Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft
File:                     DYxttID--Lv1xosdQ5bdhfWTwUY.mft (raw, json)
Hash identifier:          XyQv9/tPuT/iRA7ukT6wnsNeEt9SpO83xIEGnuH/JqQ=
Subject key identifier:   65:35:B5:E2:1C:24:26:51:D4:DB:C0:6A:80:41:2B:1D:C6:ED:C9:BF
Authority key identifier: 0D:8C:6D:B4:80:FE:F8:BB:F5:C6:8B:1D:43:96:DD:85:F5:93:C1:46
Certificate issuer:       /CN=A9150A44/serialNumber=0D8C6DB480FEF8BBF5C68B1D4396DD85F593C146
Certificate serial:       1205
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYxttID--Lv1xosdQ5bdhfWTwUY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft
Manifest number:          11F8
Signing time:             Tue 12 May 2026 17:10:35 +0000
Manifest this update:     Tue 12 May 2026 17:10:34 +0000
Manifest next update:     Tue 19 May 2026 17:10:34 +0000
Files and hashes:         1: DYxttID--Lv1xosdQ5bdhfWTwUY.crl (hash: JhcasWfqwddUNFKNXuXZmlaFZfuCaGqlrQr9hwmHVoI=)
                          2: 9F3D07940A3D11E9A4A5D873C4F9AE02.roa (hash: CBq8LWgrgXC9mO0SUvr0TrX8pn6h91JP7Wdayc/HFqk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.crl
                          rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYxttID--Lv1xosdQ5bdhfWTwUY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 17:10:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4613 (0x1205)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150A44, serialNumber=0D8C6DB480FEF8BBF5C68B1D4396DD85F593C146
        Validity
            Not Before: May 12 17:10:34 2026 GMT
            Not After : May 19 17:10:34 2026 GMT
        Subject: CN=6a035f0b-bee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e6:f9:0b:55:9e:83:1c:c2:ea:01:fd:c5:e0:
                    48:85:99:b3:7c:ec:ac:dc:ee:a0:6d:fe:02:67:34:
                    1a:d5:8c:ad:38:fd:74:0f:be:af:c9:e4:e5:14:eb:
                    13:55:40:75:d5:b2:c6:23:1e:b1:df:4f:90:3b:9b:
                    9a:71:bb:bc:15:90:e6:41:e1:4a:30:d2:8e:c0:e1:
                    00:61:d0:42:9c:01:bf:82:32:84:3e:60:08:29:04:
                    59:2d:65:86:9d:84:2b:48:02:0b:2e:06:d2:14:74:
                    9b:8b:ac:cc:a4:c8:6e:29:fc:7d:4a:77:2f:49:57:
                    ac:c4:d1:69:20:2b:a0:22:6c:4f:a4:fb:18:04:bb:
                    1c:bf:05:4b:ae:1d:07:3f:77:e1:c6:42:4e:6f:f5:
                    1f:7e:5e:ea:45:20:56:32:ee:85:d6:4d:70:0d:40:
                    00:76:60:60:a2:20:b0:9c:c2:8f:54:e1:40:55:d2:
                    79:fc:03:1b:38:6a:54:ab:f2:7f:e5:d6:ef:fd:2c:
                    c4:bc:25:48:df:28:c9:97:82:83:49:48:9e:4a:9f:
                    7b:cc:37:db:b9:9e:f9:d8:e5:f3:52:bc:dd:94:0e:
                    42:72:d1:ef:2b:79:62:0b:c2:1e:40:50:bd:80:54:
                    a5:76:c8:1d:f7:fd:97:9b:7f:6d:c4:33:58:f3:e7:
                    22:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:35:B5:E2:1C:24:26:51:D4:DB:C0:6A:80:41:2B:1D:C6:ED:C9:BF
            X509v3 Authority Key Identifier:
                keyid:0D:8C:6D:B4:80:FE:F8:BB:F5:C6:8B:1D:43:96:DD:85:F5:93:C1:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYxttID--Lv1xosdQ5bdhfWTwUY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:e6:26:63:4e:d3:5a:38:30:9d:88:d9:52:80:f0:8c:0b:84:
         3d:ad:66:16:52:7e:82:21:b5:ec:c4:33:d3:09:11:91:39:f5:
         27:0b:80:28:47:b1:b3:b4:0d:71:d6:89:fd:fb:f3:59:b6:2e:
         f8:5b:c8:19:3d:b2:ce:ab:7e:78:7f:f0:bd:c0:7b:6a:22:92:
         be:66:56:46:9a:c1:a6:7e:9a:d7:f1:4a:15:e7:a8:08:39:93:
         ae:97:3d:a6:2c:05:6f:ee:bd:38:0c:cb:06:48:5c:21:d7:b8:
         3d:fe:80:17:66:5e:11:5f:13:0a:ba:cb:5f:09:93:f8:00:1b:
         40:02:3a:76:ca:cc:a0:3c:8b:55:e4:3e:bc:55:a6:8a:fe:75:
         a7:81:c8:82:4f:5e:93:88:3c:16:ea:6e:43:ba:72:b9:df:21:
         8a:61:ba:fa:76:f4:a3:67:32:64:18:c8:71:b3:75:66:a7:82:
         fc:a8:a5:70:0c:69:a8:1b:8c:64:9a:51:35:2d:08:ce:73:af:
         89:c9:e5:48:bc:82:6b:5d:d2:30:d6:fc:34:69:c4:25:0a:eb:
         f4:7f:e6:3f:c7:42:65:a4:38:cb:8a:16:8d:da:b1:4f:b0:9b:
         25:81:17:09:af:54:be:10:0c:0f:81:9a:d0:dd:c0:ba:60:d2:
         de:f4:34:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:56:28 2026 by rpki-client