Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft
File:                     h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft (raw, json)
Hash identifier:          kdzmsFiSjpZw/bil+AqvEPpaimcbld076r6Mpkjj+QI=
Subject key identifier:   3D:86:65:15:D5:CF:ED:7A:8F:34:D9:DC:38:C8:5D:06:AA:41:E8:68
Authority key identifier: 87:CA:39:48:CE:1C:CB:E1:A2:04:C5:F8:0D:B4:30:41:09:A8:31:7C
Certificate issuer:       /CN=A91F65E4/serialNumber=87CA3948CE1CCBE1A204C5F80DB4304109A8317C
Certificate serial:       15D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8o5SM4cy-GiBMX4DbQwQQmoMXw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft
Manifest number:          15C0
Signing time:             Fri 22 May 2026 17:20:48 +0000
Manifest this update:     Fri 22 May 2026 17:20:47 +0000
Manifest next update:     Fri 29 May 2026 17:20:47 +0000
Files and hashes:         1: h8o5SM4cy-GiBMX4DbQwQQmoMXw.crl (hash: gXTS+H5yO1QYe+wXo2bDDFTa1sS4CbvVKPNFIeOCWrw=)
                          2: 4A7E3036340811ED9D3D7620C4F9AE02.roa (hash: IPwUYf1i7UXpGfgy42YQLyz0KFiyyYobrDQbSdSHXgY=)
                          3: F0326FAE4D0011E8A24EE324C4F9AE02.roa (hash: jueJlQIp/n088nFesAl2o/XwQiao4sKjxZsgZFyb2lM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.crl
                          rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8o5SM4cy-GiBMX4DbQwQQmoMXw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 May 2026 17:20:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5589 (0x15d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F65E4, serialNumber=87CA3948CE1CCBE1A204C5F80DB4304109A8317C
        Validity
            Not Before: May 22 17:20:47 2026 GMT
            Not After : May 29 17:20:47 2026 GMT
        Subject: CN=6a109070-b238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a6:f8:fb:ee:0b:a8:80:f0:2a:0a:e1:a1:3d:
                    26:ad:9f:e6:c7:11:11:8d:a5:ee:9f:74:da:9b:19:
                    4b:68:13:0e:5c:25:b5:c8:e8:3d:17:ee:a5:07:95:
                    12:19:73:b6:92:79:1d:a6:1e:fb:c7:47:94:bd:f9:
                    0d:25:56:95:6e:0b:c8:cc:55:03:d3:4b:68:5d:d8:
                    57:fe:40:7c:a8:6a:24:72:42:11:85:d7:d6:f7:02:
                    de:11:de:25:36:78:8d:d3:fc:86:88:ba:a0:29:4f:
                    82:4b:ee:ed:5a:a0:04:db:48:4e:6d:66:48:88:8e:
                    bb:a0:3a:aa:90:43:5f:b5:11:77:01:0e:f3:de:b2:
                    93:53:90:7b:95:59:f6:51:ba:95:31:74:cd:30:38:
                    7e:94:d2:9d:ff:ef:41:92:b5:8a:d3:d3:af:d2:23:
                    67:12:e4:d1:30:b8:f3:7d:0c:e9:4a:07:52:ad:65:
                    1d:ad:56:06:c8:a6:9e:23:cd:4d:24:07:6f:fb:7a:
                    09:80:ad:bc:cb:89:f9:f6:fc:e2:06:e0:40:ab:83:
                    ef:6d:d5:d7:de:0e:72:77:dc:db:8b:39:5e:ed:a0:
                    87:a7:09:d5:b8:d8:35:69:f5:75:fc:f6:10:d7:6c:
                    b6:63:89:12:5f:f8:94:e6:96:5e:a2:e0:cb:d1:c1:
                    dd:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:86:65:15:D5:CF:ED:7A:8F:34:D9:DC:38:C8:5D:06:AA:41:E8:68
            X509v3 Authority Key Identifier:
                keyid:87:CA:39:48:CE:1C:CB:E1:A2:04:C5:F8:0D:B4:30:41:09:A8:31:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h8o5SM4cy-GiBMX4DbQwQQmoMXw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F65E4/793973204D0011E8A026E14AC4F9AE02/h8o5SM4cy-GiBMX4DbQwQQmoMXw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:8e:c4:5e:ff:29:d0:95:18:8d:cd:fa:dc:3e:23:b0:25:6c:
         b9:da:90:d0:f8:a2:c8:f4:a2:78:e6:ae:d8:02:ca:8b:4a:62:
         64:0b:3a:50:6e:93:d1:3b:3f:1d:dd:b2:3d:ee:1b:fe:13:ca:
         3b:5f:5e:e8:31:04:11:56:4a:12:11:c6:2a:db:a1:57:92:58:
         bd:ff:12:0f:6f:ef:54:98:ae:99:7d:bd:f2:45:e6:2e:57:c6:
         ad:64:fb:0f:88:03:8b:48:0f:8e:28:67:fd:bf:28:09:59:a4:
         01:bc:ab:a2:32:89:83:92:24:d5:f0:84:51:6d:24:f2:34:c0:
         24:b5:41:2d:3f:51:c7:32:b2:ae:cc:46:c6:c1:f2:1f:f0:c6:
         c3:a3:a6:68:5a:8c:27:14:26:09:86:81:b8:20:93:30:da:04:
         1b:54:aa:fc:2c:98:78:aa:97:48:24:4e:d2:20:f0:88:e6:b2:
         5a:e3:67:97:7f:5b:c9:81:55:4e:db:71:7a:e3:1d:15:5e:8a:
         00:f9:93:e5:c3:6f:e7:a1:30:2c:2d:ca:17:b2:ad:07:0b:0b:
         c4:90:08:97:6f:fc:77:73:08:47:82:6e:9c:bb:c1:bc:f8:d3:
         d7:ae:83:2f:81:88:61:ff:45:5d:74:14:a7:33:cd:c9:f5:2f:
         44:94:d1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 04:38:02 2026 by rpki-client