Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915CF84/7CBC0DEE3C3211F18C21D46EBF833773/mpXY8Mq1144dbKm5o7JX446MfVs.mft
File:                     mpXY8Mq1144dbKm5o7JX446MfVs.mft (raw, json)
Hash identifier:          1XkEr+Nju27dI9p2srrlz7N/N7i/n0iLlbaoG1VJWWU=
Subject key identifier:   C7:02:67:43:67:58:5B:5F:27:A5:FA:4D:94:0B:EC:00:82:9C:0A:E6
Authority key identifier: 9A:95:D8:F0:CA:B5:D7:8E:1D:6C:A9:B9:A3:B2:57:E3:8E:8C:7D:5B
Certificate issuer:       /CN=A915CF84/serialNumber=9A95D8F0CAB5D78E1D6CA9B9A3B257E38E8C7D5B
Certificate serial:       11
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mpXY8Mq1144dbKm5o7JX446MfVs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915CF84/7CBC0DEE3C3211F18C21D46EBF833773/mpXY8Mq1144dbKm5o7JX446MfVs.mft
Manifest number:          0F
Signing time:             Mon 11 May 2026 09:15:53 +0000
Manifest this update:     Mon 11 May 2026 09:15:52 +0000
Manifest next update:     Mon 18 May 2026 09:15:52 +0000
Files and hashes:         1: mpXY8Mq1144dbKm5o7JX446MfVs.crl (hash: WmKG7sySBOj6+QhPXjgfeQRsQnXqzGbSeXzXDi3mlLM=)
                          2: E0D625A23C6A11F183CD979F90833773.roa (hash: qj9IQ2Y4YzDmdOE6yQMu07d0ie+83o7yGutlXtdHDIs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915CF84/7CBC0DEE3C3211F18C21D46EBF833773/mpXY8Mq1144dbKm5o7JX446MfVs.crl
                          rsync://rpki.apnic.net/member_repository/A915CF84/7CBC0DEE3C3211F18C21D46EBF833773/mpXY8Mq1144dbKm5o7JX446MfVs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mpXY8Mq1144dbKm5o7JX446MfVs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 09:15:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915CF84, serialNumber=9A95D8F0CAB5D78E1D6CA9B9A3B257E38E8C7D5B
        Validity
            Not Before: May 11 09:15:52 2026 GMT
            Not After : May 18 09:15:52 2026 GMT
        Subject: CN=6a019e48-ac5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e9:ca:bd:64:85:8e:22:f5:6f:c4:8f:73:dc:
                    2a:ee:f5:6d:fd:28:73:44:a0:a1:71:71:0d:9b:92:
                    97:b7:44:6c:70:01:d7:58:35:8d:d7:7b:6e:76:13:
                    88:ca:89:2d:9b:30:a8:b1:c4:50:44:6f:10:ae:f1:
                    50:4f:36:62:03:1b:d7:59:e2:3b:36:35:68:8c:f3:
                    ff:97:d3:46:e0:a1:63:78:e9:ad:b4:f6:58:b0:e2:
                    c9:38:01:60:e4:e1:86:73:45:f4:52:9b:57:8c:86:
                    02:38:bb:29:19:00:5b:c3:34:b2:a2:8b:84:ac:00:
                    20:f7:df:89:a4:32:c7:cf:1e:2c:9a:af:bc:c2:01:
                    4d:c9:57:64:6a:45:08:2b:53:3d:e8:e0:9d:bc:74:
                    7e:c2:6a:ab:85:e7:02:45:16:fa:ab:be:ae:eb:9c:
                    f2:a7:98:27:72:87:41:4e:32:73:d9:6f:65:b1:7c:
                    5a:c6:cc:a0:52:ee:b8:3d:97:28:c2:bf:f2:85:72:
                    f2:70:47:80:ff:ad:55:21:01:3c:f5:34:77:7b:4a:
                    40:6c:cf:e2:a5:42:fb:37:bf:30:9d:04:10:59:eb:
                    4a:10:76:c8:7f:33:7f:63:da:9f:60:3d:44:82:0d:
                    3f:fc:28:92:b6:7c:21:63:48:7f:81:89:9c:72:55:
                    ee:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:02:67:43:67:58:5B:5F:27:A5:FA:4D:94:0B:EC:00:82:9C:0A:E6
            X509v3 Authority Key Identifier:
                keyid:9A:95:D8:F0:CA:B5:D7:8E:1D:6C:A9:B9:A3:B2:57:E3:8E:8C:7D:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915CF84/7CBC0DEE3C3211F18C21D46EBF833773/mpXY8Mq1144dbKm5o7JX446MfVs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mpXY8Mq1144dbKm5o7JX446MfVs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CF84/7CBC0DEE3C3211F18C21D46EBF833773/mpXY8Mq1144dbKm5o7JX446MfVs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:be:dc:c0:33:94:d1:0e:81:e3:c3:67:a7:99:9f:d7:1a:9f:
         ed:90:e0:e1:3a:31:01:cc:81:c8:dd:e7:23:08:c9:fe:8c:12:
         7f:d2:f6:79:41:50:d4:90:e0:c7:c1:93:e8:d7:d4:c4:12:59:
         c7:23:94:ae:25:02:33:b0:94:4b:21:a7:5a:5c:47:0c:8a:d4:
         81:85:c9:a9:45:46:78:ad:e9:39:3a:0d:e8:d7:67:2c:2c:5c:
         d9:97:10:ef:bc:0e:02:d6:ed:91:8f:35:47:04:84:d8:5c:e7:
         5b:b1:d2:30:11:18:d1:e9:f5:88:2a:01:cf:ff:0d:0d:31:eb:
         39:6c:18:92:8f:ab:98:8d:17:0d:2d:83:0f:2f:a4:25:65:8e:
         90:80:fc:61:9e:dc:44:ec:60:e2:85:7f:a4:28:80:bc:5f:fe:
         a7:f8:38:7a:c0:a7:fe:4a:ff:03:64:95:45:e3:8e:ba:01:fc:
         0c:5c:0f:ba:2d:0a:09:17:ca:d4:ce:fe:23:c2:a5:1a:eb:43:
         22:05:76:b8:62:e2:4a:85:b9:d6:e3:43:03:3d:97:b6:ad:70:
         d3:6b:d7:a5:68:42:7b:32:f8:e3:6a:a3:8d:79:99:aa:33:49:
         73:a5:de:29:db:ca:cc:73:9d:42:e1:3a:41:29:52:e3:83:b8:
         9b:57:74:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:34:59 2026 by rpki-client