Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft
File:                     _I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft (raw, json)
Hash identifier:          o7F2Ke5ehgaZhiEoSyGevGA9G2X01FHtEwT1niqCWeQ=
Subject key identifier:   D9:E8:14:E8:A8:66:EB:16:33:FF:9A:C4:50:29:75:E1:F2:7E:2D:C8
Authority key identifier: FC:8E:D0:8F:C9:23:01:74:E3:11:90:ED:AD:58:52:AC:45:C3:85:03
Certificate issuer:       /CN=A91226E9/serialNumber=FC8ED08FC9230174E31190EDAD5852AC45C38503
Certificate serial:       08F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft
Manifest number:          08E1
Signing time:             Tue 12 May 2026 20:26:20 +0000
Manifest this update:     Tue 12 May 2026 20:26:19 +0000
Manifest next update:     Tue 19 May 2026 20:26:19 +0000
Files and hashes:         1: _I7Qj8kjAXTjEZDtrVhSrEXDhQM.crl (hash: wboDdr9qPlwGXHc9T2UxNkw5mIByj7Q8YsGRKWYxqzg=)
                          2: 22FDFFE88DF511EFB5AC9269C4F9AE02.roa (hash: aWzuNoO6p2VM0Wkby+0bOhi7rXuRFR39cj/pYjDCp08=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.crl
                          rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:26:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2289 (0x8f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91226E9, serialNumber=FC8ED08FC9230174E31190EDAD5852AC45C38503
        Validity
            Not Before: May 12 20:26:19 2026 GMT
            Not After : May 19 20:26:19 2026 GMT
        Subject: CN=6a038cec-4157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8f:35:2b:2c:5a:5d:b0:f3:b1:5e:db:2f:2e:
                    e3:32:29:72:03:90:db:f6:6f:a9:54:70:87:0e:48:
                    6a:b1:27:d6:9a:77:e6:72:be:6f:90:43:05:ef:c1:
                    32:c9:c5:d7:19:bb:33:8c:5d:e2:98:7a:ec:d7:4f:
                    e6:d4:49:e2:98:0b:a4:27:6b:e9:3b:69:dd:b3:c6:
                    eb:74:b0:1e:2e:ae:be:3a:35:c4:9c:e6:3b:62:06:
                    fe:de:7c:4d:45:bd:db:c8:a3:16:a3:4a:ce:f8:f5:
                    53:0d:24:a8:6d:e9:eb:cc:d3:68:2f:d7:09:ac:e5:
                    7e:4c:4c:64:c8:6a:a9:27:a0:d8:2f:f3:dc:9b:57:
                    f6:5c:c7:18:d2:44:c3:78:05:48:e0:2d:a6:fe:f1:
                    2c:7f:04:a6:ee:a8:82:47:ff:a8:3b:91:0f:41:22:
                    29:8f:02:94:e8:13:39:e8:8d:49:ac:82:fb:fd:db:
                    6c:ff:8d:93:25:83:35:16:b0:a9:15:25:98:86:ce:
                    27:f1:fd:61:01:b1:01:e5:ea:98:0e:87:63:be:64:
                    9a:29:ba:b6:99:e7:32:48:98:8b:3d:ab:1c:0b:de:
                    08:47:63:d7:e8:eb:a6:d3:2e:d8:af:80:0d:e3:fc:
                    98:02:d4:d6:93:c7:f3:93:93:23:cc:a7:11:9a:65:
                    0a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:E8:14:E8:A8:66:EB:16:33:FF:9A:C4:50:29:75:E1:F2:7E:2D:C8
            X509v3 Authority Key Identifier:
                keyid:FC:8E:D0:8F:C9:23:01:74:E3:11:90:ED:AD:58:52:AC:45:C3:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:a9:fd:11:94:7e:9e:88:a3:37:6a:d6:6b:65:c0:8e:90:59:
         75:0b:69:91:9a:59:53:a8:ba:10:b7:51:ae:a7:e8:96:07:97:
         16:96:17:fd:5a:71:6b:f5:67:eb:4b:85:fe:11:4f:79:47:24:
         34:fc:2f:8c:89:12:75:43:6a:2d:b0:e3:f0:2a:13:f5:ef:a8:
         80:ed:5f:22:6b:4e:67:b6:5a:fb:cb:71:4d:c0:4d:ce:3a:2a:
         ac:1c:9b:8f:d5:5f:4c:72:48:04:bf:ff:9a:7b:61:28:06:35:
         f6:dc:46:ed:1a:09:8c:20:0a:00:d2:df:71:c1:5b:ff:b8:2e:
         57:01:8a:e1:76:99:42:53:70:8e:1d:f3:42:e0:e6:79:36:65:
         75:fd:df:af:84:86:65:21:43:3f:7a:5c:f6:28:b7:73:7e:b1:
         84:6f:82:4b:f0:c6:ef:87:44:7e:70:4b:53:d6:53:45:3c:67:
         b6:18:01:29:19:c4:ef:2a:61:bf:26:ff:29:d7:67:9b:e4:42:
         1f:6d:32:8b:d3:a3:41:63:f5:2b:fe:fe:ed:28:4c:9f:10:22:
         6e:c7:1a:de:83:3c:52:93:b1:dc:ee:1c:f5:3d:f4:d9:d3:48:
         d5:10:cf:af:68:42:40:3a:0f:7e:bb:6e:21:ad:9e:23:92:b7:
         e9:e3:16:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:19:07 2026 by rpki-client