Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft
File:                     i2WlKUN31oY3jEaz6drXzbW2Z5E.mft (raw, json)
Hash identifier:          kxsIutrFFvVA7VzkIj+jsRxHkcapSRFkaUAphbqi6Ss=
Subject key identifier:   23:AA:2E:0C:C6:CD:7D:B9:64:7E:BA:84:37:BF:72:89:82:15:E3:27
Authority key identifier: 8B:65:A5:29:43:77:D6:86:37:8C:46:B3:E9:DA:D7:CD:B5:B6:67:91
Certificate issuer:       /CN=A9127C2D/serialNumber=8B65A5294377D686378C46B3E9DAD7CDB5B66791
Certificate serial:       01E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2WlKUN31oY3jEaz6drXzbW2Z5E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft
Manifest number:          01D4
Signing time:             Wed 13 May 2026 03:43:55 +0000
Manifest this update:     Wed 13 May 2026 03:43:54 +0000
Manifest next update:     Wed 20 May 2026 03:43:54 +0000
Files and hashes:         1: i2WlKUN31oY3jEaz6drXzbW2Z5E.crl (hash: j8PJo3qg90TK3sQiclxjai+Urd5kseZsisdpOZ0XLLI=)
                          2: A2F568A08CDC11EEA05B6E55C4F9AE02.roa (hash: hou+c7BsoKfVisvEwRZh9uWs6LCWRU5zcufZlx3RZD4=)
                          3: 83298B188CDD11EE9C0A8258C4F9AE02.roa (hash: /wrVNUp5njYp8bBfMjYQTOD/jBHOQFuLEFwcPRZnAKo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.crl
                          rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2WlKUN31oY3jEaz6drXzbW2Z5E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 03:43:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 480 (0x1e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127C2D, serialNumber=8B65A5294377D686378C46B3E9DAD7CDB5B66791
        Validity
            Not Before: May 13 03:43:54 2026 GMT
            Not After : May 20 03:43:54 2026 GMT
        Subject: CN=6a03f37b-ef76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fc:32:4c:74:b2:7f:4e:35:a2:56:87:35:5a:
                    16:0c:85:59:8d:0d:83:da:20:d5:fb:5e:0d:8e:12:
                    79:77:00:5e:b9:25:76:24:1b:3c:26:09:a8:fc:d3:
                    7e:be:6c:d1:86:1e:c8:0a:92:31:1d:22:c2:be:ff:
                    11:bd:2a:16:9f:83:a0:d4:57:1f:5b:6e:3e:5e:92:
                    8c:03:68:f8:38:cf:ba:81:37:fd:3a:16:c9:29:2b:
                    a2:ee:ff:28:59:54:50:33:9c:28:91:d8:54:d0:39:
                    1f:05:60:0d:95:dc:86:ce:5b:2a:7a:15:98:78:36:
                    29:d1:27:c2:08:fa:fd:2c:a5:0d:d3:b6:e2:8f:2d:
                    82:23:2a:bb:cd:a2:ae:16:dd:27:9e:93:4b:59:e9:
                    ce:0d:70:b1:9f:c1:86:5e:d2:61:27:c0:77:61:42:
                    c7:9d:5f:34:51:08:6c:0b:a9:9b:4c:4b:13:a1:bc:
                    1d:5c:d2:3b:04:01:9d:de:e1:0c:13:3c:f4:56:97:
                    ee:66:5a:ba:31:01:32:88:4d:cb:d4:8c:6f:ba:f0:
                    09:c9:93:be:e7:5d:d2:43:5b:62:ff:92:b7:22:60:
                    d9:76:1c:2e:fd:fd:94:62:c3:69:20:38:ef:cc:2f:
                    f2:2d:b0:ff:ce:92:e9:1b:d6:b7:04:b1:a0:20:d2:
                    38:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:AA:2E:0C:C6:CD:7D:B9:64:7E:BA:84:37:BF:72:89:82:15:E3:27
            X509v3 Authority Key Identifier:
                keyid:8B:65:A5:29:43:77:D6:86:37:8C:46:B3:E9:DA:D7:CD:B5:B6:67:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2WlKUN31oY3jEaz6drXzbW2Z5E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:db:ce:57:b7:26:a9:74:91:ac:31:9b:43:82:a5:15:df:ff:
         36:03:91:61:98:ed:aa:05:08:9b:05:fa:05:ab:ed:01:8a:cb:
         d3:aa:31:df:00:eb:ea:3e:e2:c2:0f:b6:31:2f:68:e8:9f:c0:
         3b:28:02:53:98:56:15:75:ad:3a:2e:57:c7:52:45:5d:1e:d7:
         00:ab:b1:bf:00:f6:7a:21:98:c0:7f:39:4a:c0:7f:92:3c:06:
         b6:14:1f:cf:85:c2:12:eb:5a:41:03:29:50:a8:ae:d5:f3:09:
         c8:df:77:c5:b8:37:d6:33:b3:ac:c2:12:ba:8b:fc:bb:d9:e9:
         22:a8:4f:b2:8f:cd:e8:ad:cd:1e:d0:45:a8:72:fc:88:d4:37:
         e5:d6:70:48:bb:ee:6e:55:99:07:ad:53:89:a9:11:63:68:94:
         3a:9e:39:ee:8e:9d:2c:61:11:2f:86:4d:87:4c:48:06:ef:ac:
         44:4b:3a:70:03:cb:0c:61:67:17:61:77:8d:3e:e3:14:62:bd:
         0d:84:64:93:05:1f:f4:03:6b:07:f2:37:74:46:67:7d:39:31:
         44:d3:66:f4:ae:9d:66:f7:12:82:2f:63:91:25:b4:c5:86:bb:
         dc:85:a7:86:be:f7:f2:28:59:13:c2:83:f9:b8:0e:02:46:d8:
         52:7e:95:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:22:44 2026 by rpki-client