Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
File:                     iV2mi62Kf50xeIVse2LpwWiLK3M.mft (raw, json)
Hash identifier:          3R1cir+H5PKRbZtD/0csZSPfpqY+/D7Uf5Z9211u9QI=
Subject key identifier:   1C:83:57:C3:11:24:6B:2D:B1:4B:76:C8:1A:79:E7:C8:5E:8B:20:F0
Authority key identifier: 89:5D:A6:8B:AD:8A:7F:9D:31:78:85:6C:7B:62:E9:C1:68:8B:2B:73
Certificate issuer:       /CN=A9169CEB/serialNumber=895DA68BAD8A7F9D3178856C7B62E9C1688B2B73
Certificate serial:       1043
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
Manifest number:          1027
Signing time:             Tue 12 May 2026 17:27:27 +0000
Manifest this update:     Tue 12 May 2026 17:27:27 +0000
Manifest next update:     Tue 19 May 2026 17:27:27 +0000
Files and hashes:         1: iV2mi62Kf50xeIVse2LpwWiLK3M.crl (hash: 9SVm1rdey9zSa0Slp+OKr1unfv+DOGvNcmo1xoXcJXs=)
                          2: CC72753A7CE511E985E29B7BC4F9AE02.roa (hash: Ri/V1vsZYZSf3Iiz5nBojjsApKtj70HrLpdneU/NrfM=)
                          3: 47B75B3893EE11E9B1F2926AC4F9AE02.roa (hash: XvZz5Qg4UuABOAvZL3TrqvqvGORz9Mmy5LeD7IN22s0=)
                          4: 4735CB9A93EE11E9B1F2926AC4F9AE02.roa (hash: JR72/EZy5aRrSFB9vWQMg1q1NBXm5hj69ANbCPmEu98=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.crl
                          rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 17:27:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4163 (0x1043)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169CEB, serialNumber=895DA68BAD8A7F9D3178856C7B62E9C1688B2B73
        Validity
            Not Before: May 12 17:27:27 2026 GMT
            Not After : May 19 17:27:27 2026 GMT
        Subject: CN=6a0362ff-d88b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e6:8f:7e:68:15:70:01:69:5b:d7:4e:06:88:
                    5b:25:de:87:8a:e5:9c:a5:d0:3c:89:cd:65:fd:40:
                    34:50:ea:03:c7:b5:41:dd:6b:19:1c:cd:1e:74:35:
                    ca:4c:be:2f:51:99:1a:0b:ad:f8:7f:64:8a:7f:b1:
                    40:e1:6c:1a:73:4f:1f:37:3a:36:44:fe:cd:21:a0:
                    e6:c4:1f:db:20:cc:61:48:72:a5:3c:31:37:75:6e:
                    03:32:69:5e:e3:e4:e7:ea:59:67:47:c1:b0:49:48:
                    52:f7:8b:1a:9c:c9:50:e2:bb:5a:43:5e:38:85:52:
                    c5:21:62:11:a2:07:c2:9d:23:72:c1:0e:c0:60:eb:
                    b4:e3:ee:6b:55:ed:87:a2:35:97:58:7b:97:75:88:
                    13:4e:1c:7d:80:11:7e:8b:16:b0:57:73:3d:24:88:
                    df:14:b2:98:c2:d6:51:dd:16:42:af:19:ce:a1:78:
                    88:53:cc:15:39:8d:cd:a9:16:25:21:48:31:57:65:
                    ec:ef:59:53:c5:40:7f:b4:81:39:7a:cb:fe:c7:a3:
                    c4:17:a9:26:a5:a0:0c:6b:b3:3f:f7:64:99:de:c7:
                    8c:77:92:a9:e9:4b:04:3d:8d:8a:de:51:ff:1e:0f:
                    18:48:dc:80:cf:8a:ce:a0:4f:8a:89:8b:b8:a7:83:
                    c3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:83:57:C3:11:24:6B:2D:B1:4B:76:C8:1A:79:E7:C8:5E:8B:20:F0
            X509v3 Authority Key Identifier:
                keyid:89:5D:A6:8B:AD:8A:7F:9D:31:78:85:6C:7B:62:E9:C1:68:8B:2B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:32:d9:d2:55:46:6c:ec:ce:c8:71:fa:48:57:0d:40:05:cd:
         83:8e:07:99:90:5c:60:1f:6a:d0:75:fa:94:cd:08:57:f1:05:
         71:a6:f7:ee:fa:9c:24:e6:da:5c:c6:36:ad:13:d5:07:a4:be:
         5c:c2:4e:de:29:95:48:e6:10:3f:8a:69:20:aa:dc:37:f7:49:
         aa:60:b2:53:f3:27:ae:31:af:63:ed:0c:50:07:9b:22:a5:54:
         53:38:f6:51:2b:38:64:bb:16:82:31:0c:50:de:58:0a:86:6f:
         54:09:cc:eb:08:ad:69:72:2f:99:4f:39:9d:5c:7f:5d:d8:e8:
         26:ac:37:82:9e:3a:81:ef:ab:5d:00:19:f6:82:12:3a:86:a4:
         87:07:28:81:45:8c:de:81:5b:ab:59:6c:5b:9f:17:01:c0:87:
         c6:89:3b:7b:d3:4f:31:a8:c4:26:dc:39:25:a1:5f:46:a4:a6:
         3f:9b:0c:c6:8f:51:2b:01:17:2a:39:15:78:c2:8c:c3:1b:8f:
         10:24:05:82:79:9b:d9:05:06:4a:20:2c:9a:ad:26:f0:cc:01:
         b4:22:62:02:78:41:19:ab:50:f9:bb:da:d7:4c:d3:5a:1b:f6:
         3c:d1:bf:9f:75:76:bc:5d:93:73:d2:71:fd:7f:b8:e2:cc:80:
         0e:90:65:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:31:54 2026 by rpki-client