Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DE8F/0B543B0AA14611EFA12A6E1FC4F9AE02/08nS13n2aEMJcSuzDPoZkpDhuNY.mft
File:                     08nS13n2aEMJcSuzDPoZkpDhuNY.mft (raw, json)
Hash identifier:          dExLrQg+tokdVetukK9m4ESevFMmepzSIUPt0ah+thI=
Subject key identifier:   AC:4F:7E:69:9D:A0:4B:3E:99:AA:B5:85:C2:62:A7:C4:FC:8B:7E:39
Authority key identifier: D3:C9:D2:D7:79:F6:68:43:09:71:2B:B3:0C:FA:19:92:90:E1:B8:D6
Certificate issuer:       /CN=A915DE8F/serialNumber=D3C9D2D779F6684309712BB30CFA199290E1B8D6
Certificate serial:       0122
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08nS13n2aEMJcSuzDPoZkpDhuNY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DE8F/0B543B0AA14611EFA12A6E1FC4F9AE02/08nS13n2aEMJcSuzDPoZkpDhuNY.mft
Manifest number:          011D
Signing time:             Wed 13 May 2026 05:55:28 +0000
Manifest this update:     Wed 13 May 2026 05:55:28 +0000
Manifest next update:     Wed 20 May 2026 05:55:28 +0000
Files and hashes:         1: 08nS13n2aEMJcSuzDPoZkpDhuNY.crl (hash: McCJKhwCi27gggwkFB/xz07yobJmyDyIqcD3n1M64gs=)
                          2: 6DEFE6D8A14611EF93AB8E21C4F9AE02.roa (hash: XPN51TPloT0Sb6kUSDOMyNz4bBTH/IHqHYJPkeZz8vA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DE8F/0B543B0AA14611EFA12A6E1FC4F9AE02/08nS13n2aEMJcSuzDPoZkpDhuNY.crl
                          rsync://rpki.apnic.net/member_repository/A915DE8F/0B543B0AA14611EFA12A6E1FC4F9AE02/08nS13n2aEMJcSuzDPoZkpDhuNY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08nS13n2aEMJcSuzDPoZkpDhuNY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 05:55:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 290 (0x122)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DE8F, serialNumber=D3C9D2D779F6684309712BB30CFA199290E1B8D6
        Validity
            Not Before: May 13 05:55:28 2026 GMT
            Not After : May 20 05:55:28 2026 GMT
        Subject: CN=6a041250-05c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:88:7a:30:71:20:69:68:33:a8:2a:5a:87:02:
                    9e:72:8e:84:78:5d:0d:0e:1a:5d:0c:d5:57:88:38:
                    65:85:04:49:b1:d9:85:bf:53:15:c9:3f:d8:77:ec:
                    ed:e4:59:8e:91:34:54:b1:68:3a:e8:25:f0:9a:bc:
                    62:8e:34:be:6a:af:57:41:10:cd:d6:e0:3d:5e:40:
                    cc:f0:a6:98:5b:79:26:68:ee:64:3e:f4:a9:e4:d4:
                    b2:78:05:0c:0e:d1:56:db:af:8f:d5:df:b3:d3:c8:
                    d2:ee:a3:78:bc:b9:81:d7:fa:07:38:dc:15:f5:38:
                    8d:c4:2b:0c:fe:26:17:58:dc:bf:2d:57:e9:c0:b3:
                    22:e1:c9:dc:00:96:b5:8b:eb:03:55:7c:f1:72:6e:
                    a4:d6:8b:47:43:7c:a3:c3:6f:d6:dc:ca:38:31:b0:
                    46:1b:82:51:92:26:f9:43:09:69:c8:59:3b:c1:da:
                    0a:97:40:0c:50:8f:c1:46:d5:13:86:21:b0:18:07:
                    10:bc:88:82:b9:7a:9f:ce:fe:f6:c4:6c:d6:72:ef:
                    46:e6:bc:fc:37:3e:76:4d:4e:b2:56:3f:6d:61:0c:
                    6d:7e:9d:2f:e3:25:fb:6a:8e:96:6d:4a:a8:ae:58:
                    2b:89:ae:a0:f0:f3:b1:2b:eb:8b:77:84:fd:8f:a9:
                    2a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:4F:7E:69:9D:A0:4B:3E:99:AA:B5:85:C2:62:A7:C4:FC:8B:7E:39
            X509v3 Authority Key Identifier:
                keyid:D3:C9:D2:D7:79:F6:68:43:09:71:2B:B3:0C:FA:19:92:90:E1:B8:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DE8F/0B543B0AA14611EFA12A6E1FC4F9AE02/08nS13n2aEMJcSuzDPoZkpDhuNY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08nS13n2aEMJcSuzDPoZkpDhuNY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DE8F/0B543B0AA14611EFA12A6E1FC4F9AE02/08nS13n2aEMJcSuzDPoZkpDhuNY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:ae:07:7a:63:9e:c8:d3:51:d5:67:46:3f:ac:64:54:31:86:
         4e:58:62:00:a2:04:2c:b1:48:e8:ba:92:32:93:4e:1b:66:cc:
         a7:a3:22:33:56:87:06:9c:ed:2a:61:25:96:94:65:14:24:7d:
         da:3f:2d:20:b8:07:e0:e1:be:d7:29:33:b8:cc:36:46:75:a7:
         fb:94:64:04:6b:3d:c2:76:b9:79:51:45:f1:88:a8:a3:ed:b9:
         d3:a8:9b:30:d5:1a:f1:18:59:51:60:cd:47:8c:ab:43:49:df:
         c1:b3:cd:da:20:a5:c6:18:02:30:74:d2:23:04:51:54:42:ec:
         4c:2b:31:9f:97:fc:61:8f:23:5e:ce:66:79:d5:0e:d9:5f:33:
         74:35:c6:07:47:49:87:97:09:53:53:e6:35:c6:47:dc:45:b5:
         ab:d7:99:0c:e3:41:57:fc:c3:34:f1:ba:83:7e:22:d2:c5:b8:
         90:38:26:15:a3:e4:bb:54:1d:a5:18:63:05:ea:82:30:b5:33:
         6a:f7:ec:6f:04:b7:b8:07:50:50:d5:24:6d:d2:00:39:e2:90:
         b8:7b:12:2f:ae:ec:d1:df:3e:d6:bf:f9:7e:f2:c5:bd:2d:92:
         72:5d:1b:7c:4c:0b:3a:69:e9:7a:6f:a5:db:90:59:3e:dd:5c:
         28:84:5b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:52:48 2026 by rpki-client