Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
File:                     tU4IRltUXO7x4uEAl3XZG6QStj0.mft (raw, json)
Hash identifier:          PVAJlQO150SvcWt4p10ha0WppfcMzZo6sdlFjqhOZ2M=
Subject key identifier:   22:55:9E:EF:B2:81:F3:C8:6D:DC:ED:4E:84:B7:A3:2E:B6:87:6A:FD
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Certificate issuer:       /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial:       B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
Manifest number:          90
Signing time:             Tue 12 May 2026 03:15:22 +0000
Manifest this update:     Tue 12 May 2026 03:15:21 +0000
Manifest next update:     Tue 19 May 2026 03:15:21 +0000
Files and hashes:         1: tU4IRltUXO7x4uEAl3XZG6QStj0.crl (hash: i8Vs2h11NbIpYLl/GIvtrYUnxiHv0MuiEMXYBZgU/L4=)
                          2: B9DCE45A347111F19700968FA5833773.roa (hash: 6QpnuOmxKQrcMtBDCLToCXkzosmzHxUQUPokRTTJH3w=)
                          3: D2D5E3A2429111F1A9B50A47B2833773.roa (hash: JNJnwJdlLDhaD1G/+iNzHqjRU67B9dzGcdSz2okho74=)
                          4: CC6E06464DB011F1841B5A61A9833773.roa (hash: EVyYFIZNxK8a7Tjlv1GJXTQzYVTlNFeidUt73d+7VzA=)
                          5: 5493E832AF1511F09DB9CB78C4F9AE02.roa (hash: uIjz1D93M1fso+Y//Hqt4d2aDi49XaTeerlMUnOZ7Ao=)
                          6: 36B69F0C218F11F19319393A0D3D8C67.roa (hash: KJ//K7GtgLc3Sie2BItNl434WLtJNinu64G7n9RU6IE=)
                          7: AAE73A68450111F18FAFB8B98E833773.roa (hash: M6g5Gu1STDjqBwg7jYIrBUM+lRO9g/M65OCYmhaWupM=)
                          8: 048707902E3E11F18FB4E28692833773.roa (hash: K3CKFq9dj9GC5sZcbxnP9CeuT3Ddzdh/+xr7StrmVGQ=)
                          9: 1A44C40648FF11F1AE16E45D93833773.roa (hash: q7YWA5SPxz9lm686m7SUsJ/DXFlxCYiGkRbWYzw7qBs=)
                          10: 2D01B33649CE11F1962271F3A6833773.roa (hash: OdalZasx/DjTMoexBV48c+QeVXCFs+zT88TAq5BCaJg=)
                          11: 050E38E62E3E11F18FB4E28692833773.roa (hash: /JFZwhWSwSdVNSAIA2VslFfJ0mFpMyrPcYB8jKhIelI=)
                          12: 7C66030E49CF11F1A6BACE62A7833773.roa (hash: tBXwz1eGx7JSBx7KbE61Py7Ep4zIyFlKzA5jH4c9rY0=)
                          13: 1E9FD7DA27DE11F1A118CE77A7833773.roa (hash: OMcpNf88AE2cPyG8acihz1Bkk8xz4Ahg+L34+LyVpoE=)
                          14: ABCCE66C445C11F1AD9768EE92833773.roa (hash: 9iBZLQ9uktWZ65mu8nlRlZWV5ecR8Ndx/Ji4IWLuSGw=)
                          15: CCFDB2144DB011F1841B5A61A9833773.roa (hash: ZHHXb+Rd1SAvm8Cz4gOMYdUMC3J7YTS6auWCfBjP8e4=)
                          16: 7E20B24444FB11F1B2B16DC3CD833773.roa (hash: Z/aKf77qoC/D2esHAmrCa6cvuliS7eMoobwi4UM9D1o=)
                          17: A7349B8A499E11F19CE2905A97833773.roa (hash: tv8Ttyi8smlY2FRZQxJdaalHWRaIZpl5MIGpz7txhiY=)
                          18: 03E9601C2E3E11F18FB4E28692833773.roa (hash: KBDF+qCnvbkS3zAFCAW3rveKS8qVa82y4wo236YyG7M=)
