Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft
File:                     BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft (raw, json)
Hash identifier:          yWwfsUqLVv/CaVoxwhCbdexmIGUkvbogTcjd7DSAL8w=
Subject key identifier:   9F:65:0C:4C:BC:06:0A:A9:6D:35:D4:97:37:27:A6:A3:BA:78:9F:A2
Authority key identifier: 06:55:BD:52:4E:87:D0:79:E6:5B:E3:16:1A:A6:5B:E6:8F:9E:82:7E
Certificate issuer:       /CN=A9150D5C/serialNumber=0655BD524E87D079E65BE3161AA65BE68F9E827E
Certificate serial:       0136
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlW9Uk6H0HnmW-MWGqZb5o-egn4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft
Manifest number:          012E
Signing time:             Wed 13 May 2026 05:38:16 +0000
Manifest this update:     Wed 13 May 2026 05:38:16 +0000
Manifest next update:     Wed 20 May 2026 05:38:16 +0000
Files and hashes:         1: BlW9Uk6H0HnmW-MWGqZb5o-egn4.crl (hash: n5XwFwUZ6rPQEYOxdyCMqTdb7gAwYKezNu01S3K5yTI=)
                          2: 79F85264827711EFAACDBD12C4F9AE02.roa (hash: B2RbKCpr/Pny6dSwJCiprlikwDlatrxJu+oMb/gtlQE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.crl
                          rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlW9Uk6H0HnmW-MWGqZb5o-egn4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 05:22:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 310 (0x136)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150D5C, serialNumber=0655BD524E87D079E65BE3161AA65BE68F9E827E
        Validity
            Not Before: May 13 05:38:16 2026 GMT
            Not After : May 20 05:38:16 2026 GMT
        Subject: CN=6a040e48-e0bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5b:0d:ed:1f:ab:6b:61:0a:7d:a6:a6:db:73:
                    de:b0:cb:dd:f1:32:ba:12:5e:29:74:f5:4b:30:89:
                    36:c1:3c:e2:57:ed:53:7f:16:b9:4a:89:a1:33:d6:
                    11:24:dd:b8:81:38:37:07:c0:ae:4b:2a:08:28:30:
                    d2:7c:73:c5:f1:d7:f7:5d:49:e0:3c:20:ef:e4:99:
                    d7:5b:db:a4:44:13:65:8f:03:9d:5d:0e:68:bf:bd:
                    83:76:66:65:65:a6:fd:f2:f2:6f:91:f2:68:dc:2c:
                    6b:f1:9e:96:57:49:69:2a:f9:0f:a1:9e:41:a1:57:
                    25:62:55:a9:d7:cf:3d:6b:90:d2:46:4c:be:20:c1:
                    90:55:bb:25:fd:f7:16:94:bc:dc:50:9d:9e:f2:0e:
                    a2:c5:bf:be:29:2e:15:91:25:5e:f7:0f:27:f7:61:
                    46:6d:09:bd:08:48:c0:d2:bc:fc:b0:74:cd:c4:5a:
                    04:93:32:b1:d8:c7:72:69:11:20:43:0f:72:cc:5c:
                    75:a4:60:59:da:25:b7:0e:17:97:1a:9a:31:64:01:
                    41:6e:83:e2:96:b8:15:36:41:ef:9f:24:29:3f:f4:
                    0c:07:1c:1e:65:91:da:47:35:04:c0:77:44:97:e5:
                    c1:e2:7f:c0:63:05:f7:31:62:fd:10:a9:78:58:1a:
                    9f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:65:0C:4C:BC:06:0A:A9:6D:35:D4:97:37:27:A6:A3:BA:78:9F:A2
            X509v3 Authority Key Identifier:
                keyid:06:55:BD:52:4E:87:D0:79:E6:5B:E3:16:1A:A6:5B:E6:8F:9E:82:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlW9Uk6H0HnmW-MWGqZb5o-egn4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:a6:3d:35:bf:66:34:9b:a4:44:be:f8:45:6c:13:25:de:b3:
         fa:97:3e:b6:d8:f7:41:6b:f3:56:81:fa:9d:87:64:b0:1d:05:
         69:16:4a:31:18:46:4b:52:1d:5e:4c:e4:ba:92:a1:c2:ba:40:
         c8:ff:55:9f:06:b0:bd:e0:a3:de:c0:e9:50:86:89:e5:b3:7e:
         f7:8c:e4:50:e9:87:e1:68:f3:62:a7:d7:68:49:02:ce:b8:ae:
         3a:46:9d:e1:93:3c:cf:50:59:89:24:1b:e1:45:f5:4c:72:9b:
         67:31:7d:5a:ee:32:7f:05:50:d9:49:ae:cd:a1:71:81:41:ea:
         cd:16:17:9b:99:9a:55:43:4b:7c:dd:77:16:43:7e:d4:03:51:
         16:d0:4a:8c:2e:48:26:c5:7a:c0:28:9f:e2:87:67:ba:31:af:
         7f:94:4b:3b:39:13:38:76:04:d5:32:70:e2:5e:44:b3:cf:ac:
         50:15:f8:68:ce:b8:64:d8:af:1f:fd:d6:8d:c8:fe:0a:4d:14:
         e9:a7:a4:1a:9e:62:67:25:e0:6d:8c:3a:46:18:2b:36:99:f4:
         be:92:c4:08:ac:eb:3a:bb:c3:91:d2:ca:33:14:b4:57:74:8d:
         98:aa:58:49:ee:a7:d1:05:53:ed:56:e2:1c:5a:6e:3f:c0:eb:
         53:3e:19:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:37:40 2026 by rpki-client