Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/m8SNrBAOdU7o4cpqupQk4z013mo.mft
File:                     m8SNrBAOdU7o4cpqupQk4z013mo.mft (raw, json)
Hash identifier:          85XMtLt1CEnOu7vfRi8qDPdN77+2ofnNsSjxyUW52ds=
Subject key identifier:   05:05:01:C4:3C:F1:50:C4:D7:B4:33:93:77:80:55:CA:8F:E6:25:29
Authority key identifier: 9B:C4:8D:AC:10:0E:75:4E:E8:E1:CA:6A:BA:94:24:E3:3D:35:DE:6A
Certificate issuer:       /CN=A913089B/serialNumber=9BC48DAC100E754EE8E1CA6ABA9424E33D35DE6A
Certificate serial:       35
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/m8SNrBAOdU7o4cpqupQk4z013mo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/m8SNrBAOdU7o4cpqupQk4z013mo.mft
Manifest number:          35
Signing time:             Mon 11 May 2026 07:31:49 +0000
Manifest this update:     Mon 11 May 2026 07:31:49 +0000
Manifest next update:     Mon 18 May 2026 07:31:49 +0000
Files and hashes:         1: m8SNrBAOdU7o4cpqupQk4z013mo.crl (hash: b7Dxv6vI4ovBGABFhhAn0+Zxm+XEn+6siKGFxu25p6k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/m8SNrBAOdU7o4cpqupQk4z013mo.crl
                          rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/m8SNrBAOdU7o4cpqupQk4z013mo.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/m8SNrBAOdU7o4cpqupQk4z013mo.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 07:31:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913089B, serialNumber=9BC48DAC100E754EE8E1CA6ABA9424E33D35DE6A
        Validity
            Not Before: May 11 07:31:49 2026 GMT
            Not After : May 18 07:31:49 2026 GMT
        Subject: CN=6a0185e5-5153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ab:02:50:4c:38:94:c4:98:f8:a0:a7:2f:68:
                    1f:bb:76:fd:c0:f3:af:f6:46:97:54:f4:35:39:e3:
                    45:09:5e:d5:e7:15:1e:28:ba:97:39:28:c4:ff:f3:
                    0b:89:7b:33:ea:88:76:11:a8:cc:99:fe:96:96:52:
                    46:64:c6:f0:25:ca:ef:75:eb:15:fb:2d:a2:0f:dd:
                    7c:a4:d8:3c:83:47:71:25:cb:3c:81:d9:73:81:15:
                    4d:96:d2:93:6b:93:d9:d3:2f:10:ad:8e:8c:12:1b:
                    6b:3c:ba:7e:49:52:69:a3:78:04:13:87:0f:e1:0c:
                    81:80:2c:08:b9:ce:1f:1b:d7:3f:3c:13:d8:ce:96:
                    a2:89:be:12:f6:3f:4e:99:1f:13:89:b2:ef:30:65:
                    b2:e3:cd:7b:86:f3:f1:09:59:f5:88:a4:01:bd:11:
                    e3:68:c1:7e:a5:96:fb:5a:03:57:af:38:7e:22:db:
                    0e:51:4e:a8:a1:de:e7:35:d9:72:ae:e7:c7:e3:9b:
                    1a:e9:48:a8:78:47:95:f0:66:cf:16:56:da:8d:bc:
                    b3:a8:92:08:b0:bf:53:7c:27:9d:8a:f5:15:67:0a:
                    57:fc:b1:c7:80:de:d7:ff:b9:fb:1d:4e:09:4c:d5:
                    e6:cd:53:75:14:98:d3:c3:59:9a:70:0c:e9:a2:76:
                    b8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:05:01:C4:3C:F1:50:C4:D7:B4:33:93:77:80:55:CA:8F:E6:25:29
            X509v3 Authority Key Identifier:
                keyid:9B:C4:8D:AC:10:0E:75:4E:E8:E1:CA:6A:BA:94:24:E3:3D:35:DE:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/m8SNrBAOdU7o4cpqupQk4z013mo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/m8SNrBAOdU7o4cpqupQk4z013mo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/m8SNrBAOdU7o4cpqupQk4z013mo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:5a:9c:1e:2f:0a:4d:d3:f2:35:12:ce:1f:c9:0e:62:85:8d:
         e7:4f:f9:2e:87:c2:e1:90:55:25:af:86:84:9a:ac:7b:2c:90:
         95:78:8f:cc:05:06:c0:ed:8d:2d:40:d5:42:7c:19:36:c2:63:
         97:4c:88:71:dc:74:29:9b:be:42:43:95:6e:e0:8f:6b:71:d8:
         0d:a7:c8:2f:67:63:01:b8:d2:a3:3c:16:91:f3:5b:07:80:98:
         21:00:ed:66:62:e3:1f:3e:68:44:8f:9e:08:bd:f5:af:3d:ee:
         7b:d3:d0:1e:a4:1d:91:09:a9:8a:7c:f4:7a:64:7a:33:36:78:
         25:de:a2:86:72:ba:1d:73:8e:80:05:19:40:47:e9:1f:a6:c4:
         0d:05:70:59:4c:01:a7:1b:c0:35:5d:01:55:4d:30:5c:b4:de:
         ac:c8:29:34:19:89:59:84:f5:14:98:27:3c:0c:1f:82:d8:40:
         81:d1:5b:af:85:5e:7a:ab:b2:3a:9b:a6:67:27:ab:48:fc:3c:
         e7:22:bf:6d:8f:51:76:e8:68:a0:97:23:d5:f0:73:66:3a:54:
         07:52:1b:41:80:3f:a9:95:66:20:6e:03:05:eb:4e:ba:f6:0d:
         d3:9c:85:cb:91:60:64:cf:64:c6:1d:99:b2:32:8b:99:0d:fc:
         b6:8d:2c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:02:15 2026 by rpki-client