Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft
File:                     a51l6unGl9ohy0vuv030zgpBkyE.mft (raw, json)
Hash identifier:          HXQImvqgWJ3j5QJpV4Rn6Lx5s98Y1hpIvQcCihGiPPM=
Subject key identifier:   6A:5C:A8:B5:30:15:37:62:E2:B3:96:53:66:04:1B:7D:32:5E:C6:19
Authority key identifier: 6B:9D:65:EA:E9:C6:97:DA:21:CB:4B:EE:BF:4D:F4:CE:0A:41:93:21
Certificate issuer:       /CN=A9141FD6/serialNumber=6B9D65EAE9C697DA21CB4BEEBF4DF4CE0A419321
Certificate serial:       357C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft
Manifest number:          355D
Signing time:             Tue 12 May 2026 14:43:55 +0000
Manifest this update:     Tue 12 May 2026 14:43:55 +0000
Manifest next update:     Tue 19 May 2026 14:43:55 +0000
Files and hashes:         1: a51l6unGl9ohy0vuv030zgpBkyE.crl (hash: PcRd/t9cEZIAf+1t04UuWv8kGzgI7iXH8o57DZY+4zw=)
                          2: BBDA65F6479111F1892030F49D833773.roa (hash: Cd/9ZCibOCZHn6hlsPJ2mGAq/MQ8q2/mTiMUOLXRUAI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.crl
                          rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:43:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13692 (0x357c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9141FD6, serialNumber=6B9D65EAE9C697DA21CB4BEEBF4DF4CE0A419321
        Validity
            Not Before: May 12 14:43:55 2026 GMT
            Not After : May 19 14:43:55 2026 GMT
        Subject: CN=6a033cab-1507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:03:6e:1a:57:c1:d4:fd:10:3f:96:62:02:b8:
                    61:a1:05:32:4f:5c:a6:55:f8:c8:f3:a5:0d:a2:ce:
                    6a:a3:07:cc:16:8e:c0:9e:d5:61:47:31:eb:58:70:
                    34:e6:7d:db:17:c9:ee:72:ec:70:61:b9:88:12:f1:
                    34:6b:f4:be:4b:58:38:35:07:9b:61:f0:50:75:9a:
                    c3:ac:c6:b0:27:f4:7a:86:be:2b:53:71:89:58:1d:
                    5d:37:ee:b4:94:3c:1b:20:33:e7:0e:29:93:22:0a:
                    b0:08:c0:e4:2c:e6:3c:3f:ce:30:34:ed:2a:1e:2a:
                    c3:57:da:41:20:d0:60:b3:64:99:e3:8b:8e:62:0f:
                    59:80:ca:08:0c:c6:b4:ba:3d:39:fa:ee:48:79:01:
                    87:60:d4:32:7c:07:76:9f:fb:2b:76:52:f0:e1:ca:
                    81:4d:aa:cb:d3:bb:73:d4:9e:a8:80:a9:33:73:40:
                    cf:b7:ee:13:55:04:0e:fe:bf:9c:2f:ab:cc:c9:16:
                    ee:ed:b9:3a:e2:ff:c6:b2:ac:94:b6:d6:71:53:70:
                    d4:2b:33:8c:4f:6b:1b:52:48:94:db:3d:a9:98:9e:
                    a3:86:9d:7d:c3:8d:12:a6:97:64:c0:08:0e:7d:ac:
                    65:d0:ba:a1:c7:b3:ed:3e:05:a9:d7:5d:9f:81:2a:
                    a4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:5C:A8:B5:30:15:37:62:E2:B3:96:53:66:04:1B:7D:32:5E:C6:19
            X509v3 Authority Key Identifier:
                keyid:6B:9D:65:EA:E9:C6:97:DA:21:CB:4B:EE:BF:4D:F4:CE:0A:41:93:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:52:77:31:06:7a:6c:0a:ed:9d:0c:0f:e1:ca:0c:f3:dd:e0:
         04:21:65:b3:d2:b1:c2:a0:32:f0:d5:c7:c1:70:6f:50:8a:f7:
         7e:7b:39:9f:df:b6:57:b8:cb:ef:8e:79:98:49:ec:ae:fe:65:
         9a:28:20:0c:88:f4:a6:f1:59:5e:03:f1:8e:74:e4:92:05:d3:
         6e:b6:26:8b:1f:8e:f8:4f:b0:87:b3:6a:e4:f7:da:1d:eb:70:
         0b:47:e7:8e:2e:fc:1b:30:58:dd:4b:f3:51:bf:e2:5e:5d:d1:
         c9:3c:9c:db:1a:90:34:f5:50:b3:a9:c8:cd:ad:8e:4b:8e:bb:
         c0:7f:0b:0c:4c:8b:d0:2e:ea:e5:7c:da:b2:3e:38:ac:81:15:
         b4:f9:a0:f2:e1:0c:22:bb:07:d9:5b:a1:dc:3e:d8:a2:0f:c8:
         79:6a:19:8e:0b:82:02:31:65:ba:7e:f3:74:c5:cc:7b:af:91:
         39:2c:00:18:c1:a1:a1:01:22:76:9f:57:71:2e:dd:64:21:f6:
         af:38:6f:0c:d1:e1:6a:7c:bf:3e:c2:dc:81:3d:6b:d3:e6:88:
         63:6c:fe:51:cd:c9:72:a2:0f:50:4f:09:57:a3:0a:7b:c7:e7:
         3a:8a:74:11:50:2e:47:2e:29:5b:66:0b:f5:ab:6b:2d:80:10:
         02:25:e7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:33:54 2026 by rpki-client