Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft
File:                     Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft (raw, json)
Hash identifier:          F4ILrcf2J+da3HZRUNH647LyS3Itu3PfM4T9o76cYSI=
Subject key identifier:   57:08:41:EF:4B:C1:64:1C:BF:31:6E:EE:BD:0F:6D:6A:71:AD:BA:B4
Authority key identifier: 29:AD:B3:9B:62:0E:AE:3C:B8:AF:CA:2C:A1:85:F5:C4:87:6F:D0:43
Certificate issuer:       /CN=A91FC985/serialNumber=29ADB39B620EAE3CB8AFCA2CA185F5C4876FD043
Certificate serial:       ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ka2zm2IOrjy4r8osoYX1xIdv0EM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft
Manifest number:          E9
Signing time:             Thu 21 May 2026 06:34:00 +0000
Manifest this update:     Thu 21 May 2026 06:33:59 +0000
Manifest next update:     Thu 28 May 2026 06:33:59 +0000
Files and hashes:         1: Ka2zm2IOrjy4r8osoYX1xIdv0EM.crl (hash: pREPO6pyaZBa5vFdBCHOtTqbc27USbNNA8AXCsu2QSU=)
                          2: DA3E289CF5B811EFA1046714C4F9AE02.roa (hash: oaeasOGheSroKPV3LiPVQfpD09ef36G8xHY2SVCQJWs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.crl
                          rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ka2zm2IOrjy4r8osoYX1xIdv0EM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 06:33:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 237 (0xed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FC985, serialNumber=29ADB39B620EAE3CB8AFCA2CA185F5C4876FD043
        Validity
            Not Before: May 21 06:33:59 2026 GMT
            Not After : May 28 06:33:59 2026 GMT
        Subject: CN=6a0ea758-0102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:fc:9d:b2:55:18:97:43:1b:80:97:50:0f:df:
                    09:f7:d1:2b:78:a8:21:d4:92:de:ea:34:3f:dc:cb:
                    3f:a9:16:6c:16:07:70:26:4e:c4:0e:e3:43:3d:58:
                    53:ef:78:a7:77:de:b1:fb:4b:2e:49:57:0a:cd:6d:
                    4a:71:31:cb:dc:09:ad:0e:8d:38:ed:5e:bf:74:f7:
                    bf:89:b3:89:7d:2a:0b:24:51:15:c3:e0:97:33:a2:
                    3c:47:c6:8e:c5:a6:a8:4f:7f:e2:fe:85:39:95:ab:
                    42:55:5b:35:be:87:12:92:d8:1b:a5:80:4b:3d:77:
                    7d:f4:39:36:7b:7b:91:7d:58:c1:29:ac:7b:72:3f:
                    d4:0d:5d:e9:e2:b8:6c:e5:17:34:58:0a:32:6a:5a:
                    e3:10:45:b7:8d:a4:cf:91:1e:cd:47:e5:f6:34:a4:
                    96:49:16:ff:fd:b7:ca:da:15:a6:8c:d4:0d:27:d1:
                    1f:17:99:b4:51:89:9f:37:98:3a:c2:92:fb:f5:70:
                    b8:37:46:8b:2e:50:d5:36:d1:f3:b3:71:b3:d0:02:
                    bf:3e:68:6c:90:9a:06:34:00:fc:af:b7:93:81:c1:
                    9c:ae:33:4d:d4:86:b2:45:d5:a1:ba:a1:e7:67:e7:
                    ee:95:8f:71:30:7b:f9:97:86:0a:ec:a3:56:16:6b:
                    44:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:08:41:EF:4B:C1:64:1C:BF:31:6E:EE:BD:0F:6D:6A:71:AD:BA:B4
            X509v3 Authority Key Identifier:
                keyid:29:AD:B3:9B:62:0E:AE:3C:B8:AF:CA:2C:A1:85:F5:C4:87:6F:D0:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ka2zm2IOrjy4r8osoYX1xIdv0EM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:c6:58:3a:51:0f:c9:c5:7d:0c:12:c9:fd:06:ae:21:7d:88:
         27:2f:96:b3:ea:05:cd:e0:b5:11:e7:11:c1:4a:6d:2e:9d:79:
         ff:08:7b:21:3b:41:0b:31:37:f1:29:18:f2:64:bb:87:54:e7:
         77:75:28:08:c4:c0:e6:4f:68:f4:40:54:ee:02:2e:ff:d7:66:
         c2:ac:f6:c7:49:cd:51:1b:a9:c2:3e:dd:37:a0:ea:93:ab:24:
         12:75:2b:7c:9b:41:8d:47:ee:ff:0e:a9:7b:16:fe:59:f8:8f:
         f3:1c:dd:ac:ff:c9:be:b2:4d:bf:8a:8a:48:0e:46:4c:10:8b:
         eb:c2:d7:45:55:c0:7a:2a:4c:cc:ab:ed:2b:e7:15:9d:17:38:
         6f:47:e3:03:e0:47:6a:ee:44:55:4f:b0:84:fd:5e:92:31:b0:
         e9:eb:4e:be:96:64:63:86:40:a0:ad:f9:5c:af:cc:e9:4f:38:
         f5:7f:30:58:32:56:d8:b3:b4:49:21:fa:1f:bd:7c:4f:c8:29:
         26:71:a5:06:44:cf:8d:60:42:05:48:89:3f:2f:99:69:56:d4:
         06:73:66:eb:f9:d3:df:04:1c:f5:5a:60:0f:30:f6:06:86:31:
         7a:fb:b8:47:75:cc:2a:b1:7b:c3:4e:87:f4:13:e0:54:64:19:
         c2:b0:d6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 12:58:27 2026 by rpki-client