Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/aRiqcfNrBGNTplzAiXixjv-59cY.mft
File:                     aRiqcfNrBGNTplzAiXixjv-59cY.mft (raw, json)
Hash identifier:          nLXZB7Sj69I1zPG+ACRRISqPRKej28blEmIqZ2JLVKo=
Subject key identifier:   50:14:9C:71:3C:01:F2:53:D6:7F:4B:23:1B:1E:AD:EA:8F:39:28:8E
Authority key identifier: 69:18:AA:71:F3:6B:04:63:53:A6:5C:C0:89:78:B1:8E:FF:B9:F5:C6
Certificate issuer:       /CN=A9170EED/serialNumber=6918AA71F36B046353A65CC08978B18EFFB9F5C6
Certificate serial:       0142
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aRiqcfNrBGNTplzAiXixjv-59cY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/aRiqcfNrBGNTplzAiXixjv-59cY.mft
Manifest number:          0135
Signing time:             Wed 13 May 2026 05:39:26 +0000
Manifest this update:     Wed 13 May 2026 05:39:26 +0000
Manifest next update:     Wed 20 May 2026 05:39:26 +0000
Files and hashes:         1: aRiqcfNrBGNTplzAiXixjv-59cY.crl (hash: xj3/989AfHIznc+AJbSLXC8keBHQIwZGyS4jA8IoN0Q=)
                          2: A54CA35E853B11EFB513D149C4F9AE02.roa (hash: /vNUIQMQmo/+bpr7T8qr5NTsbD+Gg65QmwR+l9u79do=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/aRiqcfNrBGNTplzAiXixjv-59cY.crl
                          rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/aRiqcfNrBGNTplzAiXixjv-59cY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aRiqcfNrBGNTplzAiXixjv-59cY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 05:22:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 322 (0x142)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170EED, serialNumber=6918AA71F36B046353A65CC08978B18EFFB9F5C6
        Validity
            Not Before: May 13 05:39:26 2026 GMT
            Not After : May 20 05:39:26 2026 GMT
        Subject: CN=6a040e8e-776c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:42:5c:69:58:c5:af:96:e8:5b:d4:c7:6d:c4:
                    84:d4:7b:15:63:5e:aa:c9:c1:92:49:2a:23:49:18:
                    1b:93:44:78:33:11:3c:ad:d9:ec:b7:75:a4:17:e4:
                    75:4b:5a:16:74:5a:2e:37:8a:39:00:38:79:c8:f1:
                    01:1d:32:c7:26:c6:91:33:21:fa:50:84:aa:76:e2:
                    ec:48:0f:6d:fb:d3:3c:2f:a7:ad:f1:9a:7d:04:36:
                    22:58:27:48:fd:fd:75:cf:d5:f1:7c:e0:69:4d:a7:
                    1e:fd:1e:7d:08:d7:c2:85:fe:ab:58:79:a4:aa:60:
                    f2:8f:9e:c5:cf:46:a1:20:a8:b3:c3:6f:5f:12:8e:
                    be:43:90:3d:d6:e3:03:53:12:7c:c4:b1:ee:7d:63:
                    b5:6a:11:48:ca:38:73:fe:2f:a2:ab:c0:c6:13:7d:
                    1b:f3:98:b0:35:39:fb:8a:88:2b:9a:26:b6:2c:56:
                    bb:79:35:93:32:5d:43:39:2e:62:44:f2:94:1f:a9:
                    17:9c:19:f6:cf:cb:56:92:4f:9b:56:8a:f1:21:c0:
                    c3:97:f2:1a:69:99:6d:94:df:3a:95:04:c5:8d:d8:
                    d7:b2:49:00:36:38:4c:5c:fd:d0:9f:f5:c9:d9:e8:
                    ac:9c:a4:89:5f:06:6a:84:bc:e7:38:c6:d2:8f:35:
                    b2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:14:9C:71:3C:01:F2:53:D6:7F:4B:23:1B:1E:AD:EA:8F:39:28:8E
            X509v3 Authority Key Identifier:
                keyid:69:18:AA:71:F3:6B:04:63:53:A6:5C:C0:89:78:B1:8E:FF:B9:F5:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/aRiqcfNrBGNTplzAiXixjv-59cY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aRiqcfNrBGNTplzAiXixjv-59cY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170EED/37402ADE853B11EFA3072349C4F9AE02/aRiqcfNrBGNTplzAiXixjv-59cY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:14:53:c8:eb:ed:be:2f:7e:ba:f3:ce:f3:9c:85:c5:01:c3:
         27:84:f3:80:00:79:26:34:6d:2e:78:3d:c4:30:20:14:2b:20:
         bc:2e:ee:60:10:f1:8f:36:81:b8:66:de:41:2e:17:6b:38:41:
         ac:c0:af:ed:87:3d:d0:1f:f2:62:05:56:10:68:22:62:15:b8:
         ef:c0:a1:b6:f4:8a:4d:74:09:e7:81:65:51:2a:d5:c1:06:5b:
         46:d1:0c:d7:1b:e8:80:ba:87:1f:24:9a:fe:7e:92:dc:01:95:
         2b:11:84:91:e1:d6:29:57:d9:43:50:a4:11:7a:91:5f:16:e5:
         4e:e5:bd:88:c7:99:29:c1:97:0b:fa:37:6a:08:5a:0a:3e:ba:
         dc:1b:15:31:fd:1e:d8:4e:60:19:94:ee:b0:d4:05:7b:66:ff:
         ef:95:fb:84:f7:dc:06:3d:b4:24:0a:d3:0e:45:e1:e2:09:ee:
         b6:57:f2:31:10:09:86:d2:3b:fa:d1:24:66:98:48:bf:e5:0e:
         9c:7c:c1:ef:20:d4:27:16:06:5f:a2:4f:24:33:f9:c9:97:ed:
         be:50:e5:d1:8c:fc:4f:28:b7:06:ba:d0:62:c5:10:4f:dc:e4:
         30:d6:61:f2:e9:2c:d0:34:ea:a5:d8:d9:b0:14:1e:39:27:07:
         8d:43:b7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:51:12 2026 by rpki-client