Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.mft
File:                     aMIYjATCDkkjq7YttIckmDVLSv0.mft (raw, json)
Hash identifier:          P7NHkdWsPJNdmOgMoPflfqZOI0ZGeylHzcvOLSO/hBY=
Subject key identifier:   2F:15:32:06:E4:31:98:B0:8B:AC:26:AE:FD:FB:48:3A:27:EF:24:4B
Authority key identifier: 68:C2:18:8C:04:C2:0E:49:23:AB:B6:2D:B4:87:24:98:35:4B:4A:FD
Certificate issuer:       /CN=A911750B/serialNumber=68C2188C04C20E4923ABB62DB4872498354B4AFD
Certificate serial:       AF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aMIYjATCDkkjq7YttIckmDVLSv0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.mft
Manifest number:          AD
Signing time:             Mon 11 May 2026 07:18:41 +0000
Manifest this update:     Mon 11 May 2026 07:18:41 +0000
Manifest next update:     Mon 18 May 2026 07:18:41 +0000
Files and hashes:         1: aMIYjATCDkkjq7YttIckmDVLSv0.crl (hash: AjaarK+id9MWHkrbJ54eem/af87GA5B7b8LCUADnCZM=)
                          2: CC9D872A468D11F0A82C5E5EC4F9AE02.roa (hash: 53IvHKTdXwEXSRnOFpf3vxlzT+INgjItjJHDBhfEtMI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.crl
                          rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aMIYjATCDkkjq7YttIckmDVLSv0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 07:18:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175 (0xaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911750B, serialNumber=68C2188C04C20E4923ABB62DB4872498354B4AFD
        Validity
            Not Before: May 11 07:18:41 2026 GMT
            Not After : May 18 07:18:41 2026 GMT
        Subject: CN=6a0182d1-22af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:cf:48:9c:b7:85:ec:7f:7e:23:59:7c:82:c3:
                    eb:8f:a6:d7:c4:4c:da:77:1a:86:16:7f:24:a6:8c:
                    ff:a7:f4:b3:eb:92:a8:a0:c5:c6:1f:61:38:87:5a:
                    af:9e:3d:d5:7d:a2:55:f8:cf:c9:9d:72:4a:e0:2c:
                    18:af:b0:41:ee:2e:c6:1d:6e:7a:eb:a5:93:be:ff:
                    a9:9d:54:d3:7c:0f:da:10:d1:fb:07:f9:3e:07:cc:
                    f9:ef:47:85:06:38:7d:38:cb:0d:ca:59:c3:33:3b:
                    06:1f:db:ae:28:fc:66:01:e1:7b:87:64:65:42:fa:
                    fd:ed:14:4d:2e:9b:d8:d2:8e:e2:2d:1b:cd:84:00:
                    a4:1c:3e:87:6f:13:06:8b:92:9c:88:dc:16:ac:81:
                    eb:58:4c:57:1c:2e:0d:05:8e:d9:1d:7c:c2:3f:e2:
                    03:4a:fe:ca:72:a2:8d:1c:18:ae:32:82:17:3d:83:
                    7e:c5:49:68:03:dc:65:c7:bd:60:e7:88:d8:c6:fa:
                    0f:54:63:7b:51:37:8a:db:69:1e:a1:4c:14:c8:ac:
                    e8:f0:5a:70:b1:2b:e1:88:93:4b:53:e1:d6:e0:26:
                    ab:25:7b:30:69:0e:27:9c:49:52:69:08:e7:b1:05:
                    73:7a:60:a1:28:91:62:59:ce:f7:f9:be:b5:28:f2:
                    73:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:15:32:06:E4:31:98:B0:8B:AC:26:AE:FD:FB:48:3A:27:EF:24:4B
            X509v3 Authority Key Identifier:
                keyid:68:C2:18:8C:04:C2:0E:49:23:AB:B6:2D:B4:87:24:98:35:4B:4A:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aMIYjATCDkkjq7YttIckmDVLSv0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:8d:94:a1:ca:08:17:b8:17:f1:28:37:bd:0b:01:ab:80:7a:
         2f:22:8f:73:cc:34:1d:c0:bb:73:39:06:b3:47:d3:10:f7:e1:
         8d:eb:56:9a:28:cc:d4:b6:fa:70:6e:e0:65:55:f6:04:b9:1f:
         71:ea:a6:6a:d2:d5:d1:a6:28:b6:5d:90:4a:f8:e2:ff:9b:fc:
         f7:bb:32:98:03:3d:41:34:57:a7:20:47:5c:b6:85:28:23:80:
         3a:eb:2c:3e:b8:3c:2b:0d:75:f4:1d:56:61:cc:89:84:e6:bd:
         95:b6:51:0d:b7:b5:e9:5e:d9:fe:f9:63:dc:bd:2b:32:b9:46:
         98:7b:ad:5c:7c:5b:92:cb:70:b1:37:1c:5d:2c:4c:07:c6:c6:
         ee:74:97:aa:f2:19:45:f3:72:f6:ef:91:41:ad:8c:fd:fb:97:
         a6:09:a2:02:2c:ba:94:59:01:5f:62:80:b7:c8:3d:46:90:11:
         74:b3:9f:52:b7:d8:43:17:3c:0d:2c:71:15:a3:b5:6a:ea:92:
         a6:32:69:18:63:d0:9e:a1:a6:3a:d3:39:cc:23:d1:68:c7:7f:
         dc:e2:ef:ce:43:28:9f:75:d2:c6:b8:7f:3b:81:ee:ef:0c:26:
         cb:1b:49:df:28:3f:42:81:49:65:40:fc:36:f9:50:a2:a2:3a:
         33:df:f2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:43:51 2026 by rpki-client