Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft
File:                     AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft (raw, json)
Hash identifier:          69au0ppKl+lQdKT9w8pPVZCE/ui4caB5CjLa05aKqqU=
Subject key identifier:   09:63:A3:C2:B4:A4:FF:C3:4D:FD:A7:8A:22:CC:37:EB:6B:95:61:86
Authority key identifier: 00:84:F4:7A:43:72:C8:F8:A7:D5:11:83:D5:03:6C:59:3D:19:E1:C3
Certificate issuer:       /CN=A916E9E3/serialNumber=0084F47A4372C8F8A7D51183D5036C593D19E1C3
Certificate serial:       87
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AIT0ekNyyPin1RGD1QNsWT0Z4cM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft
Manifest number:          7D
Signing time:             Mon 11 May 2026 07:58:20 +0000
Manifest this update:     Mon 11 May 2026 07:58:19 +0000
Manifest next update:     Mon 18 May 2026 07:58:19 +0000
Files and hashes:         1: AIT0ekNyyPin1RGD1QNsWT0Z4cM.crl (hash: S33DSgLQKWmez7gZFmC8tehv5Uhy3EWbtRieKvF6QKQ=)
                          2: 2A148C7E1D4211F1BDB413AD1B3D8C67.roa (hash: DOrKq68OV6bv6i78b+TQ33vm1VYkB4ogKWrurv8Roro=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.crl
                          rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AIT0ekNyyPin1RGD1QNsWT0Z4cM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 07:58:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E9E3, serialNumber=0084F47A4372C8F8A7D51183D5036C593D19E1C3
        Validity
            Not Before: May 11 07:58:19 2026 GMT
            Not After : May 18 07:58:19 2026 GMT
        Subject: CN=6a018c1b-2130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fe:e9:b3:5f:f2:44:9f:03:cb:40:1c:5c:76:
                    22:46:cc:85:d8:14:ed:d1:f6:38:a9:f0:05:65:3b:
                    c1:e8:49:d1:84:a0:cc:04:07:11:f2:c0:b5:52:03:
                    4a:e7:f1:e2:50:4b:3d:17:7f:71:42:91:04:3c:d9:
                    58:f9:18:2c:88:0e:0e:3a:c2:e9:a7:ed:f4:d5:17:
                    8b:ec:5c:4f:4b:0a:bb:4b:52:9e:ff:fe:d2:8d:f8:
                    17:f2:6a:a8:34:ed:63:bc:b0:8a:7e:61:04:3b:9c:
                    f9:87:06:6b:fe:ba:dc:e0:2f:17:f4:bb:d6:68:d8:
                    80:58:24:23:5a:ce:02:42:5f:8e:c0:83:4b:e0:25:
                    0b:dc:d2:14:90:ff:ba:4b:9e:1e:fe:d2:77:bd:69:
                    2c:69:5c:99:6e:d0:aa:4d:2e:3c:db:28:5d:1f:94:
                    a1:f5:42:df:65:f2:a0:85:03:58:24:1c:da:4f:4f:
                    2d:02:cf:ff:93:45:cb:1a:13:45:69:dc:58:c4:28:
                    8c:db:7e:5d:dd:80:91:4d:83:be:66:41:52:94:f8:
                    cb:1f:88:9a:ed:84:b8:f7:51:d3:f5:99:de:29:5c:
                    09:73:b7:9d:4d:24:ef:d6:58:bb:ca:ec:a2:7a:01:
                    9f:1c:44:ee:ff:23:d7:9c:b8:eb:8b:95:ae:32:34:
                    dd:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:63:A3:C2:B4:A4:FF:C3:4D:FD:A7:8A:22:CC:37:EB:6B:95:61:86
            X509v3 Authority Key Identifier:
                keyid:00:84:F4:7A:43:72:C8:F8:A7:D5:11:83:D5:03:6C:59:3D:19:E1:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AIT0ekNyyPin1RGD1QNsWT0Z4cM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:0f:56:70:8c:c8:e5:93:72:58:70:f7:50:f0:78:ac:42:91:
         28:9d:d7:4a:3e:45:16:9b:61:a0:41:9a:a2:b3:bb:80:b1:90:
         37:ad:ef:36:79:5b:40:5f:70:31:91:9d:8a:f2:57:c4:84:d4:
         8b:53:9f:9b:8e:37:df:14:a2:6a:85:5b:c1:b0:5d:b5:e1:f0:
         c8:6a:dd:11:1b:a2:f3:75:de:8b:07:f6:df:f3:c1:56:29:cf:
         fd:28:d6:8f:6d:8a:e0:07:4a:8a:bc:0c:56:be:41:89:89:b1:
         36:e2:cd:ab:55:aa:52:0a:0a:b4:3b:5d:3e:a7:cb:bd:d9:21:
         cd:a7:4d:ff:8f:b9:69:50:41:f9:c8:e5:e8:da:44:d7:fe:f5:
         25:e3:51:75:50:4b:0a:bf:d7:af:1b:65:73:48:de:4d:2b:89:
         5d:04:ed:87:63:7f:0a:e3:57:bb:c2:6f:03:17:44:cd:2a:0d:
         86:e7:9b:8f:34:cf:c2:3a:a1:90:5b:68:9b:67:44:bf:30:1a:
         e3:84:15:d9:38:75:ed:e8:e0:30:65:7a:23:c7:26:75:71:fa:
         39:d9:ee:0e:e0:d1:c5:41:d1:a7:67:8e:9a:c9:15:d8:e6:51:
         a9:f8:02:93:32:ae:2a:41:da:bb:a4:ad:b6:d4:48:46:27:6e:
         ff:57:c9:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:43:58 2026 by rpki-client