Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145CB7/83EA6D72082A11F1B456BEDF353D8C67/b-5tdUHTHLD7ENbScmQkY5LHSdI.mft
File:                     b-5tdUHTHLD7ENbScmQkY5LHSdI.mft (raw, json)
Hash identifier:          hl8sXponePkF8LrGFcDt9u3LHxClghBsZWK5PGHy/7s=
Subject key identifier:   13:56:0A:6C:17:C0:47:83:4A:E8:09:C8:EB:9C:3C:C4:92:BE:75:18
Authority key identifier: 6F:EE:6D:75:41:D3:1C:B0:FB:10:D6:D2:72:64:24:63:92:C7:49:D2
Certificate issuer:       /CN=A9145CB7/serialNumber=6FEE6D7541D31CB0FB10D6D27264246392C749D2
Certificate serial:       30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-5tdUHTHLD7ENbScmQkY5LHSdI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145CB7/83EA6D72082A11F1B456BEDF353D8C67/b-5tdUHTHLD7ENbScmQkY5LHSdI.mft
Manifest number:          30
Signing time:             Mon 11 May 2026 08:52:44 +0000
Manifest this update:     Mon 11 May 2026 08:52:44 +0000
Manifest next update:     Mon 18 May 2026 08:52:44 +0000
Files and hashes:         1: b-5tdUHTHLD7ENbScmQkY5LHSdI.crl (hash: mvrGNKWNS52FytdfebL9RUbDBFs3zXCpGNJHxFVSo44=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145CB7/83EA6D72082A11F1B456BEDF353D8C67/b-5tdUHTHLD7ENbScmQkY5LHSdI.crl
                          rsync://rpki.apnic.net/member_repository/A9145CB7/83EA6D72082A11F1B456BEDF353D8C67/b-5tdUHTHLD7ENbScmQkY5LHSdI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-5tdUHTHLD7ENbScmQkY5LHSdI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:52:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145CB7, serialNumber=6FEE6D7541D31CB0FB10D6D27264246392C749D2
        Validity
            Not Before: May 11 08:52:44 2026 GMT
            Not After : May 18 08:52:44 2026 GMT
        Subject: CN=6a0198dc-b9fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:fa:e0:a6:6f:5b:0a:b6:be:7f:a7:69:48:3f:
                    a9:62:5a:98:c4:4a:2f:b1:4a:7b:15:17:be:05:dc:
                    05:fe:c4:c6:1e:72:e4:0f:ce:cc:3a:2b:e2:8f:4b:
                    1c:bc:48:02:8c:59:4e:0c:b8:59:9e:1f:00:aa:e1:
                    14:d3:a1:9f:9a:eb:ed:a3:d1:53:6e:e2:0a:f7:28:
                    33:dc:62:10:f3:ce:de:f4:fe:f5:53:92:73:ae:99:
                    2f:36:94:d1:14:1a:2b:1f:25:db:1a:9d:7b:04:7a:
                    55:34:93:0e:88:23:ed:ac:5f:1e:90:ce:6c:22:95:
                    90:44:eb:c6:2b:4b:a0:d7:5d:75:51:22:bb:cf:4d:
                    90:ff:64:35:83:be:2f:9b:83:52:af:4a:ba:8d:99:
                    fa:14:51:45:11:21:ce:bf:65:09:98:3d:9f:0f:89:
                    58:0c:16:ef:2b:f8:20:47:a0:53:f7:b7:c6:5d:c8:
                    ee:95:f3:5b:1f:a7:fb:b1:2b:17:dc:6d:ec:1a:d5:
                    5e:0a:7c:ee:73:fb:ef:b8:0c:de:e4:f9:6a:14:98:
                    34:96:57:e8:ba:da:0d:c1:33:ba:b4:25:de:88:8c:
                    e4:5f:48:0d:08:a7:29:ed:ca:23:49:c1:80:1c:8e:
                    c2:56:f3:53:c0:cc:15:83:81:0f:b2:6a:2e:d2:3b:
                    86:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:56:0A:6C:17:C0:47:83:4A:E8:09:C8:EB:9C:3C:C4:92:BE:75:18
            X509v3 Authority Key Identifier:
                keyid:6F:EE:6D:75:41:D3:1C:B0:FB:10:D6:D2:72:64:24:63:92:C7:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145CB7/83EA6D72082A11F1B456BEDF353D8C67/b-5tdUHTHLD7ENbScmQkY5LHSdI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-5tdUHTHLD7ENbScmQkY5LHSdI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145CB7/83EA6D72082A11F1B456BEDF353D8C67/b-5tdUHTHLD7ENbScmQkY5LHSdI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:13:d0:a5:de:91:9f:f3:e7:b8:31:de:e9:31:4a:c6:ba:4e:
         80:3f:ff:ea:e4:3a:28:5a:0d:fa:8b:ac:9e:6d:39:72:15:08:
         91:04:99:96:cd:6d:39:e1:20:44:2b:82:1f:4d:d3:4f:46:67:
         8a:aa:c1:31:c9:6e:cd:07:b2:80:ce:36:cf:95:f1:fe:30:78:
         a3:f2:13:c0:59:d3:a8:4e:a4:bb:40:8a:dd:1d:bd:4a:aa:bd:
         80:e9:e7:07:54:35:16:00:4d:7c:31:90:1e:58:61:db:df:7e:
         28:63:c1:92:af:46:af:4c:3c:3e:50:7d:5b:8f:d1:ce:31:fd:
         c8:47:09:06:87:27:36:40:b8:ae:0c:cc:95:72:51:3a:c4:53:
         6d:bf:19:54:30:9c:eb:61:d2:14:1d:33:36:61:67:48:6a:15:
         52:24:ef:b8:68:ae:58:8b:0b:34:de:e3:57:2f:e3:46:27:c4:
         82:4c:84:6f:cd:8a:41:ff:71:3c:06:09:11:27:fe:df:29:ce:
         71:db:cf:35:e4:22:76:d1:e1:c1:bb:d8:cf:80:1d:73:ef:82:
         05:70:67:c5:8b:8d:d5:9f:db:53:f0:16:87:ca:cd:e1:a5:7c:
         8b:df:26:3f:30:a7:f1:21:0c:94:3d:7e:a0:8a:9d:cc:3f:2b:
         ba:cb:46:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:16:48 2026 by rpki-client