Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft
File:                     oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft (raw, json)
Hash identifier:          5N0wQMb0FOUcn1/3EyyfXm/zUcn7gs0mKN/e3+kqfM0=
Subject key identifier:   0F:13:D9:0E:FC:F8:31:C9:F7:AC:95:A4:2D:3A:0F:EA:DC:26:E9:7A
Authority key identifier: A0:CB:B2:CF:7A:ED:83:C2:19:73:C7:0B:64:C0:A4:15:6C:5B:F5:D2
Certificate issuer:       /CN=A9138B72/serialNumber=A0CBB2CF7AED83C21973C70B64C0A4156C5BF5D2
Certificate serial:       0A08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMuyz3rtg8IZc8cLZMCkFWxb9dI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft
Manifest number:          09FD
Signing time:             Tue 12 May 2026 19:53:38 +0000
Manifest this update:     Tue 12 May 2026 19:53:37 +0000
Manifest next update:     Tue 19 May 2026 19:53:37 +0000
Files and hashes:         1: oMuyz3rtg8IZc8cLZMCkFWxb9dI.crl (hash: Sy05vRc/MtPgagEBaAoCUyMwdG2Muk7gFxKW2+0GXPY=)
                          2: 311647C0896C11EBA85B0747C4F9AE02.roa (hash: uCqwfowHtQ8vPR+sncnEXEdldLZsVFqnmIJTdvUAfsA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.crl
                          rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMuyz3rtg8IZc8cLZMCkFWxb9dI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:53:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2568 (0xa08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138B72, serialNumber=A0CBB2CF7AED83C21973C70B64C0A4156C5BF5D2
        Validity
            Not Before: May 12 19:53:37 2026 GMT
            Not After : May 19 19:53:37 2026 GMT
        Subject: CN=6a038541-0801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:65:94:c9:ca:47:5a:28:fc:4e:c0:6b:c3:6d:
                    04:de:be:01:ad:35:d2:3c:99:5e:e5:98:17:05:ab:
                    7f:e9:c0:53:ea:b7:64:49:17:05:07:4e:32:c7:31:
                    18:17:4a:53:e8:20:b7:d2:20:32:8f:10:b9:7d:51:
                    e9:5f:83:a8:59:ab:a4:13:93:2f:a2:17:79:44:61:
                    54:ea:bb:ef:bf:0f:ec:21:a1:34:53:4e:93:95:b1:
                    70:8c:38:67:01:5a:0b:a9:48:c8:70:40:96:22:02:
                    ec:3b:95:20:1a:8a:d1:3a:b3:d1:2f:66:c7:f2:54:
                    5e:d9:4c:58:5e:e8:8d:7b:25:4c:4f:4a:1a:1e:7d:
                    e4:4e:99:f5:c7:26:58:ed:8a:a6:02:71:2b:22:51:
                    a4:86:68:51:71:13:c6:94:34:1c:c0:5a:2e:cf:61:
                    1e:b9:ae:14:f4:a0:fa:e8:a1:30:74:74:fb:e7:ae:
                    1a:5b:9e:cb:d2:34:5b:86:57:fc:dc:89:27:b8:fb:
                    0d:46:86:20:a4:1e:46:3a:a2:5f:da:c6:1c:36:81:
                    6f:ef:96:cf:f6:27:eb:eb:f8:0d:8a:f9:77:14:65:
                    1b:f9:3c:ff:63:cb:0d:14:8d:75:c9:4a:0a:20:77:
                    02:8a:db:9c:a1:6c:7c:c0:97:69:70:d4:c1:d7:f7:
                    29:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:13:D9:0E:FC:F8:31:C9:F7:AC:95:A4:2D:3A:0F:EA:DC:26:E9:7A
            X509v3 Authority Key Identifier:
                keyid:A0:CB:B2:CF:7A:ED:83:C2:19:73:C7:0B:64:C0:A4:15:6C:5B:F5:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMuyz3rtg8IZc8cLZMCkFWxb9dI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:0b:a8:a5:f4:61:54:ae:5f:5e:58:a7:8f:80:2a:64:ca:91:
         07:b0:80:cd:9b:29:4f:32:d3:ca:91:9f:dd:45:76:0c:3b:06:
         f2:c3:11:76:a7:7d:3c:3c:67:1d:e4:c9:ed:c4:67:19:be:1e:
         6e:29:9a:2d:3e:fb:84:de:5a:28:94:f4:8a:0e:d7:b5:fd:e8:
         af:ea:3a:a1:a6:0a:6d:37:04:23:9b:9b:0b:00:02:d0:56:7f:
         eb:0f:9d:d5:46:ca:58:1f:fc:96:1a:28:fc:f5:1b:46:7b:1a:
         43:ec:61:b0:ab:da:a2:6d:d3:10:ef:ab:5b:80:1e:e3:cb:8e:
         e8:3c:79:56:15:7c:de:61:5d:56:3b:f2:93:72:0c:5e:6c:c1:
         2f:21:30:aa:c2:85:89:25:48:d7:83:11:7c:c3:77:69:3e:5e:
         a1:2b:42:ca:2f:61:c8:be:93:f9:0d:4e:5f:bc:e4:f9:d7:67:
         d6:ab:0e:62:7b:01:ef:56:f9:f6:9d:10:4d:1f:23:f5:19:96:
         dd:91:c8:ae:d4:a6:f7:2b:ff:01:57:2e:94:d4:c6:eb:94:5f:
         9e:8f:e5:5c:5f:8b:cb:f9:72:31:d7:8b:bb:00:4a:56:57:c0:
         02:b9:e2:c3:98:b6:74:f0:4f:9a:7c:e0:cd:ad:ce:af:04:12:
         89:a1:0f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:09:45 2026 by rpki-client