Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft
File:                     PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft (raw, json)
Hash identifier:          a6IBS9h1+lU3ABl+ax5L9MZmld5Nn2M1xpuJ+hDdkos=
Subject key identifier:   4E:3B:3A:45:98:54:AA:16:A9:62:D7:78:A4:C7:9F:C4:47:3D:2F:C8
Authority key identifier: 3D:7A:4E:0A:99:AF:15:EF:0B:37:90:D0:E7:96:1E:88:75:28:19:83
Certificate issuer:       /CN=A915B880/serialNumber=3D7A4E0A99AF15EF0B3790D0E7961E8875281983
Certificate serial:       0EF4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft
Manifest number:          0EE9
Signing time:             Tue 12 May 2026 17:40:17 +0000
Manifest this update:     Tue 12 May 2026 17:40:16 +0000
Manifest next update:     Tue 19 May 2026 17:40:16 +0000
Files and hashes:         1: PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl (hash: T9FdEK/+frBkjo0T+CtEHIr+fzPibM6KrMF4vHINOxM=)
                          2: 0853C13CA2F011E9B721795CC4F9AE02.roa (hash: YtMmvD8+t+Y0DWKnnIer/ep8HqJT/MOFDON0KvPSWok=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl
                          rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 17:40:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3828 (0xef4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B880, serialNumber=3D7A4E0A99AF15EF0B3790D0E7961E8875281983
        Validity
            Not Before: May 12 17:40:16 2026 GMT
            Not After : May 19 17:40:16 2026 GMT
        Subject: CN=6a036601-253d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:06:25:b2:89:29:0e:82:71:43:ee:ec:7a:2a:
                    d2:fb:fa:c0:4e:cf:42:87:90:7c:f2:92:5c:9d:fd:
                    0e:45:48:25:28:76:37:1d:30:75:d0:d9:98:ca:a3:
                    3f:58:b6:fa:66:51:f4:47:23:72:2e:15:81:c1:7e:
                    b5:24:a3:20:3d:f2:ab:4c:61:70:f7:c4:0f:03:06:
                    e1:87:40:64:78:0b:25:74:8b:90:75:ed:70:b0:2c:
                    76:92:df:7a:c2:30:4c:82:92:6b:64:0f:7e:89:a9:
                    fb:16:ed:20:4a:a1:6d:88:36:5b:71:47:0b:36:0a:
                    4a:4f:6a:71:03:4b:da:85:66:33:5f:b9:1a:99:d6:
                    9b:36:0a:ff:f2:92:05:77:68:30:3d:2c:be:21:91:
                    14:7b:12:8f:1a:7c:fb:78:02:1d:7b:10:af:d1:13:
                    62:f1:70:fe:64:3b:9e:d5:02:73:58:c4:f5:85:5d:
                    09:00:bd:2b:7f:0b:e8:4b:84:21:b5:8a:30:49:a0:
                    9d:9d:e4:35:7e:5b:1b:ab:e0:ef:7c:d2:ff:6c:21:
                    b8:5f:32:80:28:b7:d1:a1:af:02:2e:f1:c2:cc:47:
                    f6:46:3b:85:00:6d:4c:22:6d:dc:e4:ab:11:fd:e7:
                    ab:b0:99:7a:e5:60:9d:95:bf:8a:e9:87:51:12:6a:
                    65:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:3B:3A:45:98:54:AA:16:A9:62:D7:78:A4:C7:9F:C4:47:3D:2F:C8
            X509v3 Authority Key Identifier:
                keyid:3D:7A:4E:0A:99:AF:15:EF:0B:37:90:D0:E7:96:1E:88:75:28:19:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:cd:51:8c:52:07:ec:20:d7:0e:47:d3:dc:99:84:15:41:8f:
         f7:c7:c8:52:c2:f8:cb:62:02:22:dd:eb:5e:44:33:47:b9:46:
         5d:17:54:59:38:4b:6d:1e:61:ad:c0:57:bc:bd:74:3a:3e:3c:
         00:2a:47:95:bf:2e:8d:db:cf:09:aa:c9:3c:ca:12:1b:a5:78:
         3e:2e:a1:28:a4:9b:86:62:5c:03:a9:b0:54:89:b7:11:21:45:
         06:13:bc:05:e2:77:39:17:2b:4c:a6:c7:19:8d:f2:6a:5f:b3:
         a2:bc:31:e8:27:9d:f1:81:17:e2:2e:23:99:51:b5:a6:ea:6d:
         b7:42:a2:c3:bb:53:3a:6c:b1:cf:5e:6e:e7:6b:99:97:56:06:
         d2:80:57:28:25:36:22:be:41:38:37:bc:3f:65:03:0e:23:c6:
         a8:a8:54:c3:92:e0:fb:f7:c6:04:36:ed:de:64:dc:43:b1:de:
         60:d3:f1:88:dc:b7:47:a7:25:88:21:90:5b:76:92:fd:4d:63:
         a3:c3:65:51:38:49:d4:e9:98:9d:c3:98:e1:2d:55:bd:a2:97:
         e5:8e:ec:a6:da:1e:a5:eb:b8:96:e4:8b:82:84:5a:79:ea:ca:
         d1:df:1c:9e:3b:bd:42:72:34:00:f5:ad:b2:b3:2d:9c:24:d2:
         89:15:c2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:08:08 2026 by rpki-client