Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft
File:                     _qS5bzmD92nHM5dFbBK5D2QkbHw.mft (raw, json)
Hash identifier:          Uhr80PwYDqkiNM6uSMdWUqCC2WkMrVbhkkaXjc0P5o4=
Subject key identifier:   E9:3F:F3:01:48:38:42:5E:B0:09:A9:FF:76:94:B2:09:5C:5E:0C:CD
Authority key identifier: FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C
Certificate issuer:       /CN=A916D36A/serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C
Certificate serial:       1920
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft
Manifest number:          18FD
Signing time:             Tue 12 May 2026 16:27:22 +0000
Manifest this update:     Tue 12 May 2026 16:27:22 +0000
Manifest next update:     Tue 19 May 2026 16:27:22 +0000
Files and hashes:         1: _qS5bzmD92nHM5dFbBK5D2QkbHw.crl (hash: bXu98zq/C9H/IYtyaaDjqaF1SeJvTeqJ2ryVbTS+ovs=)
                          2: 8C3BBD78F0D611EDAF996E15C4F9AE02.roa (hash: awYe5rrh007RCSjsVd7jO0qaN9guB6y5rbMfa7rSYvk=)
                          3: C6454260AA9A11E7B4776E52C4F9AE02.roa (hash: QtWEc3antTd2K+91CBKQnCvQy2+FDNwa+QWniiVB1lI=)
                          4: 7F77220A143811EE97A64D19C4F9AE02.roa (hash: aze7oRbnjZ11dpJLkBi4xyiEoCsX64SwDqIgSioB2cM=)
                          5: 5A8744D8143411EEAB1A5D73C4F9AE02.roa (hash: gpPf8YHxUumqTPOX7/waaXvtALxStgij8JmqlVAXhlc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.crl
                          rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 16:27:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6432 (0x1920)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D36A, serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C
        Validity
            Not Before: May 12 16:27:22 2026 GMT
            Not After : May 19 16:27:22 2026 GMT
        Subject: CN=6a0354ea-1250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f8:5b:98:f0:2c:9b:5f:25:8f:2f:23:86:02:
                    6a:d9:b3:a3:9c:4e:10:f6:39:6c:c5:c6:9b:0c:52:
                    ad:42:78:61:f7:f3:ab:17:b4:46:43:0c:23:98:18:
                    0a:29:2b:97:12:1c:bc:4c:72:75:be:be:55:78:49:
                    c9:a5:36:df:83:ca:9e:87:3f:35:06:ba:38:47:19:
                    73:e3:7a:2f:06:38:c4:a0:92:1d:0c:3a:c7:e3:01:
                    cb:4b:da:38:8f:87:fb:4d:2a:79:6d:2b:20:09:3c:
                    db:7d:f7:00:d2:05:2e:d9:31:93:5d:aa:60:fe:ae:
                    7f:da:8c:1f:32:bd:fa:fe:28:59:78:00:a1:56:0b:
                    17:45:bd:8d:0b:49:c0:92:f5:f5:ad:c6:2e:6f:af:
                    f4:b0:06:95:f5:f7:c2:5d:a9:41:da:25:7e:d2:6a:
                    3e:f3:db:32:f8:9c:b3:7a:4b:aa:d1:15:ac:25:ae:
                    e4:f8:49:d6:f9:de:b1:07:3e:f2:f5:c6:63:a2:74:
                    77:d9:8d:db:85:93:ad:4e:0c:b0:12:bc:59:f6:fc:
                    40:1c:fa:23:97:b4:30:66:4d:ab:0e:35:10:55:e4:
                    3e:56:ee:92:8a:09:ab:e8:37:f0:fe:fc:61:0a:0e:
                    b0:9d:9e:2b:ce:4c:7b:50:a7:52:62:29:93:89:c9:
                    8b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:3F:F3:01:48:38:42:5E:B0:09:A9:FF:76:94:B2:09:5C:5E:0C:CD
            X509v3 Authority Key Identifier:
                keyid:FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:4a:ce:20:4b:10:94:8d:e7:c7:0f:f9:54:12:b7:ca:fb:37:
         26:80:f4:5e:72:c9:ff:af:79:e8:6d:96:ae:09:48:9f:9f:fb:
         6b:fa:aa:76:3a:d2:c4:c0:87:98:f8:e1:b6:3a:4e:ac:c1:1c:
         28:95:3a:f7:5d:65:d1:8a:87:2b:da:cf:4f:a4:f3:a5:12:a4:
         19:12:ca:56:eb:62:53:aa:7b:52:2f:f5:58:94:ea:55:f3:dd:
         3d:65:1c:23:fc:7a:94:6b:e2:74:e3:e3:f0:bf:52:2f:bf:cc:
         7f:3f:39:30:27:1a:62:5b:b5:c4:2e:3f:e0:2b:f7:d7:95:31:
         69:41:74:76:de:e2:e0:31:dc:b7:d4:cb:d0:f8:2a:29:89:fc:
         5c:6c:b9:66:d3:62:27:33:c7:6e:40:3a:88:59:ef:68:9d:f9:
         56:34:ac:88:e1:a7:db:ce:c5:69:14:e0:68:d8:a8:40:e6:cc:
         19:e0:18:4a:2b:ac:da:6b:80:1e:6a:37:30:5d:12:ba:96:7a:
         b9:93:97:ae:5d:2b:ad:89:7b:de:cc:e6:a5:c0:8d:39:e3:ec:
         e4:4c:d9:1c:ca:30:45:53:11:fe:86:44:ba:b6:7e:69:61:59:
         1a:73:6a:80:d9:5f:bf:05:d1:54:c5:5f:c4:8c:2f:aa:60:3e:
         67:e5:30:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:03:25 2026 by rpki-client