Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft
File:                     8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft (raw, json)
Hash identifier:          NIPRrbhblbXyq+x/6i2qKrz3ffbSZ9XXKMlwVf9VTkw=
Subject key identifier:   F6:86:A6:01:88:67:A5:5B:D9:3F:79:1F:B2:FD:43:7E:78:10:C6:D5
Authority key identifier: F1:7B:53:21:A5:8D:79:E2:30:53:1C:5A:A0:F0:B2:4E:1D:81:21:A3
Certificate issuer:       /CN=A915648D/serialNumber=F17B5321A58D79E230531C5AA0F0B24E1D8121A3
Certificate serial:       0238
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft
Manifest number:          0234
Signing time:             Mon 11 May 2026 02:36:18 +0000
Manifest this update:     Mon 11 May 2026 02:36:18 +0000
Manifest next update:     Mon 18 May 2026 02:36:18 +0000
Files and hashes:         1: 8XtTIaWNeeIwUxxaoPCyTh2BIaM.crl (hash: fNnECVSp+5LcL6Pu8nYylOjFmvbkUIXq/vCD/rI/IcA=)
                          2: C80572DEF70911ED9D4B561AC4F9AE02.roa (hash: NqQKBASAXdv1LlkB9yqcFqDG6FI2OUjfgdiKy6gJA/0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.crl
                          rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 02:36:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 568 (0x238)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915648D, serialNumber=F17B5321A58D79E230531C5AA0F0B24E1D8121A3
        Validity
            Not Before: May 11 02:36:18 2026 GMT
            Not After : May 18 02:36:18 2026 GMT
        Subject: CN=6a0140a2-6d17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:11:90:2c:ac:75:b3:c4:30:5e:f9:2f:60:b1:
                    14:a3:d7:6d:3d:b7:58:8a:06:38:64:2a:b5:4e:02:
                    c3:5c:6e:6a:68:3c:36:e0:76:07:38:79:61:8a:92:
                    cf:d2:cc:24:26:9b:e9:1a:cb:e7:ff:12:a9:88:bc:
                    dc:b0:44:a5:bd:4c:bb:ce:52:63:1d:95:ca:fc:1a:
                    a0:18:a2:ac:5b:ad:5b:3e:02:6a:b0:a4:71:e5:04:
                    83:27:5e:20:2c:90:60:2c:ce:c8:98:2a:10:e6:65:
                    d9:fa:ad:ba:34:74:a2:3e:bf:01:f0:ae:f0:07:29:
                    9f:dc:0d:5d:d4:28:40:6c:52:89:64:c7:7c:4a:bf:
                    62:b3:40:43:d8:39:b6:a7:6b:ff:f6:4c:88:0c:15:
                    d4:bb:37:ea:86:ac:be:69:be:0f:7f:b3:ab:8a:cb:
                    b8:ee:19:f9:27:17:3e:f9:1b:f1:cb:21:d5:30:1d:
                    ef:60:a1:2b:97:17:62:5b:db:7d:3a:3e:ec:64:74:
                    2c:ba:a4:4e:19:69:e2:10:8a:03:8c:b4:6b:29:88:
                    5a:a1:59:70:d2:cd:96:09:5d:a0:ab:8c:67:13:e3:
                    ff:d6:df:80:9d:d8:49:ff:d2:66:6b:dd:36:74:72:
                    33:35:b7:e4:9a:e7:51:a3:78:2d:da:54:52:0d:38:
                    2b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:86:A6:01:88:67:A5:5B:D9:3F:79:1F:B2:FD:43:7E:78:10:C6:D5
            X509v3 Authority Key Identifier:
                keyid:F1:7B:53:21:A5:8D:79:E2:30:53:1C:5A:A0:F0:B2:4E:1D:81:21:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:d7:aa:f9:dd:1d:2f:f6:0d:3b:75:78:d5:8f:ad:b2:6d:79:
         92:48:bc:d3:c6:b9:d7:90:90:d8:f1:fa:91:ee:20:a3:16:de:
         0b:b8:9a:c1:c6:98:be:96:3e:72:0b:7d:4d:c6:07:b3:38:b8:
         c4:67:f5:84:b7:37:3a:30:76:83:24:6f:b0:a5:06:ff:de:12:
         07:61:32:70:87:96:5b:9f:46:6d:1a:75:bb:82:cc:2c:a6:79:
         0c:83:b2:39:8e:32:d7:f5:c0:89:cb:06:e9:a8:82:75:2b:df:
         f9:fd:c1:56:7a:d9:a3:61:a3:6a:51:6f:f7:27:72:31:73:27:
         26:b4:d2:16:8d:e0:40:5a:df:7f:c9:d4:57:63:72:bd:01:1e:
         61:92:6e:48:86:f2:ea:f3:da:3c:62:59:7c:50:e1:db:5d:43:
         83:b9:48:10:06:dc:df:7a:ea:a3:7f:41:f9:52:3d:8e:73:59:
         a9:b6:b8:e6:2f:74:9e:ac:15:9f:0c:7a:58:1c:91:e5:39:11:
         ba:0e:db:2f:87:ce:69:ce:49:24:38:99:b6:64:29:01:bb:17:
         05:7e:12:9b:9b:6b:5a:43:3f:05:3d:a7:66:cc:85:74:30:e9:
         be:d6:d1:44:cc:db:23:56:12:65:c5:d3:93:86:4d:e4:72:c2:
         82:b7:62:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:04:30 2026 by rpki-client