Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft
File:                     dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft (raw, json)
Hash identifier:          9+gtFv0o9RkiYWiAetO6/44pRoZ6eVeLQvwGVK30B8M=
Subject key identifier:   E8:1A:F4:F1:C5:9D:65:4E:FC:00:C7:0E:D7:82:1A:37:F5:D9:46:A9
Authority key identifier: 76:4D:1C:E6:72:7D:31:BD:8F:39:66:2E:20:04:C4:68:9D:A6:B7:E5
Certificate issuer:       /CN=A911D971/serialNumber=764D1CE6727D31BD8F39662E2004C4689DA6B7E5
Certificate serial:       02CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft
Manifest number:          02B2
Signing time:             Mon 11 May 2026 01:40:24 +0000
Manifest this update:     Mon 11 May 2026 01:40:23 +0000
Manifest next update:     Mon 18 May 2026 01:40:23 +0000
Files and hashes:         1: dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl (hash: 480Dj+JfVvJK22kBP9XIWsxhPUH0HfXCQOBAcpAzPAM=)
                          2: C5BEEE3EFDD111F08B1371286C6F56BC.roa (hash: NpaCQzSS0D4oy4yH/huBRH97YUi+QS/H8/gv17FBETo=)
                          3: 197CE9C2C0C111EE84A55128C4F9AE02.roa (hash: jZIgzMxV7HHYSorF6uqDrUanTlB4VELgicqdZyoWx9g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl
                          rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 01:40:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 718 (0x2ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D971, serialNumber=764D1CE6727D31BD8F39662E2004C4689DA6B7E5
        Validity
            Not Before: May 11 01:40:23 2026 GMT
            Not After : May 18 01:40:23 2026 GMT
        Subject: CN=6a013388-65b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a9:9a:5a:84:52:81:67:b5:aa:0a:fd:ec:7d:
                    92:b6:0f:f5:74:d0:7a:ff:86:9c:99:6a:d5:8f:a8:
                    a2:13:b1:7e:56:e7:b9:b3:5c:66:2d:39:1a:8b:5a:
                    02:c4:bb:63:a0:a6:1c:5d:7f:4c:f8:de:95:97:ea:
                    76:a1:5b:0c:e4:9e:74:c6:5f:25:45:c7:6c:ad:5c:
                    c5:7c:2c:a2:a8:b8:9e:a3:56:78:e3:8d:1a:32:f5:
                    61:7c:e6:33:56:24:c7:b8:5b:80:fe:39:a6:0b:60:
                    1c:78:e0:59:e4:bd:f7:27:9e:99:7f:45:dd:e1:47:
                    12:23:b4:f1:93:f7:aa:3d:72:04:53:a1:40:ba:47:
                    68:aa:7a:c5:a0:22:47:6b:6c:20:7c:17:9a:ab:ed:
                    10:35:6e:cd:9a:56:99:c8:e9:a5:93:df:af:51:2a:
                    d0:cd:74:51:5c:36:cd:24:e6:52:34:b3:c5:8c:ba:
                    57:40:64:90:fd:8f:02:9b:05:14:a9:2f:9a:b2:a6:
                    af:26:01:01:1e:d0:5a:b8:6b:33:aa:dc:5c:bd:9d:
                    f7:b2:57:b0:b1:3e:a9:b3:76:64:de:fe:08:cf:3b:
                    59:f8:65:14:76:5c:bb:82:61:13:42:8c:b5:22:c1:
                    ac:01:c8:1e:25:07:30:32:0e:3e:74:31:31:cc:69:
                    00:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:1A:F4:F1:C5:9D:65:4E:FC:00:C7:0E:D7:82:1A:37:F5:D9:46:A9
            X509v3 Authority Key Identifier:
                keyid:76:4D:1C:E6:72:7D:31:BD:8F:39:66:2E:20:04:C4:68:9D:A6:B7:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:57:ee:6e:45:d5:51:90:76:14:b2:5e:d8:63:0f:4d:ff:fb:
         6d:e7:24:ef:7c:96:ff:dd:bf:93:d4:94:15:b1:5e:63:30:31:
         a4:a7:ba:b5:b0:91:3c:d7:d2:f3:2e:3e:9b:96:db:3b:ae:87:
         ef:ca:b3:11:26:70:41:33:22:80:13:e0:f6:5c:2a:04:93:ee:
         60:f0:46:4e:3e:b9:21:61:6c:30:47:af:f6:45:90:eb:7e:ef:
         d8:e5:8b:80:e2:88:8e:d3:25:b9:da:24:df:60:24:80:94:7c:
         d5:ec:83:92:16:0c:dc:90:d8:35:ea:c8:26:55:32:7d:61:7a:
         cf:c2:1a:84:b6:b0:86:d9:fa:21:d8:65:3d:7a:b3:5f:23:d9:
         55:e6:ee:3d:67:e3:e5:9c:a3:3f:90:39:16:42:3b:59:69:4d:
         13:94:13:41:57:1c:f5:4b:4e:2e:25:9e:8b:b8:d2:7b:39:cf:
         a6:f9:b4:67:27:0e:73:33:f8:54:c7:91:67:fb:c3:54:57:2b:
         09:a1:db:c6:8c:bc:2c:1f:c8:a5:fe:e3:98:88:5e:c8:72:4d:
         14:7a:0c:55:74:cf:e4:29:43:c7:c1:90:ef:50:f0:dd:34:2f:
         6a:da:6c:8f:72:0d:1e:c5:6e:db:e3:7f:33:d3:90:60:8a:95:
         46:9b:7a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:13:50 2026 by rpki-client