Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft
File:                     RoxqeSq7PkX-7iIo0o54AxNytFU.mft (raw, json)
Hash identifier:          4UbpwSLePPrEckF4W+v9jQQDBscZ7TSPV6MX67Y9Y0Q=
Subject key identifier:   18:71:80:CB:15:6F:98:E1:BB:F7:46:48:2E:FD:F2:AE:9C:F8:9F:BF
Authority key identifier: 46:8C:6A:79:2A:BB:3E:45:FE:EE:22:28:D2:8E:78:03:13:72:B4:55
Certificate issuer:       /CN=A912DD15/serialNumber=468C6A792ABB3E45FEEE2228D28E78031372B455
Certificate serial:       025C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RoxqeSq7PkX-7iIo0o54AxNytFU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft
Manifest number:          0253
Signing time:             Wed 13 May 2026 02:26:23 +0000
Manifest this update:     Wed 13 May 2026 02:26:22 +0000
Manifest next update:     Wed 20 May 2026 02:26:22 +0000
Files and hashes:         1: RoxqeSq7PkX-7iIo0o54AxNytFU.crl (hash: a/OppV0V3d3botqSZr6LFeH1wTgQ48tX8i/ezlVzNZs=)
                          2: 43CE5D5A236911EEAC33285DC4F9AE02.roa (hash: DI/eG9DXOFb9EKRR2bPnL0OAziLMqCbunU7psCFOUsk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.crl
                          rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RoxqeSq7PkX-7iIo0o54AxNytFU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:26:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 604 (0x25c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912DD15, serialNumber=468C6A792ABB3E45FEEE2228D28E78031372B455
        Validity
            Not Before: May 13 02:26:22 2026 GMT
            Not After : May 20 02:26:22 2026 GMT
        Subject: CN=6a03e14f-7a5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:83:f2:11:3d:21:59:eb:2c:79:53:93:20:b8:
                    fa:f5:3f:15:6e:16:4b:c7:f9:b9:3c:a3:ab:24:59:
                    16:57:01:07:dd:1d:69:b4:cb:5f:3b:74:1c:8a:21:
                    b5:21:5c:0c:cf:d0:79:8e:dd:9c:5a:d3:22:4b:63:
                    8d:4a:50:ed:96:69:d6:43:ce:18:c7:3e:cd:a7:b6:
                    1d:a5:f3:e8:b4:08:9a:34:e0:87:56:a3:ab:5f:81:
                    3e:56:45:ad:56:22:d2:a0:32:b7:3a:88:55:2b:b8:
                    36:e6:18:37:86:8a:08:73:8c:f5:e9:ad:b9:00:15:
                    a2:3e:c5:17:79:2b:57:72:d3:69:9e:47:91:79:87:
                    bf:e8:bd:ad:74:08:59:03:55:c9:67:e7:26:fe:9f:
                    62:b6:e4:86:b0:e2:55:62:9e:c9:8e:2e:26:05:4d:
                    5b:15:45:fd:07:97:b1:8c:ee:c2:51:a8:57:e4:7e:
                    67:2f:31:e0:82:1a:ae:b3:09:3a:d7:6c:ab:e5:40:
                    c2:03:2a:90:a7:96:02:d7:72:3f:d8:71:e4:95:8c:
                    b1:f4:75:0f:81:c8:3f:4c:71:12:60:d5:16:d5:f5:
                    eb:ec:85:a9:b9:e3:1d:0e:9f:53:cd:d3:e5:06:ba:
                    2f:5d:fe:c4:0f:fc:43:82:b5:f0:4f:16:f8:e7:98:
                    15:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:71:80:CB:15:6F:98:E1:BB:F7:46:48:2E:FD:F2:AE:9C:F8:9F:BF
            X509v3 Authority Key Identifier:
                keyid:46:8C:6A:79:2A:BB:3E:45:FE:EE:22:28:D2:8E:78:03:13:72:B4:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RoxqeSq7PkX-7iIo0o54AxNytFU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:09:93:bf:d7:0b:34:85:05:7b:2c:e0:21:cf:3d:93:34:0f:
         de:95:4a:7d:62:44:b7:b3:5b:65:44:2d:10:76:21:a1:50:b5:
         c1:cc:0b:90:75:b0:9b:94:9b:88:2c:c9:e3:fb:82:ad:d0:5d:
         9f:c3:20:d0:71:b5:ec:00:5b:ae:f1:ea:a1:61:0b:21:9f:02:
         96:bd:e5:e5:f9:f5:59:01:98:a7:d9:3b:ee:7d:d8:0f:fe:50:
         93:d7:e5:ff:b4:52:50:25:a8:9d:18:99:f0:63:7a:49:61:b1:
         33:db:f1:79:9f:71:8d:e2:b4:8b:c2:34:5b:de:f8:96:d0:50:
         09:a8:80:a6:95:df:b6:32:86:97:d0:2c:03:59:91:2c:b5:f8:
         35:bf:3a:b2:1b:9c:9a:4d:2e:c1:4d:4f:1f:87:47:15:65:cc:
         c5:e9:33:73:38:0a:c2:31:71:26:d4:25:7f:e5:4f:ce:fe:26:
         64:b7:18:83:df:99:b6:45:58:ad:00:31:c8:4f:09:de:fe:4d:
         af:a2:e3:a0:c4:aa:60:a2:67:1d:ec:2d:50:ac:25:2f:61:6a:
         cb:5b:60:e8:fd:e1:a6:71:64:0f:2e:12:1e:5b:4d:85:e5:8c:
         fb:94:3d:21:6c:ff:c4:9c:03:7a:ff:dc:f8:38:0a:df:00:01:
         2d:f4:4d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:37:34 2026 by rpki-client