Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137722/46BDDC00288D11EFB1904721C4F9AE02/1Siei3312SAW7HmO7v8FvHPoVYA.mft
File:                     1Siei3312SAW7HmO7v8FvHPoVYA.mft (raw, json)
Hash identifier:          rSphkXhHOBsIPS4f7t73jJOrGCKgxUakR2S13YPycuw=
Subject key identifier:   3D:0F:A7:7A:AB:EF:F5:CD:D5:98:D4:A8:5E:36:B5:65:B6:DE:23:B1
Authority key identifier: D5:28:9E:8B:7D:F5:D9:20:16:EC:79:8E:EE:FF:05:BC:73:E8:55:80
Certificate issuer:       /CN=A9137722/serialNumber=D5289E8B7DF5D92016EC798EEEFF05BC73E85580
Certificate serial:       0173
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Siei3312SAW7HmO7v8FvHPoVYA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137722/46BDDC00288D11EFB1904721C4F9AE02/1Siei3312SAW7HmO7v8FvHPoVYA.mft
Manifest number:          016A
Signing time:             Wed 13 May 2026 04:52:16 +0000
Manifest this update:     Wed 13 May 2026 04:52:15 +0000
Manifest next update:     Wed 20 May 2026 04:52:15 +0000
Files and hashes:         1: 1Siei3312SAW7HmO7v8FvHPoVYA.crl (hash: yQoYdZ72I3Jmz1D2qMKlzlWhsmBu2tcmHbD/VeOuTFU=)
                          2: B4684D8A288D11EF96BC5135C4F9AE02.roa (hash: m0GIDvP3AdEj+d17zySDL1Kt4EgoCHogrJCqwPnH7rg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137722/46BDDC00288D11EFB1904721C4F9AE02/1Siei3312SAW7HmO7v8FvHPoVYA.crl
                          rsync://rpki.apnic.net/member_repository/A9137722/46BDDC00288D11EFB1904721C4F9AE02/1Siei3312SAW7HmO7v8FvHPoVYA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Siei3312SAW7HmO7v8FvHPoVYA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 04:52:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 371 (0x173)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137722, serialNumber=D5289E8B7DF5D92016EC798EEEFF05BC73E85580
        Validity
            Not Before: May 13 04:52:15 2026 GMT
            Not After : May 20 04:52:15 2026 GMT
        Subject: CN=6a04037f-e042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e0:41:ef:13:41:cd:33:ab:90:7f:63:b9:07:
                    83:12:34:78:ae:80:b7:da:e2:b2:71:19:50:cd:f4:
                    2e:2e:86:62:b0:45:87:5e:26:59:3c:46:57:c6:f3:
                    99:7b:81:91:20:d6:bc:6f:eb:82:b3:9e:34:86:3b:
                    fc:dc:58:66:b8:c8:68:bd:af:29:59:dc:0c:49:31:
                    f8:11:fa:da:8d:23:4f:0f:89:2c:f9:31:c0:50:7d:
                    11:64:d0:9f:0e:26:8d:bd:b6:3f:e5:f8:14:d3:76:
                    bd:ae:d6:35:14:e5:de:b4:6b:87:89:08:b2:8b:c0:
                    bb:8e:d4:63:e9:ae:91:9a:b5:8f:3e:4f:a1:45:12:
                    d2:4f:33:da:03:4a:2d:d6:3b:16:a7:a5:c1:7b:bf:
                    1a:0c:b7:7c:c5:f8:00:81:88:08:e7:12:75:81:af:
                    f4:e4:cb:8d:c1:8d:c1:6f:36:ca:8d:27:5b:09:d6:
                    32:e0:a1:86:dc:7c:76:5e:e8:0c:df:6f:93:57:b9:
                    84:89:7c:52:4d:bd:9f:57:4e:6d:b3:1a:bf:bc:04:
                    8b:73:e2:4c:11:75:4f:d1:e2:d8:24:50:31:65:91:
                    87:47:37:1a:94:5a:da:70:00:29:a7:90:e6:f0:d4:
                    98:f7:29:27:55:17:3b:15:40:71:4f:98:91:18:93:
                    d6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:0F:A7:7A:AB:EF:F5:CD:D5:98:D4:A8:5E:36:B5:65:B6:DE:23:B1
            X509v3 Authority Key Identifier:
                keyid:D5:28:9E:8B:7D:F5:D9:20:16:EC:79:8E:EE:FF:05:BC:73:E8:55:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137722/46BDDC00288D11EFB1904721C4F9AE02/1Siei3312SAW7HmO7v8FvHPoVYA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Siei3312SAW7HmO7v8FvHPoVYA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137722/46BDDC00288D11EFB1904721C4F9AE02/1Siei3312SAW7HmO7v8FvHPoVYA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:1e:e4:2b:ff:d1:14:94:ab:9c:43:bd:85:8f:c9:9d:33:dc:
         f0:20:db:3d:ff:ba:f5:fb:0f:ea:3e:ba:99:39:29:04:13:32:
         1d:66:c2:a0:17:dd:7c:49:05:a5:0d:ea:cb:2f:f1:3b:f5:53:
         b8:fb:0d:6c:04:01:e4:f5:3d:a5:0b:31:17:9f:48:af:b0:66:
         61:89:88:b6:7d:57:5a:4b:ba:e6:1a:c3:7b:dd:72:fa:2c:74:
         b0:21:5c:1e:0c:ea:6f:37:48:19:4c:c9:5c:dc:a8:18:72:ca:
         5b:e1:a9:6c:cc:68:9d:1b:5a:0e:82:60:31:21:ae:1b:1a:03:
         8a:a3:db:4e:47:7d:40:6e:16:9e:7b:5b:b0:6e:e1:5e:50:43:
         0f:2a:b9:79:74:33:b9:9e:ee:44:0c:12:10:1c:fa:41:68:4c:
         a9:7e:c6:8d:9f:5b:72:71:c7:52:0b:15:f6:70:3a:6c:f9:52:
         3a:79:93:10:b6:32:11:ab:35:b1:53:4c:26:28:50:1c:b6:0d:
         f0:d1:a3:60:11:53:45:35:7e:fb:bf:91:f2:60:65:db:ba:f0:
         bc:ef:ba:41:8d:3e:c3:b8:99:42:6c:91:25:f8:63:8a:83:06:
         67:ad:f3:5b:0e:39:ee:92:3c:86:15:7e:73:95:0b:85:1c:47:
         cb:79:0c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:10:45 2026 by rpki-client