Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A330/AAE49A38060F11F0A9705281C4F9AE02/-_gSoLmqiu1iGHbIkgH_8QQytpc.mft
File:                     -_gSoLmqiu1iGHbIkgH_8QQytpc.mft (raw, json)
Hash identifier:          ITD9fY4LOcyj+IRrXEeCuUCSx3GQjljzbADaCdMupuY=
Subject key identifier:   5D:B7:DA:A1:F1:0D:8C:53:B1:4B:9C:7A:35:8D:77:C4:AE:76:D9:27
Authority key identifier: FB:F8:12:A0:B9:AA:8A:ED:62:18:76:C8:92:01:FF:F1:04:32:B6:97
Certificate issuer:       /CN=A915A330/serialNumber=FBF812A0B9AA8AED621876C89201FFF10432B697
Certificate serial:       DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_gSoLmqiu1iGHbIkgH_8QQytpc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A330/AAE49A38060F11F0A9705281C4F9AE02/-_gSoLmqiu1iGHbIkgH_8QQytpc.mft
Manifest number:          D8
Signing time:             Wed 13 May 2026 06:48:14 +0000
Manifest this update:     Wed 13 May 2026 06:48:14 +0000
Manifest next update:     Wed 20 May 2026 06:48:14 +0000
Files and hashes:         1: -_gSoLmqiu1iGHbIkgH_8QQytpc.crl (hash: 5dVjbhqP1ddWUzYZlbTSQ3YScqz7CQ4OusttMU2lci8=)
                          2: 5F2F693A061211F0BA5A2029C4F9AE02.roa (hash: Qkz+Ibp6urTz/gTtZx61VUtVTC7J2PthL9N5ik2a+uA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A330/AAE49A38060F11F0A9705281C4F9AE02/-_gSoLmqiu1iGHbIkgH_8QQytpc.crl
                          rsync://rpki.apnic.net/member_repository/A915A330/AAE49A38060F11F0A9705281C4F9AE02/-_gSoLmqiu1iGHbIkgH_8QQytpc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_gSoLmqiu1iGHbIkgH_8QQytpc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 06:48:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 219 (0xdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A330, serialNumber=FBF812A0B9AA8AED621876C89201FFF10432B697
        Validity
            Not Before: May 13 06:48:14 2026 GMT
            Not After : May 20 06:48:14 2026 GMT
        Subject: CN=6a041eae-30fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a8:9d:1c:4c:4d:d0:77:9d:91:87:06:87:56:
                    10:eb:a9:05:d5:f0:e1:f6:96:c0:e9:12:52:88:8b:
                    83:ba:27:6d:53:f4:fc:b0:5e:9a:f4:82:27:a6:3f:
                    d3:45:48:8a:c7:fc:2f:13:dc:8d:56:4b:e8:23:3b:
                    af:8e:35:ae:c1:0c:36:2f:ca:90:57:48:17:36:af:
                    a0:28:9a:07:50:44:c8:89:11:8d:78:82:fd:f2:93:
                    be:44:23:c5:39:4f:55:e5:7d:bb:b5:d1:06:c0:86:
                    b7:ee:7d:8f:15:2a:0b:37:98:b0:ea:9a:5e:41:59:
                    74:b5:75:28:b5:90:44:32:06:88:4e:4b:b7:a7:0c:
                    7a:77:bc:e3:49:0c:79:87:f1:f2:25:2a:b5:2e:94:
                    7a:77:3c:9c:d9:f5:36:72:1e:26:8e:d1:7d:0f:db:
                    68:5b:1b:a2:5c:3b:3a:9d:a4:d0:c5:f3:48:e3:87:
                    4b:cb:1d:74:fe:bc:82:67:52:a7:87:f9:b4:4d:72:
                    6f:16:1a:ed:6e:3b:90:37:8c:8f:e7:e9:16:eb:ca:
                    48:5e:68:46:1e:f2:9b:73:c2:30:d9:0d:62:86:01:
                    04:2f:92:53:dc:85:14:14:33:65:58:b0:b0:ca:a0:
                    0f:86:fd:6d:88:d6:8f:78:ff:8a:b5:7c:34:43:2b:
                    f2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B7:DA:A1:F1:0D:8C:53:B1:4B:9C:7A:35:8D:77:C4:AE:76:D9:27
            X509v3 Authority Key Identifier:
                keyid:FB:F8:12:A0:B9:AA:8A:ED:62:18:76:C8:92:01:FF:F1:04:32:B6:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A330/AAE49A38060F11F0A9705281C4F9AE02/-_gSoLmqiu1iGHbIkgH_8QQytpc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_gSoLmqiu1iGHbIkgH_8QQytpc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A330/AAE49A38060F11F0A9705281C4F9AE02/-_gSoLmqiu1iGHbIkgH_8QQytpc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:ff:1a:26:08:6d:96:6c:c9:ae:17:67:97:07:bd:01:0d:9b:
         3d:cb:06:28:6c:a0:f4:e3:26:71:bc:64:24:49:fc:aa:62:ab:
         8a:45:cd:27:c8:2c:b8:cb:1c:29:ac:ab:7e:be:43:6e:d9:f4:
         80:35:26:a4:39:b3:0e:21:b0:b2:27:e6:71:f5:83:91:72:70:
         d6:5c:d2:1b:bf:17:10:3d:89:7c:d9:5c:df:1c:27:04:0e:3f:
         88:f7:ce:82:ce:db:d9:10:6d:87:a0:b9:86:54:25:36:8a:8c:
         2b:e4:97:70:68:86:de:69:23:4f:cb:ae:50:e4:87:e0:cc:4e:
         90:e8:ec:e9:f8:70:85:e5:b2:79:74:13:66:58:5a:13:0b:4a:
         88:52:bd:fa:8e:ae:a9:77:79:2c:61:af:83:7e:9a:9a:62:1d:
         7a:98:6a:83:ef:d6:1b:f6:1d:06:41:48:26:a7:cf:d0:a4:ff:
         1c:64:dd:a3:f1:b2:96:49:d5:82:a5:26:90:26:79:a2:c5:d9:
         b1:e8:8f:16:19:7a:8c:58:42:c9:46:f5:d7:f1:71:2f:95:e4:
         02:8a:0d:1b:27:34:97:4b:e3:c6:67:12:29:61:62:aa:8f:b7:
         3e:47:f2:9a:96:99:d4:9c:f6:ce:5e:8a:15:e7:42:d1:33:70:
         d7:a2:fd:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:07:59 2026 by rpki-client