Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft
File:                     -AoX4Y4_OhL3UjNnLorGf4DlL98.mft (raw, json)
Hash identifier:          DVyNGeA5j9Wj2oV3de1+X9fVG1uJ3eSoy4ZlMtTdmX4=
Subject key identifier:   41:A0:83:5C:5B:50:E0:E2:E5:B0:99:FE:25:92:B3:49:2B:89:20:A9
Authority key identifier: F8:0A:17:E1:8E:3F:3A:12:F7:52:33:67:2E:8A:C6:7F:80:E5:2F:DF
Certificate issuer:       /CN=A916423B/serialNumber=F80A17E18E3F3A12F75233672E8AC67F80E52FDF
Certificate serial:       0228
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft
Manifest number:          0223
Signing time:             Wed 13 May 2026 02:50:17 +0000
Manifest this update:     Wed 13 May 2026 02:50:16 +0000
Manifest next update:     Wed 20 May 2026 02:50:16 +0000
Files and hashes:         1: -AoX4Y4_OhL3UjNnLorGf4DlL98.crl (hash: tY5rICfEcJGhqsTVFHEsPKH4+YEWHahUETCgWKlA4k0=)
                          2: 593888C40AB811EE97CC7A32C4F9AE02.roa (hash: jKf/2MU5Ip9D+4pRX+4cB+cT7JgiaWNbV4ALOM87qH4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.crl
                          rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 552 (0x228)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916423B, serialNumber=F80A17E18E3F3A12F75233672E8AC67F80E52FDF
        Validity
            Not Before: May 13 02:50:16 2026 GMT
            Not After : May 20 02:50:16 2026 GMT
        Subject: CN=6a03e6e9-000a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:59:c4:76:83:50:b6:4d:c1:2f:f0:e6:a6:52:
                    bd:31:46:33:9d:99:b3:b4:6b:e7:f7:c1:58:d8:dc:
                    aa:c5:75:c5:4f:ac:84:41:4b:0a:cf:e3:8e:a5:4d:
                    2a:65:9b:14:bc:30:f9:98:cd:ac:de:cd:b3:dd:7a:
                    c3:9b:a1:2f:b0:df:db:60:c9:ce:cc:8c:c1:24:cd:
                    74:04:de:74:3a:4a:08:73:a9:0f:0e:8e:21:c9:91:
                    dd:3f:bc:f4:25:f4:a5:15:ae:bd:37:46:58:5e:09:
                    37:54:00:0e:08:b4:ce:3e:72:d4:76:1b:64:7b:f8:
                    22:de:1e:a8:13:3e:bd:2c:3a:ba:a3:21:5e:e0:44:
                    b8:88:16:a8:27:57:ae:35:87:a0:f2:08:df:62:be:
                    0c:47:ff:94:d4:d3:94:be:88:b9:f0:cf:82:d6:c0:
                    74:d7:e2:5c:50:c8:1f:a4:a4:42:ea:e6:6c:2b:87:
                    52:48:42:57:8a:61:60:0d:3d:68:20:7f:c0:37:f0:
                    3c:30:04:b4:bf:ee:15:81:9c:ba:28:20:a6:5a:2d:
                    66:55:d2:3b:a9:56:37:2d:e1:e0:4e:9a:cb:e2:45:
                    8a:ff:87:81:47:b3:2f:55:8f:16:b8:0d:a7:3f:db:
                    0f:bd:28:01:a7:46:99:78:ec:7a:df:2f:84:bd:57:
                    be:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A0:83:5C:5B:50:E0:E2:E5:B0:99:FE:25:92:B3:49:2B:89:20:A9
            X509v3 Authority Key Identifier:
                keyid:F8:0A:17:E1:8E:3F:3A:12:F7:52:33:67:2E:8A:C6:7F:80:E5:2F:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:ff:70:bd:16:55:59:f2:9e:57:51:ad:fa:45:13:4c:5b:da:
         73:45:26:7e:70:77:3b:9e:7f:95:c9:35:d4:62:29:6d:9e:fd:
         c3:f5:46:26:34:dc:82:6b:0f:7a:31:7b:ce:a4:2a:87:57:e3:
         ee:2d:31:bd:8b:7a:ff:09:d8:79:1a:f5:a7:4e:2f:b5:6b:bc:
         fe:9e:4f:10:64:e0:bf:49:f1:c9:3c:1d:c3:ab:be:ba:62:1c:
         ea:19:b4:4c:f7:1a:d8:b1:59:ab:73:e5:c3:a5:52:06:61:3d:
         d3:55:0c:05:d1:52:e5:46:8d:cd:5d:6b:b6:5f:14:c1:35:19:
         ff:66:65:92:17:55:b1:02:bf:8e:ca:a7:09:fd:30:aa:a8:ea:
         b7:5f:67:1c:f0:dd:79:f9:00:ec:41:c9:88:56:0c:c0:b9:6b:
         15:23:40:cb:70:90:27:22:1d:6d:ed:90:d7:46:64:9c:d5:1d:
         85:a0:af:a3:98:c0:58:6d:f0:77:ae:0e:81:21:00:5e:24:15:
         ad:19:3c:dd:2a:7a:54:84:50:65:72:76:eb:9a:71:6d:5a:7a:
         19:d5:37:68:83:49:3d:a0:98:d9:11:b8:1b:23:c7:63:0d:de:
         eb:47:68:91:b9:78:21:e8:8c:ff:23:ab:0f:58:0b:e8:9e:b0:
         27:46:3f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:48:55 2026 by rpki-client