Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.mft
File:                     L904BNZFjq8cs5F7XjMvulxxX5E.mft (raw, json)
Hash identifier:          IEM3WeheIUeaBH6zAR2RWYHmbCW7Vg4A6s19YXYLzn4=
Subject key identifier:   07:47:65:BD:52:C4:66:7F:9F:4C:91:DA:08:84:F5:A6:A6:6F:6C:31
Authority key identifier: 2F:DD:38:04:D6:45:8E:AF:1C:B3:91:7B:5E:33:2F:BA:5C:71:5F:91
Certificate issuer:       /CN=A915B551/serialNumber=2FDD3804D6458EAF1CB3917B5E332FBA5C715F91
Certificate serial:       CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L904BNZFjq8cs5F7XjMvulxxX5E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.mft
Manifest number:          CB
Signing time:             Mon 11 May 2026 06:56:36 +0000
Manifest this update:     Mon 11 May 2026 06:56:35 +0000
Manifest next update:     Mon 18 May 2026 06:56:35 +0000
Files and hashes:         1: L904BNZFjq8cs5F7XjMvulxxX5E.crl (hash: eqtVYknluyyOIBNkW9xaKSceaQTQ4WfaOaAq2hlrWOI=)
                          2: DE917E7016C511F085B4FF6FC4F9AE02.roa (hash: ETq/ueZ+moHz6omb3XVGSrkGJeYMxT06+9CG44Ybvps=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.crl
                          rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L904BNZFjq8cs5F7XjMvulxxX5E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:56:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 206 (0xce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B551, serialNumber=2FDD3804D6458EAF1CB3917B5E332FBA5C715F91
        Validity
            Not Before: May 11 06:56:35 2026 GMT
            Not After : May 18 06:56:35 2026 GMT
        Subject: CN=6a017da4-f7df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:29:13:a4:34:9f:83:b8:08:cb:24:68:ba:80:
                    a2:a4:0a:7a:43:36:71:a2:40:d3:e6:97:fb:37:5e:
                    dd:fd:98:f2:08:f3:7e:6e:d7:66:51:a3:f8:0f:77:
                    c6:fa:37:1e:d8:cf:38:ec:c5:70:0d:14:67:03:44:
                    ae:fe:21:f9:f5:71:6c:47:bc:1b:3e:e8:38:bb:43:
                    14:62:60:5f:47:9a:27:5a:a8:9c:12:7d:da:b4:40:
                    c9:6c:34:e2:f9:79:3e:22:63:36:8c:bb:a5:8a:18:
                    10:f9:f8:78:3f:fd:8b:68:74:47:2b:c3:be:a3:6f:
                    a1:18:70:ad:5f:c0:55:a3:d6:62:1a:17:8f:c8:dd:
                    c3:c8:23:13:44:84:76:b5:51:1f:e8:b2:31:73:ba:
                    29:30:ad:34:57:43:d3:38:a7:e6:ca:9c:b3:07:85:
                    45:1e:6d:4e:7d:44:be:45:6b:37:23:60:57:23:06:
                    1d:f8:fd:ec:c9:02:e1:9f:78:81:b0:ce:59:fe:21:
                    5a:c3:80:c8:3d:a9:6b:08:39:10:bf:45:eb:48:b7:
                    f5:c2:36:b3:f4:a2:6e:dd:72:7b:f3:42:c2:4a:c4:
                    26:2a:ea:90:c7:5a:07:68:df:79:64:3e:f6:53:65:
                    77:ee:06:f7:76:e6:09:6b:2d:1c:81:f9:a1:e6:66:
                    09:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:47:65:BD:52:C4:66:7F:9F:4C:91:DA:08:84:F5:A6:A6:6F:6C:31
            X509v3 Authority Key Identifier:
                keyid:2F:DD:38:04:D6:45:8E:AF:1C:B3:91:7B:5E:33:2F:BA:5C:71:5F:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L904BNZFjq8cs5F7XjMvulxxX5E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:69:85:90:39:40:76:4e:cd:71:a3:79:33:ac:5e:d4:e4:20:
         d4:f4:95:ae:a9:2d:fd:2a:42:9b:25:b4:c3:86:a1:b4:c4:37:
         08:fa:cb:62:9b:a4:8e:ee:9d:c6:89:7f:05:18:5c:91:b4:76:
         6f:33:d4:29:0d:eb:b7:7e:cf:b8:a2:25:fc:8a:9b:6c:82:b4:
         35:58:e4:53:fa:85:62:c3:c4:be:d6:c9:96:62:01:f9:9a:57:
         44:a9:26:5e:8e:d8:31:b7:48:75:d1:fa:fb:79:d0:4c:04:77:
         fc:b2:67:33:84:8b:16:21:af:2d:45:e0:37:bf:13:62:6c:93:
         73:cc:95:3b:c3:76:e8:2d:0b:a5:81:b6:70:11:d2:f8:dd:f3:
         3e:2c:b0:6a:38:fd:46:85:ed:bd:63:69:28:13:c2:26:88:b0:
         5e:48:a8:e5:5a:58:a6:7d:47:cb:a0:09:d3:2f:88:4a:c1:a3:
         ad:b7:74:44:a6:9c:82:89:d8:8a:e7:5e:e3:61:b4:02:20:3b:
         59:58:06:25:17:81:cf:a9:a8:a6:67:65:37:76:ed:66:e8:58:
         76:d8:0b:5b:1c:f0:8d:c4:52:52:7c:b9:a4:6f:3c:f8:1b:6d:
         5d:7a:54:1c:2c:c0:ed:5e:4d:16:64:98:41:52:ce:49:d9:c4:
         95:23:bb:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:18:25 2026 by rpki-client