Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft
File:                     -xaxnfv3ymrECmtqNT94V4kX4P0.mft (raw, json)
Hash identifier:          fxLTlVEHIcvYpYPpqP0goEX9zOTssCXt3VANlq1N31U=
Subject key identifier:   7B:18:54:4F:E1:23:99:99:14:0F:CA:C7:A7:CC:93:24:0D:2B:F8:FD
Authority key identifier: FB:16:B1:9D:FB:F7:CA:6A:C4:0A:6B:6A:35:3F:78:57:89:17:E0:FD
Certificate issuer:       /CN=A9146CB4/serialNumber=FB16B19DFBF7CA6AC40A6B6A353F78578917E0FD
Certificate serial:       0232
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft
Manifest number:          022C
Signing time:             Mon 11 May 2026 02:41:31 +0000
Manifest this update:     Mon 11 May 2026 02:41:30 +0000
Manifest next update:     Mon 18 May 2026 02:41:30 +0000
Files and hashes:         1: -xaxnfv3ymrECmtqNT94V4kX4P0.crl (hash: CzEJCYrCRrvMt+SCS6tZpX2OzCnSvQIjxCb/fGi3rbA=)
                          2: DFC662EC415B11EE9E83852AC4F9AE02.roa (hash: R5a6QMcMMM3E0jCOFVWDRS9Q/1dJvX8y7TpUdy+NpOw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.crl
                          rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 02:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 562 (0x232)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146CB4, serialNumber=FB16B19DFBF7CA6AC40A6B6A353F78578917E0FD
        Validity
            Not Before: May 11 02:41:30 2026 GMT
            Not After : May 18 02:41:30 2026 GMT
        Subject: CN=6a0141db-e371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a2:2c:1e:b3:d1:33:e2:ab:ab:08:51:f9:25:
                    9f:6c:d1:ed:67:0a:c6:21:b1:fa:a8:60:63:43:c8:
                    1e:83:f2:9b:d5:b2:09:17:1b:b2:f9:89:1b:85:a0:
                    07:56:93:d2:1a:4b:b9:ce:5d:3c:d3:98:ca:fa:3c:
                    85:7d:b9:25:35:5e:59:74:b9:be:c6:ab:d3:e9:13:
                    98:45:5f:d5:d4:1b:e8:f5:2b:28:c7:e6:a4:00:e3:
                    c1:8c:ac:45:cc:0a:57:f6:dd:b8:9e:8b:8b:c8:6c:
                    e9:b6:f9:65:6c:92:b9:b6:8d:02:f6:53:23:49:72:
                    d6:2b:0c:48:6e:27:ee:3e:cc:c9:d8:cf:46:c6:0d:
                    9c:28:a1:36:40:88:8e:bd:97:9b:40:b2:03:17:d0:
                    5a:cd:83:cd:61:3c:99:b7:e9:4e:43:95:c8:20:67:
                    be:66:5f:ef:6f:d5:cd:fa:b4:c0:02:0c:fd:69:7e:
                    ef:de:ef:6c:73:2b:34:62:c1:5d:c4:80:45:da:a4:
                    25:80:51:85:1f:6c:f5:27:c0:25:3b:a2:8b:be:fe:
                    3c:25:73:f7:be:cd:2d:1e:7d:e5:09:54:2a:91:93:
                    5e:ec:6c:17:f5:91:b6:1e:62:22:0f:f4:75:bb:54:
                    c4:0e:64:ab:d9:34:11:95:8d:9f:a8:c0:cc:bd:c9:
                    2f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:18:54:4F:E1:23:99:99:14:0F:CA:C7:A7:CC:93:24:0D:2B:F8:FD
            X509v3 Authority Key Identifier:
                keyid:FB:16:B1:9D:FB:F7:CA:6A:C4:0A:6B:6A:35:3F:78:57:89:17:E0:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:87:73:a0:53:72:ac:f8:da:71:8c:13:e2:cd:33:e3:c4:4f:
         73:8c:cc:50:37:4c:03:e0:3b:ec:4a:9f:cb:3a:b3:50:67:79:
         62:52:30:dd:85:a6:47:64:88:74:a5:55:86:f0:b9:1c:ae:cb:
         33:d8:c2:0f:7c:b7:80:71:3c:88:24:ee:8e:60:97:56:3f:b7:
         35:3a:5e:d9:b5:83:bb:a2:58:bb:8f:37:be:ae:43:56:54:e5:
         f9:1f:9b:1c:c6:fa:29:61:34:58:5b:0e:66:e9:0b:53:a0:9d:
         17:04:19:1a:c6:70:66:d5:3d:a9:f4:b0:5e:d5:41:b7:2c:30:
         ac:18:c7:fa:73:d4:53:0a:a7:e5:80:b1:34:a9:bc:ec:2c:47:
         cd:a2:c2:54:5c:0f:88:18:09:44:57:52:af:65:60:79:1c:3a:
         13:85:04:41:94:ec:e3:29:da:f6:d4:77:cd:57:d4:b5:2e:48:
         74:35:21:b4:d8:15:f1:2d:5c:a7:a5:7e:bf:08:e0:db:6e:c6:
         ae:e5:c5:bb:6b:d6:25:c9:d6:81:45:38:19:83:3a:03:e5:4b:
         9e:7d:97:5c:58:6e:a5:a4:d4:d1:7a:88:c4:b9:fd:74:c1:01:
         e4:b2:ae:0a:fa:98:ae:76:26:83:a7:b0:24:36:8a:09:d0:04:
         2a:23:6b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:13:29 2026 by rpki-client