Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft
File:                     J8wSkYRVB6yvwoe3f-lP6lPdycI.mft (raw, json)
Hash identifier:          2MWlGVf6leqeSkI+zgPl/CnxECbIYAOR2019PsGgRCk=
Subject key identifier:   51:7D:48:0A:8D:28:B4:E1:50:D0:AA:6C:96:70:AC:6E:D1:CF:99:0C
Authority key identifier: 27:CC:12:91:84:55:07:AC:AF:C2:87:B7:7F:E9:4F:EA:53:DD:C9:C2
Certificate issuer:       /CN=A9134CF6/serialNumber=27CC1291845507ACAFC287B77FE94FEA53DDC9C2
Certificate serial:       0CF1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft
Manifest number:          0CDF
Signing time:             Tue 12 May 2026 18:26:22 +0000
Manifest this update:     Tue 12 May 2026 18:26:21 +0000
Manifest next update:     Tue 19 May 2026 18:26:21 +0000
Files and hashes:         1: J8wSkYRVB6yvwoe3f-lP6lPdycI.crl (hash: mAR5FYnA0XogPT8KkEIdIrHiD02A3SNvr5iv8QX5fPA=)
                          2: 4A6A598EDB1311EB9B223B40C4F9AE02.roa (hash: 0Iv0ZuSYAuRh3Zkw3A1H+BtMqxX9vJos0Furl1eQ9OU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.crl
                          rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:26:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3313 (0xcf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134CF6, serialNumber=27CC1291845507ACAFC287B77FE94FEA53DDC9C2
        Validity
            Not Before: May 12 18:26:21 2026 GMT
            Not After : May 19 18:26:21 2026 GMT
        Subject: CN=6a0370ce-5f4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:08:cb:cf:74:84:ca:71:e0:cc:24:a2:b5:11:
                    8d:33:78:fc:52:ba:80:bb:42:de:2b:e8:44:11:35:
                    e5:e8:27:84:e0:83:cb:53:4c:92:03:99:5e:15:64:
                    de:c7:9b:b1:af:aa:00:89:b9:26:c7:18:d3:de:a3:
                    1f:94:ca:48:3c:19:87:49:91:42:2f:1e:24:57:05:
                    2d:93:c7:24:82:cb:25:a4:1e:09:a5:6c:bb:e0:e3:
                    27:40:b4:16:1a:4d:78:9b:ac:cb:1e:de:3f:b6:6d:
                    ae:17:a4:38:18:af:7a:d5:76:34:f8:22:6c:a3:49:
                    45:7d:76:d6:4c:c7:d0:11:1c:a1:c9:0f:97:51:a4:
                    31:47:e7:04:25:ee:eb:da:3e:c1:c7:36:f6:e6:b3:
                    ce:e6:0b:0c:e6:37:d3:3a:6b:d2:0c:53:96:41:2b:
                    75:bc:1a:23:98:88:f8:41:88:a1:45:06:04:5a:1e:
                    23:e7:73:92:b1:89:e1:0a:b6:cc:90:f0:6b:1b:52:
                    14:1e:f6:b0:e8:cd:5b:e0:72:c3:25:47:80:ad:46:
                    da:e6:b1:f2:59:77:42:a4:67:23:eb:2e:6c:1b:13:
                    f0:ae:8b:9a:ec:b7:2d:1a:04:b0:4d:7d:3b:07:f8:
                    1e:5f:5f:46:f8:5a:e2:23:09:48:50:4e:c4:ed:0e:
                    70:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:7D:48:0A:8D:28:B4:E1:50:D0:AA:6C:96:70:AC:6E:D1:CF:99:0C
            X509v3 Authority Key Identifier:
                keyid:27:CC:12:91:84:55:07:AC:AF:C2:87:B7:7F:E9:4F:EA:53:DD:C9:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:2b:18:fb:56:12:2f:f0:04:4b:69:5f:be:ae:27:9e:0f:66:
         07:82:e9:b3:e3:23:30:15:96:a3:56:a9:ca:73:53:90:f9:8e:
         e1:e1:ba:9d:33:98:60:d8:dc:31:bc:78:cf:35:d4:b7:63:27:
         3b:fe:8f:02:e3:20:fc:e5:fd:2e:e0:35:b1:66:2f:14:96:8a:
         6f:9a:fc:4d:56:10:ab:1e:9f:6c:4f:68:90:09:83:cc:47:5f:
         bf:ef:e3:0a:70:a8:7b:6c:83:fe:8a:b5:c7:85:bb:63:e0:75:
         2f:5a:c9:70:a1:46:9f:2e:c7:2f:5a:a2:25:80:34:50:2c:bc:
         ee:52:61:98:ec:fe:0d:f7:62:80:3e:cc:88:07:4f:38:76:89:
         4f:07:99:ba:42:ca:ea:49:83:e1:a0:77:5b:e2:8f:99:a6:64:
         42:70:70:16:78:63:58:30:2f:61:23:a3:8f:c3:de:3a:7f:c4:
         1e:c2:4c:3f:87:af:e0:52:6f:ae:49:7a:b0:98:6c:e6:bb:c5:
         1e:d3:3f:eb:f9:5c:a9:61:4f:1f:78:c9:08:ae:dc:37:a1:50:
         b3:2f:c6:33:fc:23:1b:8a:28:8e:1b:38:d9:c7:4c:14:cd:98:
         9d:76:d9:18:42:82:52:27:e8:07:d6:4a:ed:4a:da:03:68:37:
         c9:af:77:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:14:22 2026 by rpki-client