Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E1C6/42E0B6B2D51F11F08792B57DC4F9AE02/8T313f28CQG_wEdBIIjaNJOg8kQ.mft
File:                     8T313f28CQG_wEdBIIjaNJOg8kQ.mft (raw, json)
Hash identifier:          s23kMbhTZQG0Vt4ROaYkI1t6OvCWkjKkKKOZafC7HWc=
Subject key identifier:   9A:A0:60:57:0B:C6:F7:5C:1B:BD:E9:CF:79:10:56:D0:32:92:1F:6D
Authority key identifier: F1:3D:F5:DD:FD:BC:09:01:BF:C0:47:41:20:88:DA:34:93:A0:F2:44
Certificate issuer:       /CN=A916E1C6/serialNumber=F13DF5DDFDBC0901BFC047412088DA3493A0F244
Certificate serial:       54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8T313f28CQG_wEdBIIjaNJOg8kQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E1C6/42E0B6B2D51F11F08792B57DC4F9AE02/8T313f28CQG_wEdBIIjaNJOg8kQ.mft
Manifest number:          52
Signing time:             Wed 13 May 2026 08:22:18 +0000
Manifest this update:     Wed 13 May 2026 08:22:17 +0000
Manifest next update:     Wed 20 May 2026 08:22:17 +0000
Files and hashes:         1: 8T313f28CQG_wEdBIIjaNJOg8kQ.crl (hash: SgJF4BZ/Pc66eFzaAFkOUqRjyY/Gy5xwqzKM0CW7BcE=)
                          2: 20F76E36056911F187C42801313D8C67.roa (hash: Se4FSt1iM9MDo+gX2SyfdFL5Hm8kZKb/ZKJR41JulNA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E1C6/42E0B6B2D51F11F08792B57DC4F9AE02/8T313f28CQG_wEdBIIjaNJOg8kQ.crl
                          rsync://rpki.apnic.net/member_repository/A916E1C6/42E0B6B2D51F11F08792B57DC4F9AE02/8T313f28CQG_wEdBIIjaNJOg8kQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8T313f28CQG_wEdBIIjaNJOg8kQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 08:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E1C6, serialNumber=F13DF5DDFDBC0901BFC047412088DA3493A0F244
        Validity
            Not Before: May 13 08:22:17 2026 GMT
            Not After : May 20 08:22:17 2026 GMT
        Subject: CN=6a0434ba-b27d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e7:0c:b8:31:2d:c1:1b:ad:1e:f9:61:84:7a:
                    9b:aa:16:79:80:9f:f8:96:c1:d0:a7:f9:17:3a:cc:
                    e4:e2:60:8b:ff:b8:a9:01:1e:8e:f1:b8:a9:4a:d3:
                    c7:aa:a8:46:7d:06:bd:c3:a6:ef:44:6e:86:86:45:
                    d9:48:b9:8e:58:4e:79:22:52:3d:46:47:83:ce:05:
                    ab:ea:6e:60:9d:ff:4a:6a:f8:c4:35:7c:50:ec:91:
                    9e:fa:e9:e9:9e:35:ce:12:42:e4:7b:5a:8d:4c:e3:
                    22:eb:70:a0:f3:05:36:f0:44:2a:b8:05:db:9e:74:
                    58:c3:3e:93:93:0a:5f:69:8c:7c:e2:b5:16:8a:4a:
                    16:7b:eb:40:d0:a0:ae:91:11:68:6c:4c:a0:2b:6c:
                    0f:9a:24:ca:9d:36:76:63:2f:fa:b3:3a:3e:d0:2b:
                    ad:10:be:6c:a1:9d:f6:29:54:5c:61:16:8c:d8:9d:
                    5a:dd:73:ff:a5:91:e4:f2:4a:63:8d:2a:d8:71:7f:
                    54:ef:08:0f:f7:52:f8:44:1a:85:5e:a3:c9:a0:9c:
                    e8:83:a4:b2:96:7d:81:8e:5d:8a:96:13:d2:c2:a2:
                    c3:ef:a4:b8:4a:d1:c4:32:a1:ff:f1:c3:af:c6:99:
                    13:da:42:c9:b6:7c:e5:4d:13:28:bb:99:77:b1:b2:
                    22:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A0:60:57:0B:C6:F7:5C:1B:BD:E9:CF:79:10:56:D0:32:92:1F:6D
            X509v3 Authority Key Identifier:
                keyid:F1:3D:F5:DD:FD:BC:09:01:BF:C0:47:41:20:88:DA:34:93:A0:F2:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E1C6/42E0B6B2D51F11F08792B57DC4F9AE02/8T313f28CQG_wEdBIIjaNJOg8kQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8T313f28CQG_wEdBIIjaNJOg8kQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E1C6/42E0B6B2D51F11F08792B57DC4F9AE02/8T313f28CQG_wEdBIIjaNJOg8kQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:45:c7:90:31:d9:9f:27:6b:19:81:89:0a:bb:21:95:89:17:
         71:7e:34:27:7a:c5:5b:be:7d:4a:67:0c:c3:78:2c:6a:2e:e3:
         9d:be:78:6c:ba:bb:21:20:64:c5:4c:58:89:ed:1a:a6:0d:e2:
         84:06:25:c8:1d:26:83:93:ae:bc:ef:07:f9:ca:7f:4a:cf:a2:
         5b:2c:bb:ab:b8:bd:02:6c:21:26:b8:a6:ea:a4:29:6e:1b:e7:
         28:53:5c:a1:f5:45:3e:df:76:0f:97:eb:66:f1:d2:0c:86:ac:
         cb:ad:97:2a:d5:71:68:97:d5:48:d9:a1:e2:89:bb:92:46:8f:
         3d:e0:12:fc:a3:80:b6:52:78:c0:6d:da:69:85:89:68:0a:11:
         7e:71:84:bf:c0:02:d1:a0:46:86:75:9c:8d:7c:be:0d:80:47:
         f6:43:43:cc:49:0d:64:a5:5e:b6:a3:85:eb:e1:16:2f:00:08:
         e0:da:0b:53:9b:6a:07:ff:e6:ba:d6:1a:2e:66:fb:61:be:ca:
         1d:9a:80:0d:d3:27:34:e8:dc:72:10:07:a2:0d:82:51:97:a1:
         c5:b1:35:5d:47:ec:4f:8f:82:c8:e8:48:e0:09:c1:3f:6f:0f:
         da:ae:62:28:ec:57:ff:f0:21:69:b6:15:82:c9:f6:14:da:4b:
         dc:bf:61:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:49:54 2026 by rpki-client