Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B4ED/FA4B0AC40F3711EEAB9D9468C4F9AE02/kI54kDTxhBXYdZwmo0brgQ71pBU.mft
File:                     kI54kDTxhBXYdZwmo0brgQ71pBU.mft (raw, json)
Hash identifier:          OS01hv88e8w1Z8dTGaGk6FU0cUmrq2U5TZqr13sSdfk=
Subject key identifier:   DB:02:96:DF:40:CA:70:2E:B3:E3:01:84:7D:1B:0B:0D:C0:41:F3:A8
Authority key identifier: 90:8E:78:90:34:F1:84:15:D8:75:9C:26:A3:46:EB:81:0E:F5:A4:15
Certificate issuer:       /CN=A911B4ED/serialNumber=908E789034F18415D8759C26A346EB810EF5A415
Certificate serial:       0226
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kI54kDTxhBXYdZwmo0brgQ71pBU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B4ED/FA4B0AC40F3711EEAB9D9468C4F9AE02/kI54kDTxhBXYdZwmo0brgQ71pBU.mft
Manifest number:          0220
Signing time:             Wed 13 May 2026 02:51:27 +0000
Manifest this update:     Wed 13 May 2026 02:51:27 +0000
Manifest next update:     Wed 20 May 2026 02:51:27 +0000
Files and hashes:         1: kI54kDTxhBXYdZwmo0brgQ71pBU.crl (hash: U84AMWmPet9n2LP1llNeNvduP1/qyD6aIT7/W4Y8/70=)
                          2: 86A2CEB60F3E11EEA4C55465C4F9AE02.roa (hash: fhl3fJcB+h4weCxugxGGdq61t1fYoSdltlSekuAK37k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B4ED/FA4B0AC40F3711EEAB9D9468C4F9AE02/kI54kDTxhBXYdZwmo0brgQ71pBU.crl
                          rsync://rpki.apnic.net/member_repository/A911B4ED/FA4B0AC40F3711EEAB9D9468C4F9AE02/kI54kDTxhBXYdZwmo0brgQ71pBU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kI54kDTxhBXYdZwmo0brgQ71pBU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:51:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 550 (0x226)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B4ED, serialNumber=908E789034F18415D8759C26A346EB810EF5A415
        Validity
            Not Before: May 13 02:51:27 2026 GMT
            Not After : May 20 02:51:27 2026 GMT
        Subject: CN=6a03e72f-c2ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bc:34:90:79:8b:05:74:ef:91:d9:8e:3c:bc:
                    22:15:42:ae:d0:9b:34:2b:e2:0d:d0:9a:7f:f0:8f:
                    90:47:76:9d:b3:91:d5:69:3c:0f:7e:c2:2f:5b:41:
                    c8:e4:fb:ef:b4:63:1b:dd:7d:ce:38:2d:4c:44:76:
                    8a:32:fa:6e:d1:b2:71:6c:28:df:2b:08:75:91:bd:
                    6e:1a:0d:f7:01:8e:eb:f3:29:da:15:ac:55:c6:ba:
                    06:0c:bf:24:69:a9:09:8f:ce:cc:a3:a7:f7:31:3c:
                    d7:c6:ef:3d:5a:fc:29:79:00:68:78:de:b0:71:a9:
                    bb:8b:a2:fe:69:37:d2:d8:b9:6f:f3:40:57:a2:a9:
                    8a:76:da:c0:84:d5:13:58:cb:f5:bb:37:a1:05:25:
                    5e:dd:a1:a4:d4:b2:68:32:66:a1:d7:59:36:9d:b8:
                    6b:e6:b1:bb:a5:f6:72:68:f2:a9:31:11:2d:ec:cc:
                    ed:bf:2b:6f:f0:8d:12:6e:96:0b:db:eb:ff:90:08:
                    6b:84:c5:24:24:1e:82:bb:4a:0c:f3:84:d9:1d:b4:
                    50:62:ab:d8:2b:c4:19:ee:97:8f:97:a8:39:cf:20:
                    b1:5c:a1:4f:60:5e:ed:13:f2:75:87:01:df:07:53:
                    55:7a:16:43:93:23:7a:d4:83:24:36:bd:0f:a4:cf:
                    58:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:02:96:DF:40:CA:70:2E:B3:E3:01:84:7D:1B:0B:0D:C0:41:F3:A8
            X509v3 Authority Key Identifier:
                keyid:90:8E:78:90:34:F1:84:15:D8:75:9C:26:A3:46:EB:81:0E:F5:A4:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B4ED/FA4B0AC40F3711EEAB9D9468C4F9AE02/kI54kDTxhBXYdZwmo0brgQ71pBU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kI54kDTxhBXYdZwmo0brgQ71pBU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B4ED/FA4B0AC40F3711EEAB9D9468C4F9AE02/kI54kDTxhBXYdZwmo0brgQ71pBU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:9b:fa:02:65:1e:74:f8:58:d6:86:60:b8:62:1b:d2:e7:c0:
         30:b9:02:2b:c0:32:74:c2:9d:5a:9c:9b:c1:fb:0b:07:d9:a5:
         bc:9c:7a:4d:4a:99:5a:32:b0:c2:d7:d1:c4:99:2d:d7:6e:4d:
         f1:84:42:f6:8a:d9:0d:b6:81:2b:2e:ae:a4:bb:bb:82:db:97:
         7d:9b:09:fe:97:3e:6e:5f:1e:b9:65:e3:b7:2b:4f:64:00:cc:
         3a:99:a2:9a:34:c0:95:31:b0:55:49:f1:14:73:57:67:a2:47:
         a5:61:60:eb:a6:0d:3f:43:e6:34:a8:21:2e:9a:56:39:45:c0:
         d3:35:04:fe:35:82:ee:47:f9:6b:22:f6:cb:50:8d:87:36:35:
         8e:3b:aa:7d:bf:45:80:79:3a:a0:90:b2:cc:8d:fa:fb:59:9d:
         30:9b:00:11:2a:d3:79:df:1a:94:16:6c:21:cb:21:8f:de:76:
         b1:f9:41:2f:6b:37:35:8b:2d:f7:dc:1e:49:e8:70:51:ec:ed:
         2b:d8:de:43:56:1d:3f:ff:36:63:b5:cc:6f:37:35:1c:9f:d8:
         f6:89:03:6c:4b:cb:e3:0b:69:3c:b2:c6:ae:95:8d:bb:d9:12:
         76:88:57:46:86:cf:2f:e9:d6:98:b8:28:51:92:1f:4f:d8:01:
         92:57:66:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:53:16 2026 by rpki-client