Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.mft
File:                     7R5jxMqFIE7LrSbOLJRiZF4LHK0.mft (raw, json)
Hash identifier:          TyZqgwmCbiSza8kZaIZtU56bTkEA9PNRlsM1JwCl91A=
Subject key identifier:   20:87:BA:83:E4:94:1F:D9:D0:3F:F9:CE:67:2C:96:60:A1:CA:03:CF
Authority key identifier: ED:1E:63:C4:CA:85:20:4E:CB:AD:26:CE:2C:94:62:64:5E:0B:1C:AD
Certificate issuer:       /CN=A91F8806/serialNumber=ED1E63C4CA85204ECBAD26CE2C9462645E0B1CAD
Certificate serial:       01BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R5jxMqFIE7LrSbOLJRiZF4LHK0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.mft
Manifest number:          01B2
Signing time:             Thu 21 May 2026 04:14:31 +0000
Manifest this update:     Thu 21 May 2026 04:14:30 +0000
Manifest next update:     Thu 28 May 2026 04:14:30 +0000
Files and hashes:         1: 7R5jxMqFIE7LrSbOLJRiZF4LHK0.crl (hash: 57xzxouOwZXm7dhvf21/3L3Q9DyXXEhjy1qdFNnMvaI=)
                          2: B4D99056FF2511F0989D8DC686EE528E.roa (hash: innZf7EsNIXw7HADa9taW/ScYgdd9jVos0hP3W/VhWE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.crl
                          rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R5jxMqFIE7LrSbOLJRiZF4LHK0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 04:14:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 445 (0x1bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8806, serialNumber=ED1E63C4CA85204ECBAD26CE2C9462645E0B1CAD
        Validity
            Not Before: May 21 04:14:30 2026 GMT
            Not After : May 28 04:14:30 2026 GMT
        Subject: CN=6a0e86a7-f8fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:00:bc:fe:ee:4e:da:27:f4:87:dc:ac:c3:2b:
                    1d:6c:0a:ef:49:85:fd:d0:96:33:00:06:8b:a7:c8:
                    44:af:7a:86:f6:82:de:74:17:ab:0b:3a:32:92:b5:
                    e8:bb:f7:18:1f:31:f0:44:ee:41:71:5c:55:4f:39:
                    02:b1:47:41:02:c4:3c:b2:64:67:d3:dc:4a:26:e4:
                    55:07:0f:b9:31:11:63:71:56:48:4d:9c:13:a9:68:
                    a8:2b:26:46:80:00:79:9e:b7:bd:66:80:c6:b2:7f:
                    42:37:47:3f:bc:33:92:b5:65:9b:a7:0d:9f:b0:07:
                    b8:8b:bb:22:ee:37:99:fa:7e:63:08:16:6f:00:13:
                    5c:62:67:e5:8a:3c:70:07:1e:b1:7b:dc:3c:49:48:
                    d6:55:72:15:10:b0:62:90:ed:c2:e5:20:84:85:1a:
                    58:4e:58:b8:6f:8f:b7:b9:4f:ab:1e:15:b6:f4:8d:
                    b2:a6:1b:38:44:05:39:61:97:03:31:e2:89:a3:01:
                    dd:92:ec:eb:3c:0f:59:ee:dc:a6:a2:ef:e6:1c:0c:
                    6f:70:a4:d5:da:74:34:44:3e:15:d2:ba:ba:11:77:
                    ca:d5:9f:b8:26:bf:95:b5:29:25:f5:13:15:4b:c2:
                    2c:56:56:48:ab:94:2b:d9:36:99:9d:92:50:92:1b:
                    6f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:87:BA:83:E4:94:1F:D9:D0:3F:F9:CE:67:2C:96:60:A1:CA:03:CF
            X509v3 Authority Key Identifier:
                keyid:ED:1E:63:C4:CA:85:20:4E:CB:AD:26:CE:2C:94:62:64:5E:0B:1C:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R5jxMqFIE7LrSbOLJRiZF4LHK0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:25:fb:fb:59:32:ab:27:6c:a9:6e:1c:10:1b:0e:95:b7:e3:
         a8:fe:d8:d6:f2:5d:39:2a:31:ec:08:0e:9a:7e:59:14:d5:48:
         49:0a:42:ee:87:75:d0:c7:ed:01:cb:9f:d6:57:d0:ed:70:64:
         67:3e:a2:4c:a0:1a:c4:d0:93:89:11:ef:51:52:fb:1c:18:11:
         3f:01:8a:1c:ac:f4:39:54:a2:3f:f9:a3:5d:3b:bb:c4:af:99:
         93:1c:9c:b1:a3:63:2c:92:11:89:f6:4f:49:c6:ec:b5:48:d4:
         21:b6:78:b4:1e:d4:5b:fa:3f:eb:79:c5:fd:64:16:6e:8f:d8:
         53:b0:06:e8:ab:50:bc:46:18:18:34:41:65:68:3d:31:ec:b0:
         9d:ba:8e:11:e7:97:a8:89:5a:26:71:37:fb:46:29:cf:57:fa:
         98:d3:32:65:fd:13:5c:b4:ae:f4:d6:10:a5:b5:27:08:69:23:
         eb:48:9f:d8:5c:44:3e:23:9e:28:06:36:8a:fd:b4:de:50:6e:
         27:b7:c1:69:b3:52:8d:04:bf:2e:8a:7e:08:b4:df:27:e5:6c:
         2d:72:c9:d3:df:ee:6e:f8:a4:e0:4b:c9:1e:7b:67:7e:b8:61:
         2b:0d:4a:26:85:5d:2e:80:1e:d5:ce:b2:67:23:d1:5c:4b:1b:
         47:f9:dc:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:58:30 2026 by rpki-client