Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.mft
File:                     _z4OD6f_JX29huYrEpqZTYpJ2E4.mft (raw, json)
Hash identifier:          5yzzlz4jbNz87EILQo2sthVFL207Ck0BtkVgWK8a+F0=
Subject key identifier:   18:AC:17:6D:D9:52:CE:E6:3B:74:97:F2:14:CD:F7:98:4D:95:8F:9B
Authority key identifier: FF:3E:0E:0F:A7:FF:25:7D:BD:86:E6:2B:12:9A:99:4D:8A:49:D8:4E
Certificate issuer:       /CN=A916B1F5/serialNumber=FF3E0E0FA7FF257DBD86E62B129A994D8A49D84E
Certificate serial:       02CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_z4OD6f_JX29huYrEpqZTYpJ2E4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.mft
Manifest number:          02C7
Signing time:             Mon 11 May 2026 01:28:22 +0000
Manifest this update:     Mon 11 May 2026 01:28:22 +0000
Manifest next update:     Mon 18 May 2026 01:28:22 +0000
Files and hashes:         1: _z4OD6f_JX29huYrEpqZTYpJ2E4.crl (hash: PE23xLkbWDmEhYnBUe4GdiVzLOW+0vKrlQ6rWibUsI8=)
                          2: 28536FDC340111EDB747A054C4F9AE02.roa (hash: FbLoVUwsuqm0sT8Nxbam5MwbDmX4JcPXq2npG0lokuo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.crl
                          rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_z4OD6f_JX29huYrEpqZTYpJ2E4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 01:28:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 717 (0x2cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B1F5, serialNumber=FF3E0E0FA7FF257DBD86E62B129A994D8A49D84E
        Validity
            Not Before: May 11 01:28:22 2026 GMT
            Not After : May 18 01:28:22 2026 GMT
        Subject: CN=6a0130b6-c101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:0e:28:db:26:f2:3d:58:43:08:c5:10:6d:57:
                    19:1c:a0:14:34:05:b2:a4:04:7e:03:ad:37:22:86:
                    13:fa:f7:df:eb:0a:51:3c:d5:46:04:84:38:91:6d:
                    b8:98:59:c1:97:55:b6:03:90:87:96:cd:f5:b4:a3:
                    2b:0d:77:4e:59:7b:e8:95:55:5b:32:c9:64:75:8b:
                    b7:33:25:36:f2:5d:b9:7f:0b:ce:c0:5d:5d:1b:17:
                    9e:ce:55:f0:eb:5b:43:96:73:5d:0c:cc:bd:8b:6f:
                    cc:a5:dc:30:8d:2c:f9:97:5f:5a:dc:62:a3:38:55:
                    4c:e1:73:22:51:af:36:cd:42:e2:1d:3f:73:bb:d0:
                    3d:76:a2:10:5b:90:0d:bd:b6:d8:fa:9f:9d:aa:47:
                    3a:49:87:38:48:5a:b9:c6:8b:78:ef:10:08:bc:e3:
                    e1:56:bd:a5:ee:eb:28:50:68:3f:fc:e7:2e:2b:fc:
                    9f:2b:ad:f6:e8:f3:66:77:bc:70:47:3e:d2:1d:69:
                    a6:ef:d1:72:e4:e2:5f:b4:47:ba:3e:be:35:ac:e2:
                    5c:8f:6e:82:7b:95:9f:5d:ac:6e:40:a9:be:c1:1b:
                    50:0e:53:6f:0d:fc:6a:d2:2c:09:c8:be:5e:9b:3b:
                    1d:78:67:41:d8:68:17:6c:ef:9d:e4:36:a5:d5:51:
                    fb:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:AC:17:6D:D9:52:CE:E6:3B:74:97:F2:14:CD:F7:98:4D:95:8F:9B
            X509v3 Authority Key Identifier:
                keyid:FF:3E:0E:0F:A7:FF:25:7D:BD:86:E6:2B:12:9A:99:4D:8A:49:D8:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_z4OD6f_JX29huYrEpqZTYpJ2E4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:d1:bc:a5:2d:b4:f2:62:f0:82:27:79:f3:35:d0:62:6d:13:
         0c:4b:f4:f4:65:5a:6b:18:d7:4f:3e:b7:85:34:ad:3b:a7:41:
         6e:de:f5:11:63:cc:94:4f:b4:22:76:f1:6b:1e:70:d9:13:c8:
         e7:c7:0d:ef:37:d4:e5:f7:9e:f2:46:9f:c8:7f:f5:86:8a:6a:
         dd:7a:48:83:be:81:91:2b:83:fb:8f:7a:5d:ea:a6:b9:b0:ce:
         bf:4d:e8:c2:70:d8:df:4b:a8:7f:e0:1f:8f:df:22:b4:46:4a:
         2b:fc:ac:a5:c4:e8:4b:b3:ac:ee:7c:d4:77:9c:dd:c5:ea:5a:
         f3:1a:7f:7d:86:a8:de:a4:c4:a0:67:97:8b:48:d9:eb:6d:27:
         bb:b6:2b:32:30:9b:32:f9:c0:49:a7:e2:7d:d4:22:2d:90:c3:
         5b:28:05:ac:37:69:1a:8d:35:66:6f:5e:7c:ce:ee:8b:96:be:
         cc:c2:27:ee:91:ca:54:96:49:c1:ca:a7:e8:8f:09:9b:34:30:
         9c:1e:bb:cc:81:cb:33:96:09:59:6c:00:e8:bf:d2:c2:3e:19:
         30:c6:16:64:6d:42:43:48:b2:47:71:12:d1:16:a6:10:1c:c9:
         da:a0:86:81:7d:59:26:2d:8f:93:55:ae:c1:b5:d2:2c:d7:bb:
         4e:28:c5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:04:40 2026 by rpki-client