Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.mft
File:                     9o4033GQZ5Iit29wPgM3yhu5bz4.mft (raw, json)
Hash identifier:          HgPtGbEtLQLSgUpMxRFpmuWrXHsatX5weWTA9b57k6M=
Subject key identifier:   2D:AF:3E:02:6C:28:AB:49:45:E4:6E:6A:8B:D6:22:74:6A:26:B6:F7
Authority key identifier: F6:8E:34:DF:71:90:67:92:22:B7:6F:70:3E:03:37:CA:1B:B9:6F:3E
Certificate issuer:       /CN=A911606A/serialNumber=F68E34DF7190679222B76F703E0337CA1BB96F3E
Certificate serial:       01AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o4033GQZ5Iit29wPgM3yhu5bz4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.mft
Manifest number:          01AE
Signing time:             Mon 11 May 2026 04:04:46 +0000
Manifest this update:     Mon 11 May 2026 04:04:45 +0000
Manifest next update:     Mon 18 May 2026 04:04:45 +0000
Files and hashes:         1: 9o4033GQZ5Iit29wPgM3yhu5bz4.crl (hash: 2RiKJIsPLMv5tJ1CILj4SLQDDdzPte4q80z8YQ9gPCs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.crl
                          rsync://rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o4033GQZ5Iit29wPgM3yhu5bz4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 04:04:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 430 (0x1ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911606A, serialNumber=F68E34DF7190679222B76F703E0337CA1BB96F3E
        Validity
            Not Before: May 11 04:04:45 2026 GMT
            Not After : May 18 04:04:45 2026 GMT
        Subject: CN=6a01555e-ce8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:09:cf:f3:f3:12:eb:7c:75:b0:93:e7:08:2e:
                    bb:08:2c:f2:85:52:bc:dc:ab:e2:73:e4:9f:2f:d9:
                    7a:a1:d4:77:77:81:4a:cd:c9:07:24:5a:d0:a5:78:
                    58:85:80:11:73:fd:31:f8:3f:4e:4b:21:f4:69:fe:
                    f0:c3:d0:4c:46:22:f1:ff:89:23:6e:75:7b:db:2e:
                    4f:4a:ef:24:81:f5:8d:24:02:95:e7:42:cd:df:6b:
                    14:b5:aa:79:10:e3:d4:d1:8d:7c:64:76:4c:14:45:
                    64:c5:85:67:ea:4a:24:43:d7:1b:41:c4:f9:ea:58:
                    ef:fe:16:49:70:8b:fc:44:bf:bd:a5:d2:31:f5:dd:
                    ff:f8:22:d7:5c:de:ca:1b:89:ff:5e:f1:f0:43:ca:
                    3b:2f:c5:5d:e9:95:3d:e6:64:bc:e5:c3:34:ef:f0:
                    1b:8d:8f:e0:b2:f8:49:14:62:3a:c4:d9:aa:52:dc:
                    a1:2c:1d:a3:6f:41:54:8a:07:35:33:d4:c9:3c:3c:
                    60:bb:01:9b:c4:ad:86:2a:f3:75:97:0a:97:30:fd:
                    63:0b:c6:f5:42:02:03:b5:60:45:d6:e6:d4:4e:6b:
                    a4:1c:02:8b:64:35:dc:d2:02:8f:5f:1b:47:0a:db:
                    0a:1c:8f:fa:77:5f:2e:60:e5:df:05:d4:64:c9:c0:
                    22:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:AF:3E:02:6C:28:AB:49:45:E4:6E:6A:8B:D6:22:74:6A:26:B6:F7
            X509v3 Authority Key Identifier:
                keyid:F6:8E:34:DF:71:90:67:92:22:B7:6F:70:3E:03:37:CA:1B:B9:6F:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o4033GQZ5Iit29wPgM3yhu5bz4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:36:01:13:02:b7:80:2a:88:40:ee:bb:06:ca:59:fe:5a:a3:
         15:7a:ad:5c:8c:ee:e2:97:d5:2a:7e:6e:86:18:65:8f:9c:30:
         e9:bb:a3:37:28:ef:b8:d1:12:9e:4d:a6:17:33:2e:5b:4f:39:
         81:5d:c5:93:50:4c:b2:e3:f0:6c:8a:27:49:4c:da:05:17:a5:
         ef:c0:8b:ab:28:c4:84:d3:bb:38:f2:33:43:bc:ba:5e:c9:7c:
         ed:28:73:11:b0:73:cc:b9:1a:67:36:c4:50:6c:47:cd:99:0a:
         1b:e1:8c:00:be:01:49:94:57:a8:d3:51:c9:41:15:3f:db:4f:
         3b:cb:d9:ea:02:c0:a0:82:9e:0d:10:df:36:74:b5:3f:03:28:
         32:f4:7f:94:9b:ad:87:b0:15:f3:75:9c:db:60:c3:47:5a:63:
         1b:f0:f6:25:f4:35:00:9a:45:2e:64:20:d1:b1:d0:7d:69:ce:
         f5:f5:b8:0d:7d:9e:11:0d:38:44:36:07:f9:08:ac:bd:25:d4:
         16:59:72:c4:72:9d:b9:b9:ec:99:3e:a9:c7:60:48:33:7f:39:
         5a:9d:46:29:ba:36:93:1a:aa:0e:28:3b:4c:0f:b0:69:fd:6c:
         f1:79:6f:49:be:d7:f4:0d:98:ba:a4:5e:7b:24:b6:69:8a:ed:
         51:f7:a2:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:15:30 2026 by rpki-client