Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180DA4/473C64501D8F11E28E913DEE08B02CD2/40IvTt5eaM7JqqfjxuMnjHMOHnw.mft
File:                     40IvTt5eaM7JqqfjxuMnjHMOHnw.mft (raw, json)
Hash identifier:          Cold52sSdkbsN7PF80lJ7lO6+lXfGTupGxF9S3TvqU4=
Subject key identifier:   DF:1B:05:0F:02:08:8A:C0:D4:92:F8:8D:21:AB:89:84:C0:10:EE:D6
Authority key identifier: E3:42:2F:4E:DE:5E:68:CE:C9:AA:A7:E3:C6:E3:27:8C:73:0E:1E:7C
Certificate issuer:       /CN=A9180DA4/serialNumber=E3422F4EDE5E68CEC9AAA7E3C6E3278C730E1E7C
Certificate serial:       3538
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40IvTt5eaM7JqqfjxuMnjHMOHnw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180DA4/473C64501D8F11E28E913DEE08B02CD2/40IvTt5eaM7JqqfjxuMnjHMOHnw.mft
Manifest number:          3538
Signing time:             Tue 12 May 2026 14:41:19 +0000
Manifest this update:     Tue 12 May 2026 14:41:18 +0000
Manifest next update:     Tue 19 May 2026 14:41:18 +0000
Files and hashes:         1: 40IvTt5eaM7JqqfjxuMnjHMOHnw.crl (hash: CLWrM1hhBYPF6xiapxsc/8uShmetG8q0RnLfBbKBEaM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180DA4/473C64501D8F11E28E913DEE08B02CD2/40IvTt5eaM7JqqfjxuMnjHMOHnw.crl
                          rsync://rpki.apnic.net/member_repository/A9180DA4/473C64501D8F11E28E913DEE08B02CD2/40IvTt5eaM7JqqfjxuMnjHMOHnw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40IvTt5eaM7JqqfjxuMnjHMOHnw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:41:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13624 (0x3538)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180DA4, serialNumber=E3422F4EDE5E68CEC9AAA7E3C6E3278C730E1E7C
        Validity
            Not Before: May 12 14:41:18 2026 GMT
            Not After : May 19 14:41:18 2026 GMT
        Subject: CN=6a033c0f-6810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d1:17:54:89:d5:3d:b8:2b:a7:b3:2f:bb:73:
                    ec:13:9d:a3:e5:c2:11:9c:0f:d0:21:99:37:de:55:
                    66:98:50:68:ad:1d:82:f8:a5:b6:1e:4a:60:c2:dc:
                    1f:45:09:12:5b:16:4a:9e:4c:bd:99:f3:5d:ef:c3:
                    ba:45:18:a9:9a:37:56:cb:43:fd:3d:58:f5:86:d0:
                    1e:e6:88:f2:48:20:1a:6d:1b:fb:14:a6:d5:2c:42:
                    16:85:7f:2f:5e:ab:f0:f1:ab:2c:5a:7d:4c:be:55:
                    05:a3:bf:47:d4:be:a0:98:a5:92:f2:16:ac:ef:35:
                    cb:81:77:1f:16:74:4b:62:c8:ac:17:8c:ef:14:5a:
                    cc:c1:0b:5d:bd:8e:5c:ac:55:60:22:52:a4:77:f8:
                    f4:5b:a6:06:cc:aa:de:57:62:ae:64:12:00:e4:d7:
                    51:4e:2f:e8:25:a8:f3:bf:00:f8:a0:69:40:3a:5b:
                    87:76:e4:30:04:fe:07:48:28:54:b5:64:02:e9:83:
                    44:fd:7a:93:54:7a:e9:94:33:ed:08:7e:3e:4c:ef:
                    ed:cc:01:93:e8:2b:cb:72:22:62:6a:c9:42:eb:0a:
                    38:12:72:f7:34:d2:56:8c:3e:6c:16:cd:d2:9a:48:
                    63:3f:f1:21:1e:0d:03:11:3d:42:ba:6b:dc:95:33:
                    d4:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:1B:05:0F:02:08:8A:C0:D4:92:F8:8D:21:AB:89:84:C0:10:EE:D6
            X509v3 Authority Key Identifier:
                keyid:E3:42:2F:4E:DE:5E:68:CE:C9:AA:A7:E3:C6:E3:27:8C:73:0E:1E:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180DA4/473C64501D8F11E28E913DEE08B02CD2/40IvTt5eaM7JqqfjxuMnjHMOHnw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40IvTt5eaM7JqqfjxuMnjHMOHnw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180DA4/473C64501D8F11E28E913DEE08B02CD2/40IvTt5eaM7JqqfjxuMnjHMOHnw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:08:9e:26:c0:15:e0:eb:d6:63:10:01:68:c6:23:42:75:8f:
         9f:8c:79:4b:ef:6e:c1:5e:97:63:eb:13:69:02:c5:d3:06:86:
         58:43:5c:1e:c3:a9:9b:7e:4a:e4:15:1d:05:23:96:ca:90:cb:
         55:f6:ef:36:a8:f9:0a:ea:7a:1f:40:7b:ae:1f:7a:2b:50:7c:
         15:7b:6e:88:7c:00:e2:09:7f:fc:e2:ac:7d:36:bb:75:cf:6d:
         28:1e:ba:e5:da:48:06:47:49:ca:b4:18:68:25:ac:2f:66:85:
         b0:5c:54:a6:39:20:56:8c:22:14:65:38:46:5e:14:35:4b:46:
         05:f2:c8:9b:31:35:4b:89:fc:7c:b1:f5:71:c5:4f:35:55:16:
         36:b6:09:16:a2:25:99:ce:03:72:1d:1e:05:b6:b5:6e:dc:6c:
         eb:2b:ca:6a:bd:65:0f:4c:e1:29:12:8b:d5:5a:aa:ae:c1:5a:
         64:fe:8b:58:3f:d8:e1:70:7c:8c:ca:07:56:3e:96:54:94:b7:
         11:f0:01:d2:fc:17:51:d1:54:c6:0d:34:2b:15:ad:c6:90:bb:
         ba:fc:e9:11:ad:55:ce:85:1a:50:93:10:e4:a8:a9:d6:fc:12:
         aa:8d:37:c9:27:83:82:6e:0f:c4:d1:db:9a:9c:c2:7c:77:54:
         7b:22:64:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:42:19 2026 by rpki-client