Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft
File:                     47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft (raw, json)
Hash identifier:          JUlfX5dJ7UH1cJkBf/JG/mZLIYSCGO5IITJr1oOGOUQ=
Subject key identifier:   CC:22:33:67:59:F9:71:2B:F4:3A:90:B2:28:63:D2:5F:9D:76:EE:43
Authority key identifier: E3:BC:BA:88:BE:DC:2A:76:8A:98:65:F4:16:D6:8A:7C:30:33:F4:69
Certificate issuer:       /CN=A9123072/serialNumber=E3BCBA88BEDC2A768A9865F416D68A7C3033F469
Certificate serial:       0880
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft
Manifest number:          0858
Signing time:             Tue 12 May 2026 20:57:11 +0000
Manifest this update:     Tue 12 May 2026 20:57:11 +0000
Manifest next update:     Tue 19 May 2026 20:57:11 +0000
Files and hashes:         1: 47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl (hash: AUjQTdF4mBMWVhOaASXRBky6Pg6lYCuXeR615Ix8LGc=)
                          2: 11446DBE5B2711F099D02552C4F9AE02.roa (hash: 1MVde0/1uHuiUovcFZ77TlqLfJ5SZhmH3WyAneTv/Ng=)
                          3: E3BFC856DCB911F0A9D960E0496F56BC.roa (hash: hnYXXyG+HjpMZxqmpN5bsi+NSnbaTfeMqs5LW9a4ZFY=)
                          4: 52B84266B3C411F0A952B10CC4F9AE02.roa (hash: 6zTCHG3uP3cK2rw/2Eul1AW03DSAhrWGcY7OdFAvbQs=)
                          5: 722022AEB3C411F0AB42E30CC4F9AE02.roa (hash: yhJxmZzQ2ZBaUh/TkISXu1owkmR7YDFhHEkIm62M8ls=)
                          6: E75B22220B5D11EBADED9667C4F9AE02.roa (hash: /NNxt2PRGKi4jINC1uMA6kp3kzBSWqOUAHvR4Zmm09U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl
                          rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:57:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2176 (0x880)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123072, serialNumber=E3BCBA88BEDC2A768A9865F416D68A7C3033F469
        Validity
            Not Before: May 12 20:57:11 2026 GMT
            Not After : May 19 20:57:11 2026 GMT
        Subject: CN=6a039427-8474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e2:34:0e:4a:fd:2f:ca:90:d7:aa:78:08:7e:
                    55:6c:8f:a3:cd:21:4b:40:42:53:6f:96:9a:67:8d:
                    fa:55:d5:b0:75:5d:f7:d2:ba:14:0c:e4:79:07:8f:
                    ae:5c:17:22:fc:76:7e:ff:fd:4b:5d:76:08:ac:5e:
                    71:90:00:2a:c4:f6:63:00:48:e7:57:50:1c:0a:08:
                    be:eb:f0:8e:d1:c9:12:49:c0:bd:41:07:c1:8c:c6:
                    25:87:3f:70:2f:0d:c5:88:94:76:b2:2b:91:88:63:
                    ec:ce:68:2b:8e:c6:3e:6f:5c:b3:dc:29:77:69:c0:
                    d0:da:02:1d:7f:23:06:85:4a:86:b4:61:35:3c:02:
                    b0:ba:5d:8f:ab:16:f3:e9:45:bd:05:ba:fa:e9:95:
                    9b:d2:a7:f2:6c:e5:ae:ac:da:71:5e:01:9b:a3:9d:
                    a5:68:5e:dd:11:9e:96:d4:13:92:b5:d6:ca:37:71:
                    17:10:d3:dd:eb:7f:a6:8e:74:86:e5:2b:87:17:15:
                    37:19:0a:3d:91:d2:17:74:2a:eb:7c:05:f8:04:a2:
                    14:0b:dc:f7:38:0c:87:a2:28:3e:47:74:ba:b2:a6:
                    2f:36:c6:e0:cb:4d:77:4c:5c:ae:d1:fe:ff:03:9a:
                    30:f5:5a:41:a7:99:ac:e1:b6:41:6f:6d:29:1a:6a:
                    9a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:22:33:67:59:F9:71:2B:F4:3A:90:B2:28:63:D2:5F:9D:76:EE:43
            X509v3 Authority Key Identifier:
                keyid:E3:BC:BA:88:BE:DC:2A:76:8A:98:65:F4:16:D6:8A:7C:30:33:F4:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:61:f1:79:af:8e:fb:b6:38:dd:61:c7:26:29:aa:2b:99:52:
         0f:f2:bc:68:d8:61:bf:29:cd:8e:de:4f:ff:9b:b1:28:c1:04:
         83:ea:35:57:93:96:54:6b:ef:bc:f6:b9:a9:7c:ed:77:ac:96:
         f4:a0:06:4b:d3:73:09:5c:5f:4a:b6:f1:17:23:43:ac:05:6e:
         5d:6e:d4:e0:2c:3b:53:ff:19:73:77:9d:76:01:34:b3:09:62:
         de:30:e2:09:97:84:a1:b2:c1:5b:66:f8:74:d6:6d:71:4a:0d:
         ea:8a:6f:d3:71:56:fe:e1:f5:56:b0:9d:58:5b:ca:88:62:81:
         99:df:62:a4:49:ca:5f:38:bc:49:3f:cc:f0:fd:76:a4:11:bb:
         35:90:ef:5d:2f:d3:1d:ed:37:c4:9d:29:5c:7f:7a:5b:f1:ab:
         47:b6:db:62:db:c0:a0:0d:48:4f:28:ed:09:e8:aa:e8:14:39:
         70:a4:cf:48:f7:a0:78:90:ce:d4:d7:92:ee:d0:be:50:45:51:
         f3:1c:ee:53:2a:d2:ec:b3:ee:3c:38:57:eb:cb:9e:d6:95:46:
         63:2f:75:ab:33:69:ea:8e:ec:7e:4e:11:4e:88:22:52:5e:18:
         5b:bb:36:79:0a:ba:e2:05:10:d5:4e:17:5a:60:1f:e5:08:92:
         6e:1f:1b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:46:16 2026 by rpki-client