Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C876/DBA1D55A109011F180BBBFFF333D8C67/rRUDmr5-BIRna8sqkCopVqgDzs8.mft
File:                     rRUDmr5-BIRna8sqkCopVqgDzs8.mft (raw, json)
Hash identifier:          0LnJ4steIUooJkfsgVNdGEBxZ9bBAQzJVzY2ZOJn0GE=
Subject key identifier:   04:A5:41:9E:C7:1A:33:3B:04:ED:A8:1A:B5:27:A0:D9:2C:E6:5A:D7
Authority key identifier: AD:15:03:9A:BE:7E:04:84:67:6B:CB:2A:90:2A:29:56:A8:03:CE:CF
Certificate issuer:       /CN=A917C876/serialNumber=AD15039ABE7E0484676BCB2A902A2956A803CECF
Certificate serial:       31
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRUDmr5-BIRna8sqkCopVqgDzs8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C876/DBA1D55A109011F180BBBFFF333D8C67/rRUDmr5-BIRna8sqkCopVqgDzs8.mft
Manifest number:          2D
Signing time:             Wed 13 May 2026 08:52:32 +0000
Manifest this update:     Wed 13 May 2026 08:52:32 +0000
Manifest next update:     Wed 20 May 2026 08:52:32 +0000
Files and hashes:         1: rRUDmr5-BIRna8sqkCopVqgDzs8.crl (hash: M4dA32wK465ECFw0D0Hjl7H8VNzWpGAFyxFj9AlVhDA=)
                          2: 85126BD6109111F19502AD2A353D8C67.roa (hash: T5GMIPyPaLrmTYrRWcGwkxKhGNJdhN+jLIOEn2RD910=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C876/DBA1D55A109011F180BBBFFF333D8C67/rRUDmr5-BIRna8sqkCopVqgDzs8.crl
                          rsync://rpki.apnic.net/member_repository/A917C876/DBA1D55A109011F180BBBFFF333D8C67/rRUDmr5-BIRna8sqkCopVqgDzs8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRUDmr5-BIRna8sqkCopVqgDzs8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 06:14:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C876, serialNumber=AD15039ABE7E0484676BCB2A902A2956A803CECF
        Validity
            Not Before: May 13 08:52:32 2026 GMT
            Not After : May 20 08:52:32 2026 GMT
        Subject: CN=6a043bd0-b0d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:00:84:a2:8e:6e:a1:8b:b5:5a:e3:71:74:06:
                    45:ca:71:7d:75:d9:35:38:93:17:38:c1:1c:e9:21:
                    68:57:12:95:cf:da:75:60:79:d2:01:cf:2a:91:c7:
                    db:8a:90:e3:b0:2c:52:70:36:57:ff:bd:ee:6b:62:
                    af:bb:65:4a:12:fc:c7:2d:7c:e7:fd:54:7e:04:4a:
                    a5:29:3a:04:ca:3c:80:17:5b:66:ca:b9:38:35:f0:
                    40:d3:c1:4f:e2:80:16:71:9e:a3:21:fe:ea:76:83:
                    29:1e:a3:02:c0:42:f2:7e:40:ac:6e:bc:70:38:5c:
                    98:e1:58:7f:0a:a5:c0:3a:f2:41:df:75:40:6e:54:
                    e7:f1:73:7b:9e:0b:66:af:cb:b7:c3:de:9a:bf:cc:
                    b8:b1:1a:5b:14:ef:1e:aa:57:0d:8f:83:21:5e:ea:
                    dd:6d:65:98:ee:b2:b6:0f:b4:d3:bd:ac:cb:f0:f0:
                    d6:60:6c:2f:89:85:24:f7:80:b3:cd:f4:87:09:c4:
                    1d:7f:b9:bb:fb:d9:ed:69:08:4b:86:5e:9c:4c:23:
                    b8:7a:a5:8f:03:0a:92:61:42:43:63:21:3a:dc:09:
                    1c:a3:4e:a5:c6:d0:d8:68:8c:32:4f:53:5d:11:1c:
                    40:41:13:97:db:24:e7:4e:4d:3a:00:2f:c4:25:53:
                    7a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:A5:41:9E:C7:1A:33:3B:04:ED:A8:1A:B5:27:A0:D9:2C:E6:5A:D7
            X509v3 Authority Key Identifier:
                keyid:AD:15:03:9A:BE:7E:04:84:67:6B:CB:2A:90:2A:29:56:A8:03:CE:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C876/DBA1D55A109011F180BBBFFF333D8C67/rRUDmr5-BIRna8sqkCopVqgDzs8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRUDmr5-BIRna8sqkCopVqgDzs8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C876/DBA1D55A109011F180BBBFFF333D8C67/rRUDmr5-BIRna8sqkCopVqgDzs8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:4d:7e:c6:b7:b9:a0:5d:51:a3:a4:33:c0:0d:d7:77:92:3f:
         7d:e6:70:e7:0a:bf:d7:fa:35:be:61:2c:3a:fd:c3:c0:7c:ba:
         5b:d5:8b:cb:af:9c:03:01:7d:eb:e3:ea:68:14:e0:35:78:8b:
         85:89:e5:03:e1:16:f6:68:24:b9:19:c9:56:b6:3e:0d:0a:15:
         e0:99:bd:aa:6c:35:3c:a9:28:32:01:d7:f8:07:0c:e9:7e:35:
         19:ab:70:3c:b4:c6:a1:32:e2:62:08:45:c0:c9:c8:c6:76:11:
         ea:03:75:68:cc:2d:37:92:68:6a:90:7e:66:09:be:32:95:c9:
         2e:c4:13:44:f3:c0:bf:b0:25:67:e2:c6:b0:30:77:c3:df:13:
         7a:45:e6:2f:1b:8f:95:5b:ea:e6:e8:fc:e4:f9:05:7c:6a:46:
         e5:4f:eb:e9:9d:0e:ca:e7:f6:54:8e:5a:71:f3:f3:ae:0e:41:
         7f:b4:a0:3b:05:e3:fb:d7:9d:c0:a9:3b:00:f5:a0:ec:9c:22:
         67:b7:b8:54:f1:ff:af:b0:59:b4:c1:1b:07:ca:5a:f2:1e:6c:
         c2:e4:f6:c6:93:4c:04:d4:40:18:a5:b2:ae:bd:ed:d6:52:e2:
         71:a2:fc:b4:7d:9b:f2:ad:eb:5a:24:98:df:e1:b2:41:57:5d:
         28:d5:92:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:23:46 2026 by rpki-client