Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft
File:                     r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft (raw, json)
Hash identifier:          LNPbVZYgGbdMnH3suYoL1H9up20sUi2M/jYJX09ylmQ=
Subject key identifier:   87:85:17:56:A3:F8:7A:A3:64:CD:73:BE:BB:D0:EB:77:57:18:74:9F
Authority key identifier: AF:4A:35:44:C7:4B:31:7A:7C:32:6A:F0:E8:39:3C:B9:D5:26:20:32
Certificate issuer:       /CN=A9123BFF/serialNumber=AF4A3544C74B317A7C326AF0E8393CB9D5262032
Certificate serial:       0837
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft
Manifest number:          082D
Signing time:             Tue 12 May 2026 15:56:20 +0000
Manifest this update:     Tue 12 May 2026 15:56:20 +0000
Manifest next update:     Tue 19 May 2026 15:56:20 +0000
Files and hashes:         1: r0o1RMdLMXp8Mmrw6Dk8udUmIDI.crl (hash: khBdr8wT2s5flUySPjsuQG5vqedtBTYXvJ4XlkQYOqA=)
                          2: A3744A28149A11EDB9CF2F70C4F9AE02.roa (hash: zMVM5XvHUSFuCWzCvYIz2LcqG9igaxxQSY0E3/h4FG4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.crl
                          rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:56:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2103 (0x837)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123BFF, serialNumber=AF4A3544C74B317A7C326AF0E8393CB9D5262032
        Validity
            Not Before: May 12 15:56:20 2026 GMT
            Not After : May 19 15:56:20 2026 GMT
        Subject: CN=6a034da4-7dcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b3:05:39:07:c5:9d:a9:db:81:61:5b:2a:26:
                    f2:5f:63:b2:c7:d6:82:f4:ef:cf:53:3c:52:65:08:
                    50:f6:df:0b:6e:cb:53:e3:0d:1b:e4:f9:1b:a8:32:
                    81:00:fc:12:9a:43:61:0f:01:af:a7:50:ef:e3:a4:
                    13:90:a8:95:c0:52:fa:d6:68:96:1a:02:45:6f:06:
                    20:d5:39:6d:91:d3:40:f7:a1:8f:c1:06:01:5f:f0:
                    15:28:e4:52:e1:92:c4:a2:39:27:af:79:cc:8c:5a:
                    bb:bb:fa:0f:00:47:b5:5b:dd:8f:65:1c:c8:10:f6:
                    f6:f7:39:fa:93:74:b1:f2:1e:dc:ae:2d:fd:16:f9:
                    87:f2:9a:cf:e3:79:e4:cb:dd:5b:ca:e2:8f:b4:e1:
                    7f:0e:1d:bd:56:6e:e9:56:3f:ff:f9:b7:ab:c3:60:
                    36:62:3c:4b:ac:2c:c1:c5:89:a1:0d:81:f2:67:d2:
                    a2:70:74:f9:0b:e0:c5:6c:07:3a:d4:de:58:e5:92:
                    0c:56:e3:c1:39:6e:fd:24:60:32:9e:c4:c8:9f:1f:
                    8e:3c:f0:77:ff:85:79:7a:e6:d7:69:b8:ab:21:ba:
                    74:20:b4:cf:ad:36:97:be:ec:da:07:1b:d9:e4:1e:
                    f5:d1:17:dd:78:46:8d:b2:25:57:57:d0:d6:1d:b9:
                    12:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:85:17:56:A3:F8:7A:A3:64:CD:73:BE:BB:D0:EB:77:57:18:74:9F
            X509v3 Authority Key Identifier:
                keyid:AF:4A:35:44:C7:4B:31:7A:7C:32:6A:F0:E8:39:3C:B9:D5:26:20:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:e3:bc:b5:1b:dc:98:28:75:f8:51:ab:c4:c5:65:98:ba:3c:
         97:fa:e7:ad:70:df:fb:9c:89:20:80:03:90:a6:27:5b:29:cf:
         bb:9c:36:77:e0:d9:70:11:d3:a0:e7:bf:de:9c:ff:4a:90:02:
         9b:e2:54:50:6a:00:b5:2d:32:1c:08:9c:b5:6a:54:99:48:bc:
         c6:2c:af:41:52:bc:06:41:de:a2:dc:fd:d1:85:1b:22:5f:50:
         f0:5f:61:9f:67:70:3b:39:7e:5d:ec:f3:cb:ce:14:3f:fb:de:
         e1:e9:da:ee:04:9c:67:92:38:f1:75:f2:ca:59:bd:bd:6d:7e:
         76:cc:97:e1:cc:de:48:41:f1:78:37:8f:2b:44:4d:5a:fc:1d:
         e8:99:7a:cf:a5:95:3f:ae:16:cf:f5:b5:96:58:f6:a0:ba:be:
         58:0d:dc:f3:b9:32:16:32:dc:8b:cf:1a:73:da:18:77:58:77:
         2d:f0:6e:6e:27:47:c8:cd:8e:aa:97:4a:ed:0b:c7:fa:e7:83:
         63:90:4e:2d:39:cb:b6:7a:c8:5f:d7:be:49:72:b2:91:e2:4b:
         da:25:97:bd:ca:a2:b1:6b:49:f5:5a:3b:77:71:f1:a0:6c:4b:
         c6:ba:da:48:4d:50:76:24:6d:d4:33:2f:48:81:e7:ec:43:08:
         1f:90:e5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:36:30 2026 by rpki-client