Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B090/6B67243467F111EDBDC5852CC4F9AE02/s8lXWbAmAWnVga-ERmxca89vwds.mft
File:                     s8lXWbAmAWnVga-ERmxca89vwds.mft (raw, json)
Hash identifier:          fpkXII8EJR2EbnwyqL1oFuVdO290J1GVCQBFCF8qGlQ=
Subject key identifier:   D0:18:01:9A:76:40:34:F9:C8:25:86:6C:18:1A:12:A4:2B:07:B0:6C
Authority key identifier: B3:C9:57:59:B0:26:01:69:D5:81:AF:84:46:6C:5C:6B:CF:6F:C1:DB
Certificate issuer:       /CN=A913B090/serialNumber=B3C95759B0260169D581AF84466C5C6BCF6FC1DB
Certificate serial:       028F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8lXWbAmAWnVga-ERmxca89vwds.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B090/6B67243467F111EDBDC5852CC4F9AE02/s8lXWbAmAWnVga-ERmxca89vwds.mft
Manifest number:          028A
Signing time:             Mon 11 May 2026 01:46:18 +0000
Manifest this update:     Mon 11 May 2026 01:46:18 +0000
Manifest next update:     Mon 18 May 2026 01:46:18 +0000
Files and hashes:         1: s8lXWbAmAWnVga-ERmxca89vwds.crl (hash: 6aQrQOWFRpz2p//a1Bh7udzTr2Ec1OJyhN2JLicLy8s=)
                          2: B57CACF267F511EDA884E65BC4F9AE02.roa (hash: euANKi0FBonGo36Nw13/+KNAEhPHHNlMgJqTV7qix5E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B090/6B67243467F111EDBDC5852CC4F9AE02/s8lXWbAmAWnVga-ERmxca89vwds.crl
                          rsync://rpki.apnic.net/member_repository/A913B090/6B67243467F111EDBDC5852CC4F9AE02/s8lXWbAmAWnVga-ERmxca89vwds.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8lXWbAmAWnVga-ERmxca89vwds.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 01:46:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 655 (0x28f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B090, serialNumber=B3C95759B0260169D581AF84466C5C6BCF6FC1DB
        Validity
            Not Before: May 11 01:46:18 2026 GMT
            Not After : May 18 01:46:18 2026 GMT
        Subject: CN=6a0134ea-d79d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:04:8d:8c:bc:6e:10:b7:d7:e5:87:a7:30:d5:
                    bc:a1:90:29:5d:e0:a5:97:db:c2:59:b8:72:cd:fb:
                    f2:05:86:c5:c4:16:78:7f:da:50:d4:46:cd:72:8a:
                    bb:11:4c:ef:32:4c:5b:6d:29:1b:50:c6:ac:58:ec:
                    3e:5a:4d:2d:4c:48:7c:33:a2:5c:47:05:4e:8d:57:
                    45:a1:7d:ec:4a:e9:9f:2c:40:a7:15:fe:a9:be:41:
                    cf:4d:1d:2b:2f:91:cd:28:9f:73:96:43:51:ba:3e:
                    bb:90:d1:dc:44:70:a9:87:53:90:2e:bc:56:c4:b2:
                    2e:e9:b6:83:a5:82:3f:35:99:23:99:47:5c:d7:8b:
                    9c:e4:29:f6:0b:38:51:13:2f:b0:f1:b1:2f:c4:3d:
                    cf:d0:6c:d1:b0:34:0a:f2:c6:4f:b1:01:57:04:1b:
                    21:f0:ba:ab:56:86:40:13:ec:28:9f:01:80:c3:f7:
                    c7:a2:e9:88:db:a2:0d:b3:0b:9e:2f:5b:76:4f:2d:
                    0b:2d:cc:ee:33:cc:e2:d5:98:33:df:e9:6a:51:96:
                    80:fe:13:0e:09:31:12:a6:6f:40:e8:29:f0:a4:96:
                    34:04:f3:e6:e0:b6:f6:52:e4:3a:19:50:04:4f:c5:
                    2a:76:8f:f3:d3:2f:2a:56:9e:eb:2e:e9:32:39:8d:
                    79:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:18:01:9A:76:40:34:F9:C8:25:86:6C:18:1A:12:A4:2B:07:B0:6C
            X509v3 Authority Key Identifier:
                keyid:B3:C9:57:59:B0:26:01:69:D5:81:AF:84:46:6C:5C:6B:CF:6F:C1:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B090/6B67243467F111EDBDC5852CC4F9AE02/s8lXWbAmAWnVga-ERmxca89vwds.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8lXWbAmAWnVga-ERmxca89vwds.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B090/6B67243467F111EDBDC5852CC4F9AE02/s8lXWbAmAWnVga-ERmxca89vwds.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:e2:ce:bc:d0:7f:84:7a:07:52:20:bf:55:c9:d0:af:49:fd:
         04:b4:a8:65:60:6e:56:4b:f9:1d:07:df:f1:68:42:a7:2d:cb:
         bd:30:28:55:66:5a:41:12:1b:71:6d:c3:b4:9d:5b:6d:ec:73:
         49:c9:c3:b1:fc:0c:88:28:ee:52:79:37:d2:a8:be:1f:e6:46:
         1f:98:65:16:5f:58:41:54:49:d3:1f:d4:8f:d4:03:cb:6c:05:
         fd:28:87:42:6c:f8:07:ac:00:91:5a:dc:a4:13:c5:c7:d2:24:
         b2:62:37:15:56:15:5b:08:ba:ab:20:42:01:89:26:4f:b0:cb:
         ae:45:e6:27:c3:ca:e2:3f:0b:bb:b6:21:85:a4:2c:56:1d:e5:
         a7:e4:04:08:cf:81:60:e0:dd:be:46:6d:61:c6:16:68:09:c8:
         93:47:96:70:30:90:f5:24:c9:48:ad:fa:cc:34:b2:18:ec:61:
         50:6e:86:18:bc:bd:dc:9d:53:9c:59:0d:b9:8a:7e:58:b9:2e:
         40:bc:19:d1:e3:17:2d:40:14:c4:6c:c9:b4:98:36:e3:1a:63:
         bc:c9:13:26:c4:ff:57:28:4f:61:91:50:a8:67:c1:92:1e:08:
         45:67:5f:31:88:52:5c:98:34:66:26:38:bf:eb:92:71:f7:e4:
         f8:61:33:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:26:56 2026 by rpki-client