Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft
File:                     9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft (raw, json)
Hash identifier:          M7mfI+Ifs8lvpgO0/YocysKFfvYanC9XkPS/ng25WoQ=
Subject key identifier:   0E:DE:F7:C0:6A:50:56:F4:2D:99:CC:B0:AB:CD:1F:B0:41:96:29:4F
Authority key identifier: F5:B1:17:05:4A:F5:09:C2:C3:33:69:DA:96:1F:44:6D:DC:AB:83:42
Certificate issuer:       /CN=A91FA5A2/serialNumber=F5B117054AF509C2C33369DA961F446DDCAB8342
Certificate serial:       01EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft
Manifest number:          01DF
Signing time:             Fri 29 May 2026 03:29:49 +0000
Manifest this update:     Fri 29 May 2026 03:29:49 +0000
Manifest next update:     Fri 05 Jun 2026 03:29:49 +0000
Files and hashes:         1: 9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl (hash: m1AS1VO/udwHThDQbEckZ3Z3+eR3e3NhAyh5rXEj/UI=)
                          2: 9FE80B2898F711EE87DF6E1FC4F9AE02.roa (hash: arCyI6WOk9LgFnQELoYxClkR3V434NgEayNtabuOGMQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl
                          rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Jun 2026 03:29:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 491 (0x1eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA5A2, serialNumber=F5B117054AF509C2C33369DA961F446DDCAB8342
        Validity
            Not Before: May 29 03:29:49 2026 GMT
            Not After : Jun  5 03:29:49 2026 GMT
        Subject: CN=6a19082d-0faf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:57:c4:45:57:d3:63:0a:f8:8f:95:51:6a:16:
                    f5:69:12:de:33:4f:a2:db:cc:c1:cd:e7:b1:b0:3a:
                    37:87:30:58:7f:9e:ae:88:65:38:12:53:c0:a3:0b:
                    31:6e:4a:97:d2:03:22:df:01:d5:2e:a8:f6:05:67:
                    b4:de:28:62:e6:03:6e:02:27:5d:a1:8b:74:a8:1a:
                    1a:d0:6f:b6:2a:42:35:5b:b5:32:29:cf:49:1a:71:
                    90:bd:c2:cb:fa:4e:46:8f:8c:52:0f:e8:ed:d2:38:
                    80:34:42:17:3f:cf:c7:9b:26:66:96:7b:e2:2d:68:
                    8f:4a:04:e9:52:ed:ba:20:4f:cd:02:09:b5:e3:6f:
                    33:18:c4:e9:8b:cd:10:23:b7:6e:8d:4e:8c:1d:90:
                    c8:89:71:fc:a0:27:65:6c:a3:5a:6f:ba:52:b3:c8:
                    e3:29:5e:27:26:e8:3b:44:f5:5c:5f:d8:94:43:37:
                    50:82:d7:b4:7b:49:00:b3:ea:65:44:bd:fb:1e:39:
                    db:82:d2:61:b7:28:88:fb:6c:18:2f:ef:fe:b8:e1:
                    5f:dd:1f:5e:60:d6:e2:d3:f2:bf:bd:d0:0c:8d:7f:
                    e3:c2:cd:1d:5e:de:8f:3a:3c:1e:5c:bf:d9:70:d5:
                    9c:47:7e:c6:49:c9:23:45:fb:18:d7:ee:a2:4a:ad:
                    14:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:DE:F7:C0:6A:50:56:F4:2D:99:CC:B0:AB:CD:1F:B0:41:96:29:4F
            X509v3 Authority Key Identifier:
                keyid:F5:B1:17:05:4A:F5:09:C2:C3:33:69:DA:96:1F:44:6D:DC:AB:83:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:7e:0e:ef:8c:45:c8:60:e6:6c:b0:35:ac:84:2f:40:1c:87:
         de:b5:b2:1e:26:47:e5:29:1e:be:c8:99:93:f8:1c:f4:99:bf:
         88:11:7c:b9:9b:dd:73:ad:ea:d1:f1:c8:18:4e:e2:18:79:7c:
         9f:40:c4:18:b4:e7:17:0c:3d:7a:c1:64:1d:29:7d:84:ed:bb:
         d2:33:79:b6:a6:65:a3:28:90:cc:8a:7c:f5:c3:d5:fd:0d:e3:
         8b:65:65:d7:53:30:88:0c:b2:6c:38:28:48:0e:0a:0d:47:8f:
         74:9a:78:1e:d3:71:2a:2c:f8:ec:22:79:f3:6e:c3:aa:d5:3a:
         88:b6:41:df:b4:c5:c0:8d:ec:26:5d:9b:b9:58:bf:18:ee:f8:
         72:e1:2f:71:b5:73:5d:1e:e9:00:93:63:d2:1a:57:da:81:a7:
         68:af:16:a4:c2:2e:19:7c:b9:49:50:e8:3f:17:16:50:cf:62:
         6d:08:7f:0d:84:c6:78:9d:8a:2b:54:94:21:2b:08:dc:df:49:
         19:56:1c:44:21:19:21:26:77:3e:9f:57:78:8f:5c:d1:81:34:
         e8:04:2c:44:8d:04:a1:14:6b:bb:9d:7e:4c:4f:92:06:8a:11:
         0b:63:6f:51:79:37:a9:05:c4:b4:86:4a:32:89:27:42:75:3c:
         73:ae:fe:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 17:04:47 2026 by rpki-client