Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft
File:                     1bScAI9ih18VJth200lAoJsOnW0.mft (raw, json)
Hash identifier:          sse9hOUhLWLnw99KMTTOZRgYCzzOfG15roL5vIQzBx0=
Subject key identifier:   8A:3A:B8:13:FC:1C:01:85:DB:95:0A:28:DC:07:46:85:38:03:83:AD
Authority key identifier: D5:B4:9C:00:8F:62:87:5F:15:26:D8:76:D3:49:40:A0:9B:0E:9D:6D
Certificate issuer:       /CN=A91FB434/serialNumber=D5B49C008F62875F1526D876D34940A09B0E9D6D
Certificate serial:       160C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bScAI9ih18VJth200lAoJsOnW0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft
Manifest number:          15F4
Signing time:             Wed 20 May 2026 16:43:14 +0000
Manifest this update:     Wed 20 May 2026 16:43:13 +0000
Manifest next update:     Wed 27 May 2026 16:43:13 +0000
Files and hashes:         1: 1bScAI9ih18VJth200lAoJsOnW0.crl (hash: GLYS/MyPIEn0cX2JjQ7QGhX8nj9H+ACAXVr/+qiIkmk=)
                          2: EC796D6C42D411E88EC29742C4F9AE02.roa (hash: /XKpZWxHQtpMnU+ZHwwN48hOrY+K7y+jnl3ND5plgMo=)
                          3: EB843B92329A11EE89CD8544C4F9AE02.roa (hash: CLUWcZt+49NeH6K62G6A+1bRGb2EpGeJVNtijAJKCTI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.crl
                          rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bScAI9ih18VJth200lAoJsOnW0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 16:43:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5644 (0x160c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB434, serialNumber=D5B49C008F62875F1526D876D34940A09B0E9D6D
        Validity
            Not Before: May 20 16:43:13 2026 GMT
            Not After : May 27 16:43:13 2026 GMT
        Subject: CN=6a0de4a2-fd37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:96:47:91:dd:b8:c9:6b:b5:7f:e9:bd:6b:83:
                    c8:6b:02:ab:85:8a:0d:8d:56:d2:dc:57:56:d4:6b:
                    08:2a:ec:1c:81:0d:32:7a:b7:2e:36:96:e8:5f:ab:
                    60:75:da:d8:5e:42:f1:c7:99:99:70:43:e8:c8:ab:
                    de:ec:fb:23:f4:d2:67:62:e8:77:e3:85:4d:27:07:
                    e4:e7:e7:05:85:d9:6d:eb:02:b0:9c:a1:1d:f3:db:
                    0c:64:ee:e5:0d:2c:06:a3:25:69:09:5c:63:c5:ad:
                    55:f9:76:04:26:63:5c:1d:b7:0a:1b:2e:5d:f7:83:
                    d3:8e:ec:01:1e:f2:ee:72:33:57:ea:44:c1:29:89:
                    cb:c6:f7:81:6f:fc:a4:22:b7:89:bd:fe:e7:ba:df:
                    79:eb:4b:71:55:3f:ae:8d:06:03:e6:58:c5:9f:79:
                    d4:02:14:11:03:6e:0c:db:fa:73:7b:4a:1d:95:d7:
                    85:e4:3f:58:fc:a8:34:ca:61:70:ca:ff:03:84:50:
                    37:5e:a7:de:25:36:65:01:82:a8:bc:72:1c:60:f7:
                    a2:aa:22:ab:d5:58:4e:0e:92:2a:37:89:fb:6f:8f:
                    7b:d8:90:fb:04:b7:ab:6c:2b:16:2b:c8:43:32:f9:
                    9d:3c:4c:b2:1c:79:1f:92:e4:ca:40:94:87:93:be:
                    5d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:3A:B8:13:FC:1C:01:85:DB:95:0A:28:DC:07:46:85:38:03:83:AD
            X509v3 Authority Key Identifier:
                keyid:D5:B4:9C:00:8F:62:87:5F:15:26:D8:76:D3:49:40:A0:9B:0E:9D:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bScAI9ih18VJth200lAoJsOnW0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:64:ee:78:b1:5d:19:de:ff:33:17:7e:70:5e:5f:76:84:07:
         59:a7:84:9d:62:18:99:75:a1:e9:9f:4e:91:d4:98:e6:61:fb:
         79:a4:d8:a6:6c:97:8c:ad:05:ad:39:6c:26:0e:1f:1b:fb:15:
         30:5b:8e:c9:3b:fd:96:c6:1a:94:94:f4:fb:25:e0:a8:8a:06:
         c5:44:68:3e:d1:69:79:c9:07:13:f5:0b:28:bf:81:e2:a6:11:
         9e:46:a8:79:45:ce:e7:69:e6:e6:94:12:28:fe:45:2a:19:1f:
         6a:82:a1:fa:7c:c7:f0:7f:8f:55:3f:ed:dc:5b:8a:88:0f:de:
         7e:96:33:fd:bf:bd:98:72:6b:32:7b:2c:7b:55:e9:1e:72:49:
         42:59:03:44:63:4f:4b:4e:2f:63:35:18:8f:a3:2d:cd:cc:34:
         b4:d0:3c:c2:7c:c7:05:87:86:91:f0:65:f0:0f:8b:90:ce:49:
         5f:ac:b2:82:aa:21:2a:75:92:8e:62:d8:37:1a:77:49:97:51:
         4c:0e:11:a0:73:53:42:1f:90:a6:98:8f:bb:11:62:0c:71:8f:
         67:0a:c2:08:eb:f1:0e:a1:f3:d6:cc:3f:92:5c:49:17:e6:f9:
         b1:74:7b:44:a8:d7:c1:af:b0:09:43:6d:72:bb:30:7e:99:ec:
         1d:07:17:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:36:38 2026 by rpki-client