Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft
File:                     8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft (raw, json)
Hash identifier:          nUabGC6r7zi8g17osyVducs4IswaksJy5R0xJJ78CBw=
Subject key identifier:   D7:7B:10:90:02:32:3F:DB:B5:3F:05:C5:26:9E:52:CA:F3:C9:65:68
Authority key identifier: F1:BA:94:3C:30:36:C6:9B:44:A7:59:70:A4:4D:92:90:56:89:A9:0F
Certificate issuer:       /CN=A9159ECD/serialNumber=F1BA943C3036C69B44A75970A44D92905689A90F
Certificate serial:       05EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bqUPDA2xptEp1lwpE2SkFaJqQ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft
Manifest number:          05DB
Signing time:             Sun 10 May 2026 23:05:51 +0000
Manifest this update:     Sun 10 May 2026 23:05:50 +0000
Manifest next update:     Sun 17 May 2026 23:05:50 +0000
Files and hashes:         1: 8bqUPDA2xptEp1lwpE2SkFaJqQ8.crl (hash: GR0xQyTpQMMK31/qNU/651NM1PWJSzl0BR2tcS/fxv8=)
                          2: C309F5BA017011ECB98B2F33C4F9AE02.roa (hash: HxYY2wdjUTx1jz43i/flgn+Xs2XHFyISZfK6XgBX4gg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.crl
                          rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bqUPDA2xptEp1lwpE2SkFaJqQ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 17 May 2026 23:05:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1514 (0x5ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9159ECD, serialNumber=F1BA943C3036C69B44A75970A44D92905689A90F
        Validity
            Not Before: May 10 23:05:50 2026 GMT
            Not After : May 17 23:05:50 2026 GMT
        Subject: CN=6a010f4e-c0d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b7:e9:5f:0b:f2:34:e9:8e:81:27:6e:82:3c:
                    f6:ed:f5:39:73:75:b2:60:b4:00:99:77:0e:d1:26:
                    98:50:5d:cd:57:00:55:bf:72:47:dc:c6:f5:86:2a:
                    9a:60:67:3e:ed:66:9f:bf:7a:41:e1:4b:95:05:fe:
                    e1:e7:2d:37:45:ba:9e:19:12:f2:01:03:41:57:7e:
                    e8:7e:40:ff:7b:ed:44:b4:82:1e:4b:97:da:98:7b:
                    c7:37:69:e6:42:7e:e4:e0:8d:82:39:45:a9:0c:f2:
                    79:cd:33:3d:eb:62:4d:ab:0a:55:19:d0:e9:85:e9:
                    e1:d8:47:da:e8:98:12:6e:86:b5:83:23:3e:a9:b3:
                    8d:33:26:a9:8b:65:10:e9:87:f5:62:91:54:7d:94:
                    7e:f4:ef:b0:d3:b8:f8:f5:9c:7e:fa:02:b5:4b:cb:
                    b8:d9:45:4d:3c:6a:cc:f0:9b:a3:b6:18:b5:55:20:
                    50:80:03:2f:91:2e:b9:e7:5e:69:7c:be:29:c0:71:
                    ef:15:02:db:59:30:77:f2:b8:07:03:d1:2e:b0:f8:
                    c7:d4:33:5d:24:bc:bf:48:13:48:c0:cb:6b:71:1d:
                    54:c8:1c:d5:b3:55:f9:52:57:1e:e1:18:8a:fe:b0:
                    20:b7:29:1c:b0:e0:20:c6:76:f7:e0:8d:00:ce:b9:
                    5b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:7B:10:90:02:32:3F:DB:B5:3F:05:C5:26:9E:52:CA:F3:C9:65:68
            X509v3 Authority Key Identifier:
                keyid:F1:BA:94:3C:30:36:C6:9B:44:A7:59:70:A4:4D:92:90:56:89:A9:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bqUPDA2xptEp1lwpE2SkFaJqQ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:45:63:66:e8:5e:d7:0e:d8:d7:30:25:e4:d1:3f:dc:d5:c3:
         b5:73:24:ca:7e:32:96:59:b4:8f:49:d8:cf:a6:28:4e:c8:da:
         c4:6d:2e:a0:9f:92:c2:7b:7d:86:e1:56:5e:7b:79:75:3c:a6:
         42:ea:d7:3a:ab:b9:23:b2:2d:2f:c3:8a:8a:f4:c0:b0:a4:bc:
         b0:49:49:35:fc:15:4c:fa:84:bb:4d:b0:39:60:1f:3a:8e:43:
         3b:6b:40:b4:75:11:7e:e0:df:bb:ec:bb:88:ee:5e:71:d5:3c:
         34:38:c1:2e:99:6c:2b:1f:9b:50:17:05:e0:91:11:1f:ba:a4:
         2a:91:6e:4f:a7:b5:3f:98:0c:42:ea:e0:a8:cd:e2:b3:af:99:
         4a:7f:02:12:9e:2d:34:4e:ba:98:a7:d4:50:02:4f:bc:3d:21:
         93:0c:b9:14:79:40:25:13:15:9f:81:02:2b:53:7d:1d:03:94:
         e0:58:da:e3:28:dd:3e:a3:26:01:1d:12:ce:82:68:af:e5:67:
         46:79:d9:4c:7f:d9:e3:1e:5d:d0:28:87:54:e5:dc:c3:dc:c3:
         d4:a6:f2:f7:b8:65:57:09:f1:22:a7:a7:9f:75:07:70:af:e5:
         7f:45:f8:0f:cb:c4:c5:09:ac:79:2a:75:6e:d0:bd:8c:05:ed:
         fa:e1:86:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:59:35 2026 by rpki-client