Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9162B98/1A7984D0DC9311F0995D84D93F6F56BC/119NVHZK705TBIfeterZIyLy4As.mft
File:                     119NVHZK705TBIfeterZIyLy4As.mft (raw, json)
Hash identifier:          Pcc3rF5nQ6NhzJtBxblHkEiYGkH1xScXsjGOAAEdn1A=
Subject key identifier:   29:39:37:6F:D2:23:A0:D2:81:08:FF:64:ED:47:C2:7D:36:59:B1:5E
Authority key identifier: D7:5F:4D:54:76:4A:EF:4E:53:04:87:DE:B5:EA:D9:23:22:F2:E0:0B
Certificate issuer:       /CN=A9162B98/serialNumber=D75F4D54764AEF4E530487DEB5EAD92322F2E00B
Certificate serial:       50
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/119NVHZK705TBIfeterZIyLy4As.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162B98/1A7984D0DC9311F0995D84D93F6F56BC/119NVHZK705TBIfeterZIyLy4As.mft
Manifest number:          4E
Signing time:             Mon 11 May 2026 08:29:08 +0000
Manifest this update:     Mon 11 May 2026 08:29:08 +0000
Manifest next update:     Mon 18 May 2026 08:29:08 +0000
Files and hashes:         1: 119NVHZK705TBIfeterZIyLy4As.crl (hash: rQlWXMd8INu5s29U0WBSxjnPKPGNcWTIrXyc1DB0tFo=)
                          2: 6641AB54DEE111F0BF0237E8526F56BC.roa (hash: 3c720aJ/J3RclkYPzI9bzs0SKJeg4GvB6leOfaOooVs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9162B98/1A7984D0DC9311F0995D84D93F6F56BC/119NVHZK705TBIfeterZIyLy4As.crl
                          rsync://rpki.apnic.net/member_repository/A9162B98/1A7984D0DC9311F0995D84D93F6F56BC/119NVHZK705TBIfeterZIyLy4As.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/119NVHZK705TBIfeterZIyLy4As.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:29:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162B98, serialNumber=D75F4D54764AEF4E530487DEB5EAD92322F2E00B
        Validity
            Not Before: May 11 08:29:08 2026 GMT
            Not After : May 18 08:29:08 2026 GMT
        Subject: CN=6a019354-a701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b4:0c:1a:cb:22:4c:83:58:c3:32:4a:db:b2:
                    b8:e1:36:32:a3:a7:03:24:26:39:79:7e:0f:87:e5:
                    1e:a5:e0:d3:8f:fb:85:1a:cb:5b:23:c0:27:b3:80:
                    d4:f9:41:01:44:24:8d:aa:e4:69:27:08:1c:d8:d4:
                    4c:b9:51:9b:66:67:82:2e:56:56:f4:96:a7:1b:94:
                    20:b1:9b:40:27:72:bc:a6:8a:ca:78:89:4f:eb:82:
                    6b:34:cd:cd:cb:45:cc:06:f7:08:22:8e:39:a0:19:
                    ae:67:c5:32:f3:52:2f:87:6a:37:68:be:8e:af:06:
                    e5:85:4c:f0:ed:e4:01:d4:fa:73:27:f7:bd:f3:64:
                    95:86:73:30:cf:6d:45:2c:ac:cc:cf:6c:4a:46:26:
                    0e:58:56:c4:fa:6c:2c:ef:fe:a7:9d:71:dc:a7:f0:
                    db:9d:90:9e:b7:1f:fb:0e:9b:c8:1b:23:a7:f3:72:
                    ac:45:8d:74:0b:44:5d:d4:8b:dd:a7:91:7f:ab:d4:
                    04:22:43:c4:d9:6d:14:73:a0:92:1a:cd:bb:fb:3c:
                    a0:02:27:b4:27:24:d0:42:48:dc:33:0b:b7:81:49:
                    a7:cf:06:f8:d3:eb:b2:5c:2d:f8:4d:75:fd:31:7a:
                    35:fa:86:f6:b2:98:4b:ec:63:6c:c2:35:8a:0c:2a:
                    6c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:39:37:6F:D2:23:A0:D2:81:08:FF:64:ED:47:C2:7D:36:59:B1:5E
            X509v3 Authority Key Identifier:
                keyid:D7:5F:4D:54:76:4A:EF:4E:53:04:87:DE:B5:EA:D9:23:22:F2:E0:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162B98/1A7984D0DC9311F0995D84D93F6F56BC/119NVHZK705TBIfeterZIyLy4As.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/119NVHZK705TBIfeterZIyLy4As.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162B98/1A7984D0DC9311F0995D84D93F6F56BC/119NVHZK705TBIfeterZIyLy4As.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:1d:0d:09:eb:d6:9d:23:30:76:96:5b:e6:cc:6d:af:7f:70:
         75:cf:1f:f1:e9:81:90:58:0e:dc:4c:b1:d3:f2:fa:d4:59:49:
         00:37:75:32:91:04:5c:1a:dc:a1:65:b1:c6:e4:35:91:ad:c5:
         f3:96:31:1c:ea:61:e6:79:73:9e:3e:5d:75:d1:dc:a8:ea:79:
         d1:6f:9d:ed:21:b1:47:03:b7:ad:87:a2:83:3c:ba:71:5e:ad:
         ab:d1:f5:f5:c1:4d:f2:50:b3:af:46:0a:f0:99:66:f0:c8:67:
         bd:3d:f6:9f:25:83:63:35:ea:17:d2:39:15:09:4f:d8:aa:4e:
         c6:ff:01:4b:b0:a0:e7:14:ed:27:49:a7:5b:a2:5b:b0:e2:a4:
         7f:d7:6e:ac:a5:89:52:9e:43:fb:6f:8e:6b:af:77:81:25:64:
         0c:9a:46:6b:ee:99:c4:fa:3b:57:e4:5d:2d:6f:aa:61:0a:e5:
         61:da:f0:3e:f1:67:83:c6:3c:e4:f1:db:fa:a9:e3:70:51:1e:
         7d:8f:0c:27:41:be:fd:12:63:30:18:e9:54:d9:f6:6a:2e:44:
         2f:ca:36:cd:f5:73:4e:fe:2e:c7:38:58:e4:09:69:60:07:ee:
         de:1c:8c:0c:d2:c6:13:51:b7:e3:86:3e:e5:33:dd:c8:74:eb:
         a9:5c:87:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:53:22 2026 by rpki-client