Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft
File:                     i0b6Eepu4jUJnkhDPIJJehl7nXw.mft (raw, json)
Hash identifier:          OyMRIr3ALpzbsCYjCqT91KXufuz+dhe6fi33XuoepFk=
Subject key identifier:   AA:D7:C3:B1:10:ED:50:DD:2C:39:DB:76:FF:70:75:CD:84:3E:31:6A
Authority key identifier: 8B:46:FA:11:EA:6E:E2:35:09:9E:48:43:3C:82:49:7A:19:7B:9D:7C
Certificate issuer:       /CN=A91FB03A/serialNumber=8B46FA11EA6EE235099E48433C82497A197B9D7C
Certificate serial:       02CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft
Manifest number:          02C1
Signing time:             Thu 21 May 2026 01:29:25 +0000
Manifest this update:     Thu 21 May 2026 01:29:25 +0000
Manifest next update:     Thu 28 May 2026 01:29:25 +0000
Files and hashes:         1: i0b6Eepu4jUJnkhDPIJJehl7nXw.crl (hash: vu2wl+j+P1JVIiL/g2FcrmVhcoaJfBKne9nYehNPwIc=)
                          2: 0B3B85D63A1B11EDAE662B14C4F9AE02.roa (hash: vysf+JOpL7OvntYiYikMIsDz8nEsAs8IBD8OzimL+Fg=)
                          3: 0BF33B7C3A1B11EDAE662B14C4F9AE02.roa (hash: QQORdPKkCBGXWBMZkno+T8u87+gp990frsFu1rUngIM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.crl
                          rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 01:29:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 719 (0x2cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB03A, serialNumber=8B46FA11EA6EE235099E48433C82497A197B9D7C
        Validity
            Not Before: May 21 01:29:25 2026 GMT
            Not After : May 28 01:29:25 2026 GMT
        Subject: CN=6a0e5ff5-cb72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:50:16:3a:04:c2:07:e3:3b:ea:ac:70:83:b7:
                    8f:23:fe:f1:eb:85:23:79:d0:09:63:6c:ec:ad:e7:
                    28:cd:9f:f0:cd:e8:dd:63:9f:6a:83:67:c7:fb:23:
                    6f:8f:e1:a8:51:42:f9:4b:a7:ef:73:47:08:26:2e:
                    82:61:b8:d4:7c:0f:90:fd:74:99:1e:6f:b4:46:10:
                    44:4f:53:0b:19:e6:fe:ab:61:90:c0:ec:4a:38:b5:
                    98:00:74:0c:bb:29:e5:80:dc:c2:19:bf:71:34:f5:
                    3e:f3:88:bc:3d:c5:53:58:22:f3:06:18:85:6f:c7:
                    49:8d:5d:0b:f3:e5:3f:7b:0a:c6:0b:de:60:d6:1b:
                    8e:ac:eb:04:59:d7:04:ab:80:69:a0:25:b8:ca:a0:
                    96:4c:3a:fd:62:f6:2f:9b:bb:1a:37:d9:a9:18:75:
                    2d:cd:6d:cf:bf:5e:85:f1:c0:43:ee:ed:25:cd:74:
                    51:de:17:87:ed:b4:78:c0:8d:69:75:57:2d:c9:51:
                    05:ea:b4:7a:13:b5:71:2c:19:e7:c1:5f:88:c1:be:
                    0c:b9:88:31:12:28:43:2b:6e:93:be:b8:d7:c6:e5:
                    2c:ae:a5:9e:9c:d8:08:53:fd:b3:a4:52:44:bd:0a:
                    80:e5:8b:99:f4:f0:e5:41:e3:ec:54:bc:0d:81:e9:
                    f9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:D7:C3:B1:10:ED:50:DD:2C:39:DB:76:FF:70:75:CD:84:3E:31:6A
            X509v3 Authority Key Identifier:
                keyid:8B:46:FA:11:EA:6E:E2:35:09:9E:48:43:3C:82:49:7A:19:7B:9D:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:14:0a:8b:3a:2d:78:cb:3e:a1:af:44:f5:b1:95:8d:54:39:
         f9:73:0c:02:68:2b:a1:50:cf:3f:b5:e3:1f:4f:01:27:80:25:
         9d:0b:80:e5:30:0c:d5:6b:d7:6f:dd:9e:26:29:59:f1:a4:3b:
         14:16:77:3c:0d:62:52:bb:5a:db:c3:34:73:21:25:a4:6c:1e:
         6d:7c:87:ca:2d:39:ef:c1:3f:05:50:4c:b9:81:df:7f:3c:e2:
         e2:a6:22:45:d3:ce:5a:e5:3f:cf:80:3f:e9:43:3b:ab:15:de:
         19:39:e6:7b:7e:0f:82:e8:45:86:56:71:79:ff:e8:78:29:14:
         87:88:27:69:c6:64:55:68:05:7c:df:48:d7:32:54:01:13:3c:
         8f:57:12:3a:92:25:ba:3c:65:4c:bc:49:d3:95:b9:9b:9b:59:
         d0:cd:39:04:50:43:e0:d2:14:3c:c5:d5:ca:75:48:79:75:6a:
         a1:a4:49:bd:5f:70:d4:e5:1f:86:dc:47:dc:af:a3:66:57:98:
         61:6d:4c:2e:05:19:ae:1c:63:fc:86:9e:9d:0b:78:86:99:6c:
         57:22:0d:c5:1f:73:c1:dd:35:14:05:7b:b2:d6:25:b3:a4:4f:
         93:32:75:a3:3a:75:06:b7:79:cf:26:5f:aa:a9:df:77:6a:f9:
         76:5a:33:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:18:04 2026 by rpki-client