Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft
File:                     tlibrFal3Iom2wcn-tRKkDpjxM8.mft (raw, json)
Hash identifier:          sly5SofHfNiRc5dCnmNgGxyw0JZswtvlKKjTP3iyyxw=
Subject key identifier:   EA:18:1D:77:E8:AA:78:30:0B:3D:23:0B:F9:FF:D9:86:09:44:5D:45
Authority key identifier: B6:58:9B:AC:56:A5:DC:8A:26:DB:07:27:FA:D4:4A:90:3A:63:C4:CF
Certificate issuer:       /CN=A9138E67/serialNumber=B6589BAC56A5DC8A26DB0727FAD44A903A63C4CF
Certificate serial:       0389
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft
Manifest number:          0381
Signing time:             Wed 13 May 2026 00:56:35 +0000
Manifest this update:     Wed 13 May 2026 00:56:34 +0000
Manifest next update:     Wed 20 May 2026 00:56:34 +0000
Files and hashes:         1: tlibrFal3Iom2wcn-tRKkDpjxM8.crl (hash: IZCoa8VU1T+I/HLFr3t+u7WRE48Q94rQOJi8i571TP8=)
                          2: 3889BE2CEDD611EC8E98151DC4F9AE02.roa (hash: bL7OIrkXDLMggpL9N/pxg/g9qzrZatjb01uzVRx5kqw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.crl
                          rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 00:56:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 905 (0x389)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138E67, serialNumber=B6589BAC56A5DC8A26DB0727FAD44A903A63C4CF
        Validity
            Not Before: May 13 00:56:34 2026 GMT
            Not After : May 20 00:56:34 2026 GMT
        Subject: CN=6a03cc43-e9ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c7:82:ec:86:18:50:8e:4e:9f:35:7f:0b:35:
                    7d:68:c3:a0:16:c1:b3:00:73:60:44:a9:72:cb:84:
                    e5:e5:d9:ef:84:7b:1b:4a:69:e6:b4:0e:29:d5:93:
                    d4:da:87:27:72:b9:e5:ab:76:7c:bf:6a:d1:7e:62:
                    38:ca:64:ab:47:cd:1e:52:8d:b6:c0:85:fb:12:4b:
                    d8:0d:f6:a4:95:eb:1b:0d:52:8a:ee:95:d5:d7:72:
                    37:dd:fc:94:ee:9e:b8:cc:bc:30:4b:79:18:a2:82:
                    16:42:b0:26:e9:a5:7f:12:1b:ed:78:c6:25:b4:d6:
                    b1:b8:83:23:7e:63:fe:3b:26:02:ea:0f:14:aa:9a:
                    ee:a1:d8:a5:88:2c:86:85:f7:ae:87:5a:8c:be:c0:
                    55:e2:08:db:45:09:fb:b3:62:c0:b5:d9:ab:d9:d2:
                    cf:ae:30:a2:97:a9:2f:98:66:58:a3:e7:f8:2e:11:
                    37:67:d9:0e:4f:a2:41:6e:b2:d0:4e:c1:b2:95:93:
                    d6:50:c4:9f:e6:71:7c:3e:0e:79:52:fb:31:e2:9d:
                    db:4f:c6:1a:72:16:5e:b4:98:7c:93:de:f6:4a:24:
                    8c:a6:9a:98:44:de:ba:f0:b7:b2:cc:02:96:52:19:
                    d0:f7:a9:ca:69:fd:26:0b:46:bb:6b:6d:bd:eb:84:
                    1d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:18:1D:77:E8:AA:78:30:0B:3D:23:0B:F9:FF:D9:86:09:44:5D:45
            X509v3 Authority Key Identifier:
                keyid:B6:58:9B:AC:56:A5:DC:8A:26:DB:07:27:FA:D4:4A:90:3A:63:C4:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlibrFal3Iom2wcn-tRKkDpjxM8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138E67/279CBF08EDCF11ECB5E74D7CC4F9AE02/tlibrFal3Iom2wcn-tRKkDpjxM8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:3d:ee:57:9f:17:5f:b3:9c:2f:f6:5d:68:2c:74:35:fc:e3:
         88:3f:79:f6:e3:77:bb:e2:53:db:dc:37:21:86:38:5b:1f:df:
         e9:e7:22:a1:b1:93:b0:d5:0f:4e:55:59:06:3d:4f:14:dc:ad:
         81:a4:13:ec:0b:2e:89:6e:52:c1:06:09:79:5b:fb:44:38:8d:
         f9:44:3f:df:47:17:a0:f2:ef:00:07:1a:2b:fa:8b:3b:7c:a7:
         63:fa:36:6a:f2:7a:0d:3d:79:7a:3d:2c:c7:98:b5:c7:d7:96:
         47:00:79:4c:f7:5e:13:22:b7:71:b0:8e:5f:12:00:45:4a:d7:
         64:5d:20:45:78:19:ec:88:31:05:bd:5a:db:d4:2d:66:cb:b7:
         66:9f:95:ac:33:d2:2c:c0:f4:46:a6:a2:72:1c:46:cc:0e:f2:
         18:21:4d:74:00:31:0e:e2:73:8d:84:dd:ca:16:11:27:55:c1:
         5f:1a:e7:90:e0:70:03:e5:20:1c:32:56:6b:35:bc:d4:3f:27:
         5a:d1:63:77:af:cd:06:49:2b:58:48:10:05:50:5a:2c:16:da:
         0b:35:f9:5e:a6:1a:32:26:0a:4d:83:ba:de:a6:f1:54:cd:49:
         7b:b6:89:48:b8:fb:76:e9:93:5d:0f:fe:10:f3:3e:37:68:80:
         11:d6:8b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:01:10 2026 by rpki-client