Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft
File:                     A2aKIfDwHwaydP2IzJ4KboPVX4U.mft (raw, json)
Hash identifier:          hdQEQ8GcltINug9AJjicqeihE+Hq2kaq3QVa4m8zbm8=
Subject key identifier:   62:E0:53:22:CC:4E:D5:03:B9:BA:09:6A:49:76:4E:69:4D:8E:B4:92
Authority key identifier: 03:66:8A:21:F0:F0:1F:06:B2:74:FD:88:CC:9E:0A:6E:83:D5:5F:85
Certificate issuer:       /CN=A9141620/serialNumber=03668A21F0F01F06B274FD88CC9E0A6E83D55F85
Certificate serial:       080A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft
Manifest number:          07FF
Signing time:             Tue 12 May 2026 21:17:07 +0000
Manifest this update:     Tue 12 May 2026 21:17:07 +0000
Manifest next update:     Tue 19 May 2026 21:17:07 +0000
Files and hashes:         1: A2aKIfDwHwaydP2IzJ4KboPVX4U.crl (hash: Eu7MkXQXcozQdfud22kJkrRhX74ay5tcPIdVDp4DdtM=)
                          2: 5DDE6BC2293E11EB9DFA3C72C4F9AE02.roa (hash: 7ymgcj6P1279S5XXSpCepa419faVvXeGcEB15wSWpx8=)
                          3: CE899F0A66C311F08BE17B42C4F9AE02.roa (hash: wHIhwK0cuu0TCIgwSyAlWZMYLOUEIP5XRfvTBvqmJf0=)
                          4: 2C0DD994525511F0A544424DC4F9AE02.roa (hash: P2CEyl9OyHCD/1DuLCNfzXBBwkFTLi3o8drVnlOWDvg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.crl
                          rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 21:17:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2058 (0x80a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9141620, serialNumber=03668A21F0F01F06B274FD88CC9E0A6E83D55F85
        Validity
            Not Before: May 12 21:17:07 2026 GMT
            Not After : May 19 21:17:07 2026 GMT
        Subject: CN=6a0398d3-ec71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7d:59:1f:9f:58:04:84:c2:ce:53:98:0b:f7:
                    a5:4e:6e:ec:4e:3f:d7:4e:70:90:55:4e:92:e7:e6:
                    0f:9c:ee:55:f8:9d:f7:4f:e3:c4:28:ec:db:14:41:
                    0f:53:7a:4d:d7:3b:e3:82:d0:3b:70:e2:28:f9:57:
                    50:31:b9:7f:8f:33:65:17:55:4f:b6:b2:da:72:3b:
                    21:2e:f1:e0:1e:25:f7:29:76:e2:ce:b1:ac:36:d7:
                    53:19:e5:1d:57:ce:13:cf:9c:33:73:34:5d:19:83:
                    6c:ee:d9:93:1d:84:8b:74:09:1a:81:fe:a8:4a:a9:
                    5f:39:5b:09:4f:df:9f:00:99:24:b4:4c:18:17:e8:
                    83:c6:d4:54:d8:38:8d:07:9e:c8:21:2d:b2:7c:2d:
                    c9:e2:b2:e3:3a:e1:9c:9e:c0:39:03:4e:4a:bf:9e:
                    c7:c0:5c:f4:92:96:0e:0a:9e:1f:6e:0b:09:82:28:
                    e2:91:d6:3b:76:43:f1:50:70:97:ea:cc:8d:83:2c:
                    ec:ed:38:a9:24:da:fd:0f:f3:af:47:33:9c:ac:96:
                    90:fc:70:e4:21:e2:cf:4f:a4:8e:cd:92:38:84:a1:
                    12:a7:b1:9c:16:d9:af:61:3b:49:09:5a:0c:61:f5:
                    03:e6:c1:05:69:d5:e4:58:20:d8:be:31:4f:10:be:
                    72:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E0:53:22:CC:4E:D5:03:B9:BA:09:6A:49:76:4E:69:4D:8E:B4:92
            X509v3 Authority Key Identifier:
                keyid:03:66:8A:21:F0:F0:1F:06:B2:74:FD:88:CC:9E:0A:6E:83:D5:5F:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:bb:40:e4:26:af:a1:e5:16:44:2f:ee:a1:5b:fd:bb:17:9e:
         42:f6:f6:fb:26:d9:e3:38:72:6c:9e:c1:b0:56:1f:46:2d:af:
         d7:b7:8e:04:eb:a5:a3:c6:1e:f2:e7:e1:6e:83:ac:3c:45:ac:
         31:07:b1:62:e4:c1:97:ff:a5:05:e6:36:fe:e9:b3:af:f5:33:
         87:1a:36:38:dd:e5:e5:c6:95:71:47:5d:75:5c:37:a0:59:79:
         0b:d7:2b:4a:f1:37:d2:ed:68:97:8d:3d:bf:39:87:20:b7:93:
         af:15:28:f2:44:92:29:3e:f9:9a:f8:06:0f:e4:38:8e:cc:22:
         3c:46:5c:6c:7c:74:9b:dc:0d:66:be:06:ef:d3:f8:e3:1d:b9:
         15:68:1f:07:4c:ed:9b:fc:f3:ef:e4:84:2c:8a:68:c4:af:00:
         a0:d1:df:e2:54:22:56:7d:dc:3e:c1:3e:57:66:74:0e:5d:43:
         fa:f7:90:f5:4d:a0:fa:41:b1:83:fb:4d:cd:92:71:76:61:43:
         e5:da:e8:2c:4d:9f:ba:88:38:b7:92:d3:14:74:e8:38:d6:8c:
         1b:03:9c:6a:85:ab:03:36:da:a3:26:fb:40:11:b8:56:09:8d:
         67:b1:35:f5:fb:23:76:63:f0:df:61:6a:76:8d:3e:49:4b:2f:
         2b:71:7f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:00:03 2026 by rpki-client