Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft
File:                     E4zRCkd43g41kR6cnJRPSyHE2wk.mft (raw, json)
Hash identifier:          AyFcp20SKsPAM4CYfxgsqJPS2f1/ILFrwQZhnUMIWcE=
Subject key identifier:   2D:53:CB:07:C5:1D:C7:D5:4E:E0:51:63:C8:7E:68:22:BE:AA:F1:EE
Authority key identifier: 13:8C:D1:0A:47:78:DE:0E:35:91:1E:9C:9C:94:4F:4B:21:C4:DB:09
Certificate issuer:       /CN=A9130F9C/serialNumber=138CD10A4778DE0E35911E9C9C944F4B21C4DB09
Certificate serial:       0D6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft
Manifest number:          0D49
Signing time:             Tue 12 May 2026 18:06:11 +0000
Manifest this update:     Tue 12 May 2026 18:06:10 +0000
Manifest next update:     Tue 19 May 2026 18:06:10 +0000
Files and hashes:         1: E4zRCkd43g41kR6cnJRPSyHE2wk.crl (hash: VbwkhGgQ/0fyta1PuJWcolSNMk2Xfxsh+H0VqcvM9vI=)
                          2: 41CBB5B87F7611ECAD50FA4EC4F9AE02.roa (hash: Un5EoRL9PQC9xIW5CX3zoZdwpivD2GxDkHynm1gEUVk=)
                          3: 0827E4147F7911EC86DE4B56C4F9AE02.roa (hash: HpflIZHPJw/jzbgP6VSoBVTn6YCT3C7WFMC80MZUPak=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.crl
                          rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:06:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3434 (0xd6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130F9C, serialNumber=138CD10A4778DE0E35911E9C9C944F4B21C4DB09
        Validity
            Not Before: May 12 18:06:10 2026 GMT
            Not After : May 19 18:06:10 2026 GMT
        Subject: CN=6a036c13-67d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ce:7c:4f:d8:65:25:ee:b1:56:c8:f3:73:8a:
                    27:04:7c:92:08:89:55:d1:7c:46:32:1f:68:58:d5:
                    69:85:13:62:74:b9:3b:af:17:d4:50:0e:e1:d0:12:
                    67:88:90:a2:64:e7:33:91:8d:4d:8e:bd:ac:71:59:
                    95:dd:9c:09:ca:89:1c:1e:8d:d1:0e:67:11:d1:53:
                    fb:0c:63:a5:03:1a:e8:30:ae:34:37:a1:64:81:62:
                    a6:53:36:69:45:f0:a8:2a:b8:f2:05:75:3a:8b:56:
                    92:6e:8d:28:db:6a:ea:e4:8f:0e:5c:09:14:33:54:
                    fa:f1:f3:d5:8d:f0:f3:ed:46:9a:b5:90:bb:9a:b6:
                    19:97:9c:49:3c:b0:f2:fa:29:7d:55:a8:84:2d:54:
                    ef:ed:bf:81:66:d0:a1:5e:59:96:8f:57:b4:13:32:
                    68:01:ff:30:04:98:53:8a:06:fb:46:4c:57:56:98:
                    c8:6a:68:7c:26:6d:40:cf:e6:60:d4:82:2e:93:35:
                    f2:07:4c:22:57:1e:68:cb:ad:b0:80:c6:2d:f3:83:
                    27:b4:a7:20:48:6f:31:47:e4:50:c6:6e:47:6c:96:
                    d4:14:26:47:3a:9c:5d:98:6e:3e:01:dc:7f:cc:ea:
                    a8:f0:f2:8e:6d:00:09:2f:7c:77:2f:1f:28:90:d4:
                    05:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:53:CB:07:C5:1D:C7:D5:4E:E0:51:63:C8:7E:68:22:BE:AA:F1:EE
            X509v3 Authority Key Identifier:
                keyid:13:8C:D1:0A:47:78:DE:0E:35:91:1E:9C:9C:94:4F:4B:21:C4:DB:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:f2:3f:c3:9a:d8:c4:fd:ee:be:32:7e:00:d7:6b:57:ae:02:
         a8:0a:28:b4:69:ff:13:4c:b3:b1:3a:5b:8f:4a:90:87:ab:62:
         a0:fa:95:d6:4c:0a:7e:a0:43:df:c3:9d:c5:31:46:93:be:29:
         55:98:2e:d4:38:cc:a8:5b:3a:42:7d:98:f0:97:a3:d1:8f:fa:
         69:b9:2d:86:21:d8:5f:fe:ec:c6:15:a0:de:3a:3e:80:b3:63:
         18:98:2c:3a:90:bc:13:20:29:6d:ad:f2:6c:2f:b7:1e:a1:3a:
         a8:f2:46:c9:a3:f0:7c:71:a4:8d:a4:45:ff:47:87:b1:75:a4:
         e0:06:c0:7e:b4:b5:70:98:38:9a:1e:df:89:4a:af:c0:4d:61:
         a9:12:eb:69:09:3e:0d:be:65:c9:65:88:be:dd:d0:3e:5b:24:
         c5:f4:55:67:fd:17:dd:04:e9:bb:10:36:e0:c3:48:3c:85:05:
         a7:d7:cf:92:3f:32:d7:ec:e0:03:43:f1:fe:40:a8:20:40:e6:
         ac:a3:d3:5e:6f:b0:de:4f:fe:cb:bd:5f:a9:8d:f2:74:15:6c:
         67:d3:fb:63:04:ca:70:16:2b:0e:d3:88:1f:e0:5d:ba:ac:78:
         91:cb:f7:0f:9c:f0:68:d6:8c:34:02:05:98:4b:b5:af:5a:1b:
         23:ed:6f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:02:00 2026 by rpki-client