Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft
File:                     9TkpGRnN4USwNO8oiwpjR4PoLH8.mft (raw, json)
Hash identifier:          yy4j/PkXzgZ8fKNANGmy7h9HBvaBWDE2hzM5zW7Cn20=
Subject key identifier:   38:2A:A1:AE:61:B4:7F:D8:9F:38:8B:7F:B7:BF:B3:7A:B3:B8:18:6A
Authority key identifier: F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F
Certificate issuer:       /CN=A916C61B/serialNumber=F539291919CDE144B034EF288B0A634783E82C7F
Certificate serial:       0525
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft
Manifest number:          04E3
Signing time:             Wed 13 May 2026 00:06:21 +0000
Manifest this update:     Wed 13 May 2026 00:06:21 +0000
Manifest next update:     Wed 20 May 2026 00:06:21 +0000
Files and hashes:         1: 9TkpGRnN4USwNO8oiwpjR4PoLH8.crl (hash: QRgU7BTr+Yw+A1W/7Jk7/aMqpDaMEjDEj4TiTJ/1Db8=)
                          2: 06B47656E38A11EFA4DDBC1EC4F9AE02.roa (hash: L0bFUWqUd+yYiBxZkG/O4CedjSFjxQ9eMCz4NZl6+G4=)
                          3: 976C4E84F72711EFB800B84BC4F9AE02.roa (hash: djqnP2LQeOsKvH3FdDCmYIV4VP7v3SLpxkrs/LZrwvQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.crl
                          rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 00:06:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1317 (0x525)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C61B, serialNumber=F539291919CDE144B034EF288B0A634783E82C7F
        Validity
            Not Before: May 13 00:06:21 2026 GMT
            Not After : May 20 00:06:21 2026 GMT
        Subject: CN=6a03c07d-4b43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8e:a2:b7:d3:f3:5c:8c:61:31:8f:70:0f:a5:
                    ba:b2:25:9c:e1:2e:df:ae:8d:81:ca:0c:31:85:66:
                    61:9c:b7:74:0e:1e:0d:8c:d6:a1:95:be:2e:a7:73:
                    50:1f:9e:65:1e:2c:6d:13:e3:f8:b6:9b:8c:f9:8d:
                    f1:ec:bd:fd:6d:d4:4e:14:2f:d5:01:65:62:d4:a3:
                    1a:bf:0c:19:c4:5d:58:57:f9:f2:87:f8:78:9c:f9:
                    d1:f1:13:ab:f3:d1:fd:1f:d5:ce:eb:c4:5b:0d:28:
                    58:c6:07:48:7b:31:77:22:bb:de:88:77:72:1e:d0:
                    10:d0:ca:59:aa:03:d8:0c:29:04:6b:97:16:33:d7:
                    56:83:90:be:c1:9e:4e:7f:2c:24:e4:a9:0c:89:5b:
                    01:0c:b4:42:35:cc:da:87:86:0c:8f:1d:38:4e:62:
                    df:e4:46:7a:aa:da:81:b4:7d:5d:da:35:b3:8f:8a:
                    d0:92:cf:bd:34:4d:35:fa:f4:49:5c:8f:6d:f0:c9:
                    72:c6:96:fa:9c:a6:5a:67:a4:24:86:cf:33:f7:3d:
                    53:79:3f:d9:c8:02:7c:82:61:e9:1a:7b:94:7f:e2:
                    8e:7c:03:cc:57:a5:bc:21:55:e7:11:dd:32:a7:05:
                    bc:10:be:0f:16:14:73:9a:73:76:2f:a2:18:e1:2d:
                    39:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:2A:A1:AE:61:B4:7F:D8:9F:38:8B:7F:B7:BF:B3:7A:B3:B8:18:6A
            X509v3 Authority Key Identifier:
                keyid:F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:24:73:b4:c8:c5:c2:18:c5:ba:36:d7:53:e4:16:f2:21:f8:
         39:53:69:6f:e9:3f:03:19:05:92:13:f1:1e:6b:4e:a5:2d:83:
         89:b7:fb:45:ed:f9:25:69:df:51:54:30:f3:b2:a4:36:82:70:
         c6:0a:f5:f0:24:87:60:2d:5c:06:0e:93:f6:d7:ad:ec:f6:b2:
         90:06:3d:f6:19:80:ce:95:e5:62:d2:fd:1f:b1:75:e3:14:e1:
         84:d5:71:42:d7:5f:1f:42:fe:ad:5b:49:99:97:c6:d3:7c:75:
         cd:3e:20:ab:c0:c7:59:40:4c:66:69:d6:e0:a6:95:c6:5c:9e:
         10:eb:e4:bd:56:13:15:3d:a6:f0:08:c7:19:c0:e5:47:a3:56:
         e7:44:c8:84:da:39:d9:e4:28:85:ed:d3:d9:eb:fe:c7:3d:4a:
         01:51:a6:98:d1:de:4a:af:3a:9d:85:d8:f5:24:f7:27:54:3e:
         74:95:8f:d5:03:40:d7:20:6c:0d:cc:5f:76:5e:46:82:3d:a5:
         10:b4:e1:32:27:f6:d5:4d:72:97:60:59:f9:d4:a2:91:5e:1d:
         95:61:29:21:f1:5a:d4:43:bd:05:f0:36:4b:cb:bd:d2:17:8b:
         97:36:b4:c9:8e:06:4a:5c:00:84:70:12:9d:50:df:db:f2:bb:
         cc:95:22:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:34:05 2026 by rpki-client