Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft
File:                     _fz0IvXEZi3h5GQ6JxwEax4hxK0.mft (raw, json)
Hash identifier:          Fk6couwWeOD4k7WwXZUo0mz7+Qfsd/w67TuNvW5aZBU=
Subject key identifier:   AA:C6:E9:31:C5:0E:CA:94:09:C0:9D:79:A6:53:2A:44:79:01:EF:31
Authority key identifier: FD:FC:F4:22:F5:C4:66:2D:E1:E4:64:3A:27:1C:04:6B:1E:21:C4:AD
Certificate issuer:       /CN=A9125A95/serialNumber=FDFCF422F5C4662DE1E4643A271C046B1E21C4AD
Certificate serial:       04EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fz0IvXEZi3h5GQ6JxwEax4hxK0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft
Manifest number:          04E4
Signing time:             Tue 12 May 2026 23:53:55 +0000
Manifest this update:     Tue 12 May 2026 23:53:54 +0000
Manifest next update:     Tue 19 May 2026 23:53:54 +0000
Files and hashes:         1: _fz0IvXEZi3h5GQ6JxwEax4hxK0.crl (hash: sF9jgfyQrLtPUJQk2DbsjpuCicJ5Q6nB1/IFXY76ymc=)
                          2: AF506F14630811EC97879243C4F9AE02.roa (hash: 957JN3cduwRqZhBkt9zySk9smfI+Ua9et4xDRT3DRKs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.crl
                          rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fz0IvXEZi3h5GQ6JxwEax4hxK0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 23:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1259 (0x4eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125A95, serialNumber=FDFCF422F5C4662DE1E4643A271C046B1E21C4AD
        Validity
            Not Before: May 12 23:53:54 2026 GMT
            Not After : May 19 23:53:54 2026 GMT
        Subject: CN=6a03bd93-993b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9e:06:80:32:55:9f:2c:1e:f1:d1:2d:a0:17:
                    fa:0a:ed:81:b1:c2:26:72:cb:84:ae:0b:ae:18:0d:
                    f5:0e:1f:b0:46:e5:d8:f6:da:1c:b5:5d:18:4a:5b:
                    b5:ab:dc:f5:28:11:5c:cb:38:10:ee:77:0f:81:8f:
                    fa:ef:dc:46:8a:15:46:cc:5c:97:89:02:02:99:d2:
                    0c:1d:20:e2:cd:97:26:a6:19:99:a3:a5:9f:ac:ab:
                    7f:d9:6c:fd:c7:c4:45:b8:8d:62:93:53:48:0d:25:
                    6d:be:f8:80:9b:0b:14:25:a9:84:38:af:a1:ba:07:
                    5a:2f:08:02:53:5f:02:55:a7:06:66:01:08:8a:ae:
                    68:01:22:e3:3c:60:df:a2:7d:ad:d2:f1:25:de:2a:
                    82:9b:2b:c2:ee:cc:75:ab:33:04:4c:50:46:26:ef:
                    1a:9c:21:99:1b:4e:d1:18:2a:75:73:f9:f3:d6:a1:
                    37:40:f8:73:eb:db:a3:73:01:82:87:03:0d:87:c6:
                    48:a1:8c:7c:ed:58:c7:51:e8:34:c8:0c:61:40:6a:
                    ee:4b:e3:28:8d:f9:1d:a1:46:94:6e:de:66:eb:9f:
                    81:cf:66:ff:c3:8c:db:f2:16:6b:c0:bb:0d:9c:89:
                    ba:38:cd:37:c7:17:4d:db:df:79:3b:fb:70:e2:ff:
                    fa:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:C6:E9:31:C5:0E:CA:94:09:C0:9D:79:A6:53:2A:44:79:01:EF:31
            X509v3 Authority Key Identifier:
                keyid:FD:FC:F4:22:F5:C4:66:2D:E1:E4:64:3A:27:1C:04:6B:1E:21:C4:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fz0IvXEZi3h5GQ6JxwEax4hxK0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:51:e5:31:a6:57:66:6c:19:81:24:71:66:28:d3:91:4c:5c:
         b0:fc:ee:8b:f5:e4:89:0b:35:2b:4a:e5:fb:a5:bb:19:5f:75:
         29:83:73:fb:ae:c6:4e:1c:3d:86:56:f0:f6:3d:91:da:1f:8a:
         cb:a3:6b:ed:89:1b:93:60:44:7a:30:b6:5d:ff:ef:f3:1e:5f:
         c4:7f:8f:b1:32:c7:a6:fe:1e:50:1a:cd:97:bc:6e:ce:a8:18:
         6a:9a:48:01:50:14:ef:5b:b3:92:35:1e:02:a7:9a:67:25:f8:
         64:05:16:ed:ac:ef:29:d8:69:f3:8c:91:76:2a:20:22:4c:68:
         44:5a:b6:9c:6d:c1:50:4d:98:f5:6a:23:f5:d1:9e:7f:3f:01:
         ec:2e:d0:19:79:ae:89:c8:40:97:de:f7:11:1a:90:d7:f1:a0:
         48:e6:cf:69:25:b1:b3:cb:01:a8:ac:a9:b6:a5:57:6e:85:1a:
         24:8a:d8:10:fc:27:6c:af:04:74:fb:9a:bf:89:da:f3:ec:84:
         1d:a4:d6:59:8a:19:75:39:33:62:bd:2c:a4:54:1d:09:69:ce:
         3a:df:eb:44:64:67:aa:7a:37:91:35:37:88:d5:05:71:68:28:
         4b:15:bc:68:7e:b1:a6:e5:61:0c:3d:c5:0c:c9:a4:3e:5d:6f:
         93:56:65:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:53:24 2026 by rpki-client