:97:d8:f4:83:90:ac:
                    12:d2:24:95:db:57:55:88:7e:d7:6f:de:6a:29:70:
                    93:dd:ba:5a:da:57:4a:7a:31:28:d2:fd:1f:8f:c0:
                    85:9b:df:88:35:85:52:a9:d9:96:a3:b0:1f:6a:fd:
                    f4:50:85:c3:30:01:63:46:77:6a:54:29:74:35:f7:
                    84:39:18:c3:43:96:42:f5:95:88:dc:cd:b7:0c:3e:
                    c3:21:51:89:8b:d9:b3:57:8e:74:1d:65:ba:05:d7:
                    c5:67:4e:ef:72:68:6d:d4:11:a7:70:1c:cb:1e:0d:
                    37:91:e3:a9:27:20:ce:14:8b:7c:26:eb:42:54:96:
                    f8:45:bb:1a:96:b4:2f:bf:0e:16:d1:88:bc:da:23:
                    4b:f0:44:f7:72:e2:61:e9:3c:05:6e:20:86:40:15:
                    c5:fd:2f:3e:ee:65:4e:f5:a2:e6:1f:0b:0a:4e:9a:
                    46:44:0b:d4:ce:d2:37:b2:66:e5:bb:81:9a:ff:0a:
                    80:3f:4a:4e:dc:b5:cb:cb:64:47:c4:63:34:6b:7a:
                    4b:0e:4a:ba:7a:d7:07:85:d5:51:9a:de:30:70:5a:
                    3b:ae:3c:b3:7a:2f:51:da:cc:1f:fd:ce:9d:f1:09:
                    58:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:C0:2C:50:D2:30:0C:1E:61:BB:64:6A:51:AC:D5:28:8C:6B:AA:BD
            X509v3 Authority Key Identifier:
                keyid:0D:FD:80:1E:E9:66:22:ED:17:DF:55:D7:AA:A6:4C:71:EF:F9:B7:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/Df2AHulmIu0X31XXqqZMce_5t70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Df2AHulmIu0X31XXqqZMce_5t70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4E89/C533D7242AF411EAA48F1541C4F9AE02/Df2AHulmIu0X31XXqqZMce_5t70.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:ad:a3:1a:28:ef:bc:65:93:a2:6e:8a:c3:b6:60:46:71:da:
         7c:37:fb:5b:30:57:73:42:48:fe:ba:94:5b:ec:11:c3:06:93:
         2b:f7:61:38:00:71:eb:4c:49:fd:6f:2a:7e:ba:c2:01:8f:70:
         b3:a7:91:53:c2:37:0d:e0:67:c3:e2:12:6c:84:2f:8e:3e:ec:
         09:53:7e:4d:31:d3:d5:b6:c5:78:9b:5a:29:53:56:63:b7:43:
         39:e8:40:f9:b3:ee:45:a9:1b:a5:73:00:c9:5d:fc:3b:6e:17:
         41:2d:97:2e:a6:f0:2a:4d:90:1e:de:8a:aa:6f:3e:b8:83:06:
         25:4a:6b:bf:2c:e8:1d:a4:d8:19:7d:db:25:e3:2f:9d:08:00:
         84:15:9d:a1:56:f9:11:e2:51:8c:39:6e:3a:08:c0:cb:ee:8a:
         eb:d7:45:fe:31:1e:fd:45:76:d3:1d:6f:9f:0d:ff:fb:9c:63:
         08:7e:6f:38:36:0e:d8:22:72:98:96:04:8a:ac:7c:33:35:da:
         1c:40:6a:fe:b4:08:10:76:b2:c7:b2:44:49:63:d1:9a:96:c2:
         cc:74:e1:f2:eb:8e:81:97:72:57:23:a1:33:cd:83:10:3d:45:
         01:19:7f:57:22:cc:b5:09:79:f7:c2:40:20:53:e9:7c:ec:10:
         70:87:2b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:37:27 2026 by rpki-client