Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918190B/A140C152C5C511F0AAA4CF0FC4F9AE02/xT8GoF_V8dkjXh-VMPLNPOMREOI.mft
File:                     xT8GoF_V8dkjXh-VMPLNPOMREOI.mft (raw, json)
Hash identifier:          5nG3vj4jGYnMzcRI4b+y6Kx2cLv9SKoXOq7aJbT7FYI=
Subject key identifier:   FC:45:4A:C5:75:D6:9E:4F:BD:25:2E:AF:A2:A7:DA:3C:E9:E9:27:FF
Authority key identifier: C5:3F:06:A0:5F:D5:F1:D9:23:5E:1F:95:30:F2:CD:3C:E3:11:10:E2
Certificate issuer:       /CN=A918190B/serialNumber=C53F06A05FD5F1D9235E1F9530F2CD3CE31110E2
Certificate serial:       64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xT8GoF_V8dkjXh-VMPLNPOMREOI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918190B/A140C152C5C511F0AAA4CF0FC4F9AE02/xT8GoF_V8dkjXh-VMPLNPOMREOI.mft
Manifest number:          5F
Signing time:             Mon 11 May 2026 08:15:00 +0000
Manifest this update:     Mon 11 May 2026 08:14:59 +0000
Manifest next update:     Mon 18 May 2026 08:14:59 +0000
Files and hashes:         1: xT8GoF_V8dkjXh-VMPLNPOMREOI.crl (hash: CePKDaCT+BiyLSYTgFed+qTSbMpIUq0QNAChJksJjz8=)
                          2: 3461A67021A811F182436258153D8C67.roa (hash: CnfvhJ3PR3mpLZc/i3GDghVF6JL2JkcdlNGKt7tvH9k=)
                          3: 329CC664C5C611F0A1D9E964C4F9AE02.roa (hash: lnx8KdODc8Z9IvWXfKLFt+dyZtSETllR99xleqZrHjg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918190B/A140C152C5C511F0AAA4CF0FC4F9AE02/xT8GoF_V8dkjXh-VMPLNPOMREOI.crl
                          rsync://rpki.apnic.net/member_repository/A918190B/A140C152C5C511F0AAA4CF0FC4F9AE02/xT8GoF_V8dkjXh-VMPLNPOMREOI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xT8GoF_V8dkjXh-VMPLNPOMREOI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:14:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918190B, serialNumber=C53F06A05FD5F1D9235E1F9530F2CD3CE31110E2
        Validity
            Not Before: May 11 08:14:59 2026 GMT
            Not After : May 18 08:14:59 2026 GMT
        Subject: CN=6a019003-b02d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f4:f9:59:ff:04:18:fc:53:83:f3:b8:19:5e:
                    b6:f0:6d:a3:6c:c0:59:d1:3b:31:37:22:9d:7e:c8:
                    b8:f5:f4:a9:a8:d1:7c:39:8f:4d:4f:00:ab:9e:9e:
                    03:f8:bf:01:f0:21:07:a2:7f:1d:f8:f0:c1:2a:ad:
                    04:0a:fd:38:4e:40:84:66:e7:53:36:0d:1b:15:ac:
                    5e:94:dc:6f:c4:12:32:2c:45:0a:a6:09:09:88:bf:
                    c2:35:6b:ec:e9:c9:ae:8d:e1:f9:a7:a0:35:32:7c:
                    56:8b:de:23:34:b4:83:6c:b4:ef:34:cb:cb:a3:e3:
                    b5:20:a3:12:43:e3:dd:14:5a:0c:6f:c8:2c:6f:56:
                    b1:45:66:9d:72:2b:95:59:2c:f8:ce:9c:9b:37:31:
                    59:29:af:8f:3a:f6:af:37:6d:54:5c:1c:1a:3d:79:
                    e5:9c:58:02:1e:91:2a:49:be:13:b6:e3:57:4e:e8:
                    b4:3e:2e:dc:87:85:67:9a:c1:5b:a3:83:eb:35:62:
                    ca:3c:f4:c5:a9:98:3c:ae:dd:76:de:31:79:40:52:
                    f6:7a:fe:64:ae:c0:9b:18:b4:b6:6c:b2:82:f4:d4:
                    91:7a:e7:d7:58:30:8c:72:c8:e4:af:85:93:a6:ea:
                    40:79:f4:cb:f2:b2:e5:3e:bb:dc:d2:91:b7:77:d0:
                    8b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:45:4A:C5:75:D6:9E:4F:BD:25:2E:AF:A2:A7:DA:3C:E9:E9:27:FF
            X509v3 Authority Key Identifier:
                keyid:C5:3F:06:A0:5F:D5:F1:D9:23:5E:1F:95:30:F2:CD:3C:E3:11:10:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918190B/A140C152C5C511F0AAA4CF0FC4F9AE02/xT8GoF_V8dkjXh-VMPLNPOMREOI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xT8GoF_V8dkjXh-VMPLNPOMREOI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918190B/A140C152C5C511F0AAA4CF0FC4F9AE02/xT8GoF_V8dkjXh-VMPLNPOMREOI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:bd:86:df:35:9c:9d:19:30:db:8d:6a:50:cf:1e:f9:67:59:
         d2:2a:01:6f:59:09:24:6d:26:d2:69:79:99:ac:23:72:61:57:
         2f:ff:ce:7a:34:b5:df:be:8e:ff:ca:12:7b:86:9e:0c:bc:66:
         9e:83:f2:30:a4:c0:46:8b:fd:4a:10:62:6a:cd:ba:87:6f:9c:
         79:50:46:2c:b0:b3:99:88:54:d2:05:91:d7:eb:fc:69:38:37:
         72:72:69:d3:6d:bb:c0:c0:fa:3c:f7:2f:78:6e:0f:60:f1:2a:
         ef:af:d3:d9:6c:17:5e:c7:10:37:b7:53:09:dc:9b:52:d7:2f:
         4f:23:c1:b7:14:c8:18:9b:5a:b4:15:74:f6:7f:66:8f:6f:d7:
         4f:1e:6b:38:7f:9d:bf:5c:3b:9a:8e:97:1f:86:53:4b:d6:51:
         42:05:d6:aa:f2:ef:dc:d7:d0:85:78:01:b2:f4:c0:8f:c5:cd:
         3d:94:e1:6c:d3:4b:58:19:4a:fe:51:28:f6:6d:5f:3f:47:5a:
         e6:06:c8:f7:0c:4c:5b:b0:de:34:71:44:bd:ae:5a:f0:d2:b4:
         93:0b:f6:4b:a0:bc:c3:ee:27:b5:c4:3a:84:5f:3a:03:70:cf:
         7b:c7:68:f5:94:96:e7:f8:e3:a0:97:7d:76:1d:4f:06:50:3a:
         9f:a2:3f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:26:31 2026 by rpki-client