Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft
File:                     b-azPqhzkGYLRrER2tV9YG8v7iQ.mft (raw, json)
Hash identifier:          R7RPB/wRx4zcxLLUPPcWkYnfmuaHCZYQLG0Ccu+FGGA=
Subject key identifier:   54:DC:72:29:2C:5F:84:4E:C8:F4:F3:5F:63:98:52:17:31:BE:EF:8A
Authority key identifier: 6F:E6:B3:3E:A8:73:90:66:0B:46:B1:11:DA:D5:7D:60:6F:2F:EE:24
Certificate issuer:       /CN=A9145519/serialNumber=6FE6B33EA87390660B46B111DAD57D606F2FEE24
Certificate serial:       1D31
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft
Manifest number:          1D10
Signing time:             Tue 12 May 2026 16:09:29 +0000
Manifest this update:     Tue 12 May 2026 16:09:28 +0000
Manifest next update:     Tue 19 May 2026 16:09:28 +0000
Files and hashes:         1: b-azPqhzkGYLRrER2tV9YG8v7iQ.crl (hash: sPRHVIqGsDPGaghpO7A9oMhMaUyS1iU9ZEgU444WpbE=)
                          2: 7814B330E45E11E681F82341C4F9AE02.roa (hash: FVNSKaXDdy0CaXltkNWY4bF0klXSYM3BzCHdZ56uQag=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.crl
                          rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 16:09:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7473 (0x1d31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145519, serialNumber=6FE6B33EA87390660B46B111DAD57D606F2FEE24
        Validity
            Not Before: May 12 16:09:28 2026 GMT
            Not After : May 19 16:09:28 2026 GMT
        Subject: CN=6a0350b9-e1f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:52:f9:0d:b4:c5:49:59:44:00:dd:01:73:7e:
                    fa:79:82:56:11:1e:0c:78:2f:ba:f5:8b:2f:2c:3b:
                    ce:7a:07:53:b6:bb:7e:a2:3b:f2:ae:a4:e9:ba:99:
                    24:39:79:5c:69:22:e9:0b:97:22:e7:31:41:10:0a:
                    4c:1f:1d:04:90:09:62:8a:d1:b4:a3:21:00:f7:58:
                    7b:ac:32:e7:2a:5c:32:28:70:4a:34:1d:d7:65:4c:
                    6f:22:ad:9e:cf:12:cd:e6:19:2e:16:b0:f1:c4:9c:
                    9f:18:30:87:26:0d:d6:40:4c:9b:76:da:0b:b0:2a:
                    59:4c:4d:2e:c4:12:d6:f0:7e:bf:f1:d3:41:48:3c:
                    71:ad:97:c1:e8:9e:44:9f:91:cb:0e:45:7c:85:ab:
                    5f:50:1f:35:f6:d2:26:22:24:f4:df:ff:05:e3:18:
                    b4:ff:78:67:95:e8:31:24:77:02:be:62:af:2e:32:
                    02:62:27:86:a0:14:aa:be:af:9f:db:40:47:c6:33:
                    fa:9f:65:b9:04:09:a0:18:86:02:26:2f:f0:b5:4e:
                    64:94:87:99:85:55:d0:b6:33:ea:70:c6:bc:89:8b:
                    83:ef:fe:01:c5:09:df:c4:6e:73:a0:f6:c1:02:13:
                    22:ca:2c:79:b1:b9:a3:bf:46:cf:7a:00:fa:30:c7:
                    e0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:DC:72:29:2C:5F:84:4E:C8:F4:F3:5F:63:98:52:17:31:BE:EF:8A
            X509v3 Authority Key Identifier:
                keyid:6F:E6:B3:3E:A8:73:90:66:0B:46:B1:11:DA:D5:7D:60:6F:2F:EE:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:89:36:56:8e:8a:c0:8b:b3:c0:7f:c4:ac:b0:75:9f:98:ab:
         77:7e:5e:76:3d:28:a2:2c:5e:75:3d:45:f1:04:e8:ea:aa:bb:
         00:fc:28:5f:bc:f3:4b:7d:1d:0b:c8:b6:d4:c8:2d:cd:43:77:
         8c:76:e1:52:10:e3:5d:11:a8:be:90:b0:c3:50:39:2b:c5:7e:
         12:4b:b7:58:db:27:c5:5c:41:25:26:b7:52:e9:c8:7b:3d:d6:
         b3:68:37:92:e4:c2:84:d8:5a:59:0f:45:4e:b3:60:43:e5:f0:
         b7:56:88:51:42:ae:3a:a2:cc:24:04:bd:cb:2a:e4:b9:dd:fb:
         c2:d3:35:68:c9:f1:f1:9f:c3:f2:c7:d4:ba:96:2a:3b:7f:f7:
         dc:77:ff:28:d5:9d:36:5b:1f:12:c6:ab:72:22:95:19:b1:a1:
         ae:7c:2a:0a:f3:2d:81:83:c2:45:eb:b4:ec:25:21:15:f5:8b:
         ae:54:d5:5e:1e:0f:2c:03:1e:aa:7c:9c:1a:9c:79:f8:52:28:
         ba:73:b1:9e:4e:82:82:3b:d8:25:a7:a5:3a:ce:ab:16:7d:83:
         c8:50:0d:4f:87:5f:8d:35:5a:f9:3d:2e:9e:44:6a:ba:5f:fd:
         95:94:7f:28:bd:03:56:51:5f:05:c3:1a:6c:74:dc:da:c4:06:
         66:62:d2:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:47:21 2026 by rpki-client