Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE67F/7851FE342E4111F1835E893793833773/0RpQ1ePqDchJb47JVhvb5mrHnUw.mft
File:                     0RpQ1ePqDchJb47JVhvb5mrHnUw.mft (raw, json)
Hash identifier:          R4uPrQDknzgASuBIhXxck4DwYUof10TNuoqOvPetkXU=
Subject key identifier:   6E:61:5F:2C:06:DC:D4:3A:99:BB:9D:28:33:CC:A6:99:06:EA:D7:24
Authority key identifier: D1:1A:50:D5:E3:EA:0D:C8:49:6F:8E:C9:56:1B:DB:E6:6A:C7:9D:4C
Certificate issuer:       /CN=A91FE67F/serialNumber=D11A50D5E3EA0DC8496F8EC9561BDBE66AC79D4C
Certificate serial:       1B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0RpQ1ePqDchJb47JVhvb5mrHnUw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE67F/7851FE342E4111F1835E893793833773/0RpQ1ePqDchJb47JVhvb5mrHnUw.mft
Manifest number:          1A
Signing time:             Tue 19 May 2026 08:50:33 +0000
Manifest this update:     Tue 19 May 2026 08:50:33 +0000
Manifest next update:     Tue 26 May 2026 08:50:33 +0000
Files and hashes:         1: 0RpQ1ePqDchJb47JVhvb5mrHnUw.crl (hash: t7g9PuQ6GpspCqEVAXsPV4OADBxixOALfCvV+C7VJS4=)
                          2: 7D1805702E4211F18DDF32E693833773.roa (hash: eAvktFFlPMI5ncO/3br/ixgJ8aaCullrYEFRoA4e5b0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE67F/7851FE342E4111F1835E893793833773/0RpQ1ePqDchJb47JVhvb5mrHnUw.crl
                          rsync://rpki.apnic.net/member_repository/A91FE67F/7851FE342E4111F1835E893793833773/0RpQ1ePqDchJb47JVhvb5mrHnUw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0RpQ1ePqDchJb47JVhvb5mrHnUw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 May 2026 08:50:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE67F, serialNumber=D11A50D5E3EA0DC8496F8EC9561BDBE66AC79D4C
        Validity
            Not Before: May 19 08:50:33 2026 GMT
            Not After : May 26 08:50:33 2026 GMT
        Subject: CN=6a0c2459-e55d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:64:a8:63:80:a8:27:81:7a:01:1f:51:f3:89:
                    42:d8:c2:d6:1c:27:3a:7f:6e:dc:01:4d:bc:82:5d:
                    09:17:90:10:c1:ea:34:ac:4f:36:0b:67:10:f8:6b:
                    69:87:28:5b:32:cc:c7:98:85:e7:cf:72:b8:fc:99:
                    24:f8:69:ec:9a:e6:da:40:a8:8e:70:36:81:84:9e:
                    b7:a8:2f:55:90:35:ca:08:37:a8:f5:f5:a6:89:57:
                    6e:38:7a:09:f4:dd:6e:cb:9f:0c:ee:99:ed:58:42:
                    1f:40:8a:6d:50:d8:56:2d:34:e3:e9:47:eb:8b:ee:
                    5c:86:8e:fc:2c:32:65:f9:11:f1:ac:04:fc:b7:cd:
                    88:ac:e7:01:82:6c:a6:9e:d3:5c:bd:f6:03:29:72:
                    8c:1d:53:e5:5b:fd:5e:15:6c:ac:fd:8c:73:5c:12:
                    d6:5d:56:e5:94:c7:a2:8f:01:18:61:61:b0:46:c4:
                    80:c7:f6:91:93:93:70:8e:08:97:f5:3e:53:0e:e6:
                    06:cc:7b:04:be:a2:1a:e5:25:95:76:70:35:34:97:
                    23:ce:e9:60:b5:4e:11:31:31:4c:d9:00:f6:ae:51:
                    38:5a:83:ef:0f:36:02:b8:8a:75:c6:6e:ad:49:e5:
                    4e:bf:84:84:3d:dd:69:b2:85:92:50:a4:66:61:ca:
                    48:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:61:5F:2C:06:DC:D4:3A:99:BB:9D:28:33:CC:A6:99:06:EA:D7:24
            X509v3 Authority Key Identifier:
                keyid:D1:1A:50:D5:E3:EA:0D:C8:49:6F:8E:C9:56:1B:DB:E6:6A:C7:9D:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE67F/7851FE342E4111F1835E893793833773/0RpQ1ePqDchJb47JVhvb5mrHnUw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0RpQ1ePqDchJb47JVhvb5mrHnUw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE67F/7851FE342E4111F1835E893793833773/0RpQ1ePqDchJb47JVhvb5mrHnUw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:f6:60:62:d3:41:29:51:a8:82:42:3c:62:69:e2:fe:6b:38:
         39:19:de:06:59:39:6b:9d:ed:db:44:2a:b6:5b:7e:1d:13:6f:
         7f:ec:a5:3d:e5:9d:1e:29:de:10:71:01:17:7c:a4:03:0a:21:
         ce:6a:b3:f8:5e:76:14:1b:7d:ec:56:e7:68:97:0a:94:a8:77:
         c9:09:d2:67:e3:30:44:90:05:43:5f:7c:10:fc:e2:f9:5b:8d:
         1a:19:2c:05:67:8d:dd:97:30:73:86:f4:30:b9:0f:61:b4:aa:
         de:8e:32:5b:30:87:73:75:ad:9f:92:2d:bc:96:07:8c:5c:04:
         fe:21:ce:37:d5:32:eb:9d:30:06:e4:0b:97:e2:a2:e9:9d:d2:
         31:56:ef:94:35:a1:18:b5:bc:5e:32:4a:00:a1:02:0d:b8:31:
         a5:a2:8a:e3:5c:92:51:03:e1:6e:9c:7c:ad:8b:f7:24:ad:f7:
         a7:f5:00:ab:75:ec:04:88:09:97:61:f6:2a:50:f6:b6:5a:45:
         41:c4:7e:7c:07:46:de:bf:91:1e:c4:48:94:0e:7d:65:8a:bd:
         35:ee:83:d8:7f:c7:4c:61:37:1a:5c:a8:20:4c:a4:5d:63:07:
         5d:10:1e:77:ea:bd:25:4e:6c:49:22:f8:56:41:78:70:ef:e5:
         8b:5b:d1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:37:50 2026 by rpki-client