Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.mft
File:                     Ed9s5Nq5aE7fbPXgPf3shvFc174.mft (raw, json)
Hash identifier:          1N6Rxb4/uS+G1g2p5r2fK269gvm1YtP7h60aYdaEYzw=
Subject key identifier:   87:A3:B8:73:32:8B:0C:75:66:85:A1:8C:B0:5B:F8:E6:A7:4E:E5:AA
Authority key identifier: 11:DF:6C:E4:DA:B9:68:4E:DF:6C:F5:E0:3D:FD:EC:86:F1:5C:D7:BE
Certificate issuer:       /CN=A9165DEE/serialNumber=11DF6CE4DAB9684EDF6CF5E03DFDEC86F15CD7BE
Certificate serial:       0B9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ed9s5Nq5aE7fbPXgPf3shvFc174.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.mft
Manifest number:          0B90
Signing time:             Tue 12 May 2026 19:09:48 +0000
Manifest this update:     Tue 12 May 2026 19:09:47 +0000
Manifest next update:     Tue 19 May 2026 19:09:47 +0000
Files and hashes:         1: Ed9s5Nq5aE7fbPXgPf3shvFc174.crl (hash: H+JMWPoE237XkOdH6m9RYwYQwxt3jwoq9vQhx+z+Los=)
                          2: 4E5CB05248C611F18AC335C9C1833773.roa (hash: jeXZcU3+gUnWlt6iUsXAboEMyl0tXGa6+HtLhsAvKdU=)
                          3: 81475298480C11F199A48156C7833773.roa (hash: 6jWITeOsWVm6VTArL5HgwjyHMhNRpgb7dw6C7Jo0dFY=)
                          4: C66770F24B9111EA9A72503CC4F9AE02.roa (hash: wcBn6zzmuqZgVHobc9nnX0MwLLhfrJhdoOLry6NW5b4=)
                          5: 7A91FC6E48C511F191B04A81C1833773.roa (hash: fC5kESsZbYJdusJETohbEViIKQmUiO0zizp3oKq4bXA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.crl
                          rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ed9s5Nq5aE7fbPXgPf3shvFc174.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:09:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2974 (0xb9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165DEE, serialNumber=11DF6CE4DAB9684EDF6CF5E03DFDEC86F15CD7BE
        Validity
            Not Before: May 12 19:09:47 2026 GMT
            Not After : May 19 19:09:47 2026 GMT
        Subject: CN=6a037afb-c6db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a4:a3:7b:dd:3f:77:71:09:f6:37:46:7d:7f:
                    66:57:5a:6f:ac:81:87:39:0c:23:7a:40:d1:be:61:
                    d5:d7:58:aa:cf:8b:a3:53:1a:9e:f6:d8:a2:41:5c:
                    40:cb:0b:74:1d:8c:eb:0d:4d:45:51:0c:4e:a8:eb:
                    4e:24:45:4f:e7:b2:6b:c4:02:af:c8:76:28:6f:74:
                    e1:be:a9:af:b5:9c:5a:40:bf:43:92:86:23:fa:03:
                    2b:08:f7:0f:4e:66:75:bc:55:c3:92:01:23:da:6d:
                    0c:37:76:ae:f7:64:c9:56:12:9f:ec:43:09:41:0b:
                    0e:8b:59:40:5c:d3:a9:41:d7:a8:97:ee:9f:b2:46:
                    1a:90:33:0e:d0:cf:2c:e3:27:2f:12:75:b3:b7:da:
                    7a:9d:31:56:64:9f:68:d6:a9:24:b2:42:59:11:1e:
                    28:33:fb:41:95:86:72:be:38:94:5f:c0:5f:b3:87:
                    e3:a4:be:40:2f:f2:78:ba:5a:25:0e:c7:ec:17:75:
                    cc:10:f4:61:a5:55:9f:7d:22:d4:d9:c1:69:47:4b:
                    bb:35:4f:34:73:4c:a5:36:1e:5a:a3:03:d6:b6:17:
                    22:d2:24:88:63:dc:88:d0:7a:7e:9e:d6:56:73:99:
                    10:74:f2:90:cd:7a:2a:0e:c2:32:be:fd:61:41:78:
                    96:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A3:B8:73:32:8B:0C:75:66:85:A1:8C:B0:5B:F8:E6:A7:4E:E5:AA
            X509v3 Authority Key Identifier:
                keyid:11:DF:6C:E4:DA:B9:68:4E:DF:6C:F5:E0:3D:FD:EC:86:F1:5C:D7:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ed9s5Nq5aE7fbPXgPf3shvFc174.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:cd:d6:30:99:b7:55:fd:70:7c:ac:6d:4a:6d:7f:f6:9a:47:
         c4:af:cc:56:9b:3e:4a:83:02:27:a3:32:a3:61:45:5b:41:0d:
         77:f2:ca:f9:8c:61:70:14:9a:4b:cd:04:e3:31:5f:ec:e1:b6:
         47:5c:92:8d:71:0c:09:1c:4d:03:42:26:55:82:46:3e:ce:13:
         5a:05:c6:7b:cd:f9:ff:0f:20:03:aa:73:25:c3:b8:a2:4c:ca:
         00:b2:c6:40:91:a4:09:33:4b:da:5e:8d:6e:1d:83:db:2c:dc:
         30:5f:2f:53:2b:a7:f8:4a:d2:93:14:d1:39:3b:9e:15:81:29:
         47:4b:92:dc:86:90:de:fc:61:ff:3d:b0:de:42:80:7b:89:4f:
         4e:bb:4c:7b:5e:e0:f1:aa:cd:1e:06:79:e7:d5:52:62:82:f7:
         68:d1:31:f5:fd:cb:55:04:e1:74:5c:01:d1:f5:4e:cc:64:81:
         dc:b0:d9:22:37:b5:8e:41:06:a0:17:f7:3f:5d:62:8d:50:a4:
         8c:61:6e:1d:1e:1e:12:0f:4e:20:e0:13:5a:00:69:cf:b4:08:
         ab:30:be:b9:22:36:6d:83:6f:b5:18:90:41:d2:9c:58:db:ec:
         b1:da:4d:19:4b:c1:e8:b7:97:15:c8:eb:5f:d8:e0:45:55:bd:
         01:d4:ae:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:04:27 2026 by rpki-client