Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175906/8CCCCBA483E711ECA0034F6BC4F9AE02/nRus1AqCWZJM0sVpUaQ-C_hy1oY.mft
File:                     nRus1AqCWZJM0sVpUaQ-C_hy1oY.mft (raw, json)
Hash identifier:          txCJv6+xfXBm22aw3HQtLtE4iEqR8XMCLJOk17RSCOA=
Subject key identifier:   A6:BC:CD:FB:F3:1B:86:5C:31:F7:EB:F4:B8:AF:EB:CE:13:FD:1A:18
Authority key identifier: 9D:1B:AC:D4:0A:82:59:92:4C:D2:C5:69:51:A4:3E:0B:F8:72:D6:86
Certificate issuer:       /CN=A9175906/serialNumber=9D1BACD40A8259924CD2C56951A43E0BF872D686
Certificate serial:       0498
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nRus1AqCWZJM0sVpUaQ-C_hy1oY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175906/8CCCCBA483E711ECA0034F6BC4F9AE02/nRus1AqCWZJM0sVpUaQ-C_hy1oY.mft
Manifest number:          048F
Signing time:             Wed 13 May 2026 00:07:20 +0000
Manifest this update:     Wed 13 May 2026 00:07:20 +0000
Manifest next update:     Wed 20 May 2026 00:07:20 +0000
Files and hashes:         1: nRus1AqCWZJM0sVpUaQ-C_hy1oY.crl (hash: 3Nx85kG2x0znLb7eorut/dkYNNgipJiLHgI7XmiFhXc=)
                          2: 27A6D5CAAF1C11EC94FF9534C4F9AE02.roa (hash: gmYF5YvGZ2u/e0r1UgH6fcHdtkq4icNsHiM+jSaE8Mo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175906/8CCCCBA483E711ECA0034F6BC4F9AE02/nRus1AqCWZJM0sVpUaQ-C_hy1oY.crl
                          rsync://rpki.apnic.net/member_repository/A9175906/8CCCCBA483E711ECA0034F6BC4F9AE02/nRus1AqCWZJM0sVpUaQ-C_hy1oY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nRus1AqCWZJM0sVpUaQ-C_hy1oY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 00:07:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1176 (0x498)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175906, serialNumber=9D1BACD40A8259924CD2C56951A43E0BF872D686
        Validity
            Not Before: May 13 00:07:20 2026 GMT
            Not After : May 20 00:07:20 2026 GMT
        Subject: CN=6a03c0b8-b2ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:db:64:c2:e2:e3:b0:a1:8f:e0:ce:03:c6:92:
                    02:a3:79:59:62:5d:7b:d6:60:be:8d:74:37:8e:0d:
                    6d:8b:6f:d0:ab:30:90:97:8e:0b:a4:e7:2f:70:0a:
                    1f:b1:5f:5c:4d:c0:9d:36:b4:23:9e:ee:e5:fc:7c:
                    f1:5e:b2:c4:70:6e:f4:24:97:c8:c4:6e:36:94:41:
                    3f:12:34:ea:ab:02:68:48:ab:3f:a0:ba:a7:91:09:
                    e8:22:a6:6f:f4:55:8b:b3:85:89:c1:33:ba:29:e7:
                    fa:0e:68:68:31:a6:f2:38:03:28:58:e1:bf:8f:c6:
                    6e:ed:ec:bd:b9:c9:59:8a:0f:c0:ef:a7:04:94:9c:
                    ed:24:74:26:2a:ef:b4:bc:91:94:bf:a9:88:d6:f4:
                    ac:c3:90:c7:0d:41:23:aa:a3:84:a9:f1:73:a9:df:
                    1b:a5:29:5d:c5:6a:74:7c:dd:e0:b6:0b:0c:76:d8:
                    13:c8:d6:8a:e8:92:91:c5:bc:1f:8e:c2:56:1b:9d:
                    aa:c8:58:6c:dd:e5:43:11:38:73:0a:ba:bc:98:4d:
                    d1:4d:68:54:aa:1b:96:66:25:a1:58:a3:e9:b6:51:
                    d0:70:7f:d8:41:65:bc:1a:ca:6c:b9:0b:b4:d1:91:
                    34:02:58:9a:45:81:07:84:ab:59:d7:a7:84:7b:c8:
                    c1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:BC:CD:FB:F3:1B:86:5C:31:F7:EB:F4:B8:AF:EB:CE:13:FD:1A:18
            X509v3 Authority Key Identifier:
                keyid:9D:1B:AC:D4:0A:82:59:92:4C:D2:C5:69:51:A4:3E:0B:F8:72:D6:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175906/8CCCCBA483E711ECA0034F6BC4F9AE02/nRus1AqCWZJM0sVpUaQ-C_hy1oY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nRus1AqCWZJM0sVpUaQ-C_hy1oY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175906/8CCCCBA483E711ECA0034F6BC4F9AE02/nRus1AqCWZJM0sVpUaQ-C_hy1oY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:76:fb:c2:4f:6b:dc:f3:57:c4:b4:10:9f:fb:ae:8c:a2:b0:
         fb:56:9b:25:2d:7b:ab:95:b1:d5:b8:30:be:7e:ec:6a:ff:0d:
         2b:7a:f6:f0:61:5d:cf:d7:f8:d5:2f:49:fe:57:30:d0:08:91:
         49:0d:e6:3d:db:f4:82:de:d0:5a:19:e6:6a:ea:43:ad:7a:46:
         2f:71:20:17:44:2b:d1:ae:6a:83:e2:9a:17:16:77:8d:5b:c6:
         50:84:76:d7:37:f3:52:0d:8e:b9:e1:cd:f7:6c:43:1c:a5:a0:
         d7:6e:d8:6d:17:d5:c3:6a:1c:bd:00:e2:94:84:41:7d:f8:55:
         f2:a4:5f:7e:1c:0c:e6:41:72:0e:db:e6:c7:fe:ac:12:aa:e2:
         51:8d:fd:51:c3:a7:97:06:91:3d:5a:ce:63:d3:c2:e3:3f:99:
         af:29:b1:fc:6a:e8:28:a6:2d:40:88:60:c2:1e:22:df:90:f7:
         08:e2:90:c4:ec:90:fc:51:c9:45:7d:5e:0f:68:0e:36:82:fe:
         4d:f6:30:fc:5a:ba:5a:a2:c1:d5:4f:f3:ab:6a:3a:86:c3:43:
         13:9c:61:b1:dc:23:d5:d5:6b:d7:24:ec:0e:6b:1e:ce:20:b5:
         5b:3c:72:5b:ca:f3:45:8d:11:f5:79:63:e2:bb:e1:15:8e:a8:
         4c:97:39:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:40:00 2026 by rpki-client