Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F441/A58BE4683E0A11F19633AD1DA8833773/9XVLkqq8JoHf84hg3Om63UQAE5s.mft
File:                     9XVLkqq8JoHf84hg3Om63UQAE5s.mft (raw, json)
Hash identifier:          fc7fTIC00wRaBGpX5i7J074mGSFNgHqx0s6t9F3FVWI=
Subject key identifier:   33:4C:4E:3E:9B:72:40:CB:03:81:A3:BC:1E:DD:5F:44:58:C9:40:25
Authority key identifier: F5:75:4B:92:AA:BC:26:81:DF:F3:88:60:DC:E9:BA:DD:44:00:13:9B
Certificate issuer:       /CN=A912F441/serialNumber=F5754B92AABC2681DFF38860DCE9BADD4400139B
Certificate serial:       0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9XVLkqq8JoHf84hg3Om63UQAE5s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F441/A58BE4683E0A11F19633AD1DA8833773/9XVLkqq8JoHf84hg3Om63UQAE5s.mft
Manifest number:          0E
Signing time:             Wed 13 May 2026 09:14:27 +0000
Manifest this update:     Wed 13 May 2026 09:14:26 +0000
Manifest next update:     Wed 20 May 2026 09:14:26 +0000
Files and hashes:         1: 9XVLkqq8JoHf84hg3Om63UQAE5s.crl (hash: BgPA018J96xOh3yvS/vd5pMWyzIDmBOJoFuDBPdc+yg=)
                          2: 9019A36C3E1511F1A306071DB0833773.roa (hash: qFpaUvNcy06CyqhmCRJk7avcwKJJ8xKplcr6b79/BGk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F441/A58BE4683E0A11F19633AD1DA8833773/9XVLkqq8JoHf84hg3Om63UQAE5s.crl
                          rsync://rpki.apnic.net/member_repository/A912F441/A58BE4683E0A11F19633AD1DA8833773/9XVLkqq8JoHf84hg3Om63UQAE5s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9XVLkqq8JoHf84hg3Om63UQAE5s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 09:14:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F441, serialNumber=F5754B92AABC2681DFF38860DCE9BADD4400139B
        Validity
            Not Before: May 13 09:14:26 2026 GMT
            Not After : May 20 09:14:26 2026 GMT
        Subject: CN=6a0440f3-aebe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d7:c1:ca:28:5a:f1:62:5d:01:ba:da:4e:d2:
                    ab:90:90:e0:ef:c8:48:c8:57:ec:92:9b:cf:02:73:
                    9d:63:7c:09:35:ac:2c:03:71:97:ab:4f:dd:36:4d:
                    80:ef:31:42:5c:90:06:8b:a0:30:fe:f1:58:2a:c8:
                    6e:86:d5:3b:9a:12:d6:43:aa:3e:b4:4a:5b:4c:3d:
                    07:a5:7b:d2:5b:9a:35:bc:f6:5b:f1:8a:f9:ca:d5:
                    bf:d1:90:7a:2c:b0:99:a6:6d:44:c3:af:52:71:09:
                    e3:ec:e4:10:a3:ea:d1:bd:ff:5a:d7:bf:97:4e:96:
                    05:5e:d9:c1:80:81:e3:b7:66:22:13:4f:0d:e5:16:
                    b3:1b:78:e9:05:09:eb:3e:20:11:f8:64:36:c9:06:
                    21:3d:54:15:15:7a:f7:cc:f2:c0:28:18:f1:3c:30:
                    90:64:bc:3b:d6:cd:af:ce:43:2a:4a:44:59:89:4b:
                    37:3b:42:ac:83:fd:60:bf:72:d0:aa:66:aa:9d:b6:
                    77:a4:15:0d:8e:d6:8b:57:63:e0:81:3f:04:08:a1:
                    98:5b:a3:a9:ee:df:c5:79:c0:36:2b:6f:d2:67:79:
                    30:f5:54:62:79:e4:5b:97:3a:79:8c:f4:2a:55:a8:
                    8d:3c:15:d1:36:d9:e4:a1:3c:f1:d3:2c:d8:39:b7:
                    a2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:4C:4E:3E:9B:72:40:CB:03:81:A3:BC:1E:DD:5F:44:58:C9:40:25
            X509v3 Authority Key Identifier:
                keyid:F5:75:4B:92:AA:BC:26:81:DF:F3:88:60:DC:E9:BA:DD:44:00:13:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F441/A58BE4683E0A11F19633AD1DA8833773/9XVLkqq8JoHf84hg3Om63UQAE5s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9XVLkqq8JoHf84hg3Om63UQAE5s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F441/A58BE4683E0A11F19633AD1DA8833773/9XVLkqq8JoHf84hg3Om63UQAE5s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:81:61:c1:e3:7c:05:db:9b:c4:b8:50:71:e4:7c:a8:3c:ae:
         26:34:65:47:10:f6:46:15:c7:52:af:18:a8:5c:80:94:b8:b4:
         76:5b:45:73:74:67:a5:a5:cf:da:3a:a9:10:41:6e:63:f5:44:
         d0:0d:7b:dc:3f:c0:20:99:f1:45:81:66:4d:6b:cf:9c:43:10:
         79:f3:e9:8d:a4:d2:f1:f4:fb:f3:b1:b4:79:29:ae:83:c6:b1:
         e6:3d:67:62:c5:d6:c5:70:43:a4:e9:12:93:22:33:38:e7:c4:
         33:4d:00:7b:22:56:64:8e:98:06:61:f3:83:42:7f:e2:e0:8d:
         ef:28:5c:33:d6:79:81:28:19:31:80:6b:ac:74:1a:ee:ff:68:
         fb:04:eb:67:00:7c:91:67:65:2a:a7:e6:71:43:a9:97:08:9f:
         66:6c:18:be:06:6b:d8:71:8f:93:6c:9e:01:95:1d:d4:c1:f1:
         a4:c5:6b:03:d2:f8:ca:bb:fa:46:ad:e2:c2:11:4f:7d:d7:29:
         1f:b3:41:f0:4f:08:1c:e9:51:82:cf:25:5d:78:c3:1b:03:5f:
         f2:73:d1:fd:32:e8:ab:bb:6d:c6:a3:58:46:cc:54:15:9e:80:
         7d:b6:71:4a:ef:ed:b2:4a:25:8f:2f:f1:b4:8c:93:0e:d7:42:
         d2:4a:3b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:43:04 2026 by rpki-client