Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft
File:                     mqwVb6kYtDBXQdrp1duikzdGzoc.mft (raw, json)
Hash identifier:          y1Xbzf4q8xoUc1vuLy4P/LEvs0krdJmdJzUV+6HeuBg=
Subject key identifier:   90:9D:62:57:A2:97:5E:B6:AC:1A:00:81:2A:A4:37:E9:53:EA:A7:E0
Authority key identifier: 9A:AC:15:6F:A9:18:B4:30:57:41:DA:E9:D5:DB:A2:93:37:46:CE:87
Certificate issuer:       /CN=A9133CD2/serialNumber=9AAC156FA918B4305741DAE9D5DBA2933746CE87
Certificate serial:       027B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft
Manifest number:          026D
Signing time:             Mon 11 May 2026 02:10:39 +0000
Manifest this update:     Mon 11 May 2026 02:10:39 +0000
Manifest next update:     Mon 18 May 2026 02:10:38 +0000
Files and hashes:         1: mqwVb6kYtDBXQdrp1duikzdGzoc.crl (hash: zkcHr0iaOpD7OpuaszBPM7Emfasx93RhaiAsM9Fn6Gc=)
                          2: A46B24207D3811EF8EE86E6BC4F9AE02.roa (hash: nko7oXcOwkjYvH5kMeaot9wb2VmnzHR8v/MSp3IbrH0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.crl
                          rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 02:10:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 635 (0x27b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133CD2, serialNumber=9AAC156FA918B4305741DAE9D5DBA2933746CE87
        Validity
            Not Before: May 11 02:10:39 2026 GMT
            Not After : May 18 02:10:38 2026 GMT
        Subject: CN=6a013a9f-e0e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8e:c7:11:e0:ca:d8:d4:69:dc:7d:0e:36:0e:
                    8e:98:74:ac:92:c1:79:e8:77:a4:27:3b:67:31:dc:
                    89:7c:a9:d9:c3:fa:77:50:28:35:a0:b8:94:2f:28:
                    22:70:13:9e:50:48:e9:1c:da:e7:6b:89:93:fc:41:
                    db:21:5a:87:ec:1d:d6:86:e0:62:e0:99:90:83:0e:
                    fd:35:15:03:23:84:ab:d2:f9:48:e9:08:56:08:00:
                    8e:e2:78:03:f2:2a:d2:d5:ad:b4:ca:a1:02:56:d4:
                    ec:66:74:e3:90:1c:20:80:74:b2:a2:f3:cb:d0:a0:
                    b0:9a:bf:57:0a:c6:4e:b5:0b:53:38:7c:35:f2:a1:
                    d8:72:41:6c:00:cd:d4:d0:46:59:56:22:b2:af:4e:
                    26:31:2d:ce:4a:4a:52:0e:3b:3d:32:76:11:24:03:
                    37:87:64:01:c8:46:a0:0e:28:fe:f3:db:bd:40:58:
                    1c:83:54:cc:99:21:6a:7d:f7:74:a9:cd:82:cd:ac:
                    f0:a1:d0:d2:95:29:11:ab:0e:88:a9:62:87:cc:d3:
                    37:3d:19:8e:44:ba:ac:36:e4:9a:a5:0e:55:09:2a:
                    d9:59:c5:6c:9d:c7:96:d0:57:6d:77:79:e0:c7:6c:
                    4b:86:20:ac:59:f8:d0:aa:c3:c0:9e:a4:91:3d:9b:
                    e6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:9D:62:57:A2:97:5E:B6:AC:1A:00:81:2A:A4:37:E9:53:EA:A7:E0
            X509v3 Authority Key Identifier:
                keyid:9A:AC:15:6F:A9:18:B4:30:57:41:DA:E9:D5:DB:A2:93:37:46:CE:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:3f:a5:25:bc:6e:fc:e7:a1:df:4d:01:6a:f5:14:30:a9:b7:
         9b:34:ec:8d:d4:4a:2d:3f:fa:c8:95:53:4c:ec:62:3d:47:78:
         42:45:49:79:ba:dd:46:37:ae:76:d0:fa:34:56:23:37:40:6d:
         90:63:d0:25:9b:9b:96:53:82:2e:18:0e:e7:5c:ef:43:ce:18:
         79:f9:8b:59:e5:c4:2f:fa:d6:dd:e2:d2:52:e9:7c:3b:99:23:
         5c:a2:8b:92:10:2c:67:92:f8:df:a9:10:f4:79:58:e0:6f:6c:
         76:36:4b:8d:a1:27:00:6e:0e:a2:41:9e:31:c3:99:36:4b:dd:
         f8:61:d4:00:25:38:cc:19:6f:e8:41:6d:7c:f8:a7:82:3f:64:
         70:a3:81:54:6d:6e:0d:9c:83:81:47:43:f6:6f:18:a7:b0:6e:
         31:08:c7:52:1e:e9:89:07:89:63:5b:36:bb:b3:ab:db:02:e5:
         44:9e:fa:e8:bf:3e:9b:3f:40:cc:94:b7:4a:8a:a2:33:cc:a2:
         14:d5:86:b2:b7:50:b8:7c:c5:57:11:e5:ee:3e:1e:be:3e:e7:
         2f:2a:08:ca:0b:1e:72:10:60:73:ff:5b:9b:01:77:bd:4b:15:
         a1:2b:21:9d:39:8d:53:19:a7:d5:88:9e:54:09:5f:ce:cd:25:
         01:3e:a6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:09:13 2026 by rpki-client