Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft
File:                     sXSj1LqbR24rMeR8cqKY0ETZh4U.mft (raw, json)
Hash identifier:          f/7J/HB19CeInDdJM8Fa9USzzp87jPdbN1Bcu7H8Ke0=
Subject key identifier:   D2:AA:C4:A5:0B:98:AC:BB:0F:E4:F6:C2:E2:78:83:EB:03:81:3C:A2
Authority key identifier: B1:74:A3:D4:BA:9B:47:6E:2B:31:E4:7C:72:A2:98:D0:44:D9:87:85
Certificate issuer:       /CN=A91FBC89/serialNumber=B174A3D4BA9B476E2B31E47C72A298D044D98785
Certificate serial:       0116
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXSj1LqbR24rMeR8cqKY0ETZh4U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft
Manifest number:          0104
Signing time:             Thu 21 May 2026 06:31:42 +0000
Manifest this update:     Thu 21 May 2026 06:31:41 +0000
Manifest next update:     Thu 28 May 2026 06:31:41 +0000
Files and hashes:         1: sXSj1LqbR24rMeR8cqKY0ETZh4U.crl (hash: HedyRvjg79D/JYkNPcmX7vOqI+XyqYaQQ2+DjBJ01Ok=)
                          2: 84E249E030D711F1A9283A38AD833773.roa (hash: aZtgUaUAy3lxVZGUWdm5XWesfC7FySUXNi8hLQd8w2w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.crl
                          rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXSj1LqbR24rMeR8cqKY0ETZh4U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 04:46:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 278 (0x116)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FBC89, serialNumber=B174A3D4BA9B476E2B31E47C72A298D044D98785
        Validity
            Not Before: May 21 06:31:41 2026 GMT
            Not After : May 28 06:31:41 2026 GMT
        Subject: CN=6a0ea6cd-364b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4f:39:ed:73:79:64:df:f4:07:7b:7e:64:c8:
                    95:26:fc:2f:27:fa:c2:ad:a0:a8:43:88:91:58:6b:
                    72:7a:3b:f8:1d:43:47:f3:83:8c:4c:e7:37:c6:e3:
                    aa:69:ef:db:f3:5d:52:ee:90:d4:b2:82:87:05:d5:
                    3d:b2:31:d0:42:81:a2:8f:51:82:76:10:89:8b:a7:
                    ac:fe:3c:d7:56:af:6a:80:1d:d6:df:24:9c:c5:b2:
                    33:f4:e9:59:2d:ec:1b:fa:61:8e:5d:a6:bc:6e:f5:
                    d8:84:80:14:9b:c6:a3:d0:4c:dc:a2:4d:86:78:38:
                    b7:9d:d3:42:2d:b9:f2:78:65:b4:ef:dc:1d:0c:02:
                    0b:07:2d:9e:32:cd:86:68:ff:3f:78:5d:c3:69:3a:
                    b0:12:ae:8a:ad:93:82:bf:35:e8:bd:83:ac:c6:cc:
                    09:66:36:dd:f2:fc:bb:af:ee:e2:97:33:ea:90:2b:
                    23:dd:4b:0c:c2:dc:e6:cf:6f:ee:0f:8f:9a:40:b9:
                    8e:1d:e3:2e:d8:f6:0b:bb:a8:f6:9f:d0:c7:cf:0d:
                    ff:21:96:96:4c:42:5a:00:43:93:65:57:d8:a6:e7:
                    17:28:df:44:8c:39:9e:f6:bc:b7:b6:75:41:ed:8d:
                    7b:46:1a:3f:3c:f4:ad:c3:c1:c6:5e:f6:6e:03:46:
                    fc:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:AA:C4:A5:0B:98:AC:BB:0F:E4:F6:C2:E2:78:83:EB:03:81:3C:A2
            X509v3 Authority Key Identifier:
                keyid:B1:74:A3:D4:BA:9B:47:6E:2B:31:E4:7C:72:A2:98:D0:44:D9:87:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXSj1LqbR24rMeR8cqKY0ETZh4U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:ec:ce:b4:d5:df:f8:f6:8b:1f:7d:77:f9:52:89:36:70:a0:
         8e:2a:26:b8:e0:47:b0:a6:dc:e4:6c:7d:2e:c7:51:3d:2e:b6:
         ea:af:1e:33:c3:e0:f4:4a:f7:8b:66:0e:81:fb:44:c7:91:6a:
         70:6d:42:ec:71:1c:7b:7e:60:8b:03:a8:73:9b:a1:3f:8c:04:
         4c:bb:d0:fb:27:8c:c9:33:b3:34:be:98:65:7e:a5:48:c9:05:
         ce:39:65:04:94:7f:3f:7e:15:dd:9a:72:21:4f:a1:21:fb:55:
         b4:1e:a4:4c:6e:2e:bd:d7:c4:7a:be:71:47:be:51:64:fa:ef:
         5c:bf:d8:0e:f4:6e:cb:d1:2a:89:9d:c5:4a:a5:31:58:76:22:
         11:0a:e7:95:46:d8:b1:06:06:c7:0b:4b:8c:ac:8e:ee:05:ff:
         6e:62:44:95:74:18:1b:3e:f3:53:eb:ec:e0:a0:77:0e:e6:07:
         e5:c2:fc:a1:ab:83:dd:1d:85:3f:ac:cc:06:a1:4c:b8:11:63:
         95:91:69:65:76:a3:3e:3c:ad:4a:55:8b:15:ed:26:31:fd:83:
         da:00:b3:64:cf:9a:60:39:66:8d:e8:5a:92:7e:ec:89:9b:03:
         bc:ba:9d:e6:e2:80:22:b2:68:06:c1:0f:72:2a:9b:fc:57:f7:
         89:31:5e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:13 2026 by rpki-client