Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125C22/FACCBC5C7FAD11EB977B5335C4F9AE02/xwtOBHyqc3ckuJ1YTbXAwahY0o4.mft
File:                     xwtOBHyqc3ckuJ1YTbXAwahY0o4.mft (raw, json)
Hash identifier:          aUpMP0Eag5tyg1kHfuiGPksORM7EGRviifW+Nr2xOGs=
Subject key identifier:   D7:38:DA:83:DA:F7:5D:44:5B:AE:39:93:78:B8:27:FB:05:E5:B0:9A
Authority key identifier: C7:0B:4E:04:7C:AA:73:77:24:B8:9D:58:4D:B5:C0:C1:A8:58:D2:8E
Certificate issuer:       /CN=A9125C22/serialNumber=C70B4E047CAA737724B89D584DB5C0C1A858D28E
Certificate serial:       0724
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xwtOBHyqc3ckuJ1YTbXAwahY0o4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125C22/FACCBC5C7FAD11EB977B5335C4F9AE02/xwtOBHyqc3ckuJ1YTbXAwahY0o4.mft
Manifest number:          071D
Signing time:             Tue 12 May 2026 21:58:18 +0000
Manifest this update:     Tue 12 May 2026 21:58:18 +0000
Manifest next update:     Tue 19 May 2026 21:58:18 +0000
Files and hashes:         1: xwtOBHyqc3ckuJ1YTbXAwahY0o4.crl (hash: JWWLR868jUwrF6n5uXPBKOTBkvL1Z24yPWMVVwXAnNs=)
                          2: 485D694A454911EEB8718378C4F9AE02.roa (hash: Y8iJThI3UQs6h5LHq/2D1bpcHDn8+qLI7yAh/AJOyS8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125C22/FACCBC5C7FAD11EB977B5335C4F9AE02/xwtOBHyqc3ckuJ1YTbXAwahY0o4.crl
                          rsync://rpki.apnic.net/member_repository/A9125C22/FACCBC5C7FAD11EB977B5335C4F9AE02/xwtOBHyqc3ckuJ1YTbXAwahY0o4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xwtOBHyqc3ckuJ1YTbXAwahY0o4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 21:58:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1828 (0x724)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125C22, serialNumber=C70B4E047CAA737724B89D584DB5C0C1A858D28E
        Validity
            Not Before: May 12 21:58:18 2026 GMT
            Not After : May 19 21:58:18 2026 GMT
        Subject: CN=6a03a27a-24f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:25:7d:59:6e:d2:7b:7b:62:81:21:98:7b:52:
                    40:13:aa:86:9a:c7:bd:f5:8a:c2:68:66:d9:6e:1a:
                    9d:92:1b:6f:31:44:30:79:55:83:6a:09:0e:bb:a8:
                    90:35:a8:bb:07:98:44:db:d1:89:09:85:49:c2:c2:
                    56:6a:0b:9e:35:40:73:c4:68:88:43:31:e8:58:c8:
                    aa:aa:af:67:7d:11:29:ca:2e:1d:ed:9d:fb:9e:e0:
                    a3:f6:60:06:81:a6:0a:1c:00:92:48:ab:a4:45:ec:
                    fe:27:56:39:f1:a1:4b:c4:80:91:a2:bf:6a:f3:ee:
                    b1:7f:41:5d:4e:0b:79:3d:d2:05:83:a4:85:c7:20:
                    d9:91:4b:b6:fd:5c:81:98:45:a5:3b:73:c5:aa:15:
                    d4:25:a8:52:f6:c1:0a:41:97:f5:25:bf:f6:3d:fc:
                    0f:ee:05:27:37:b5:98:c9:6e:49:4e:79:79:5d:74:
                    92:56:6e:f4:bd:bf:65:1a:9d:24:0e:55:21:42:f4:
                    e4:22:c6:99:07:3c:e3:78:7d:10:f2:64:2b:81:d3:
                    2e:aa:07:0e:2a:d1:95:b1:d5:e3:1a:3e:f1:e4:02:
                    30:b9:42:0a:39:2e:a5:68:ec:4f:a2:fd:b0:9c:28:
                    9b:6e:c5:81:14:25:c8:ba:3f:f6:1b:2a:09:0f:96:
                    55:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:38:DA:83:DA:F7:5D:44:5B:AE:39:93:78:B8:27:FB:05:E5:B0:9A
            X509v3 Authority Key Identifier:
                keyid:C7:0B:4E:04:7C:AA:73:77:24:B8:9D:58:4D:B5:C0:C1:A8:58:D2:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125C22/FACCBC5C7FAD11EB977B5335C4F9AE02/xwtOBHyqc3ckuJ1YTbXAwahY0o4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xwtOBHyqc3ckuJ1YTbXAwahY0o4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125C22/FACCBC5C7FAD11EB977B5335C4F9AE02/xwtOBHyqc3ckuJ1YTbXAwahY0o4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:2e:31:37:fc:7b:25:70:ab:06:1a:55:e4:2d:cb:a5:80:7d:
         ad:88:cd:4b:0f:6e:43:aa:3f:66:31:b1:11:5f:9b:0d:8d:ab:
         cc:b7:ad:2c:ab:72:95:53:7e:f3:52:1b:0c:fb:5a:10:83:c0:
         4c:aa:09:c0:d6:d7:cf:f5:d3:db:2b:cd:78:28:ff:0b:5f:71:
         29:7f:f2:aa:48:0c:fc:d6:ff:9e:cb:c6:65:c8:6b:69:fa:37:
         e1:a7:b1:7d:d9:9d:f4:96:c9:52:8a:61:ae:69:b9:19:df:7b:
         9c:65:3c:0d:5d:fe:ef:64:fa:a1:a8:cd:f4:a2:be:dc:86:2d:
         1c:f4:20:96:f1:64:94:bd:af:05:11:5a:1d:72:e7:22:76:f3:
         c2:fb:25:ca:89:38:cf:57:7e:4e:50:f4:8d:d4:05:2c:58:f4:
         f1:9c:c5:8b:e4:70:38:8c:1a:5c:be:67:58:d8:a5:f3:1f:e6:
         10:c4:35:44:b2:c4:71:6c:7b:1f:05:8a:12:f3:10:ea:5b:fc:
         a2:c0:49:e4:85:0a:c8:12:46:2b:c7:95:bd:30:fc:8a:83:17:
         8e:2a:76:d9:95:b2:7a:2d:67:d0:0d:24:db:00:7b:56:1f:b3:
         2f:6c:86:d0:a3:15:18:fb:70:82:f3:31:4f:38:cb:57:4f:9a:
         ea:45:19:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:08:15 2026 by rpki-client