Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.mft
File:                     s1py5W8JAsfhuNgSxdg2VBHdox0.mft (raw, json)
Hash identifier:          ux4uR1psVnjhflyG6k4SU6/GOuI4mlCZMCNslymo40k=
Subject key identifier:   FD:3D:E0:04:C7:14:97:59:AC:C3:A2:99:EF:AF:32:B5:91:72:5A:5F
Authority key identifier: B3:5A:72:E5:6F:09:02:C7:E1:B8:D8:12:C5:D8:36:54:11:DD:A3:1D
Certificate issuer:       /CN=A9150B91/serialNumber=B35A72E56F0902C7E1B8D812C5D8365411DDA31D
Certificate serial:       1581
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s1py5W8JAsfhuNgSxdg2VBHdox0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.mft
Manifest number:          1576
Signing time:             Tue 12 May 2026 16:47:21 +0000
Manifest this update:     Tue 12 May 2026 16:47:20 +0000
Manifest next update:     Tue 19 May 2026 16:47:20 +0000
Files and hashes:         1: s1py5W8JAsfhuNgSxdg2VBHdox0.crl (hash: p2uRwhQ6q0xpL4RyVf/DdjjEyktP2Rt6hb1k2D+M1s4=)
                          2: 4674A74E5DB211E8A30DF983C4F9AE02.roa (hash: TR5agGU/zIk0GyCHwMsitWR6qVN8gmfKUUGH+aQoTx4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.crl
                          rsync://rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s1py5W8JAsfhuNgSxdg2VBHdox0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 16:47:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5505 (0x1581)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150B91, serialNumber=B35A72E56F0902C7E1B8D812C5D8365411DDA31D
        Validity
            Not Before: May 12 16:47:20 2026 GMT
            Not After : May 19 16:47:20 2026 GMT
        Subject: CN=6a035999-dd4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:be:8c:b4:0c:28:bb:47:bb:c2:4d:d0:2e:4d:
                    8a:3d:d2:ae:b3:a4:3c:a1:62:36:69:01:7c:f8:fd:
                    68:ce:f2:ac:cb:0e:f4:de:73:96:96:cb:3c:6c:75:
                    be:a6:cd:2f:49:0d:43:5e:0b:c6:44:7a:3a:79:67:
                    3c:aa:19:9e:a9:45:fd:05:af:40:fe:c4:b5:a0:67:
                    ee:86:d6:fe:f6:ef:dc:64:5e:f6:ce:6e:75:78:a0:
                    fc:f2:14:52:36:50:95:38:f9:08:3f:42:1d:11:6e:
                    aa:13:d8:50:88:3d:9e:59:e3:7c:e8:98:40:ae:6a:
                    5b:c1:2c:d5:a2:8c:cb:7f:13:93:75:9d:f8:44:30:
                    ce:71:86:de:38:2a:95:18:e4:a0:42:5b:d0:a8:2f:
                    a8:80:23:ae:6f:ae:c6:15:c4:e4:d7:b7:27:66:9f:
                    53:35:43:5d:cf:58:96:c6:b6:f2:14:cc:94:6f:54:
                    85:63:42:26:0a:6a:d1:64:5b:97:c7:f1:e6:24:de:
                    40:bd:ed:7a:0b:e2:f9:82:60:c9:04:28:eb:3d:e3:
                    47:25:68:c5:10:4d:24:7c:62:f0:0d:c9:21:23:a2:
                    72:41:23:83:8d:1a:85:e7:20:97:92:02:f2:3c:84:
                    33:31:98:c4:b6:0e:cb:0c:21:d1:eb:da:41:ad:d2:
                    aa:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:3D:E0:04:C7:14:97:59:AC:C3:A2:99:EF:AF:32:B5:91:72:5A:5F
            X509v3 Authority Key Identifier:
                keyid:B3:5A:72:E5:6F:09:02:C7:E1:B8:D8:12:C5:D8:36:54:11:DD:A3:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s1py5W8JAsfhuNgSxdg2VBHdox0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:23:b0:99:38:6b:04:a2:64:62:e5:61:c8:55:80:6f:6c:95:
         5a:90:90:45:ea:a2:36:ed:d9:15:df:32:99:80:06:48:9e:e4:
         bf:eb:30:52:e1:ce:c9:b7:47:68:a6:bc:eb:0c:51:f7:dd:be:
         a7:d8:fe:27:48:c6:66:d5:24:23:6f:84:8f:e9:49:ce:fe:81:
         8c:a0:d5:b3:1b:91:a2:63:6b:ff:59:ab:cf:d7:45:8b:3c:fc:
         14:bf:48:d9:ca:c7:75:0b:28:4e:05:9a:46:e9:0c:01:bd:57:
         cd:7e:72:5b:6c:63:ae:c0:63:f8:8a:38:db:24:a5:75:55:82:
         58:04:42:93:19:17:a9:2c:87:2a:bb:53:1b:28:22:41:84:00:
         47:30:f3:3e:c7:fa:ad:17:f9:9b:a2:0c:26:61:31:57:92:c9:
         3c:d7:5f:ab:42:ee:39:f9:46:61:a7:df:29:bd:f6:23:64:1f:
         21:a8:7c:67:ef:df:cd:4b:54:31:d8:ba:09:c7:47:f2:15:6e:
         80:f6:e1:36:18:3c:cc:3e:00:8d:9f:e0:7f:17:5d:d7:bc:7c:
         ea:fd:e4:4b:1b:64:7b:84:b2:f4:16:7f:e4:63:8d:0d:b4:02:
         ad:08:30:40:1a:2b:46:da:27:d4:35:32:ec:e2:f8:8d:0c:ce:
         55:fa:e7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:40:04 2026 by rpki-client