Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft
File:                     r-cn5CCdzfgnYldLXjPICDeHoY8.mft (raw, json)
Hash identifier:          JERIr8QiiuMYN2a6hqlyfuuqq0cQXMNOKtZrlEQc+bQ=
Subject key identifier:   4D:9D:44:5B:A5:00:83:E3:EC:1C:B2:58:89:C5:30:E6:81:94:C6:6F
Authority key identifier: AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F
Certificate issuer:       /CN=A915AE5F/serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F
Certificate serial:       1F72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft
Manifest number:          1F01
Signing time:             Tue 12 May 2026 16:02:53 +0000
Manifest this update:     Tue 12 May 2026 16:02:52 +0000
Manifest next update:     Tue 19 May 2026 16:02:52 +0000
Files and hashes:         1: r-cn5CCdzfgnYldLXjPICDeHoY8.crl (hash: ApScktn3OF+Id+FLe1Bb1zBYV3q05TP0h0q/pTBXIsw=)
                          2: 7EFB8A6E885311E6BDE50A80C4F9AE02.roa (hash: yrw/Wliea2v/nhT95C1H6CHn+Y9xHNL1DsyB2AthFt4=)
                          3: 882AC358E1F511EE9188A919C4F9AE02.roa (hash: 8+HVn+1aDWLHtIQalu+KT6alxAIGWOxLQB3VgePG+TU=)
                          4: CF946690E5E711EE89AF4E5AC4F9AE02.roa (hash: R0F5zzc+BpzP1/ZU/NVRkNdsAgNiR161974QmuBaZJM=)
                          5: 5C6A7BE6E1F511EEA08A5519C4F9AE02.roa (hash: orzccmiNSicAop/OpjFFJ2tGr1eSdfKFi4jU7YLYc30=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl
                          rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 16:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8050 (0x1f72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915AE5F, serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F
        Validity
            Not Before: May 12 16:02:52 2026 GMT
            Not After : May 19 16:02:52 2026 GMT
        Subject: CN=6a034f2c-edd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:64:19:a3:b6:f5:8f:ad:56:1d:9f:01:b0:76:
                    c1:54:8f:92:19:f2:8e:a9:2f:b5:72:4c:dd:ce:4b:
                    94:89:9d:ba:38:74:11:1d:5f:47:53:dd:b9:4e:3b:
                    4c:4b:3a:a7:78:ee:26:a4:39:d4:64:49:f2:f6:35:
                    f3:84:29:51:f7:a9:60:63:ff:72:b0:6f:3a:5c:08:
                    87:eb:b6:ae:22:cd:2b:c6:ce:28:d9:bf:f2:ad:99:
                    39:4b:ed:aa:e4:97:e0:32:12:d1:9d:f9:f0:29:f2:
                    41:87:e7:6e:4e:f9:69:c4:54:b1:71:1b:1d:95:5f:
                    f2:0e:07:38:65:11:c2:80:ec:ae:f1:72:34:a9:3a:
                    a6:20:39:83:3b:92:b0:48:09:fd:4d:68:2a:0d:bf:
                    53:43:dd:1f:af:4d:07:89:cb:7d:f8:0f:89:d1:67:
                    1e:50:d9:f0:d1:67:89:34:78:2c:3a:45:ac:bd:98:
                    51:81:2b:e8:f4:88:9a:9d:73:7f:92:00:51:45:f5:
                    34:bb:f2:07:90:6d:95:8e:a8:b1:b4:d4:0a:fc:6f:
                    73:b6:59:d9:f9:9f:7f:46:04:39:55:42:fe:c2:8c:
                    33:aa:d5:b9:3c:fb:0e:a6:15:63:6b:9a:61:9d:89:
                    ae:1e:19:ce:ba:53:a0:4a:21:8c:bd:ce:75:05:78:
                    8c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:9D:44:5B:A5:00:83:E3:EC:1C:B2:58:89:C5:30:E6:81:94:C6:6F
            X509v3 Authority Key Identifier:
                keyid:AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:d4:d6:94:0c:5e:ad:c5:7e:80:41:0e:9f:15:1b:9d:b5:fe:
         af:9a:dd:f3:f2:9e:b7:c6:0c:cd:c7:52:f1:c4:a8:fb:17:48:
         df:ae:80:52:53:1c:dc:38:e2:49:e6:e2:b4:ac:25:a4:0c:de:
         e6:8f:77:e8:c1:b2:42:bb:a9:23:0d:2c:f2:91:23:fc:30:fa:
         08:95:9a:d8:ad:3e:e2:db:96:0b:ba:e7:fe:87:49:c6:f4:2d:
         5e:6d:ef:26:e4:3e:ff:13:3c:1d:22:75:4f:e7:aa:c4:1c:05:
         eb:aa:a5:95:06:19:89:72:41:22:e4:33:3c:de:16:02:eb:c6:
         3f:d6:65:3b:e8:da:a7:24:8e:c7:36:d0:a1:fb:2e:68:1e:fd:
         07:aa:cb:d9:66:cd:71:5c:e4:09:d0:90:e2:6b:90:b6:bd:fd:
         ea:60:28:19:07:ed:1e:f6:50:79:7c:25:29:d3:d8:48:39:b6:
         7a:87:d2:2a:23:bc:86:f6:32:40:b8:a3:55:47:cf:40:d7:7b:
         8b:55:71:29:2d:67:94:c4:10:d6:4b:db:99:72:52:ce:66:14:
         b3:3e:b2:28:7d:d1:dc:74:f9:91:e2:75:56:c5:42:72:8e:f8:
         e9:0c:7a:cb:1c:35:3b:37:8c:55:05:a6:18:51:ae:8f:fa:e2:
         06:50:a1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:42:23 2026 by rpki-client