Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft
File:                     kCSWwSsdqlhOQrNDNM8XIBI2snw.mft (raw, json)
Hash identifier:          fKMJ9tXW98zAu6/xy+PgN7EALEOmWP/0d2YYVG/MuaE=
Subject key identifier:   4B:60:C8:C1:43:6D:6C:37:70:91:EB:DA:42:06:A2:2B:F1:59:AE:69
Authority key identifier: 90:24:96:C1:2B:1D:AA:58:4E:42:B3:43:34:CF:17:20:12:36:B2:7C
Certificate issuer:       /CN=A912346E/serialNumber=902496C12B1DAA584E42B34334CF17201236B27C
Certificate serial:       06D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft
Manifest number:          06CE
Signing time:             Tue 12 May 2026 22:23:24 +0000
Manifest this update:     Tue 12 May 2026 22:23:23 +0000
Manifest next update:     Tue 19 May 2026 22:23:23 +0000
Files and hashes:         1: kCSWwSsdqlhOQrNDNM8XIBI2snw.crl (hash: WZnwfalwJ9skG4sgLzo6EepLljlxBD9N0ck2rVtqxac=)
                          2: 5E54C4BEA06411EBB6AFCD55C4F9AE02.roa (hash: WescIqZtu/oV5qzJVivLhqT6NCVSMsUZrdry8jKlBBI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.crl
                          rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:23:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1751 (0x6d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912346E, serialNumber=902496C12B1DAA584E42B34334CF17201236B27C
        Validity
            Not Before: May 12 22:23:23 2026 GMT
            Not After : May 19 22:23:23 2026 GMT
        Subject: CN=6a03a85c-851f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5f:ab:a3:a0:41:57:6f:5c:15:0e:e8:36:65:
                    b6:5d:83:82:a8:cd:f7:46:70:90:e8:7b:f6:1e:5b:
                    e1:94:ca:c9:df:03:71:f6:08:56:a3:4f:cc:45:db:
                    1f:7a:39:08:46:72:2e:13:f0:f9:dc:92:ce:da:a8:
                    36:ac:8d:73:6a:08:21:20:12:63:68:06:4c:d4:81:
                    dc:d0:1d:bb:3e:1e:da:b7:96:42:ae:41:9b:df:cc:
                    4a:44:03:a4:e3:42:85:ab:64:97:3c:f2:e1:df:84:
                    b9:f9:77:a9:4c:eb:77:f0:ba:37:45:6c:93:68:c0:
                    ba:7f:82:13:7c:60:f1:be:dd:72:74:6b:70:ba:11:
                    b0:c4:f6:b3:e5:d9:51:a2:57:31:59:94:42:b9:59:
                    65:2b:05:26:79:a2:cb:c6:8e:27:33:45:60:85:39:
                    7f:2a:73:09:c1:39:5a:43:ac:58:9b:72:c4:46:22:
                    5a:e9:58:ab:2f:f2:f4:ff:fa:67:6d:ec:aa:16:47:
                    e0:af:c0:d6:2e:73:9e:5c:a0:08:de:9e:d3:6d:05:
                    d8:62:b6:aa:e8:b9:41:18:b3:d3:ec:45:02:48:71:
                    b0:3e:ce:33:90:10:03:b1:35:0e:9a:8e:44:94:42:
                    f4:78:16:ab:61:74:56:11:03:45:82:e3:71:3e:19:
                    3f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:60:C8:C1:43:6D:6C:37:70:91:EB:DA:42:06:A2:2B:F1:59:AE:69
            X509v3 Authority Key Identifier:
                keyid:90:24:96:C1:2B:1D:AA:58:4E:42:B3:43:34:CF:17:20:12:36:B2:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:e6:c6:7d:a4:77:02:01:5c:26:98:d8:ff:ff:8b:aa:aa:9e:
         43:01:11:a2:c9:7b:cf:93:af:22:1c:0c:88:02:d7:e2:1f:c7:
         52:0b:96:e3:26:ce:bd:94:06:5f:02:d9:ab:15:04:44:e1:b2:
         dd:43:64:20:29:5e:78:45:ed:58:26:d4:1c:c6:17:82:e4:14:
         25:b5:23:b1:d0:8a:ea:f2:7a:05:69:e8:13:8a:81:ae:88:e7:
         61:10:94:79:4d:a4:80:99:0e:96:28:fd:0e:f3:6c:1b:fd:09:
         82:b0:81:95:7c:18:33:40:01:4b:b3:66:8e:80:ad:9c:0c:ed:
         38:8d:24:3f:e3:1c:a4:60:57:37:0c:2e:ed:f1:da:94:66:2a:
         05:73:29:b6:e0:18:eb:df:91:56:e0:58:3c:56:12:fc:e4:62:
         cb:4e:2d:27:db:49:7b:a5:a6:b8:54:8b:31:e8:55:62:77:7e:
         98:19:c3:4a:f3:b0:40:44:69:61:f2:a1:07:21:e7:75:bc:1a:
         59:db:21:9f:c3:c2:91:2c:25:4a:33:3e:0b:a6:ea:1e:a6:15:
         61:70:a3:af:35:d7:60:f7:e0:9e:ec:78:90:af:a5:43:f4:4f:
         1a:8b:97:d1:6f:1d:ee:99:e9:71:35:81:1e:a3:d2:6c:da:83:
         4a:a1:85:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:56:23 2026 by rpki-client