Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft
File:                     _bJ1TZUGMOsR34TihVyqt9Fib4A.mft (raw, json)
Hash identifier:          TKgvqw5+e0daf6Kewfvq43KdFaaZw/bRRurv2Z+hGvo=
Subject key identifier:   1B:45:8B:EC:07:30:8E:59:8F:D9:FD:DB:69:29:51:F8:38:84:91:7E
Authority key identifier: FD:B2:75:4D:95:06:30:EB:11:DF:84:E2:85:5C:AA:B7:D1:62:6F:80
Certificate issuer:       /CN=A911D834/serialNumber=FDB2754D950630EB11DF84E2855CAAB7D1626F80
Certificate serial:       35A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft
Manifest number:          3569
Signing time:             Tue 12 May 2026 14:39:04 +0000
Manifest this update:     Tue 12 May 2026 14:39:04 +0000
Manifest next update:     Tue 19 May 2026 14:39:04 +0000
Files and hashes:         1: _bJ1TZUGMOsR34TihVyqt9Fib4A.crl (hash: ItyyFhWUMr3qmhwq15WHcIiRpcUyNJAD2/+d5VVTeIw=)
                          2: 5F436F7E39A011EE923F683AC4F9AE02.roa (hash: d1VOETNhFOccLSwqdQXH2GNl8fCdfHMVZ6K7EwkYRNQ=)
                          3: DA8A3692A59411F0BF072D6DC4F9AE02.roa (hash: KPbP95r3TCc58AOeYUlQqKFz/YOZ3L4nxR/B312mHxQ=)
                          4: F62323DEB97911F0A728D041C4F9AE02.roa (hash: VYA799jHHyf/EZwQx98vKIoBtcAMfoZki4v45ia4iow=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.crl
                          rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:39:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13729 (0x35a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D834, serialNumber=FDB2754D950630EB11DF84E2855CAAB7D1626F80
        Validity
            Not Before: May 12 14:39:04 2026 GMT
            Not After : May 19 14:39:04 2026 GMT
        Subject: CN=6a033b88-f569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2b:63:db:1f:57:ea:a9:57:69:51:12:ea:47:
                    88:bd:f7:8a:b9:3c:26:b2:ba:af:0f:58:27:10:3e:
                    2b:03:e7:11:b6:25:82:55:33:8d:ff:ab:b6:61:37:
                    bf:a9:a8:64:27:12:0d:ff:60:ee:36:a0:ed:ec:b6:
                    ad:5b:07:ed:73:d8:73:56:1e:58:e7:85:ec:e7:ea:
                    43:84:b2:5f:a0:27:5d:0d:f0:c6:1c:3f:93:e8:e1:
                    ea:e8:51:fa:20:a5:f2:8a:53:11:d1:5f:21:53:98:
                    b0:4b:f0:b1:8a:3a:91:8c:f6:d9:bb:dc:2b:d8:6b:
                    00:51:cf:c4:72:57:a8:53:cf:d2:94:49:81:59:41:
                    2d:5f:41:93:3c:d5:f6:a8:0c:02:bf:7a:44:62:6b:
                    2f:2f:e5:9d:1d:1b:52:2d:0a:1d:c2:82:39:c7:26:
                    25:e9:05:79:c6:fc:e3:f6:98:47:ab:f9:51:4b:8a:
                    15:2b:cf:a4:1e:50:92:2c:02:93:11:73:c2:e4:5a:
                    65:a0:d6:5b:a6:33:88:57:cd:3d:f4:e4:0b:3e:d2:
                    a2:13:05:43:2c:60:13:28:77:70:20:46:a1:97:c2:
                    c2:67:04:44:ad:15:6e:f2:b7:63:ff:10:07:44:00:
                    68:10:7f:37:22:07:d9:40:c8:78:5a:bc:9c:44:5c:
                    c9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:45:8B:EC:07:30:8E:59:8F:D9:FD:DB:69:29:51:F8:38:84:91:7E
            X509v3 Authority Key Identifier:
                keyid:FD:B2:75:4D:95:06:30:EB:11:DF:84:E2:85:5C:AA:B7:D1:62:6F:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:1b:a4:56:1f:2e:e0:8b:6c:4d:e7:01:22:43:c2:bf:e1:b9:
         99:14:86:4d:60:a7:9e:c6:81:d7:3d:15:69:f6:a5:1b:73:d0:
         93:90:fe:77:c3:4d:1f:67:34:f2:96:89:83:48:a2:94:f4:f1:
         7e:cf:69:fc:2e:fe:56:84:dd:a8:59:08:9c:bb:67:8b:45:c7:
         c2:f2:8b:7c:95:bb:ef:dd:13:d8:50:ef:7f:d5:6d:47:18:93:
         ce:12:35:0a:e1:5b:1d:ac:84:16:6e:a3:e4:35:39:d4:ca:1a:
         de:31:c7:6a:f7:d9:39:93:d8:c4:ee:d8:fb:a9:5e:73:ae:10:
         be:98:39:ca:1f:70:3f:ec:9a:ff:10:e7:d7:9d:f2:17:c2:fc:
         07:37:90:83:a8:2b:cf:1b:5f:75:31:5f:ae:d5:f7:44:8a:cb:
         d2:88:a9:04:9e:8a:38:77:62:b9:f7:13:e9:27:7e:14:2c:53:
         4b:e4:5b:10:de:76:b7:f0:ff:eb:33:d7:54:0d:4f:f7:58:f6:
         51:53:be:77:08:90:92:fd:c6:cf:34:b3:13:f6:2b:47:9a:03:
         e2:9d:02:a4:9f:62:aa:bc:1e:46:fc:05:04:d1:d5:ac:e3:16:
         b5:d3:d1:7c:1f:7d:1e:ad:c3:b8:b1:03:f9:58:1e:e0:4a:fc:
         34:8e:b2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:52:46 2026 by rpki-client