Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171155/09D36C90930511F0BEEAC611C4F9AE02/rT-mr4DjcxHQs67JSnV-VEY8Sbc.mft
File:                     rT-mr4DjcxHQs67JSnV-VEY8Sbc.mft (raw, json)
Hash identifier:          2uuUFwblomO7baT4hSyJZOhIQRj37BPRMArjQq+GfsQ=
Subject key identifier:   56:8D:2B:EE:90:E7:59:D5:D7:9E:16:01:C9:A4:DA:68:7C:01:FC:5F
Authority key identifier: AD:3F:A6:AF:80:E3:73:11:D0:B3:AE:C9:4A:75:7E:54:46:3C:49:B7
Certificate issuer:       /CN=A9171155/serialNumber=AD3FA6AF80E37311D0B3AEC94A757E54463C49B7
Certificate serial:       83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT-mr4DjcxHQs67JSnV-VEY8Sbc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171155/09D36C90930511F0BEEAC611C4F9AE02/rT-mr4DjcxHQs67JSnV-VEY8Sbc.mft
Manifest number:          7F
Signing time:             Mon 11 May 2026 07:51:36 +0000
Manifest this update:     Mon 11 May 2026 07:51:35 +0000
Manifest next update:     Mon 18 May 2026 07:51:35 +0000
Files and hashes:         1: rT-mr4DjcxHQs67JSnV-VEY8Sbc.crl (hash: K4MyU675YSsheI+t6CqKPOBnaybc+5QPu5W8nJ3kuNk=)
                          2: DC9357242CEF11F19569049CA6833773.roa (hash: LyXNFSUKaVEfYkBM93JJQqk8m5s8Gi0RCu4mZmOB6Ok=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171155/09D36C90930511F0BEEAC611C4F9AE02/rT-mr4DjcxHQs67JSnV-VEY8Sbc.crl
                          rsync://rpki.apnic.net/member_repository/A9171155/09D36C90930511F0BEEAC611C4F9AE02/rT-mr4DjcxHQs67JSnV-VEY8Sbc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT-mr4DjcxHQs67JSnV-VEY8Sbc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 07:51:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171155, serialNumber=AD3FA6AF80E37311D0B3AEC94A757E54463C49B7
        Validity
            Not Before: May 11 07:51:35 2026 GMT
            Not After : May 18 07:51:35 2026 GMT
        Subject: CN=6a018a88-fe91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:44:ed:c9:b4:87:09:3b:f0:19:68:e0:a0:5e:
                    a8:fe:87:aa:7e:f0:78:6a:97:70:2e:61:da:5d:52:
                    bb:66:c4:46:3e:74:ab:80:7d:b6:8b:fe:58:53:fe:
                    16:a9:e8:b1:b3:a6:9c:4e:6e:e8:32:67:95:0b:76:
                    7b:b2:1b:bf:bb:41:6e:f4:b2:76:d5:42:6c:74:3b:
                    5b:23:ce:45:5c:ff:4c:df:04:80:1b:a2:55:4a:1a:
                    c6:3e:e3:b8:7c:7e:13:90:64:d1:61:0b:f9:c2:5c:
                    ec:6d:54:d2:4f:29:ee:45:a1:a8:14:ad:b7:ae:22:
                    12:a3:2e:e5:eb:74:1a:71:35:65:6b:6c:87:8d:ba:
                    95:cd:50:18:05:4c:fd:38:fc:22:c2:58:e4:ee:88:
                    bc:43:65:ca:f6:68:7e:16:7f:79:0e:6e:a2:40:72:
                    c9:45:f8:56:26:8b:e6:a6:90:6b:36:22:9c:ec:c8:
                    eb:92:49:ca:bd:0f:9d:9f:58:ee:c8:f5:66:10:f5:
                    03:31:76:97:b3:43:f9:61:ff:81:ab:8f:66:19:9d:
                    bb:e5:b6:5d:2e:a4:02:95:53:12:cc:a9:39:ab:ba:
                    5b:7f:84:b0:65:7b:3b:21:5d:49:56:12:96:3a:c0:
                    fd:93:c5:77:fc:6a:6b:0a:d2:ab:46:8b:fe:7d:fe:
                    bd:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:8D:2B:EE:90:E7:59:D5:D7:9E:16:01:C9:A4:DA:68:7C:01:FC:5F
            X509v3 Authority Key Identifier:
                keyid:AD:3F:A6:AF:80:E3:73:11:D0:B3:AE:C9:4A:75:7E:54:46:3C:49:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171155/09D36C90930511F0BEEAC611C4F9AE02/rT-mr4DjcxHQs67JSnV-VEY8Sbc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT-mr4DjcxHQs67JSnV-VEY8Sbc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171155/09D36C90930511F0BEEAC611C4F9AE02/rT-mr4DjcxHQs67JSnV-VEY8Sbc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:07:d0:7d:1d:00:b1:51:d4:4b:f6:b4:95:cf:10:c9:e7:b1:
         21:47:4c:90:2b:2a:c9:6b:47:ce:08:38:bf:79:e9:07:76:f7:
         e1:61:27:38:2f:73:da:80:7f:b0:dd:90:72:87:81:03:59:f0:
         53:74:87:e9:bc:f0:a8:2e:2f:90:a9:d3:f3:e2:ae:93:30:8b:
         16:3a:a2:9b:b1:8c:49:91:3d:f7:30:30:84:2c:52:12:49:65:
         66:69:1f:53:51:6e:59:68:2b:cd:16:67:81:7e:ae:61:fa:f2:
         36:8b:1a:5d:a0:84:33:b7:4c:94:c1:8f:94:b5:b4:1f:5c:d5:
         09:9b:c3:30:3d:a3:09:1a:43:e6:3f:30:5b:e9:d8:97:6e:c1:
         d4:6f:1f:ee:ae:a1:b5:ef:28:a8:41:c6:22:88:ed:39:bc:73:
         80:f0:4a:bd:48:56:b9:27:de:67:0c:14:90:4c:10:1b:42:b4:
         06:74:66:16:d3:83:ec:10:d9:10:6a:63:6b:b7:b3:d6:81:4d:
         4a:81:a7:6b:9a:c7:c7:8c:a2:2f:da:72:b7:0e:6f:db:85:71:
         c8:57:6a:df:a9:3d:35:29:68:58:99:9d:de:71:55:bf:f2:e9:
         e2:7f:b6:77:16:62:82:6d:db:d7:79:ad:79:5d:98:f2:a7:29:
         6a:d7:20:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:44:49 2026 by rpki-client