Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft
File:                     sDUqu0PwqFVkm512GmVcP8YPbmM.mft (raw, json)
Hash identifier:          ZPwgBjbDQCXpffh9ojjJOuFXrnA0D+mdLLT1h+Outjc=
Subject key identifier:   48:66:18:E7:AB:F7:66:23:E9:56:5B:22:02:A9:F7:23:C6:0F:7B:F6
Authority key identifier: B0:35:2A:BB:43:F0:A8:55:64:9B:9D:76:1A:65:5C:3F:C6:0F:6E:63
Certificate issuer:       /CN=A9176DFC/serialNumber=B0352ABB43F0A855649B9D761A655C3FC60F6E63
Certificate serial:       0220
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft
Manifest number:          0215
Signing time:             Mon 11 May 2026 02:56:16 +0000
Manifest this update:     Mon 11 May 2026 02:56:15 +0000
Manifest next update:     Mon 18 May 2026 02:56:15 +0000
Files and hashes:         1: sDUqu0PwqFVkm512GmVcP8YPbmM.crl (hash: 2DQ6J66ZM4UNmJA8ngefENaiM80RdhlnQpv98ADdIGA=)
                          2: 230A1090248C11EEA9EE1935C4F9AE02.roa (hash: m2hk6wUAtlL5ptBXdwMclZPFoA2N1StKSEsLHKrorak=)
                          3: 7BFE665EE17F11EF9536DC48C4F9AE02.roa (hash: lbzUGxCxVXNgaorxa3WAftNPLQlIRU8KXF9/ol/bmFU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.crl
                          rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 02:56:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 544 (0x220)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176DFC, serialNumber=B0352ABB43F0A855649B9D761A655C3FC60F6E63
        Validity
            Not Before: May 11 02:56:15 2026 GMT
            Not After : May 18 02:56:15 2026 GMT
        Subject: CN=6a01454f-29a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9b:27:86:27:5e:1f:8b:3b:94:7b:1b:21:58:
                    25:bd:af:08:0c:41:dc:65:88:b0:eb:af:b0:de:7c:
                    44:b5:63:31:66:86:48:86:83:21:2b:c8:34:2d:84:
                    39:a4:26:4d:94:cc:53:24:43:a2:47:87:6c:ef:a8:
                    61:29:ca:64:5f:d9:3f:57:b8:1c:76:ce:40:fa:02:
                    f7:8f:98:c4:d1:a6:eb:8b:f4:65:82:45:e4:e8:c2:
                    ef:ab:9e:df:16:59:50:68:86:3d:c4:7c:00:56:be:
                    81:41:27:2f:c5:8f:e8:f1:2d:6e:9d:dc:c4:d6:04:
                    f7:f8:9f:9a:d5:c1:8b:b2:86:c5:20:8c:dd:f0:1b:
                    68:76:77:01:bf:a7:8f:08:a9:59:0b:84:8e:9b:9b:
                    b4:7f:b7:2d:2e:13:4f:82:87:28:4a:3e:cb:0b:68:
                    c8:57:2a:c2:0d:cf:d4:68:bf:d4:a7:17:45:a1:31:
                    95:88:d4:89:fb:c2:8e:be:86:92:6b:04:17:d5:29:
                    54:8b:f4:e4:12:8d:58:af:d3:1f:a2:a9:e1:12:00:
                    54:e5:05:4b:66:59:45:96:f6:9d:f7:55:33:3b:a8:
                    e9:8b:36:db:b7:e9:e4:c3:b6:b1:d2:47:f4:10:e4:
                    5a:55:72:ca:7b:8e:12:96:45:a4:3c:d4:9f:da:b6:
                    18:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:66:18:E7:AB:F7:66:23:E9:56:5B:22:02:A9:F7:23:C6:0F:7B:F6
            X509v3 Authority Key Identifier:
                keyid:B0:35:2A:BB:43:F0:A8:55:64:9B:9D:76:1A:65:5C:3F:C6:0F:6E:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:56:1a:32:eb:cf:79:41:97:af:a2:a3:27:7b:40:33:e5:13:
         b2:b1:13:b3:27:d3:11:72:51:9a:40:75:20:10:8a:ee:5f:2b:
         21:47:53:23:d4:d1:37:93:0a:c9:1c:e4:aa:b5:1b:ae:5f:a9:
         06:3f:fe:44:ba:e7:05:90:cb:db:4b:06:dc:01:38:dc:0f:4d:
         0a:44:2e:c1:7e:aa:0f:88:c6:0a:db:51:40:7c:a3:ca:b9:ae:
         c3:2d:8e:21:58:58:57:6e:86:9d:bc:b6:a1:2d:72:9c:e9:49:
         10:1d:6a:08:9d:b1:20:b0:6f:12:13:e4:c4:73:40:e2:f9:31:
         a5:79:bc:1e:de:ba:bd:19:89:98:44:81:b7:ab:35:a4:cf:98:
         33:29:5e:a3:52:3b:71:e9:b0:9e:47:4d:fb:92:6f:71:64:5e:
         3d:4e:c3:df:bc:9d:db:17:e5:a4:c8:86:8a:ef:7e:49:50:8d:
         86:d4:ed:99:09:3a:05:6e:cc:25:ac:5d:23:b5:63:33:09:83:
         2e:45:4a:80:81:70:f2:2a:08:7a:a0:b1:90:21:ae:29:52:04:
         10:38:44:e1:c6:cb:4e:38:8c:53:1c:06:ab:c0:1d:e7:53:4b:
         ae:d2:ea:48:8d:46:7b:72:2e:73:f7:9e:50:0f:d3:97:82:48:
         bf:30:5d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:43:30 2026 by rpki-client