                          19: 23967BF24A7711F1A7BED77BA6833773.roa (hash: Fp0dYx6TPqms3ShBwcnNza2eQIEhSvJF0hdWgmkuGzo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
                          rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 03:15:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181 (0xb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
        Validity
            Not Before: May 12 03:15:21 2026 GMT
            Not After : May 19 03:15:21 2026 GMT
        Subject: CN=6a029b4a-26a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:93:b1:54:2c:b5:a4:42:da:a2:e8:4f:e3:04:
                    d8:67:86:c8:05:15:7a:12:a4:53:f6:44:0b:90:db:
                    99:0f:60:65:53:34:17:b2:62:78:6e:d2:31:ed:3f:
                    1e:ce:e6:e4:b8:c4:df:48:dc:42:6e:76:c3:41:a3:
                    54:2f:04:39:3b:87:12:53:83:f3:53:af:fe:fe:c1:
                    e6:94:b8:b4:7e:70:81:24:08:21:fb:f6:05:e8:d9:
                    b0:37:2d:ce:84:a2:0b:6e:aa:cc:bb:01:d1:6f:5c:
                    f6:dd:66:be:bc:57:65:c7:67:c0:be:cb:47:19:63:
                    f1:41:93:fc:5b:03:e1:e5:7c:93:cf:b6:5e:b1:bf:
                    9f:df:cb:73:39:93:2a:d3:49:b4:32:b1:a6:f8:cf:
                    18:d4:84:56:32:86:37:74:76:bf:47:45:c0:04:54:
                    36:cb:49:fd:f0:ef:b7:b8:f4:1b:b6:16:af:83:36:
                    2d:86:15:cf:86:3e:2c:a0:65:d2:5a:44:eb:28:7c:
                    6f:43:20:2b:9b:d1:c6:1b:9a:74:d5:93:4d:02:5e:
                    d8:56:9c:fc:c9:c7:45:e8:97:2e:f0:54:22:c8:fc:
                    1c:72:f2:14:e3:12:a5:df:19:40:b4:52:a9:65:d9:
                    56:48:79:41:e0:9b:08:01:52:72:18:51:88:49:79:
                    29:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:55:9E:EF:B2:81:F3:C8:6D:DC:ED:4E:84:B7:A3:2E:B6:87:6A:FD
            X509v3 Authority Key Identifier:
                keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:06:85:8c:44:3e:29:da:ac:b4:d0:07:21:42:1c:f8:01:c1:
         b5:6b:66:07:d2:3d:b7:d1:3c:09:ab:12:a7:f8:3b:f5:23:71:
         02:a5:3b:28:bd:2c:1f:22:be:f4:f8:33:9a:e1:75:d1:37:16:
         4e:ed:4f:82:98:8f:ef:d5:bc:39:0d:fa:0b:d5:3c:64:9a:ec:
         a2:83:c6:d8:e9:de:1c:9f:9a:4c:85:18:ac:29:da:14:92:5a:
         e1:0d:71:c4:b0:de:5b:2b:f0:a7:32:d1:2d:51:33:c7:d7:50:
         77:0b:0c:5e:64:08:81:9a:9f:ed:62:8f:fd:b5:b0:91:d0:d7:
         27:c5:97:45:31:23:93:9c:c7:cb:1b:0f:d7:d7:34:1e:16:7d:
         7f:c5:7d:ce:be:03:84:f1:90:3c:07:32:8a:3f:4a:f2:2d:31:
         d9:72:f4:cd:86:ec:04:8a:15:45:d4:b1:6d:04:db:74:29:21:
         44:98:46:ec:9f:e1:ef:b0:6c:c9:25:e9:42:37:35:12:11:6c:
         a7:9d:70:29:28:75:16:55:01:71:2b:79:9b:8a:63:c8:47:7e:
         d1:19:4a:59:ce:c2:e1:de:b2:6b:f0:f4:90:56:0a:37:ed:08:
         66:0b:c4:d4:14:3f:54:70:dc:ae:26:8d:e9:9b:28:65:bc:08:
         6b:54:fa:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:03:53 2026 by rpki-client