Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173204/C6EB65662B4011F1BAED9A6390833773/Ct3FBPt0MBQrthUUcq0X_PFyMVo.mft
File:                     Ct3FBPt0MBQrthUUcq0X_PFyMVo.mft (raw, json)
Hash identifier:          dXYqspz4m3wUZPQx1WzH7A4DyYgjfntJBT6rzrZ6Rlk=
Subject key identifier:   65:A4:F8:C8:2B:9F:17:1F:38:E6:3A:80:3B:37:00:6C:68:BF:31:D6
Authority key identifier: 0A:DD:C5:04:FB:74:30:14:2B:B6:15:14:72:AD:17:FC:F1:72:31:5A
Certificate issuer:       /CN=A9173204/serialNumber=0ADDC504FB7430142BB6151472AD17FCF172315A
Certificate serial:       1A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ct3FBPt0MBQrthUUcq0X_PFyMVo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173204/C6EB65662B4011F1BAED9A6390833773/Ct3FBPt0MBQrthUUcq0X_PFyMVo.mft
Manifest number:          19
Signing time:             Wed 13 May 2026 09:07:28 +0000
Manifest this update:     Wed 13 May 2026 09:07:28 +0000
Manifest next update:     Wed 20 May 2026 09:07:28 +0000
Files and hashes:         1: Ct3FBPt0MBQrthUUcq0X_PFyMVo.crl (hash: Vxh30d4dPexrmWogWJX/K3tz2fR8wbCVbFvI9didoQk=)
                          2: 4E3439122B4111F19D37C4AC90833773.roa (hash: QQvgNRDiPl6A65a2LWGiXcir6fcA9w1PwW/VYZpOkXQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173204/C6EB65662B4011F1BAED9A6390833773/Ct3FBPt0MBQrthUUcq0X_PFyMVo.crl
                          rsync://rpki.apnic.net/member_repository/A9173204/C6EB65662B4011F1BAED9A6390833773/Ct3FBPt0MBQrthUUcq0X_PFyMVo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ct3FBPt0MBQrthUUcq0X_PFyMVo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 06:14:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173204, serialNumber=0ADDC504FB7430142BB6151472AD17FCF172315A
        Validity
            Not Before: May 13 09:07:28 2026 GMT
            Not After : May 20 09:07:28 2026 GMT
        Subject: CN=6a043f50-a918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:82:6f:17:57:48:84:70:63:a0:06:12:d9:02:
                    16:24:08:d2:01:a6:64:28:11:74:89:d0:e8:81:e6:
                    12:ce:77:e2:cc:21:d8:5c:7f:83:91:0f:8c:2d:cd:
                    5c:80:69:3d:23:36:2a:1c:6b:b0:88:36:30:e5:0e:
                    47:07:e1:77:c3:6a:c5:4e:74:7f:88:72:e8:e3:42:
                    52:de:89:76:ad:70:e8:16:69:3f:1a:a4:b0:2a:b9:
                    51:80:46:a3:9b:65:34:a8:7b:d4:9b:7a:a2:0e:a4:
                    62:80:9f:c7:a0:24:e8:5f:60:13:f7:1c:9a:86:ff:
                    0d:c1:c3:83:0f:d2:0a:b1:6b:a3:b5:02:fd:8d:36:
                    0d:c4:c7:97:33:fb:c2:eb:0a:4b:84:f0:4a:85:b2:
                    3d:e4:45:59:ae:ab:52:1f:99:87:7c:b3:af:d3:27:
                    e6:df:33:c9:c3:dd:8a:40:a4:8f:c7:bf:9a:ec:e9:
                    81:7b:9a:ce:1f:69:c6:1d:b2:2f:ea:99:e0:cf:9e:
                    d5:28:b4:9c:5a:00:5d:ed:5c:69:10:30:e7:7d:01:
                    56:53:fd:bd:8e:54:8b:d8:8c:f5:f2:7b:36:9d:2f:
                    88:a6:72:c6:9d:4f:c9:c1:b6:05:c0:6f:7b:74:ac:
                    b8:f8:fc:95:59:58:66:cd:b1:fe:fb:4f:29:ed:d2:
                    22:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:A4:F8:C8:2B:9F:17:1F:38:E6:3A:80:3B:37:00:6C:68:BF:31:D6
            X509v3 Authority Key Identifier:
                keyid:0A:DD:C5:04:FB:74:30:14:2B:B6:15:14:72:AD:17:FC:F1:72:31:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173204/C6EB65662B4011F1BAED9A6390833773/Ct3FBPt0MBQrthUUcq0X_PFyMVo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ct3FBPt0MBQrthUUcq0X_PFyMVo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173204/C6EB65662B4011F1BAED9A6390833773/Ct3FBPt0MBQrthUUcq0X_PFyMVo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:7a:7b:e2:52:23:cf:b7:21:fa:86:ae:70:36:2a:26:65:37:
         13:2d:6e:f8:fa:42:8e:8f:5e:90:99:46:93:83:7e:0e:d5:e8:
         e0:19:6f:2e:2d:d2:f7:33:89:96:f1:32:bf:b3:94:67:c0:fb:
         c0:ae:4f:47:3f:d0:93:2c:f1:3f:e0:e6:9b:ba:52:ce:15:ce:
         c0:34:19:a5:56:0d:e7:b7:c8:a0:74:f6:8d:5e:b9:d7:75:e4:
         38:34:fd:6f:06:08:52:97:28:8b:b4:55:e6:2a:bc:f6:fb:7f:
         31:a0:bd:3c:dd:5b:ea:b7:ad:85:81:d1:9e:3d:aa:0c:59:d9:
         67:54:b0:99:cb:df:19:b5:85:3f:9a:84:34:81:e3:a8:e2:b4:
         d8:9b:c4:6a:cb:dd:22:ce:aa:0c:cd:55:32:f0:7c:35:12:1e:
         76:9c:41:70:95:9c:ce:c0:d9:6f:51:61:42:5d:bf:d4:18:76:
         ff:71:43:9c:f8:8e:92:32:ff:d5:a7:68:e1:13:88:7f:98:07:
         93:b0:f3:3a:52:77:0d:f0:a2:54:c5:95:0a:0c:ac:97:ff:ad:
         1b:e2:68:74:9b:e0:04:5e:de:26:5a:5d:4f:50:0c:9b:02:28:
         a7:45:84:4e:f9:33:32:fc:96:21:97:f3:5a:4f:9c:a0:2a:43:
         75:ad:6a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:02:11 2026 by rpki-client