Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft
File:                     zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft (raw, json)
Hash identifier:          hEBArrdln33LdswhyGsCShcCo+VZohHZgAuPmn7sUF0=
Subject key identifier:   31:9D:0E:1E:E1:A5:5E:51:85:82:7E:56:BF:5A:E2:AC:7D:85:57:FA
Authority key identifier: CC:6F:44:C1:E2:5F:37:A3:AD:F7:62:7B:97:77:DF:A1:77:D9:D1:E8
Certificate issuer:       /CN=A9133239/serialNumber=CC6F44C1E25F37A3ADF7627B9777DFA177D9D1E8
Certificate serial:       0163
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zG9EweJfN6Ot92J7l3ffoXfZ0eg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft
Manifest number:          0163
Signing time:             Wed 13 May 2026 04:54:27 +0000
Manifest this update:     Wed 13 May 2026 04:54:27 +0000
Manifest next update:     Wed 20 May 2026 04:54:27 +0000
Files and hashes:         1: zG9EweJfN6Ot92J7l3ffoXfZ0eg.crl (hash: HYwcodL4bscb+9DzSkoMn2hLMfetJoYTnNDzmm5U1Rs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.crl
                          rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zG9EweJfN6Ot92J7l3ffoXfZ0eg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 04:54:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 355 (0x163)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133239, serialNumber=CC6F44C1E25F37A3ADF7627B9777DFA177D9D1E8
        Validity
            Not Before: May 13 04:54:27 2026 GMT
            Not After : May 20 04:54:27 2026 GMT
        Subject: CN=6a040403-8ed2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b5:61:05:7d:52:81:87:68:b4:fc:ac:cb:fc:
                    8d:14:76:ea:7b:0e:3b:9d:0c:a5:12:33:8d:29:19:
                    28:ac:78:21:d4:7e:a2:4c:90:04:6f:fc:51:34:6b:
                    a1:d0:ea:f4:66:a1:c2:da:62:d1:6b:91:95:36:f3:
                    26:f7:37:2f:bd:da:67:e4:1f:57:19:87:36:76:75:
                    90:44:1c:27:90:ad:ee:14:4f:df:57:6c:df:d0:4a:
                    0c:df:f3:2b:5a:ca:8d:89:fb:70:70:83:d3:e2:a4:
                    3d:46:13:91:88:fc:64:51:07:c0:aa:50:ac:90:e2:
                    8b:8f:e3:f3:33:44:13:86:d3:f8:1f:60:37:77:3d:
                    b4:0d:1f:78:d0:6a:a5:56:89:80:cc:8f:9c:8b:69:
                    d4:63:e3:29:65:53:2f:63:ac:45:0f:81:75:30:93:
                    cc:b5:8c:b9:5d:31:80:0a:26:83:fc:5f:ed:ee:54:
                    c5:dc:6a:ff:e1:05:6c:74:15:a6:1c:00:11:a6:12:
                    53:5a:23:2a:64:e1:5a:23:65:32:35:56:0b:39:d1:
                    13:88:61:52:7a:17:26:da:a0:ca:e4:6e:2d:c1:45:
                    d8:21:05:82:06:94:7b:2f:c6:2b:fc:d8:17:09:ca:
                    9d:c6:c1:65:e6:60:35:78:04:15:f7:23:44:24:ae:
                    9c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:9D:0E:1E:E1:A5:5E:51:85:82:7E:56:BF:5A:E2:AC:7D:85:57:FA
            X509v3 Authority Key Identifier:
                keyid:CC:6F:44:C1:E2:5F:37:A3:AD:F7:62:7B:97:77:DF:A1:77:D9:D1:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zG9EweJfN6Ot92J7l3ffoXfZ0eg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:49:05:bd:70:53:0b:f0:c0:d2:49:a0:43:0d:17:cc:76:63:
         e5:23:c9:a3:f9:55:47:71:89:c2:63:cc:fc:56:7d:4f:d4:c4:
         bc:fe:d3:86:87:8a:30:38:6d:07:5e:d0:0e:4a:06:70:3c:5f:
         7d:dc:15:44:fa:e9:01:ef:78:86:13:ba:fb:d0:ac:c1:75:9c:
         7e:fd:85:63:14:e9:d1:b0:ba:d1:7d:1b:79:c0:d8:69:ea:1c:
         c6:d5:c6:c7:f6:5c:7e:29:af:03:09:55:b2:ae:1e:43:89:73:
         50:3b:c4:e7:b4:02:5e:0e:1f:ce:2d:23:87:55:84:61:90:b7:
         48:28:3b:45:87:a7:c1:1d:58:9d:51:2e:2a:c0:f6:b8:1b:b3:
         a2:a4:15:49:79:72:c6:94:6e:5e:d5:0d:26:9f:28:a0:ed:5a:
         e0:9b:fe:c5:10:6f:a2:18:c9:ec:ab:87:64:29:81:91:cb:c7:
         93:3e:d0:19:44:55:3c:c8:c2:f5:04:33:a8:11:78:d7:5a:c1:
         40:21:9a:34:76:67:c3:de:af:55:b0:a1:5b:04:de:70:cd:c6:
         93:2f:76:09:ef:a7:6d:6d:40:f4:f2:64:b2:6d:40:ee:df:f8:
         63:b4:e6:64:db:a0:44:f2:09:af:2f:50:0a:0b:a4:f6:1a:f3:
         17:3a:df:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:03:58 2026 by rpki-client