Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft
File:                     w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft (raw, json)
Hash identifier:          BuNHfdxeCokWjhpwmVnAs494LMgl5ipStBuu5kIP4Eg=
Subject key identifier:   37:6B:EF:2B:FA:BD:9A:0C:D7:23:74:83:79:98:06:63:01:22:39:5E
Authority key identifier: C3:C3:B6:A2:AB:CD:71:5D:E5:9A:30:B3:5D:FC:61:49:05:BF:E6:43
Certificate issuer:       /CN=A9150080/serialNumber=C3C3B6A2ABCD715DE59A30B35DFC614905BFE643
Certificate serial:       0499
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w8O2oqvNcV3lmjCzXfxhSQW_5kM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft
Manifest number:          0491
Signing time:             Tue 12 May 2026 23:39:21 +0000
Manifest this update:     Tue 12 May 2026 23:39:21 +0000
Manifest next update:     Tue 19 May 2026 23:39:21 +0000
Files and hashes:         1: w8O2oqvNcV3lmjCzXfxhSQW_5kM.crl (hash: +iqADlDcDArTHASzfDnGRNFM/56GQT7M4DEXhYpVsVI=)
                          2: 9904EDFA857E11ECA6A4FB59C4F9AE02.roa (hash: Wkbpet28C/TvGY44smk3UYg7QZ7S+a0s1olNKrKnufY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.crl
                          rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w8O2oqvNcV3lmjCzXfxhSQW_5kM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1177 (0x499)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150080, serialNumber=C3C3B6A2ABCD715DE59A30B35DFC614905BFE643
        Validity
            Not Before: May 12 23:39:21 2026 GMT
            Not After : May 19 23:39:21 2026 GMT
        Subject: CN=6a03ba29-6edf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3f:b7:4c:86:d8:bf:d0:9e:43:39:72:9c:0e:
                    e7:6b:f0:60:d4:db:7a:74:29:83:60:4a:c1:cd:48:
                    c2:8c:0e:dc:70:f6:4e:6f:75:cf:fe:78:04:40:d5:
                    c4:c2:88:d4:98:5c:31:23:b5:4e:39:8a:1f:e7:e0:
                    a8:20:00:64:a2:a3:00:e9:60:0c:ca:b4:c1:c4:2e:
                    31:c3:48:90:e2:08:05:37:59:b2:d3:ca:44:c1:b8:
                    03:46:2e:6f:5d:54:97:d2:5a:3b:22:5b:c5:3d:1a:
                    b0:7c:a9:0a:d1:d4:54:9d:e7:7f:90:44:ed:db:57:
                    9d:ab:91:4c:bc:1b:30:4b:4d:1e:bc:9b:d4:37:2d:
                    b1:11:91:fa:1a:75:99:cf:a2:2f:2d:47:b2:19:f7:
                    18:bb:7d:2b:64:28:4e:34:1d:6e:f9:72:ea:5d:30:
                    91:0d:6e:4f:65:85:66:50:e6:c9:72:e1:af:dd:b2:
                    bb:85:d1:5e:cd:60:3c:5e:52:76:80:a2:d4:8e:13:
                    6d:84:77:56:5d:c3:1f:b2:bd:7c:1d:31:93:44:c6:
                    ad:bd:7c:77:76:fe:96:51:4c:bc:34:43:d8:66:9b:
                    20:3c:03:47:89:5c:16:4b:bb:d9:51:48:53:0f:08:
                    b6:9c:c5:d1:b2:2b:d2:24:97:a4:8a:60:f9:79:1e:
                    92:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:6B:EF:2B:FA:BD:9A:0C:D7:23:74:83:79:98:06:63:01:22:39:5E
            X509v3 Authority Key Identifier:
                keyid:C3:C3:B6:A2:AB:CD:71:5D:E5:9A:30:B3:5D:FC:61:49:05:BF:E6:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w8O2oqvNcV3lmjCzXfxhSQW_5kM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:05:35:5e:1b:8c:af:ad:4d:fb:92:cc:d1:8c:11:b3:61:0d:
         b6:54:7f:76:0a:94:80:00:1b:7b:09:41:60:97:ea:a3:ae:fd:
         0c:86:71:33:0b:90:1f:a5:39:6f:1c:81:22:6f:0d:e2:07:32:
         6b:54:c7:7a:6c:0b:67:08:13:8a:3f:ce:aa:3c:ac:e5:f0:b7:
         ac:9c:87:13:8e:5c:07:d9:86:94:59:1a:95:f5:b7:ff:f2:30:
         c1:c7:54:61:1a:3e:ed:66:a8:de:8d:d2:90:b5:b6:f6:bb:8a:
         59:f0:56:3d:54:6f:e7:0d:96:ff:f8:07:3a:b6:d1:9d:4a:aa:
         f2:ca:34:09:64:2a:87:55:bc:39:ad:2e:2c:f0:db:0e:83:6c:
         2b:8c:93:8e:b2:1f:9b:71:75:52:04:ff:f1:27:20:57:1f:ec:
         e0:89:83:2d:4d:37:55:29:29:33:ec:0b:5f:5c:a8:5e:8c:6b:
         81:76:44:8d:0c:05:18:1b:03:ae:2c:c4:d6:b9:04:ff:fb:64:
         1d:f4:77:0e:12:40:21:80:c0:53:cb:30:18:92:33:58:97:ca:
         cd:24:f5:ad:62:b0:d7:90:53:c3:48:56:01:4f:07:d1:64:47:
         f1:94:cc:ee:46:9e:58:50:b6:cf:f6:d4:3d:c8:c8:50:26:d6:
         92:24:7d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:21:59 2026 by rpki-client