Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft
File:                     I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft (raw, json)
Hash identifier:          6PZeX9Y1oVICImNH9PhhMi5Mar80jX+enz+RMUi6IU0=
Subject key identifier:   51:0F:E3:52:33:7E:50:71:6C:D6:4F:BA:11:08:77:96:28:D7:FF:E7
Authority key identifier: 23:C0:B2:D7:AC:E1:09:D3:DF:E8:3A:EB:EF:2E:A3:14:9C:5C:AC:17
Certificate issuer:       /CN=A91122B3/serialNumber=23C0B2D7ACE109D3DFE83AEBEF2EA3149C5CAC17
Certificate serial:       0150
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft
Manifest number:          014B
Signing time:             Wed 13 May 2026 05:17:41 +0000
Manifest this update:     Wed 13 May 2026 05:17:40 +0000
Manifest next update:     Wed 20 May 2026 05:17:40 +0000
Files and hashes:         1: I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl (hash: 73HLfUhQ9IqN5B5QpakjKT0gWeZ8jedFiBbe4EuQpsw=)
                          2: 43A05F96ABF111F0AF8F880CC4F9AE02.roa (hash: EDFQEdiEmOIwcAFLSsj8eYAZyjqk/sVRS9qA9gJE9Ok=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl
                          rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 05:17:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 336 (0x150)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91122B3, serialNumber=23C0B2D7ACE109D3DFE83AEBEF2EA3149C5CAC17
        Validity
            Not Before: May 13 05:17:40 2026 GMT
            Not After : May 20 05:17:40 2026 GMT
        Subject: CN=6a040975-365c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4b:4b:30:14:77:e3:d4:ba:2b:9e:ea:40:b2:
                    94:3e:3b:9e:72:fb:41:01:2f:34:d9:ae:7f:5f:dc:
                    1c:c7:66:03:31:83:bb:6d:a3:1c:69:06:e7:34:48:
                    ca:60:76:8b:c8:39:55:44:b9:08:38:3b:54:10:63:
                    cc:88:e1:1a:36:14:41:2d:e2:a4:37:6f:e3:45:f3:
                    9b:5c:8b:f4:6b:dc:45:f3:67:f3:e1:be:66:06:02:
                    b3:67:d8:fa:63:14:66:ae:5c:e7:ed:b0:ea:06:01:
                    2e:b1:5d:17:0d:18:ad:f2:d7:c6:39:ae:61:9d:13:
                    3d:c9:3b:47:a1:31:4a:a6:d6:e0:06:ee:52:2b:23:
                    8a:07:34:47:b9:c5:af:5f:3a:50:6f:a1:46:70:06:
                    6d:f9:2b:16:2d:42:fa:9a:74:d1:23:38:91:cc:70:
                    02:8c:75:8a:65:a6:6f:bf:a8:84:02:a8:6f:d7:b5:
                    da:65:a8:99:6e:56:53:d7:3d:b5:f8:61:75:d9:0a:
                    72:c5:b4:df:71:bc:2b:5b:bb:b1:04:2a:02:98:28:
                    7f:83:95:d0:e1:66:75:a6:75:1d:69:03:af:8a:b3:
                    49:b1:80:4f:6c:ab:bd:03:92:68:20:92:d4:db:8d:
                    ce:c0:4f:5b:e7:cb:b6:d6:ac:db:98:de:43:67:93:
                    a8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:0F:E3:52:33:7E:50:71:6C:D6:4F:BA:11:08:77:96:28:D7:FF:E7
            X509v3 Authority Key Identifier:
                keyid:23:C0:B2:D7:AC:E1:09:D3:DF:E8:3A:EB:EF:2E:A3:14:9C:5C:AC:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:e9:f0:11:01:be:aa:35:ad:75:af:d9:dd:13:83:0f:7f:25:
         90:5c:af:c9:2d:ae:f2:f4:c6:b0:89:53:34:1c:f3:2f:a2:a9:
         c9:b2:a8:d9:05:2c:49:f0:1e:8b:80:9d:cf:b7:9d:7c:7a:fb:
         a3:fc:a8:b1:76:bc:37:7d:7a:0c:f1:96:73:b3:c1:36:eb:95:
         c5:e7:e0:a3:d6:94:cf:f1:2a:8a:9d:ae:17:2d:a7:c8:64:fd:
         e3:32:2e:bf:e3:41:ea:17:0a:16:d1:4c:f1:f2:96:16:55:9a:
         b4:97:c8:cf:71:79:95:b2:f7:36:ab:b3:c6:a7:53:5e:3b:95:
         f6:74:a6:fd:57:a1:e2:9d:1a:71:3f:e5:0b:e2:15:d6:fd:a3:
         01:14:c4:a9:1d:c1:b9:9b:3f:5b:be:b2:3b:0e:e8:f4:24:42:
         4d:47:2f:b7:45:2b:6b:f2:12:d3:69:ad:9f:fb:e1:36:b1:e2:
         9d:52:e2:dd:94:c8:20:5a:02:24:4e:b8:1d:59:ac:8c:7b:57:
         dc:0e:c0:1c:07:12:1d:15:a9:92:7b:2c:a8:67:99:ff:d0:cd:
         bf:82:5f:ce:78:f7:d4:0a:c8:00:cd:c4:ae:0d:64:65:8d:71:
         4b:1d:49:74:e1:91:b8:e9:a5:80:fb:39:24:41:07:d5:30:47:
         8b:35:10:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:10:04 2026 by rpki-client