Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft
File:                     ORjYC8twLsrPhMt6yogPh4oU_kg.mft (raw, json)
Hash identifier:          UjHPDedBnu5XwpIk+X2QVH4zqHnyPcCHha8VkzFxbiE=
Subject key identifier:   DE:51:CA:71:75:D3:2B:F2:F8:8D:7D:73:F1:78:39:7E:E9:21:FB:20
Authority key identifier: 39:18:D8:0B:CB:70:2E:CA:CF:84:CB:7A:CA:88:0F:87:8A:14:FE:48
Certificate issuer:       /CN=A9146B24/serialNumber=3918D80BCB702ECACF84CB7ACA880F878A14FE48
Certificate serial:       0225
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft
Manifest number:          01FB
Signing time:             Wed 13 May 2026 03:48:15 +0000
Manifest this update:     Wed 13 May 2026 03:48:14 +0000
Manifest next update:     Wed 20 May 2026 03:48:14 +0000
Files and hashes:         1: ORjYC8twLsrPhMt6yogPh4oU_kg.crl (hash: i+calHJsro99NKGOrV4nOxiFMlILZLcpcj5KyV+gM4g=)
                          2: 9CE3F0C4489D11F19CE079A2B5833773.roa (hash: 0u5S+QnN0BW3Zpd5I24lTzuoS8F5H4Uy5HJ33GYGqRI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.crl
                          rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 03:48:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 549 (0x225)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146B24, serialNumber=3918D80BCB702ECACF84CB7ACA880F878A14FE48
        Validity
            Not Before: May 13 03:48:14 2026 GMT
            Not After : May 20 03:48:14 2026 GMT
        Subject: CN=6a03f47f-a4ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c5:e8:8f:6b:da:63:94:d5:23:96:95:17:f8:
                    43:4c:04:d8:53:54:b7:20:5c:62:8a:d6:8d:b3:ff:
                    58:d8:cf:3c:de:3c:ba:09:36:eb:0f:0c:ed:e3:80:
                    07:db:bd:2e:fa:cb:5f:60:dc:27:d3:21:4d:e2:02:
                    72:a2:18:fe:42:40:35:2f:d7:1a:1e:b5:82:3e:f5:
                    ee:0e:59:eb:47:70:46:52:98:9d:9d:73:6a:3c:37:
                    8a:b0:aa:8a:16:45:13:5a:7b:8d:b7:6b:95:d7:df:
                    37:91:5d:09:62:c6:59:5e:95:28:b9:4f:ba:f1:6a:
                    26:f2:f5:d4:6c:88:58:b3:33:81:13:4d:4c:28:4e:
                    6c:7a:9a:11:8a:06:ca:dc:a2:56:23:9f:73:f0:17:
                    71:99:53:4f:95:cb:0d:96:e2:4b:92:e6:60:2f:11:
                    43:9a:f5:b2:53:27:fc:75:d0:fa:16:2e:1a:2f:c3:
                    0f:8d:fd:1a:8b:49:c5:99:8f:a2:1c:ad:64:e1:51:
                    22:78:6c:ad:ac:66:36:9d:4d:54:0f:a5:bf:1d:0a:
                    68:c7:f7:2d:ce:73:e8:23:ec:9b:ed:82:67:76:4a:
                    ad:9c:bc:8b:d1:03:90:47:c5:e1:da:7a:1e:2d:4d:
                    5a:9b:1a:6b:b8:f9:ef:6b:82:52:5a:20:5e:bc:ce:
                    84:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:51:CA:71:75:D3:2B:F2:F8:8D:7D:73:F1:78:39:7E:E9:21:FB:20
            X509v3 Authority Key Identifier:
                keyid:39:18:D8:0B:CB:70:2E:CA:CF:84:CB:7A:CA:88:0F:87:8A:14:FE:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:c8:40:5e:04:a8:93:31:df:fb:9e:d0:3f:9f:5a:7a:1b:a7:
         08:27:89:b7:6e:9b:33:03:0b:aa:86:df:1e:f0:ca:93:87:77:
         1b:4e:e6:16:9c:ae:4d:eb:5c:6e:69:b2:60:41:6c:eb:36:3c:
         08:49:8c:f9:1a:9b:67:d9:a6:59:0b:8b:59:bb:32:7c:11:4e:
         0f:58:24:d2:9a:a7:91:f5:52:21:0c:79:d1:73:d2:75:d8:a3:
         b6:1f:59:c4:dd:6c:9b:d2:52:47:08:ac:c5:89:0c:ac:1e:7b:
         38:73:a5:03:b6:69:5a:b2:91:ae:88:37:c6:33:64:f7:d0:6f:
         a1:eb:f7:0f:82:d9:a5:32:31:98:b9:d3:d2:e0:4d:5f:f2:cb:
         89:89:09:65:e8:01:72:b3:f6:93:e0:ad:bb:f5:64:35:3e:8d:
         fd:ce:02:a3:7e:71:92:01:be:9d:43:e3:6d:82:15:7e:08:4d:
         fc:ce:df:54:4d:0b:90:b1:4d:c6:48:ed:21:94:6b:b7:17:e6:
         b9:7b:a5:94:53:2c:9a:f0:42:9f:62:52:b0:ec:b6:32:9a:9d:
         7f:59:0f:9d:f3:41:25:b6:d3:7c:2a:96:08:5c:9e:1b:f9:26:
         0f:51:fe:e9:01:d4:53:40:3a:6a:ca:f0:d6:e5:54:78:b8:63:
         f8:58:82:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:13:54 2026 by rpki-client