Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.mft
File:                     4Cvu6I2DW9DkJUygjXwDvFcZdIQ.mft (raw, json)
Hash identifier:          KSZmdiyIRpuH2wOm9AizZyNhP+MCEHOU1qTOJ+V41Vs=
Subject key identifier:   85:68:35:6D:A3:4C:31:E5:66:58:8A:10:81:CD:78:CB:FE:34:E4:38
Authority key identifier: E0:2B:EE:E8:8D:83:5B:D0:E4:25:4C:A0:8D:7C:03:BC:57:19:74:84
Certificate issuer:       /CN=A915E005/serialNumber=E02BEEE88D835BD0E4254CA08D7C03BC57197484
Certificate serial:       22BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.mft
Manifest number:          22A9
Signing time:             Tue 12 May 2026 15:51:14 +0000
Manifest this update:     Tue 12 May 2026 15:51:14 +0000
Manifest next update:     Tue 19 May 2026 15:51:14 +0000
Files and hashes:         1: 4Cvu6I2DW9DkJUygjXwDvFcZdIQ.crl (hash: uwWpsuIBycPxGlxWqjFZ+uZnLUuFKr4GtkYqCXke+gU=)
                          2: CD4CD0B654F311E7AC64ED3AC4F9AE02.roa (hash: VKFgeV6Rmc+Rc92uXlIsfsO0P5v537kl0ZBvVM5G0V8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.crl
                          rsync://rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:51:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8892 (0x22bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E005, serialNumber=E02BEEE88D835BD0E4254CA08D7C03BC57197484
        Validity
            Not Before: May 12 15:51:14 2026 GMT
            Not After : May 19 15:51:14 2026 GMT
        Subject: CN=6a034c72-484b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d0:46:f9:b9:87:93:7a:14:7e:d6:c6:76:f0:
                    92:ae:fd:75:c7:48:21:a9:bf:38:4e:3c:62:33:d6:
                    48:48:94:0b:a3:d1:2e:e4:1b:42:ab:91:9c:69:23:
                    52:78:71:63:10:14:e0:2c:54:02:03:38:ba:5b:5f:
                    72:5d:cf:89:58:17:5e:64:7b:c4:a8:1c:64:69:b2:
                    4a:ff:a8:90:d9:85:74:c8:08:0b:82:62:4e:a3:77:
                    78:dd:84:4f:d7:e0:cc:f6:a0:10:b7:ab:f2:8d:3d:
                    04:9f:2d:e6:1f:4f:7e:c8:36:98:b3:b1:ac:e3:65:
                    6a:cf:83:09:c3:43:f6:3f:9c:64:28:7f:33:0c:3d:
                    e1:29:0e:58:60:79:85:ad:0d:7f:97:4a:ca:f2:9a:
                    89:3d:76:ac:94:7a:7b:ab:c2:5d:a3:51:8e:37:a7:
                    76:b2:93:80:be:9b:17:74:9b:05:14:14:3c:7b:6f:
                    1e:9b:27:4b:55:02:8c:93:76:c2:88:3c:d6:aa:d7:
                    95:61:0b:87:63:be:dc:32:bb:37:34:17:ce:5e:d0:
                    d5:5c:45:bc:61:8c:9a:f9:40:42:10:e8:92:61:7c:
                    5e:37:2d:6a:7a:12:b9:11:a9:78:86:2c:c5:cb:9d:
                    6d:fa:70:d2:bf:c9:db:26:10:a0:9a:12:71:82:7c:
                    01:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:68:35:6D:A3:4C:31:E5:66:58:8A:10:81:CD:78:CB:FE:34:E4:38
            X509v3 Authority Key Identifier:
                keyid:E0:2B:EE:E8:8D:83:5B:D0:E4:25:4C:A0:8D:7C:03:BC:57:19:74:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:05:7a:ba:35:f8:cf:84:68:9e:8a:4a:37:59:ab:de:c5:73:
         81:8c:72:c6:49:fb:b6:6d:37:06:83:35:b1:e6:7f:04:b1:5e:
         e5:05:21:1b:07:9b:1c:54:3d:92:f1:03:b1:d9:e0:26:9d:26:
         3b:9c:8b:f7:92:58:25:ca:c0:a6:aa:a1:16:0d:80:98:89:a6:
         50:a0:83:6c:e5:71:31:13:ad:52:30:9c:56:e5:cd:10:f8:ca:
         a6:7b:cb:04:90:59:0c:66:74:06:91:cd:38:bb:f1:ab:11:fd:
         48:7e:af:68:f1:c1:9f:da:2b:5e:7b:52:2b:40:0f:a7:4d:d3:
         6e:24:8f:32:49:e8:1b:fc:7c:7c:b0:de:e1:64:f1:ea:c4:e0:
         b0:0c:41:ff:db:e9:ae:90:66:d1:60:eb:e2:4d:52:98:2a:17:
         65:49:e4:aa:cd:54:24:eb:d9:19:30:6a:7a:2c:df:a6:be:7c:
         fd:7c:76:dd:a1:b0:f9:a6:85:a4:8d:ab:68:a7:48:ad:d0:d9:
         95:ff:03:b2:c1:b8:c0:12:4d:cb:21:a1:58:b6:d1:f2:bd:51:
         28:e2:6a:f3:1f:b9:95:53:c3:3c:2c:f7:ea:f8:07:6f:32:a7:
         7b:e6:77:74:49:83:10:23:0b:62:2e:58:68:9b:b1:bd:01:8c:
         2a:a0:42:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:34:17 2026 by rpki-client