Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft
File:                     aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft (raw, json)
Hash identifier:          NNKLZ2Nve0u0DFNtZDjk08ARaSWkr4WFXdrbhFnCmIg=
Subject key identifier:   B6:C3:CB:1C:BF:E4:1A:8E:BF:43:11:56:4E:40:C6:3A:CA:DE:CA:6C
Authority key identifier: 68:41:3D:41:F6:00:5E:03:16:E0:E2:57:6F:22:6C:21:88:AA:15:6F
Certificate issuer:       /CN=A911CA82/serialNumber=68413D41F6005E0316E0E2576F226C2188AA156F
Certificate serial:       010B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEE9QfYAXgMW4OJXbyJsIYiqFW8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft
Manifest number:          0106
Signing time:             Tue 12 May 2026 22:37:40 +0000
Manifest this update:     Tue 12 May 2026 22:37:39 +0000
Manifest next update:     Tue 19 May 2026 22:37:39 +0000
Files and hashes:         1: aEE9QfYAXgMW4OJXbyJsIYiqFW8.crl (hash: z4bt6psWjHPQFuLRFHB9hbBYZm+++JjzeqeuKfu6ErU=)
                          2: AF4301D4CF8511EF94856A41C4F9AE02.roa (hash: c+4urNgJNXNWBhwpLiUNezIdmF5mlVJxmjpsI9/AkQI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.crl
                          rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEE9QfYAXgMW4OJXbyJsIYiqFW8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:37:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 267 (0x10b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CA82, serialNumber=68413D41F6005E0316E0E2576F226C2188AA156F
        Validity
            Not Before: May 12 22:37:39 2026 GMT
            Not After : May 19 22:37:39 2026 GMT
        Subject: CN=6a03abb4-6452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7c:aa:57:f6:80:f7:b4:51:c5:b8:7a:00:c8:
                    f3:a9:84:56:ca:c0:b0:fb:7c:1f:39:10:c9:27:86:
                    33:7a:21:8e:09:de:ee:67:7e:f3:54:61:09:76:a2:
                    61:02:62:56:b3:b7:c5:bf:20:79:b2:23:f2:52:8b:
                    0b:93:9e:da:37:ee:1f:b7:11:df:f3:b7:ec:19:57:
                    66:1b:57:ad:7c:28:59:5b:c6:9d:5a:bb:55:21:3a:
                    45:84:b9:72:87:19:f0:44:00:93:1c:a3:a7:4d:3c:
                    cb:40:e2:a9:3b:24:cf:2d:a7:64:af:bb:16:c8:a9:
                    4c:bf:28:05:db:1b:b1:1f:1e:4c:35:5f:98:83:e8:
                    57:12:45:13:74:a7:56:d0:85:72:e7:53:f1:ba:15:
                    2f:7f:36:c9:1a:56:e3:fb:61:ac:a2:8f:2d:57:93:
                    6c:c0:6b:8d:1a:32:82:9e:2d:65:a0:6d:a7:d8:21:
                    e1:3a:63:f9:f6:dc:dd:0a:ec:86:59:66:54:99:d4:
                    8b:eb:39:b9:1b:31:ae:cb:26:5f:33:5a:2c:19:11:
                    13:f4:2a:6b:2a:29:02:ec:26:27:94:e8:8c:01:bc:
                    ca:86:2d:28:a7:73:b9:4e:7f:1a:52:65:04:cd:ac:
                    30:b7:53:79:81:55:57:89:71:d8:62:be:54:e3:c7:
                    bf:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C3:CB:1C:BF:E4:1A:8E:BF:43:11:56:4E:40:C6:3A:CA:DE:CA:6C
            X509v3 Authority Key Identifier:
                keyid:68:41:3D:41:F6:00:5E:03:16:E0:E2:57:6F:22:6C:21:88:AA:15:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEE9QfYAXgMW4OJXbyJsIYiqFW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:44:c1:12:ac:e6:1c:86:ba:52:1b:46:d5:b5:8f:9f:a4:5b:
         f5:22:f0:da:6e:f5:67:1a:ab:dc:c9:f8:48:16:53:51:e4:72:
         71:e5:64:85:cc:4d:17:54:9a:7b:4f:c1:78:93:9e:e6:6b:ce:
         72:99:f4:42:80:97:df:39:df:eb:ef:20:ce:fa:2e:93:cf:ce:
         df:5d:47:21:cc:0e:50:87:b8:ea:c6:b6:8d:18:aa:47:55:e7:
         75:ca:e9:25:a9:e8:b0:97:97:42:01:ab:55:16:8f:ca:b3:d2:
         8a:15:05:83:c7:3a:d9:a6:61:f9:54:5c:5b:37:00:bc:a3:37:
         11:1c:36:6f:bc:f5:e9:bb:40:ce:92:91:d9:3d:f3:8d:d7:9d:
         6e:9f:3d:31:f5:82:ca:2e:44:4f:ae:57:6c:82:fe:29:dc:ec:
         e3:63:d1:7e:65:3c:27:d4:78:e3:4a:36:55:e5:78:b0:2e:1e:
         9a:04:ce:63:53:07:ef:56:26:15:d9:4b:30:d5:1c:82:80:d5:
         fe:9a:35:bf:b6:1d:1c:1f:59:0a:22:60:42:fb:a7:83:61:b2:
         c6:06:66:11:e8:6f:b2:0c:69:cd:cf:f5:64:ed:af:da:3a:4b:
         c5:de:9d:92:f9:11:f9:2a:e5:8f:ff:c9:13:fc:eb:86:8c:6c:
         57:34:d5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:46:24 2026 by rpki-client