Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft
File:                     tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft (raw, json)
Hash identifier:          EiBpFihX2AQWueKeZbPXzKQzz3XEJoX5P9G996h+H6M=
Subject key identifier:   A4:63:AB:ED:B4:70:4A:82:4E:4F:4A:9E:C0:F6:2D:6D:11:21:08:FC
Authority key identifier: B4:9B:2B:11:D3:87:6D:EC:DE:13:F5:E8:F5:9E:64:1A:7D:09:3F:B9
Certificate issuer:       /CN=A9173161/serialNumber=B49B2B11D3876DECDE13F5E8F59E641A7D093FB9
Certificate serial:       0102
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft
Manifest number:          FC
Signing time:             Wed 13 May 2026 06:26:19 +0000
Manifest this update:     Wed 13 May 2026 06:26:18 +0000
Manifest next update:     Wed 20 May 2026 06:26:18 +0000
Files and hashes:         1: tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl (hash: PyhmvrIiXZk9OohRZaBmbws/R7PXwR967btuXCc98iU=)
                          2: 240B1914D90B11EF95020982C4F9AE02.roa (hash: 0gHNtWChBEUR4YEQpsBzxLagBwCzjHIiYU13EWlRZC8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl
                          rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 06:14:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 258 (0x102)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173161, serialNumber=B49B2B11D3876DECDE13F5E8F59E641A7D093FB9
        Validity
            Not Before: May 13 06:26:18 2026 GMT
            Not After : May 20 06:26:18 2026 GMT
        Subject: CN=6a04198b-0408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b9:84:a5:44:1a:ca:25:e5:96:db:68:6d:94:
                    5e:23:1e:8c:8d:9d:e7:fd:a9:fb:d4:cb:21:37:5a:
                    c8:af:b1:e3:b3:64:38:5a:ba:3c:bc:1b:b2:df:34:
                    f5:11:78:f8:1e:16:5f:97:95:4c:1f:1e:d2:0a:dc:
                    de:49:d4:f9:17:df:b7:d0:34:56:71:ed:d4:23:ad:
                    25:ec:5f:96:e7:ec:b5:31:29:8e:92:4a:4c:7d:f2:
                    0b:34:9d:7e:74:92:72:bd:26:00:56:cc:96:0c:5b:
                    63:89:9f:b5:d6:b0:92:b4:ed:6d:11:f1:23:a1:31:
                    d6:b7:79:29:ac:ec:df:ea:89:fe:fd:67:82:4b:53:
                    6c:ea:c9:87:f5:42:d6:3b:70:1d:a5:2a:90:38:a5:
                    2a:bc:9f:9c:32:5e:37:64:d6:b9:bf:ea:56:a9:c1:
                    a7:a4:75:84:91:e4:a4:f9:26:f8:4c:fd:94:97:4a:
                    88:7a:bb:22:61:57:7e:8b:69:4e:73:2b:71:a2:5e:
                    f1:bf:ab:92:96:63:9a:e8:c1:83:e1:9a:a9:0d:84:
                    a3:be:84:46:ec:e8:67:f3:b4:83:eb:81:83:b7:e3:
                    e1:25:33:4e:ee:91:e1:a3:a2:4b:13:a4:8e:72:85:
                    05:b6:5d:e1:e5:e0:c9:a4:fc:71:e2:4f:3f:db:14:
                    9d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:63:AB:ED:B4:70:4A:82:4E:4F:4A:9E:C0:F6:2D:6D:11:21:08:FC
            X509v3 Authority Key Identifier:
                keyid:B4:9B:2B:11:D3:87:6D:EC:DE:13:F5:E8:F5:9E:64:1A:7D:09:3F:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173161/7132EF9AD90711EFB27F7857C4F9AE02/tJsrEdOHbezeE_Xo9Z5kGn0JP7k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:a6:2a:be:16:bc:0a:0c:81:de:40:90:c9:a8:1d:ae:d8:6d:
         a4:78:4f:ca:30:8a:2a:b7:d7:41:28:d3:4a:96:1d:b3:2d:92:
         cd:3a:5a:e1:e6:74:19:ed:d9:bb:57:2c:33:a1:bc:4e:50:15:
         9a:e1:94:41:dd:f7:bd:06:0b:92:ba:d9:a6:82:a4:b0:f3:fd:
         94:89:87:a7:86:56:ae:13:c6:16:8e:2c:da:63:3d:0f:0d:83:
         f1:33:0f:a4:22:26:cb:be:51:b4:1c:f0:3e:95:b5:67:70:31:
         b3:b0:e6:13:9d:0a:e6:b5:4c:92:e8:d5:1d:88:62:32:c1:1e:
         ec:1d:4e:e9:0b:90:16:f0:19:3a:17:5f:4d:ca:4c:9e:90:91:
         0c:a6:32:94:88:95:e2:f7:d6:2b:b4:f3:fe:dc:f7:5a:2c:5c:
         e1:ff:89:f8:85:9e:5e:37:70:8a:f4:11:c1:68:f0:35:89:73:
         37:bf:46:a8:4e:ea:29:66:c9:4b:47:1e:bd:e1:74:37:12:2f:
         8e:20:d0:31:db:49:44:0c:78:84:73:f1:44:b3:67:cc:ba:8d:
         67:58:3e:30:4d:5f:05:ec:f8:7b:ff:38:56:7f:2b:d2:80:70:
         3d:a9:be:12:cd:fc:34:2b:96:67:2d:78:d4:b4:fe:d3:1c:7d:
         81:18:6d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:35:02 2026 by rpki-client