Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127F37/E51237EAEE8311EFAF58B73FC4F9AE02/avGRXIn1DHKtFvQZzTbvEvSto8c.mft
File:                     avGRXIn1DHKtFvQZzTbvEvSto8c.mft (raw, json)
Hash identifier:          7McCEbTzP5Pj51u83VpH0w9QFwMFDAPKNFBclSCo9HM=
Subject key identifier:   2C:B5:55:2B:F8:D7:93:FC:9E:B8:6A:96:2A:65:12:B9:CE:41:58:82
Authority key identifier: 6A:F1:91:5C:89:F5:0C:72:AD:16:F4:19:CD:36:EF:12:F4:AD:A3:C7
Certificate issuer:       /CN=A9127F37/serialNumber=6AF1915C89F50C72AD16F419CD36EF12F4ADA3C7
Certificate serial:       EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/avGRXIn1DHKtFvQZzTbvEvSto8c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127F37/E51237EAEE8311EFAF58B73FC4F9AE02/avGRXIn1DHKtFvQZzTbvEvSto8c.mft
Manifest number:          E8
Signing time:             Mon 11 May 2026 06:35:12 +0000
Manifest this update:     Mon 11 May 2026 06:35:11 +0000
Manifest next update:     Mon 18 May 2026 06:35:11 +0000
Files and hashes:         1: avGRXIn1DHKtFvQZzTbvEvSto8c.crl (hash: QWWiMFbTT/9P3pVLedLSISo7hFnZ2Mu9gHr4Fm7+5D0=)
                          2: 4FFEB60AEE8411EF981CD840C4F9AE02.roa (hash: odsbCFeuJ80nCFfGI9MVsgAWl5WgVD/n5XyJo20vHj8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127F37/E51237EAEE8311EFAF58B73FC4F9AE02/avGRXIn1DHKtFvQZzTbvEvSto8c.crl
                          rsync://rpki.apnic.net/member_repository/A9127F37/E51237EAEE8311EFAF58B73FC4F9AE02/avGRXIn1DHKtFvQZzTbvEvSto8c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/avGRXIn1DHKtFvQZzTbvEvSto8c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:35:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 236 (0xec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127F37, serialNumber=6AF1915C89F50C72AD16F419CD36EF12F4ADA3C7
        Validity
            Not Before: May 11 06:35:11 2026 GMT
            Not After : May 18 06:35:11 2026 GMT
        Subject: CN=6a01789f-002a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:40:be:d7:99:f0:09:89:3f:94:52:52:50:00:
                    d8:7f:5a:c2:05:a6:bb:9c:38:03:eb:37:c4:94:37:
                    a8:b3:3e:cd:63:de:46:ac:9a:fa:a1:22:19:f4:72:
                    6e:b1:cc:5a:31:63:ff:9f:34:db:5c:89:27:bd:c4:
                    18:f3:1b:eb:4a:3d:01:cc:04:0e:b1:b6:68:4d:2f:
                    1f:0e:4f:dc:ec:ee:1d:87:00:c1:69:56:6b:4c:f3:
                    d0:1e:77:81:ee:f4:a4:1d:b8:cb:61:67:62:9b:63:
                    71:ac:4f:b6:12:dc:0c:c0:d5:cb:6b:01:46:39:8b:
                    2e:f4:6e:c3:ce:1b:3c:c7:6f:68:e7:d2:f6:a6:1f:
                    89:f1:cc:60:a8:05:2d:7f:dc:2c:df:80:0d:d9:49:
                    d3:35:0e:86:16:6d:58:44:90:56:2c:a8:e3:be:76:
                    f6:5b:57:7c:7a:b4:86:14:88:4e:92:46:c4:16:3b:
                    e1:59:43:3b:73:50:d8:4a:b4:a4:0e:29:79:84:6a:
                    69:2c:90:38:49:31:2b:51:2c:4b:43:a2:56:eb:54:
                    ab:5e:43:41:c8:de:f9:32:a8:64:30:c2:94:a3:3b:
                    71:d3:6e:f1:d9:df:15:38:ad:e2:8c:f6:a2:fc:70:
                    cf:f1:bd:b2:00:dc:71:70:ff:5e:83:fb:86:6f:17:
                    eb:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:B5:55:2B:F8:D7:93:FC:9E:B8:6A:96:2A:65:12:B9:CE:41:58:82
            X509v3 Authority Key Identifier:
                keyid:6A:F1:91:5C:89:F5:0C:72:AD:16:F4:19:CD:36:EF:12:F4:AD:A3:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127F37/E51237EAEE8311EFAF58B73FC4F9AE02/avGRXIn1DHKtFvQZzTbvEvSto8c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/avGRXIn1DHKtFvQZzTbvEvSto8c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127F37/E51237EAEE8311EFAF58B73FC4F9AE02/avGRXIn1DHKtFvQZzTbvEvSto8c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:90:0a:f3:1b:86:25:b0:be:08:f0:ad:35:fb:bf:4f:c6:a0:
         d9:bd:68:bb:6c:e3:0a:73:55:a0:62:4f:6f:44:66:b7:10:5b:
         15:49:8b:54:1e:9d:b3:bd:86:cc:6a:7d:97:28:91:e6:c1:d6:
         3f:56:36:f8:e6:ac:c8:dc:0d:75:71:bf:5a:b8:8d:1b:91:99:
         dd:28:8e:cb:ee:21:ed:49:9c:de:b2:eb:a3:36:9f:d5:78:2a:
         79:ee:07:f0:1e:f9:3f:c3:9f:6d:87:b6:0b:37:a3:18:68:67:
         d2:42:81:aa:57:63:8e:cd:8c:b6:2b:8e:37:66:01:be:e3:f8:
         92:1a:32:c4:24:64:2b:de:cc:2e:6a:19:bd:63:5a:4c:6f:94:
         c4:0f:03:91:a4:74:47:c0:bd:f1:9a:f7:92:69:82:d7:a3:b4:
         13:96:d7:53:a8:ef:73:96:ee:7e:75:a8:31:c7:e1:d4:9f:a8:
         46:f3:3f:7b:2e:24:a1:c3:fc:6d:f5:72:3b:32:13:4b:aa:1d:
         94:7a:68:e4:e4:f0:e9:ae:ff:05:3c:a4:cf:95:4a:0f:f9:b9:
         07:72:da:44:10:db:4f:67:df:7e:d6:d1:2a:80:8f:6d:e6:a6:
         65:e6:3b:00:d0:22:5c:cc:af:cf:40:b6:28:fa:ea:c4:48:05:
         2d:38:2a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:28:20 2026 by rpki-client