Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft
File:                     rRYSQOl6MtEDCZunigKM0J9fW5M.mft (raw, json)
Hash identifier:          AeX4fgJjadcrahRAb7JYF0MBVo+LrpUX/JrmyRPjm1k=
Subject key identifier:   36:8F:1F:81:BD:E4:C9:FD:B3:70:1A:47:5B:55:CC:93:AA:96:D7:06
Authority key identifier: AD:16:12:40:E9:7A:32:D1:03:09:9B:A7:8A:02:8C:D0:9F:5F:5B:93
Certificate issuer:       /CN=A9169BAF/serialNumber=AD161240E97A32D103099BA78A028CD09F5F5B93
Certificate serial:       01A5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRYSQOl6MtEDCZunigKM0J9fW5M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft
Manifest number:          019E
Signing time:             Mon 11 May 2026 04:17:21 +0000
Manifest this update:     Mon 11 May 2026 04:17:21 +0000
Manifest next update:     Mon 18 May 2026 04:17:21 +0000
Files and hashes:         1: rRYSQOl6MtEDCZunigKM0J9fW5M.crl (hash: 9sX6GSQXk0E8w+/cfr8SqtdcCHTmlrhxQJndwDCUvYM=)
                          2: 122C6942D9CE11EEB6EA7F6CC4F9AE02.roa (hash: PpBOU4X+uS2a94ESgw3q/TNVKHg9vw4HoislmYncmAU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.crl
                          rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRYSQOl6MtEDCZunigKM0J9fW5M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 04:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 421 (0x1a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169BAF, serialNumber=AD161240E97A32D103099BA78A028CD09F5F5B93
        Validity
            Not Before: May 11 04:17:21 2026 GMT
            Not After : May 18 04:17:21 2026 GMT
        Subject: CN=6a015851-a612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c7:e8:b7:83:44:c8:be:82:01:ee:1a:56:b5:
                    7f:71:8b:67:37:df:28:62:b7:00:17:37:6b:63:4e:
                    c9:ac:50:58:d0:66:47:7e:d1:e0:6d:2b:ef:77:78:
                    5d:94:3e:ed:71:d8:20:a8:db:b3:3e:20:31:b7:fe:
                    26:53:c1:d5:9e:74:f0:3a:e2:20:bd:9d:c6:73:d3:
                    85:b9:20:dc:26:9a:96:82:d6:ae:22:18:24:4b:46:
                    a3:5e:bc:a4:b2:ab:4d:6b:2b:77:0d:c3:da:3f:96:
                    df:53:2f:41:c9:45:21:63:f6:f3:c0:98:7d:19:af:
                    bb:57:24:58:b8:63:aa:62:d9:2d:9d:8c:74:38:28:
                    4d:8b:65:b8:f4:bb:be:48:d4:c9:1b:ad:95:e3:7b:
                    92:ef:a6:5d:a6:27:ca:5e:1f:73:30:37:64:30:66:
                    a7:7d:fd:48:6b:6f:ff:b3:65:67:35:b7:65:35:8c:
                    69:00:5f:4e:e2:c9:60:28:17:d3:10:18:09:6f:a4:
                    1e:6c:15:af:99:74:01:46:30:b9:e4:a4:67:c6:0e:
                    81:4e:86:60:ea:a6:e7:30:b5:ab:bf:43:a7:b7:b1:
                    2c:75:2e:39:d2:ea:b1:26:9d:ba:3a:86:9c:9e:9f:
                    a2:e8:af:9b:26:64:4e:8b:9d:1a:ad:d5:c4:36:82:
                    7f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:8F:1F:81:BD:E4:C9:FD:B3:70:1A:47:5B:55:CC:93:AA:96:D7:06
            X509v3 Authority Key Identifier:
                keyid:AD:16:12:40:E9:7A:32:D1:03:09:9B:A7:8A:02:8C:D0:9F:5F:5B:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRYSQOl6MtEDCZunigKM0J9fW5M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:7c:4f:f7:50:1f:1a:22:83:ef:c8:57:9e:fd:ff:e2:45:39:
         d2:14:86:99:a7:a7:1a:17:ff:4b:b1:f6:d5:9a:39:a8:5e:44:
         ed:02:22:63:0e:d6:f1:51:7d:c5:2d:a8:42:9f:7f:01:90:16:
         06:39:96:af:1d:3f:58:ad:81:34:5c:6e:77:9c:f2:95:63:6e:
         ca:e1:2c:03:96:ca:ff:7a:28:50:14:1d:ba:b6:f5:fb:7f:b3:
         38:40:69:77:f1:9c:2e:ce:d4:99:9a:94:4f:70:37:b5:4e:78:
         e7:b8:0b:07:98:00:ac:59:06:40:71:16:84:3f:db:fe:68:cd:
         5b:d7:32:ac:e8:cf:ed:ed:13:9c:18:79:55:89:71:06:a2:cb:
         48:dc:f3:a0:54:32:be:68:95:ca:c4:53:f5:f8:bf:3b:12:b9:
         a2:dc:32:76:ff:de:f8:e3:5e:5d:e1:2b:a2:7d:a9:4f:c5:71:
         9c:54:e4:49:50:a3:8b:ba:6b:1b:87:a8:0d:05:b9:86:b1:e7:
         6f:da:88:e9:26:2d:fe:5e:d1:41:bc:e7:88:71:79:02:8b:82:
         13:80:e4:12:97:a3:87:57:3c:7d:aa:c5:e4:20:49:c2:29:f5:
         b9:98:eb:8f:c5:0d:bb:1f:f7:68:a6:c2:44:ef:bd:a2:66:fc:
         1d:ee:5f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:52:20 2026 by rpki-client