Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft
File:                     McT5Bk-J5WsZTriEkukCHBUt6z4.mft (raw, json)
Hash identifier:          54kpcRMygVmm46AkHgwXlKUc+dA5lDVlIj0o/WyvzpY=
Subject key identifier:   D0:3A:61:5A:2B:6B:A1:14:6E:6C:CB:5C:BA:73:11:BE:69:BC:62:D3
Authority key identifier: 31:C4:F9:06:4F:89:E5:6B:19:4E:B8:84:92:E9:02:1C:15:2D:EB:3E
Certificate issuer:       /CN=A9133E16/serialNumber=31C4F9064F89E56B194EB88492E9021C152DEB3E
Certificate serial:       09C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McT5Bk-J5WsZTriEkukCHBUt6z4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft
Manifest number:          09AE
Signing time:             Tue 12 May 2026 20:02:53 +0000
Manifest this update:     Tue 12 May 2026 20:02:53 +0000
Manifest next update:     Tue 19 May 2026 20:02:53 +0000
Files and hashes:         1: McT5Bk-J5WsZTriEkukCHBUt6z4.crl (hash: hYucVWWkb8XQJ+tPTrgVT3+b9Sr9bEQbXRg2qHxk9/Y=)
                          2: DB4932CEC2B611EB9BF18A81C4F9AE02.roa (hash: Hj2gvQPptbIyBsk+GZQr8HEa82gNIwoOpKASxetT7F4=)
                          3: 900E2272349F11EDA1460419C4F9AE02.roa (hash: H91fXqxV7rY9zHcxYCuUe8A5mKb0ae920Vx4iWfH6XE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.crl
                          rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McT5Bk-J5WsZTriEkukCHBUt6z4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:02:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2496 (0x9c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133E16, serialNumber=31C4F9064F89E56B194EB88492E9021C152DEB3E
        Validity
            Not Before: May 12 20:02:53 2026 GMT
            Not After : May 19 20:02:53 2026 GMT
        Subject: CN=6a03876d-bb35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:df:ef:df:31:0a:a0:bc:ce:a3:46:87:ff:84:
                    e4:15:83:64:88:d9:b0:50:3a:6d:a7:40:f5:7b:12:
                    16:0a:6c:92:5e:0b:08:9f:34:87:54:87:45:30:01:
                    41:42:a2:56:e9:c5:fd:46:3c:fe:92:c8:ef:da:1f:
                    9a:89:69:54:de:ee:11:20:74:f1:3a:44:00:22:66:
                    6d:e4:1c:73:30:01:d6:2f:21:93:bb:f6:36:1d:a5:
                    ca:41:26:17:3b:2c:c4:1e:45:c5:d7:d6:4b:91:4f:
                    d8:a8:fa:49:cc:c4:1a:54:ed:54:a7:21:55:7e:46:
                    2f:57:d7:ee:56:9a:e3:12:68:de:34:1c:20:a8:e6:
                    a4:15:ae:e7:79:eb:74:a0:9d:c5:c6:b1:60:1b:3b:
                    a0:dc:97:a7:6d:8d:57:65:9b:de:d4:6c:5f:d6:2e:
                    1f:bc:f2:a4:81:f1:b6:17:bb:a6:a2:45:d6:24:15:
                    ab:23:38:a9:de:b2:9f:87:01:18:a4:3a:bd:33:37:
                    0b:10:87:7c:14:1d:8f:b4:0c:32:bc:28:21:08:9b:
                    f4:d6:97:ed:68:50:aa:5c:52:ad:62:fb:04:f4:91:
                    c0:da:b3:ea:c1:32:91:b8:e0:af:db:e9:ab:d2:86:
                    3e:ac:3b:cd:dd:fa:43:64:e8:19:2d:5d:6c:9f:21:
                    2f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:3A:61:5A:2B:6B:A1:14:6E:6C:CB:5C:BA:73:11:BE:69:BC:62:D3
            X509v3 Authority Key Identifier:
                keyid:31:C4:F9:06:4F:89:E5:6B:19:4E:B8:84:92:E9:02:1C:15:2D:EB:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McT5Bk-J5WsZTriEkukCHBUt6z4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:2a:37:44:c1:34:df:a1:c2:9b:58:72:d8:a2:f9:4d:52:b6:
         82:9a:47:bd:72:0c:87:62:51:81:e0:e3:d0:b0:62:2e:1f:58:
         d1:d4:f0:65:cb:a7:a4:f9:c3:aa:33:63:0c:0b:1d:81:55:16:
         31:8b:e1:19:e5:03:26:6c:f0:e2:80:52:ae:84:1a:eb:9f:cc:
         4e:c7:95:e9:4c:04:6c:bf:0b:79:e7:9f:6f:d7:b6:11:7e:bf:
         8b:37:20:4e:66:8d:f1:fa:77:88:0c:b9:96:bf:a5:1c:9d:2d:
         c4:78:04:c6:85:2b:c8:11:26:d4:38:38:b5:f2:40:fe:2c:cb:
         dc:94:a5:17:7c:37:fc:a2:51:7a:da:bb:16:39:d1:2d:16:e6:
         35:8d:ff:bd:80:05:0b:0d:cb:05:4c:52:fa:66:ce:e9:41:6b:
         5d:1c:16:29:1e:41:57:88:3c:56:d8:c5:0b:5e:b7:0c:65:f8:
         c5:d2:c2:32:bd:0c:58:94:32:05:91:6c:bd:72:a5:0e:49:a3:
         9e:a1:9d:58:e6:27:3e:69:41:ad:74:c0:d0:ea:3f:f0:cd:2d:
         49:ec:54:3b:85:21:04:b2:6f:e1:84:a4:4c:4a:92:fe:b9:88:
         89:72:11:35:2e:10:87:96:25:d3:c4:ab:ce:cf:06:4e:4d:2f:
         e4:86:56:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:32:38 2026 by rpki-client