Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft
File:                     9gKmKT9-ZJIHfntNYBYwftEsHDE.mft (raw, json)
Hash identifier:          0EUKAbUWqVjuTqOCcjDbW7DwTI2eZSe3XfpU96CRPf4=
Subject key identifier:   EC:B1:06:ED:F9:BA:FD:66:3B:BA:4F:22:B7:06:74:BC:83:74:D2:65
Authority key identifier: F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31
Certificate issuer:       /CN=A911E74F/serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31
Certificate serial:       02A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft
Manifest number:          0298
Signing time:             Wed 13 May 2026 01:46:00 +0000
Manifest this update:     Wed 13 May 2026 01:46:00 +0000
Manifest next update:     Wed 20 May 2026 01:46:00 +0000
Files and hashes:         1: 9gKmKT9-ZJIHfntNYBYwftEsHDE.crl (hash: u3sZgnLTZbF7NU8xOHjGR9hY/hhJbFr7fA2QGWYYPcQ=)
                          2: 5D4A59E22A9F11F1B6C16D449B833773.roa (hash: h/Anwhdw8hYIXbU00WYyYBTDgfVMK1vj6+wTY2GDHw4=)
                          3: C41C3B7C2A9F11F1AEE17D7A9B833773.roa (hash: YVtrYDGmd8yOfEjEDc3TwfWzgRK6gay3J+4YbDTK/QU=)
                          4: 748DB0E603F711F18E6BFAB3133D8C67.roa (hash: 5yXcCvusSroRDCFFg1R3qeA96L5dbXS1rgIr2rg2kIE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl
                          rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 01:45:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 680 (0x2a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E74F, serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31
        Validity
            Not Before: May 13 01:46:00 2026 GMT
            Not After : May 20 01:46:00 2026 GMT
        Subject: CN=6a03d7d8-28d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f0:70:f4:d0:9f:c0:da:b1:17:13:b3:7f:09:
                    68:84:a6:25:92:15:4d:25:ce:19:a0:8c:22:cc:c3:
                    f8:81:05:c2:bb:16:a4:7d:d3:d5:0f:0d:58:d6:fd:
                    44:2d:c0:40:2e:c1:7b:14:4e:33:8f:d3:18:51:f9:
                    23:18:af:60:41:28:e2:a8:f5:7e:31:84:1a:03:70:
                    5f:38:27:e8:77:b1:32:4d:ac:32:28:01:05:7f:e6:
                    1d:9f:d1:c8:8b:81:aa:ec:e4:a0:27:8c:c4:c2:a8:
                    b0:71:a5:17:a4:55:ef:a4:76:b3:cf:93:1f:41:c7:
                    70:23:b6:90:86:73:ec:77:22:24:1a:16:e6:c9:ff:
                    87:9e:ad:da:1e:e9:eb:45:19:16:77:25:30:1f:d7:
                    99:c2:17:41:b9:eb:3b:76:2c:e0:49:ac:db:77:b3:
                    d6:ed:cb:8c:76:97:12:46:f2:77:f1:34:f5:13:8b:
                    cc:fd:40:9b:4e:99:97:3b:0e:03:fb:92:fd:ef:2f:
                    30:49:73:72:a1:5d:c7:11:58:a7:d5:75:27:61:b5:
                    07:7f:bb:66:29:95:84:ac:08:7b:7c:5e:57:57:50:
                    57:24:d4:12:ed:87:62:1a:ad:3d:b5:2b:b7:76:1a:
                    75:32:d9:43:28:a0:38:f7:ba:20:fd:e2:a8:31:79:
                    1d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:B1:06:ED:F9:BA:FD:66:3B:BA:4F:22:B7:06:74:BC:83:74:D2:65
            X509v3 Authority Key Identifier:
                keyid:F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:fd:e5:39:23:d6:3f:37:a2:39:0f:03:7f:0b:be:5c:61:05:
         4d:d2:64:7d:e8:b8:ad:c7:11:53:29:02:f8:57:d7:0c:ef:f1:
         ca:f0:0f:57:1f:60:37:b6:db:3e:bf:dc:2e:a5:19:a0:d3:af:
         78:f5:47:52:a5:01:59:d6:b1:6e:6d:2c:a9:41:19:4a:b0:b5:
         15:5c:54:a1:9c:7b:f0:02:cc:39:13:f4:1f:1a:ef:5b:ae:af:
         2f:ca:fa:44:58:9b:b3:26:fd:84:2f:ea:88:a2:72:05:2b:ed:
         64:68:e2:d6:00:07:62:6d:e0:4c:fd:1b:97:27:c9:51:5f:50:
         59:ae:3d:d7:76:59:0b:ef:4f:7f:35:e3:cb:bf:1a:6d:16:d4:
         a3:87:d1:aa:dd:a7:42:4c:c9:aa:66:cd:a6:36:ca:79:2a:92:
         8c:c4:2a:40:c2:c1:46:14:ef:f5:db:2e:e4:84:62:5d:80:75:
         d2:be:48:84:1a:8b:b6:78:01:88:65:46:50:98:73:75:68:c3:
         31:05:4c:09:0c:ff:00:5e:d1:db:41:37:95:4a:7e:41:e3:e3:
         01:4b:12:1e:4b:d3:c3:a5:a4:f2:05:87:ce:e5:f7:fc:b3:57:
         c7:59:e9:e5:57:18:69:26:b7:72:5c:56:3b:a5:26:ca:56:f1:
         af:4f:46:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:28:49 2026 by rpki-client