Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
File:                     c0H2TqslF-qZON3k-wqBTly7fnc.mft (raw, json)
Hash identifier:          p3ALM5bFeHnb+fhw0/DRStCDpDBj9lix9ReCHnCkSSw=
Subject key identifier:   3C:EB:A6:D1:76:EE:33:F4:B6:41:51:BD:90:0B:D4:A0:20:5E:AC:34
Authority key identifier: 73:41:F6:4E:AB:25:17:EA:99:38:DD:E4:FB:0A:81:4E:5C:BB:7E:77
Certificate issuer:       /CN=A912184B/serialNumber=7341F64EAB2517EA9938DDE4FB0A814E5CBB7E77
Certificate serial:       1EDB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
Manifest number:          1EB5
Signing time:             Tue 12 May 2026 16:03:33 +0000
Manifest this update:     Tue 12 May 2026 16:03:33 +0000
Manifest next update:     Tue 19 May 2026 16:03:33 +0000
Files and hashes:         1: c0H2TqslF-qZON3k-wqBTly7fnc.crl (hash: DZQf5XWTNq+VgPwWtZXp4gPBXd6Ox5PosLNUXa2TYsI=)
                          2: 8144C55412E611E98A4A6A35C4F9AE02.roa (hash: liMT6OAzfvJnsspgI1FzQ6ZwFHNyDq37HvK43oMb2f8=)
                          3: 234A6628299311F0B32D9F82C4F9AE02.roa (hash: /qsVaB9Ik2QgEaAelOskN07kdqvopeyP2GfAlI1Wn9w=)
                          4: 22DC230C299311F0B32D9F82C4F9AE02.roa (hash: Q8meJh+l3QvnqqqYOUJJQlzzASdq6o1tO+VcZsCelFk=)
                          5: 51D65180A2DC11E9B63C6C2BC4F9AE02.roa (hash: UYMwVYPaK7nzCwDIb/TjC1GQVHBFdraAzq6uV6QZN+c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.crl
                          rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 16:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7899 (0x1edb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912184B, serialNumber=7341F64EAB2517EA9938DDE4FB0A814E5CBB7E77
        Validity
            Not Before: May 12 16:03:33 2026 GMT
            Not After : May 19 16:03:33 2026 GMT
        Subject: CN=6a034f55-53bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:52:ca:40:1b:8e:0a:05:43:0d:c7:00:eb:5c:
                    88:09:07:87:4f:ed:a4:f5:ea:9d:ca:a4:c0:3e:a8:
                    cb:22:fe:56:7c:de:05:c8:0e:60:54:f7:a2:fb:92:
                    b0:83:3d:79:8a:c1:90:f8:68:7c:5b:e5:72:be:85:
                    6e:dc:c9:ba:c4:e2:0d:1d:08:04:bc:54:81:5c:b6:
                    b9:3b:6e:fd:1c:21:92:2b:fd:6c:7d:42:fc:e1:b3:
                    2e:95:59:6a:71:de:4e:65:78:1e:51:83:0d:d5:95:
                    ae:ea:8f:f6:f8:c1:d9:ec:6c:98:44:59:02:d8:a2:
                    26:b2:f5:c8:2d:8f:b5:88:ef:f1:4f:d3:c6:fd:59:
                    8b:2a:23:4e:ed:3f:6c:f1:b6:b5:fb:3d:a0:45:ba:
                    81:7f:1d:ee:fd:d9:73:91:7e:a2:25:8d:72:eb:66:
                    30:bb:13:c7:7a:71:8c:47:c8:9b:2e:f9:1e:85:b0:
                    1c:d9:e7:69:cd:20:ee:06:26:86:00:88:73:45:fc:
                    d5:7f:e7:ac:60:e5:8a:ce:61:30:c6:6b:70:75:ee:
                    02:bc:a6:d3:fe:bb:96:de:b0:93:13:2e:db:1c:d7:
                    e2:e7:d7:6e:0c:e5:62:1c:34:cc:9b:65:e7:3c:0f:
                    9a:a7:f0:7f:34:a7:71:b0:08:54:12:14:4a:16:1a:
                    07:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:EB:A6:D1:76:EE:33:F4:B6:41:51:BD:90:0B:D4:A0:20:5E:AC:34
            X509v3 Authority Key Identifier:
                keyid:73:41:F6:4E:AB:25:17:EA:99:38:DD:E4:FB:0A:81:4E:5C:BB:7E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:f1:12:99:5d:87:7e:8a:96:65:37:27:73:bf:76:71:20:89:
         df:c3:80:af:2b:17:6e:a5:c2:bc:4c:10:52:a9:7e:40:2a:d5:
         45:ea:fc:68:e9:57:fb:9c:78:ac:fc:25:28:89:6c:ef:8d:0c:
         60:96:00:cd:74:97:20:fc:d0:c1:ad:b9:5f:5b:fb:ad:21:94:
         c2:4d:a2:54:87:ba:29:b5:90:d7:60:21:cb:e4:d6:28:33:0f:
         4a:0e:62:4c:1c:e4:0a:ee:41:8e:81:7b:7f:53:3d:a9:04:67:
         bd:28:9e:ad:88:14:56:a1:e9:42:b8:4b:86:53:02:41:35:e2:
         07:0d:ea:54:e2:ff:d0:24:ce:5f:3c:b9:88:df:5b:19:32:0a:
         f4:0a:b8:78:b0:43:bf:f8:55:64:6a:a7:75:02:90:be:84:b5:
         ff:20:bf:78:fd:6a:8c:9b:2f:3f:69:ff:66:98:ec:d2:0c:24:
         86:76:34:15:de:b2:4c:fe:fd:cc:f9:78:51:2d:07:f5:c9:fb:
         b2:87:46:de:de:f0:07:f1:4b:dc:2e:96:45:c8:be:67:fa:42:
         3e:12:4b:ee:fb:20:70:d0:cb:65:f2:eb:03:ca:32:9a:58:cb:
         55:9f:0b:93:92:38:4e:89:3e:a4:2d:fb:d3:f7:bc:6b:90:32:
         05:b7:01:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:34:09 2026 by rpki-client