Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.mft
File:                     8a29DnE5HfIQ3jRh52V4tHoBYko.mft (raw, json)
Hash identifier:          /cE/hvdWieFaJA1sdiv5byn8XI4RctF1CSlNLI7eESM=
Subject key identifier:   76:34:23:DB:04:2F:B1:AA:3F:40:10:A4:DC:76:1E:B0:C7:06:9C:57
Authority key identifier: F1:AD:BD:0E:71:39:1D:F2:10:DE:34:61:E7:65:78:B4:7A:01:62:4A
Certificate issuer:       /CN=A9131711/serialNumber=F1ADBD0E71391DF210DE3461E76578B47A01624A
Certificate serial:       01AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8a29DnE5HfIQ3jRh52V4tHoBYko.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.mft
Manifest number:          01A6
Signing time:             Mon 11 May 2026 04:11:21 +0000
Manifest this update:     Mon 11 May 2026 04:11:20 +0000
Manifest next update:     Mon 18 May 2026 04:11:20 +0000
Files and hashes:         1: 8a29DnE5HfIQ3jRh52V4tHoBYko.crl (hash: fp5LUDiHQG5KXff1aMQGhImOYN8MhmjFOxxIMbVzoM8=)
                          2: 1D63B4248BB011F0A730E413C4F9AE02.roa (hash: Klyy/dVtwsbFsvWmxb8UIFOVeT5tKXYuBYTRi8r0Nuo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.crl
                          rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8a29DnE5HfIQ3jRh52V4tHoBYko.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 04:11:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 427 (0x1ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131711, serialNumber=F1ADBD0E71391DF210DE3461E76578B47A01624A
        Validity
            Not Before: May 11 04:11:20 2026 GMT
            Not After : May 18 04:11:20 2026 GMT
        Subject: CN=6a0156e9-c8dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c9:dc:61:fa:9d:94:95:85:ed:b5:d5:63:ae:
                    35:25:5b:b5:96:d6:6e:64:3b:09:84:6b:a0:e6:ec:
                    89:01:fd:0f:e8:00:37:2c:0c:df:e8:0e:3e:b0:da:
                    22:a5:0a:b0:95:2d:1b:9e:4e:40:be:0d:34:11:cc:
                    a7:44:50:13:28:36:fc:f7:0e:e6:5c:0c:2d:af:8a:
                    ac:e8:d3:e2:92:c4:d1:cb:8c:ac:06:7a:cd:18:c6:
                    b9:3d:94:7f:ec:5b:e7:24:83:04:61:c7:8a:63:42:
                    7e:72:55:17:15:d7:a2:dd:97:df:3a:7b:cd:47:c7:
                    5a:4b:e4:25:3c:cd:9c:f5:b9:d6:f3:64:1d:1b:3b:
                    ab:f2:22:42:65:ba:bb:09:0a:a6:30:90:0c:0f:21:
                    96:1b:9d:14:8d:2e:95:fb:c3:83:9b:7d:ae:0f:9c:
                    08:3f:f8:ae:58:79:f4:8a:fd:01:e1:e8:e3:60:21:
                    cd:40:e6:2c:4b:52:95:cf:01:28:51:b5:c1:89:1c:
                    02:53:99:b7:3b:2f:e6:f4:1a:4f:db:45:cc:b9:aa:
                    a6:c4:e6:21:85:f7:e2:50:62:ce:6a:b6:d3:5c:9d:
                    27:8a:21:c3:79:4b:3c:77:73:10:c2:01:69:19:f9:
                    0a:e5:08:7f:74:9a:00:9b:18:4d:b1:fb:aa:15:bd:
                    9d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:34:23:DB:04:2F:B1:AA:3F:40:10:A4:DC:76:1E:B0:C7:06:9C:57
            X509v3 Authority Key Identifier:
                keyid:F1:AD:BD:0E:71:39:1D:F2:10:DE:34:61:E7:65:78:B4:7A:01:62:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8a29DnE5HfIQ3jRh52V4tHoBYko.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:15:e8:d5:fd:fb:08:b4:7c:1e:2b:a9:d2:10:b4:84:65:ac:
         64:56:b6:b9:74:b0:39:ec:68:4b:d4:ef:e6:fe:b7:64:7e:0a:
         33:ca:85:55:ed:71:b0:e5:98:2f:a1:4b:4b:0b:ca:bb:a6:3a:
         52:73:3d:17:73:24:d3:d7:94:93:a0:7d:72:89:9c:4b:75:87:
         4d:c9:4f:4a:58:ef:7e:56:d9:35:01:54:a6:46:fb:6b:c2:b0:
         52:3b:ce:14:23:6f:c4:39:d0:9d:70:77:e3:ab:bd:ff:d3:42:
         36:86:59:32:2e:f2:7c:f4:68:07:44:83:49:4e:17:77:e7:86:
         a7:40:51:d1:70:b2:a4:ff:a3:c3:ea:22:dd:e5:ef:45:b6:55:
         1b:0a:b0:7b:2d:ba:6c:fa:13:51:5c:42:68:00:c6:6f:4f:eb:
         5a:3d:a2:b0:95:55:f3:6f:7a:f8:e6:bc:17:94:1d:20:d5:cc:
         28:fe:34:de:f3:dc:b6:76:93:1b:52:28:34:01:aa:ac:84:f3:
         37:60:26:f3:31:7c:a6:8d:bb:83:bb:79:69:74:5b:16:33:00:
         6b:fa:a5:47:df:e6:64:2d:95:44:10:b9:5b:6a:1c:8e:6e:aa:
         5b:e6:ca:e9:b1:5c:b5:e2:60:df:d8:39:b4:c8:99:3a:3e:0a:
         d2:56:92:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:37:08 2026 by rpki-client