Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft
File:                     PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft (raw, json)
Hash identifier:          OHFlGM6T4H6o4k6eto+0HYqGJOnQ9T5KKQ62KlEJCR0=
Subject key identifier:   36:7D:75:AA:26:38:0A:76:21:78:16:77:51:CE:30:AF:29:1E:95:AF
Authority key identifier: 3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20
Certificate issuer:       /CN=A9175F18/serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320
Certificate serial:       0888
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft
Manifest number:          0860
Signing time:             Tue 12 May 2026 20:56:48 +0000
Manifest this update:     Tue 12 May 2026 20:56:47 +0000
Manifest next update:     Tue 19 May 2026 20:56:47 +0000
Files and hashes:         1: PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl (hash: 8cD6tqhaFGLTKiTJkwTdCJoao/dtJBueg5FXzombtXQ=)
                          2: 10EEFBF4F66D11F0BC9231976F6F56BC.roa (hash: 4MuAY4it4gTEQIf5LMe2RPCt6I2j4k+IMBFAYSXEFv8=)
                          3: BADD8D386C4411EFA8952B76C4F9AE02.roa (hash: eALHohqPfF3ui0TiL12I+B5Q/UX/lWH/VW8crfpvj7o=)
                          4: 0DA7D6ACBEF111ED9634C070C4F9AE02.roa (hash: GMNbFj5OMAYQTJHJmZ3/lLnrwOgYll7c/asD4WCaS0E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl
                          rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:56:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2184 (0x888)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175F18, serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320
        Validity
            Not Before: May 12 20:56:47 2026 GMT
            Not After : May 19 20:56:47 2026 GMT
        Subject: CN=6a039410-33f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8d:bf:9b:a0:e1:35:15:ec:de:e5:90:bc:56:
                    69:49:44:bb:25:ce:61:0e:23:7c:bc:88:ab:02:2b:
                    bf:3e:61:d7:ee:c6:1e:bf:36:85:37:87:b1:91:da:
                    8c:60:61:0c:5e:c1:af:f4:ed:78:2d:66:86:06:ba:
                    97:30:88:68:35:08:5b:e1:17:2c:1a:7f:7c:f1:f7:
                    7f:59:f4:93:75:b8:d6:0b:5e:c3:fc:37:0d:3c:17:
                    15:87:56:6c:f5:2f:f2:79:73:30:40:75:55:89:53:
                    ef:09:ab:c3:dd:78:ec:ec:a8:05:26:87:75:ee:5b:
                    81:da:6c:92:f5:26:4e:45:1f:33:b0:b2:6d:33:a9:
                    80:25:db:0f:39:4a:fa:2e:5c:7f:2e:c5:a5:b5:9f:
                    c6:d6:bd:10:53:b1:88:1c:22:19:ce:55:a6:75:e3:
                    4e:50:7d:10:7e:e6:c2:67:21:47:00:b9:45:0b:82:
                    ad:9e:47:06:2d:e6:e2:9e:1f:ba:9f:29:ef:7c:96:
                    d7:43:39:e0:5a:0f:e5:4f:d7:95:d2:57:81:5b:34:
                    24:da:ce:53:e4:7a:a8:b1:7d:41:7a:ae:00:99:b3:
                    aa:b0:f9:23:15:57:f6:fe:37:7b:16:a7:24:e9:a4:
                    ef:c8:43:f6:a7:b1:cf:82:92:7b:ac:29:33:82:31:
                    37:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:7D:75:AA:26:38:0A:76:21:78:16:77:51:CE:30:AF:29:1E:95:AF
            X509v3 Authority Key Identifier:
                keyid:3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:02:65:b8:27:05:34:e0:48:47:72:29:c6:6d:1b:64:48:9b:
         31:3a:fa:1b:69:52:4b:b2:dd:88:04:02:0a:a6:77:f6:01:73:
         d2:37:06:ff:a6:b6:70:b8:e8:ae:ca:cb:4a:5a:57:0a:f2:39:
         fb:44:f4:bc:0c:34:d0:fa:df:27:c5:15:64:fa:42:07:40:2a:
         e6:81:b7:fb:ef:dc:ba:0e:14:18:99:6c:18:70:d7:57:da:06:
         91:8e:f8:2e:f7:6c:57:8d:45:1a:57:53:37:cb:b4:17:d4:e7:
         5c:99:d3:93:fe:5d:a7:11:72:a4:e4:6d:25:f6:53:de:7f:f3:
         cf:a0:b3:ab:4d:c8:e9:d8:8e:be:2b:92:84:1d:db:c2:5a:f3:
         fd:85:41:16:a4:b9:e6:9c:03:6f:2c:1a:58:c9:df:6c:2c:e9:
         e1:70:f5:af:3d:22:61:e0:e4:93:89:41:ea:05:74:f4:d6:06:
         5b:cb:50:11:5c:65:d8:a9:ac:20:93:a9:db:4d:12:45:8c:09:
         2c:52:66:b0:b0:e0:98:80:64:4a:da:e6:68:3f:97:a2:b5:2f:
         74:0e:88:38:8a:60:04:1a:35:13:ea:58:9c:ba:b0:44:78:7f:
         38:ae:35:1e:e4:7a:45:bf:69:1b:a0:be:e5:9a:cb:ee:71:62:
         ae:45:64:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:45:09 2026 by rpki-client