Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.mft
File:                     g--P6e5IafC5SpX3RvWJS6H7MPA.mft (raw, json)
Hash identifier:          0GnUPFN8GgbxCthrywF6m79z9n/sAoLPEufbGLlomjk=
Subject key identifier:   2A:5B:86:11:CB:8C:63:D0:9B:B1:A4:C9:D2:3C:99:0D:4C:5A:15:31
Authority key identifier: 83:EF:8F:E9:EE:48:69:F0:B9:4A:95:F7:46:F5:89:4B:A1:FB:30:F0
Certificate issuer:       /CN=A914EB9A/serialNumber=83EF8FE9EE4869F0B94A95F746F5894BA1FB30F0
Certificate serial:       0173
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g--P6e5IafC5SpX3RvWJS6H7MPA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.mft
Manifest number:          016E
Signing time:             Wed 13 May 2026 04:50:26 +0000
Manifest this update:     Wed 13 May 2026 04:50:26 +0000
Manifest next update:     Wed 20 May 2026 04:50:26 +0000
Files and hashes:         1: g--P6e5IafC5SpX3RvWJS6H7MPA.crl (hash: CqvZZKrhO0XsyG5WNhYYH3H2Xcxc9fjC78/gUBclJSc=)
                          2: A368B23623C411EFB7164123C4F9AE02.roa (hash: VVQzShIJbaueJ2kqgBg7iWLw4cnFdAHY6jIMdsEURbE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.crl
                          rsync://rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g--P6e5IafC5SpX3RvWJS6H7MPA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 04:50:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 371 (0x173)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EB9A, serialNumber=83EF8FE9EE4869F0B94A95F746F5894BA1FB30F0
        Validity
            Not Before: May 13 04:50:26 2026 GMT
            Not After : May 20 04:50:26 2026 GMT
        Subject: CN=6a040312-893d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:80:8b:a7:3c:cb:c1:c3:b8:13:8f:33:78:b4:
                    51:a1:d9:21:34:d3:29:b2:26:2d:f8:a8:60:d9:ea:
                    9f:54:4f:4b:ae:28:85:30:9d:12:7f:f0:a8:58:31:
                    6c:33:65:a8:71:ad:9e:1a:42:a7:9a:8b:63:55:77:
                    7a:56:93:73:e8:06:66:56:a2:20:a9:d0:5f:11:97:
                    8e:fa:c5:89:4f:6e:45:b8:50:e1:4b:79:95:89:42:
                    da:76:b1:34:8a:69:90:32:cf:4f:10:76:d2:96:af:
                    f8:27:78:8c:c7:0f:e2:90:6d:85:2b:6b:70:16:36:
                    c8:e5:7a:80:c9:11:2f:fe:a8:13:2a:cb:05:f6:ff:
                    a1:68:0d:d4:54:e3:a5:f1:4a:3c:ee:84:65:bc:0b:
                    2b:f7:c6:f3:be:90:44:7f:8a:a6:81:f9:af:c3:2e:
                    7f:f4:34:d4:48:bc:19:3b:9a:df:23:58:63:b0:0f:
                    52:ce:3e:c4:53:ed:ed:7f:b9:d8:36:8d:09:4a:f3:
                    ca:a0:74:c5:ab:d5:31:a6:a1:82:73:12:37:97:3d:
                    b3:0b:7c:bd:01:3e:9f:55:27:d0:ed:84:5b:a0:e5:
                    25:ba:00:86:48:65:02:6b:57:2b:01:47:d8:f8:f9:
                    ff:f1:3b:5c:43:92:c8:b6:6d:55:93:25:8d:9d:67:
                    79:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:5B:86:11:CB:8C:63:D0:9B:B1:A4:C9:D2:3C:99:0D:4C:5A:15:31
            X509v3 Authority Key Identifier:
                keyid:83:EF:8F:E9:EE:48:69:F0:B9:4A:95:F7:46:F5:89:4B:A1:FB:30:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g--P6e5IafC5SpX3RvWJS6H7MPA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:e4:7f:02:63:10:fe:5c:5e:a5:98:94:f8:ae:71:b5:c9:73:
         bc:ae:f5:9d:96:d6:32:12:c2:e7:b9:bc:98:60:25:69:79:dc:
         fb:b3:8e:41:da:0d:54:03:5d:fc:5c:09:e6:74:c5:8a:56:aa:
         b2:28:89:9c:2d:9d:8a:ea:be:e2:27:e2:c6:e2:56:4e:7a:b9:
         b5:b4:28:2c:a9:c4:6a:24:04:b5:9e:80:0d:49:93:61:29:b3:
         71:db:c9:db:85:77:d5:a5:41:bc:80:e6:a8:72:b4:61:2b:58:
         a3:3b:97:e8:ee:c1:0e:ca:2a:7b:09:67:36:63:d6:7f:fb:1f:
         10:78:3d:89:a4:9c:4c:bf:fb:72:33:a6:8d:7a:ce:ea:ae:e9:
         1e:02:0c:09:cc:2e:45:d0:46:a0:af:d5:46:94:7d:02:bc:a2:
         72:1f:8b:a9:87:6c:10:13:cb:23:7c:2a:dd:1a:b3:32:6d:9b:
         38:45:9f:14:b3:6e:c7:1d:38:50:14:71:42:dd:72:8e:86:9f:
         a2:99:b7:fc:bd:41:9d:62:94:04:6c:97:7c:95:75:5d:d4:88:
         16:d5:a8:83:ba:d0:57:1f:83:bf:15:73:da:4f:9c:57:61:da:
         51:ba:7e:77:03:f7:47:77:b7:90:5b:45:77:8c:c6:78:4c:67:
         e2:73:5c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:13:04 2026 by rpki-client