Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft
File:                     A4zy4oB33yytpFdW-12ZpuJA_Qk.mft (raw, json)
Hash identifier:          b26w0D1/liHowioQA9Dtg6JfJqF2+KcqA0wrYIY8cYQ=
Subject key identifier:   8F:39:2B:68:73:C3:55:72:26:0C:7A:8E:73:91:73:99:79:00:C4:C3
Authority key identifier: 03:8C:F2:E2:80:77:DF:2C:AD:A4:57:56:FB:5D:99:A6:E2:40:FD:09
Certificate issuer:       /CN=A9112CEC/serialNumber=038CF2E28077DF2CADA45756FB5D99A6E240FD09
Certificate serial:       354A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4zy4oB33yytpFdW-12ZpuJA_Qk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft
Manifest number:          353E
Signing time:             Tue 12 May 2026 15:09:09 +0000
Manifest this update:     Tue 12 May 2026 15:09:08 +0000
Manifest next update:     Tue 19 May 2026 15:09:08 +0000
Files and hashes:         1: A4zy4oB33yytpFdW-12ZpuJA_Qk.crl (hash: WU0t7xSyH+9BfDDYvEAFTy6XWx7+JqCksn1TEJ7VVVM=)
                          2: 55A4C5C004AA11E8935B7021C4F9AE02.roa (hash: H6okVBbXA5R44ceAsB8vN/16AqSmiHbSqzPIsnHvUSY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.crl
                          rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4zy4oB33yytpFdW-12ZpuJA_Qk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:09:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13642 (0x354a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112CEC, serialNumber=038CF2E28077DF2CADA45756FB5D99A6E240FD09
        Validity
            Not Before: May 12 15:09:08 2026 GMT
            Not After : May 19 15:09:08 2026 GMT
        Subject: CN=6a034295-18c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:71:4c:d0:5f:4b:98:db:f2:c2:85:70:84:fb:
                    88:8f:84:59:c9:de:a1:4c:a2:10:fa:94:1b:33:ab:
                    7c:b0:df:23:2a:ac:2a:22:4c:f0:11:ad:64:31:f9:
                    95:0f:bc:4a:a6:2f:a1:d5:16:90:2e:f5:fc:94:d1:
                    9d:87:79:b4:66:af:02:f3:79:71:26:6d:c9:fd:b4:
                    b0:bd:17:e2:2e:be:5a:d5:48:ad:73:9e:97:ca:d3:
                    c7:99:28:0b:81:d8:d3:79:4f:21:5a:4f:cd:ad:ff:
                    05:26:e5:f8:ac:3b:47:72:79:44:23:2e:3a:8e:a2:
                    c9:4f:1a:52:f2:ad:1f:06:a3:1d:c4:16:c2:4f:8c:
                    9c:3a:ba:7e:04:19:e6:07:c2:d3:eb:cd:d5:c8:66:
                    0d:48:c0:26:bf:42:ca:94:07:2f:fc:83:05:54:f2:
                    f6:66:91:91:74:34:f3:09:fc:53:0c:06:1a:4d:b6:
                    7a:86:ed:f5:67:c4:81:c2:4a:a1:ef:3f:27:39:ac:
                    ab:97:26:cb:3f:77:22:b5:88:ac:93:f0:54:8e:09:
                    fd:03:13:59:1e:35:90:42:69:fe:e4:1e:99:25:9b:
                    67:77:fb:6b:5e:f6:30:14:c8:3f:af:e7:35:a8:09:
                    9a:2d:47:d4:13:56:0a:43:19:6b:19:81:2b:48:66:
                    26:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:39:2B:68:73:C3:55:72:26:0C:7A:8E:73:91:73:99:79:00:C4:C3
            X509v3 Authority Key Identifier:
                keyid:03:8C:F2:E2:80:77:DF:2C:AD:A4:57:56:FB:5D:99:A6:E2:40:FD:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4zy4oB33yytpFdW-12ZpuJA_Qk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:f0:57:69:06:e6:70:05:2f:cd:45:c6:0c:33:11:71:94:0e:
         c9:48:48:85:98:34:af:78:6e:a5:c4:74:14:68:6a:5a:52:80:
         a6:c6:98:04:09:ed:38:c8:50:a7:b5:66:78:d3:3d:3b:28:0e:
         85:1a:22:cc:5a:8c:18:66:73:93:4b:f1:d8:6e:fc:36:62:fe:
         19:b2:b6:85:fb:62:8a:14:2c:13:cf:94:41:22:a1:4b:d0:20:
         da:ca:cb:b2:de:78:7d:70:e4:3b:7b:6a:01:6c:6f:e1:b5:ee:
         3c:7c:ad:2d:06:dc:a9:35:97:bb:46:2e:ec:3b:10:12:74:1d:
         a1:15:c2:cb:0b:a9:82:99:b9:86:5c:bc:7a:fd:30:3e:9a:4e:
         9a:b3:6e:cc:c3:11:4b:2a:4d:d6:7d:fb:7f:31:21:fa:0a:29:
         c4:3c:4e:67:fe:77:25:ee:94:ec:87:d9:84:af:38:72:d3:e2:
         35:da:b0:3f:de:8c:ee:e9:4d:4d:d4:82:39:c9:ff:ba:ab:f1:
         fd:01:33:b8:30:1a:7a:3f:36:5f:93:83:0e:17:c6:08:73:a3:
         55:1d:e3:00:20:22:ff:38:fd:5e:37:0e:93:04:dd:62:ce:58:
         06:3f:0c:cb:48:8e:9e:2f:9e:d6:7c:f3:f8:ec:a5:b2:97:f8:
         79:9d:c1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:54:16 2026 by rpki-client