Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182509/A498B65EE48111F0AC467BC1426F56BC/s02Q9DN0N_l3bvB0le1r-joN4rI.mft
File:                     s02Q9DN0N_l3bvB0le1r-joN4rI.mft (raw, json)
Hash identifier:          DBsNeiOm78Xyel4UTyDDz0a5nFVFVe/jUibns8R8cGE=
Subject key identifier:   BA:80:2C:98:C8:A2:E9:B8:E2:ED:81:5D:1C:DC:82:B5:6D:0B:44:CE
Authority key identifier: B3:4D:90:F4:33:74:37:F9:77:6E:F0:74:95:ED:6B:FA:3A:0D:E2:B2
Certificate issuer:       /CN=A9182509/serialNumber=B34D90F4337437F9776EF07495ED6BFA3A0DE2B2
Certificate serial:       55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s02Q9DN0N_l3bvB0le1r-joN4rI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182509/A498B65EE48111F0AC467BC1426F56BC/s02Q9DN0N_l3bvB0le1r-joN4rI.mft
Manifest number:          4D
Signing time:             Wed 13 May 2026 08:29:35 +0000
Manifest this update:     Wed 13 May 2026 08:29:34 +0000
Manifest next update:     Wed 20 May 2026 08:29:34 +0000
Files and hashes:         1: s02Q9DN0N_l3bvB0le1r-joN4rI.crl (hash: nrJf7Q6r5SSCHegGpouin5PgVzQcaslruIVk3c2WvAs=)
                          2: BE29D45EE48611F0890F621E446F56BC.roa (hash: hKsoH8oLZIQOc0nbhGD9YegDajB0Xhwk9YbaG8Vcg5M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182509/A498B65EE48111F0AC467BC1426F56BC/s02Q9DN0N_l3bvB0le1r-joN4rI.crl
                          rsync://rpki.apnic.net/member_repository/A9182509/A498B65EE48111F0AC467BC1426F56BC/s02Q9DN0N_l3bvB0le1r-joN4rI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s02Q9DN0N_l3bvB0le1r-joN4rI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 08:09:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182509, serialNumber=B34D90F4337437F9776EF07495ED6BFA3A0DE2B2
        Validity
            Not Before: May 13 08:29:34 2026 GMT
            Not After : May 20 08:29:34 2026 GMT
        Subject: CN=6a04366f-6247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f7:b5:b1:11:20:f6:3e:cf:b4:c0:2a:51:ae:
                    12:84:70:95:41:de:80:bb:32:0f:9b:03:7a:76:c7:
                    7b:b3:92:3b:79:72:ae:be:d9:de:50:32:ee:53:c8:
                    56:e6:c4:10:e5:64:47:3b:4b:eb:98:5a:84:f0:9f:
                    2b:76:32:f2:5c:ce:51:4c:4d:59:b7:9c:b6:fa:fb:
                    03:eb:15:79:18:bf:0d:c5:ee:9b:0f:f9:c9:40:2c:
                    a4:ad:58:c2:5f:a4:70:9b:f3:75:33:c9:f5:3f:e0:
                    4e:2d:29:88:ce:76:8a:9d:1e:c6:5a:71:55:0c:3d:
                    95:4c:90:3e:5b:16:09:03:b1:32:c0:47:f1:5a:f1:
                    7e:ae:53:74:7c:e6:55:6d:0a:3c:b3:8e:9a:33:62:
                    6a:80:5d:02:55:42:77:7f:4a:2b:e6:cb:17:25:21:
                    63:fd:e9:b2:d2:d5:1a:a9:06:6c:b8:05:28:d4:6f:
                    38:ae:c6:1a:a5:c0:0e:60:be:22:49:d9:2f:93:33:
                    73:2e:15:b1:e9:21:b6:14:10:f8:eb:d6:21:3f:09:
                    d2:12:21:d7:47:97:0c:92:d0:a6:84:06:91:c9:69:
                    52:de:70:ab:ea:8d:fc:7f:9e:f4:19:5e:79:23:23:
                    c3:34:d1:db:b7:f6:e7:31:66:ba:f1:0b:c5:6f:b6:
                    25:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:80:2C:98:C8:A2:E9:B8:E2:ED:81:5D:1C:DC:82:B5:6D:0B:44:CE
            X509v3 Authority Key Identifier:
                keyid:B3:4D:90:F4:33:74:37:F9:77:6E:F0:74:95:ED:6B:FA:3A:0D:E2:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182509/A498B65EE48111F0AC467BC1426F56BC/s02Q9DN0N_l3bvB0le1r-joN4rI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s02Q9DN0N_l3bvB0le1r-joN4rI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182509/A498B65EE48111F0AC467BC1426F56BC/s02Q9DN0N_l3bvB0le1r-joN4rI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:65:2a:ce:ea:26:4f:02:57:51:4f:77:1d:4e:66:56:61:44:
         56:f3:8c:f5:53:e3:e1:7b:04:44:1d:92:3a:50:61:79:7a:bf:
         3e:09:6c:43:70:57:0b:b9:69:38:50:bf:03:64:cb:dc:9d:94:
         00:e7:e1:30:d9:d3:1a:d7:ed:c4:3a:91:5d:02:1f:b6:03:f6:
         bd:6d:7d:5f:22:71:e1:0a:8c:c8:16:55:ec:c9:65:8c:1b:08:
         e5:bd:a5:65:0b:4d:38:09:2f:67:00:f5:14:2b:0b:58:29:24:
         cd:d3:e7:84:59:07:ba:3e:af:df:e9:db:ee:91:48:38:4f:2e:
         a3:ce:20:a8:12:bc:18:0f:57:0c:aa:d8:b9:86:c8:d9:0c:83:
         dc:6f:63:fa:38:d4:08:06:f0:2f:9b:08:4f:b8:c8:c9:0b:52:
         87:48:bc:6a:a8:ea:98:a4:a6:65:6c:94:5e:a1:53:24:a7:9f:
         b5:25:35:c2:64:a9:96:4b:6c:13:30:52:39:fa:a1:9b:21:44:
         14:73:bf:ed:48:86:14:f5:19:6b:a9:0d:ed:15:25:2c:07:1c:
         50:f6:ee:9a:45:08:34:cc:6f:e4:17:c7:00:98:a0:4f:08:09:
         e2:26:ef:32:f7:f0:98:ac:7f:09:82:a5:79:f4:33:75:53:8b:
         8a:f9:9c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:20:25 2026 by rpki-client