Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft
File:                     aMW6vfwSOWbQX4DD-kI3lELEIgw.mft (raw, json)
Hash identifier:          qU/O7U7vVr1aSUkByUI/a2Zau9rcTRbCRNsf9GeKlwM=
Subject key identifier:   86:52:A7:60:89:99:73:FA:5B:97:93:00:CF:FB:63:86:D5:72:0F:7E
Authority key identifier: 68:C5:BA:BD:FC:12:39:66:D0:5F:80:C3:FA:42:37:94:42:C4:22:0C
Certificate issuer:       /CN=A917201D/serialNumber=68C5BABDFC123966D05F80C3FA42379442C4220C
Certificate serial:       356F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft
Manifest number:          354D
Signing time:             Tue 12 May 2026 14:45:53 +0000
Manifest this update:     Tue 12 May 2026 14:45:53 +0000
Manifest next update:     Tue 19 May 2026 14:45:53 +0000
Files and hashes:         1: aMW6vfwSOWbQX4DD-kI3lELEIgw.crl (hash: Ivobfj1gd+q8iZ+G/ji+/jR814oGmwpQwu6cbQxmb4w=)
                          2: 73438FF06DED11E9A21D1341C4F9AE02.roa (hash: wkiRfCu/XLYyXw4TOm6YezOpImuhMfUU+dENf0r96zI=)
                          3: E05FE99AB0D511E5B4F68B09C4F9AE02.roa (hash: cbOF25KS3Ii1neQB3lO33xPaJIbgxTebcwnMlxfjqmE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.crl
                          rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:45:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13679 (0x356f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917201D, serialNumber=68C5BABDFC123966D05F80C3FA42379442C4220C
        Validity
            Not Before: May 12 14:45:53 2026 GMT
            Not After : May 19 14:45:53 2026 GMT
        Subject: CN=6a033d21-5730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:dd:c0:35:58:94:3a:8d:56:c2:33:57:be:d9:
                    87:e2:b7:be:a3:d7:1b:15:0d:82:69:f4:a7:dc:2e:
                    ac:ac:05:73:e9:e1:c0:8f:2d:d8:89:4b:5c:df:28:
                    81:c3:66:b4:5c:8b:59:1e:b8:4d:68:fe:0d:a2:b1:
                    ac:17:fd:95:e2:e9:57:ec:ee:2b:b5:38:38:db:23:
                    a1:22:dc:1d:38:21:56:e2:ba:b9:cf:59:4d:6f:7d:
                    aa:ef:24:28:ff:a2:0e:1c:7b:fb:16:39:f0:b7:2b:
                    c3:b2:ae:1f:70:8b:e6:26:dc:81:9a:84:e5:d8:3b:
                    26:7d:16:23:90:7c:18:d7:68:23:17:79:74:4f:10:
                    42:ce:01:8d:b0:b2:57:fc:1f:78:60:f9:02:d6:98:
                    11:f0:de:45:c5:dd:e8:41:e3:ca:f4:b3:5e:22:1e:
                    93:aa:37:65:a4:2c:0a:af:d3:09:c2:1f:d7:d3:e1:
                    50:f0:1f:00:63:d7:8a:6f:3c:0d:e8:b6:d2:88:d1:
                    b5:06:95:dd:51:66:f4:97:50:68:60:fe:92:da:cd:
                    aa:7b:7a:a6:85:82:dc:e4:b0:ca:45:ec:9a:62:9b:
                    23:bd:81:e3:6e:fd:4a:43:2d:0d:17:3e:64:24:6b:
                    35:bb:20:79:7c:b7:76:eb:19:4c:a6:f7:c6:9b:a5:
                    26:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:52:A7:60:89:99:73:FA:5B:97:93:00:CF:FB:63:86:D5:72:0F:7E
            X509v3 Authority Key Identifier:
                keyid:68:C5:BA:BD:FC:12:39:66:D0:5F:80:C3:FA:42:37:94:42:C4:22:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:65:0f:0b:b9:95:52:9d:ee:7d:54:55:30:b8:d3:6c:f8:7c:
         15:8e:32:67:87:40:af:eb:19:39:cd:29:df:73:03:cd:9c:6e:
         64:ec:78:b9:86:f0:51:d3:8f:c5:df:f1:b1:c4:c6:2d:81:86:
         6d:f8:39:28:91:5a:9c:85:8b:29:44:9a:61:a2:61:ea:15:c8:
         3f:fb:36:63:9c:0a:3d:56:13:96:1a:e5:24:bd:b1:26:54:6a:
         f9:bb:9d:b5:ae:39:0e:44:16:24:bf:86:b9:31:3b:61:2a:f5:
         0e:bf:a9:62:40:7f:9e:e3:c4:95:a8:fc:d1:6e:1b:98:28:80:
         9f:33:c1:63:4e:2c:86:2c:3f:8d:bd:ed:60:9f:5f:4e:c3:38:
         ed:40:b1:b4:7a:50:f0:cb:5f:2f:71:62:82:70:c7:86:8d:42:
         de:4f:46:af:30:80:2f:76:47:60:ef:9a:43:c1:33:84:ba:49:
         ac:26:56:ed:89:6f:09:b8:b8:8f:07:bb:21:df:61:25:bb:d7:
         0c:12:f7:59:96:e4:85:17:da:6b:bf:94:27:1b:23:4d:5a:38:
         35:c8:43:eb:cc:c2:ba:8c:de:01:72:24:3c:a5:75:69:e5:cf:
         ed:52:ae:a2:79:6f:7f:55:8d:43:31:2c:28:24:2f:d1:63:7c:
         15:27:5d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:33:47 2026 by rpki-client