Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft
File:                     CrPxFJz1w7raaFscahN5tojXQ4Q.mft (raw, json)
Hash identifier:          L5blEX6bdPk74apL83nsbqCvO0kpBX5DqzWgsFjzSzs=
Subject key identifier:   A5:04:12:A8:E0:AA:BA:11:E5:FB:29:18:E8:8A:28:06:B9:12:F9:6B
Authority key identifier: 0A:B3:F1:14:9C:F5:C3:BA:DA:68:5B:1C:6A:13:79:B6:88:D7:43:84
Certificate issuer:       /CN=A913DF1E/serialNumber=0AB3F1149CF5C3BADA685B1C6A1379B688D74384
Certificate serial:       0319
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft
Manifest number:          0305
Signing time:             Wed 13 May 2026 01:22:48 +0000
Manifest this update:     Wed 13 May 2026 01:22:47 +0000
Manifest next update:     Wed 20 May 2026 01:22:47 +0000
Files and hashes:         1: CrPxFJz1w7raaFscahN5tojXQ4Q.crl (hash: dVHANC6A12d3wucYsa3Cf+T9YJHt+4KkIKxKNMacZ68=)
                          2: D58286CA1F9D11EDA5DD9842C4F9AE02.roa (hash: GLugrqwwQZmmzbcCNZXH5Ie9zKy10oZO0jW/+Bq1pvo=)
                          3: 899B070834D511ED99B1921FC4F9AE02.roa (hash: LSg6DX28WaeWtngQ2Zn9zwO7f5A+q2ZTTUwMeuMJ6JY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.crl
                          rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 01:22:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 793 (0x319)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913DF1E, serialNumber=0AB3F1149CF5C3BADA685B1C6A1379B688D74384
        Validity
            Not Before: May 13 01:22:47 2026 GMT
            Not After : May 20 01:22:47 2026 GMT
        Subject: CN=6a03d267-695d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8b:d8:1c:cc:f3:3c:c4:99:48:af:73:11:11:
                    ee:9e:9a:d5:60:ae:64:e8:b5:9c:33:57:5c:ce:66:
                    36:b2:57:89:0f:7a:f0:b0:16:bc:a8:ee:89:e9:41:
                    fe:f1:52:3a:27:31:4f:5d:fb:b2:ec:e1:46:17:41:
                    46:72:c7:4b:e7:b0:9e:1e:cd:57:19:0c:a5:7e:f5:
                    17:11:5e:b3:fb:f6:a6:0b:5e:92:0c:dc:12:fc:0a:
                    66:7a:ff:bc:ed:53:89:d6:15:ef:c7:79:3d:12:51:
                    86:8f:0b:27:9a:db:23:ad:b0:d1:d8:ed:a1:44:fa:
                    1f:29:51:f6:16:1c:08:74:cc:10:08:94:28:34:ea:
                    b0:34:30:1b:fe:94:fe:5b:53:1c:7d:14:14:d2:c3:
                    b6:bf:36:fd:f1:48:d0:cf:03:35:54:5b:87:52:40:
                    a9:c3:89:e1:04:b0:4d:7d:80:ca:85:1a:ce:cb:ad:
                    de:f0:22:36:18:cb:b8:48:2e:3e:7a:28:d9:4c:de:
                    24:06:4e:fb:9e:bc:50:66:43:fc:4d:d6:dd:21:1f:
                    8a:f1:f4:f5:05:3e:41:03:ce:80:ff:f4:23:e6:9a:
                    9b:c4:b2:21:fa:15:bc:2e:be:49:3b:d4:86:d9:af:
                    ad:ea:ad:b7:b7:ef:db:52:c1:a9:1e:72:07:22:f7:
                    bf:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:04:12:A8:E0:AA:BA:11:E5:FB:29:18:E8:8A:28:06:B9:12:F9:6B
            X509v3 Authority Key Identifier:
                keyid:0A:B3:F1:14:9C:F5:C3:BA:DA:68:5B:1C:6A:13:79:B6:88:D7:43:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:6b:47:dc:c0:38:60:d0:eb:6d:a0:ef:80:70:29:f6:a8:08:
         73:16:eb:73:64:23:fa:b6:65:6a:24:ea:9f:cd:2d:45:56:d8:
         48:cd:b4:52:f7:f7:bb:d7:e9:59:6a:f2:71:95:e2:e0:4e:8a:
         bf:be:c9:d4:5e:a8:88:50:96:41:5a:93:7d:86:3a:5c:d0:26:
         1f:07:c6:33:09:48:95:47:55:76:cf:fd:0e:ce:f4:78:01:1d:
         e8:2b:c9:bd:cc:8e:59:5a:4f:5f:3b:c6:0f:d6:eb:bc:a8:df:
         46:94:76:59:cf:96:00:8d:fe:f9:a9:37:d5:bd:c5:32:42:e2:
         d2:7a:5e:42:08:53:59:02:db:b2:e4:a9:8e:9e:2c:42:97:09:
         b2:e5:50:77:fc:92:4f:60:cc:b5:c1:b1:81:a0:35:39:fd:34:
         13:64:6d:8b:b3:84:57:aa:3d:0b:d9:91:b8:96:44:55:a4:0b:
         ca:e8:35:12:8a:40:5c:9e:0e:f1:f4:fe:aa:fe:d5:34:24:a1:
         ef:fd:01:15:f4:77:09:31:c7:e3:35:43:db:23:34:f8:b1:c9:
         c8:29:24:be:5a:82:80:d3:49:20:1b:30:e8:3a:b3:cf:79:95:
         ee:64:da:71:b7:7e:9c:10:75:11:ef:e1:b5:11:e3:bf:9d:45:
         12:a5:fe:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:16:04 2026 by rpki-client