Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.mft
File:                     slUrOLjFywk1yUD6YJgOpvUQz4Y.mft (raw, json)
Hash identifier:          aP6iSnHCKHAkACJjcC1sXStmnSkABCMDczn65pa+N1s=
Subject key identifier:   95:8F:6D:50:83:AC:C5:7A:3A:EB:DC:E9:77:B4:E7:F9:F9:24:B7:3D
Authority key identifier: B2:55:2B:38:B8:C5:CB:09:35:C9:40:FA:60:98:0E:A6:F5:10:CF:86
Certificate issuer:       /CN=A91F5786/serialNumber=B2552B38B8C5CB0935C940FA60980EA6F510CF86
Certificate serial:       015A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/slUrOLjFywk1yUD6YJgOpvUQz4Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.mft
Manifest number:          0150
Signing time:             Thu 21 May 2026 05:13:28 +0000
Manifest this update:     Thu 21 May 2026 05:13:28 +0000
Manifest next update:     Thu 28 May 2026 05:13:28 +0000
Files and hashes:         1: slUrOLjFywk1yUD6YJgOpvUQz4Y.crl (hash: LZyjJSkApHLSjlDsOA4ngv/HI7qXjwQO4QXnlGD6ync=)
                          2: 6A1352D0ABF311F08AAF8C15C4F9AE02.roa (hash: +UtQoGpilvtG1qoTPs/5jgLYowTqDUkkJwS5bjtwnxw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.crl
                          rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/slUrOLjFywk1yUD6YJgOpvUQz4Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 05:13:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 346 (0x15a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5786, serialNumber=B2552B38B8C5CB0935C940FA60980EA6F510CF86
        Validity
            Not Before: May 21 05:13:28 2026 GMT
            Not After : May 28 05:13:28 2026 GMT
        Subject: CN=6a0e9478-74bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:db:77:35:5e:68:56:b7:79:86:ae:f5:d4:d3:
                    4a:e8:2e:05:53:b5:9b:4a:ec:59:9d:04:2e:60:fc:
                    d1:37:9f:ad:4c:e7:dc:6a:b6:44:87:9d:19:5d:ea:
                    4f:8e:4d:e0:d8:ad:03:f5:ec:9b:3f:fc:92:26:e0:
                    c4:ef:fe:2a:8d:ed:14:8c:6b:22:2c:00:76:bb:f9:
                    0b:24:c1:10:c3:57:89:20:c9:9e:77:51:c6:92:7b:
                    25:c0:57:57:7a:57:e1:cf:98:08:69:a5:95:ad:8a:
                    a4:16:35:ec:67:71:66:a3:45:8f:33:84:70:78:ff:
                    13:97:d1:5d:5d:89:72:75:92:01:35:9e:7c:c2:f9:
                    3d:05:04:20:6f:4f:fd:90:71:59:00:3d:ff:a3:dd:
                    b3:be:d3:41:67:5f:54:06:8d:61:fe:ef:fa:68:fa:
                    39:dc:9f:2a:66:3e:6e:02:6c:ae:54:3e:65:d9:d7:
                    cc:e7:1c:a3:56:a4:33:aa:10:24:db:ae:21:86:74:
                    50:97:3c:6a:6a:e9:2f:6a:5b:56:75:f9:89:eb:19:
                    b0:ee:9b:7f:a2:09:8e:81:11:60:53:77:8d:ae:00:
                    30:d2:28:0e:4e:ef:24:ba:b5:21:56:37:6f:b9:40:
                    25:ec:63:0d:70:5c:c0:04:e2:19:6f:2f:f1:65:bb:
                    cc:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:8F:6D:50:83:AC:C5:7A:3A:EB:DC:E9:77:B4:E7:F9:F9:24:B7:3D
            X509v3 Authority Key Identifier:
                keyid:B2:55:2B:38:B8:C5:CB:09:35:C9:40:FA:60:98:0E:A6:F5:10:CF:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/slUrOLjFywk1yUD6YJgOpvUQz4Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:c3:64:2e:52:6b:3c:cd:c5:1f:92:12:d4:c8:0d:01:bc:26:
         6b:42:a7:55:10:c2:d9:89:cb:0b:33:88:ff:c7:e6:4c:e6:14:
         e7:98:1a:22:c9:66:a5:ba:3c:4b:0a:04:5b:20:11:ce:17:d6:
         ba:58:ab:50:df:ff:a5:ad:74:d4:12:9e:b3:83:fe:23:91:22:
         bc:04:45:0d:af:fc:a6:99:07:97:3c:65:d0:4a:32:56:f6:c1:
         b1:ca:90:75:30:27:39:5c:52:42:bd:ce:af:b5:3e:00:0e:bb:
         66:94:91:e3:dc:96:24:b3:b2:c0:94:38:fe:93:8c:d4:32:f6:
         3d:d3:4a:75:87:23:88:41:4b:10:a8:e5:03:e3:33:f4:be:62:
         cf:02:5d:0b:95:2b:0d:8d:58:0b:2f:a3:06:78:11:87:fa:df:
         00:7c:ed:60:c0:66:0c:d1:77:d3:6d:5d:3a:b3:ce:d2:f6:1f:
         a7:aa:e5:66:d6:22:1e:71:b0:8d:7d:5a:2f:a1:93:8f:a1:32:
         f0:8f:a7:56:b8:23:8c:fe:76:f0:b1:9b:c1:f6:85:45:f7:97:
         3c:49:da:e8:94:51:64:2c:4b:76:e0:e2:c5:9f:78:3f:69:96:
         fb:b0:21:8a:43:64:cd:0d:0e:64:00:87:e3:82:c1:a1:21:ad:
         a0:92:98:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:16:33 2026 by rpki-client