Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/0D9CE5F244AA11F1AA4D012E99EE528E/_KtbpyYSYFeOSNmqwBIRqzpaIwk.mft
File:                     _KtbpyYSYFeOSNmqwBIRqzpaIwk.mft (raw, json)
Hash identifier:          SwwnHPqKNt+4K8ebtzNql8hS7ypADg3oOBWZuYc/9Pk=
Subject key identifier:   7B:51:69:C1:19:21:9F:79:D8:48:38:76:EF:B9:20:8F:70:E9:6E:4C
Authority key identifier: FC:AB:5B:A7:26:12:60:57:8E:48:D9:AA:C0:12:11:AB:3A:5A:23:09
Certificate issuer:       /CN=A9186214/serialNumber=FCAB5BA7261260578E48D9AAC01211AB3A5A2309
Certificate serial:       0A
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/_KtbpyYSYFeOSNmqwBIRqzpaIwk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/0D9CE5F244AA11F1AA4D012E99EE528E/_KtbpyYSYFeOSNmqwBIRqzpaIwk.mft
Manifest number:          0A
Signing time:             Tue 12 May 2026 15:34:30 +0000
Manifest this update:     Tue 12 May 2026 15:34:30 +0000
Manifest next update:     Tue 19 May 2026 15:34:30 +0000
Files and hashes:         1: _KtbpyYSYFeOSNmqwBIRqzpaIwk.crl (hash: FdavonUB3XydU0l2lTJ8fgHDReQ8S3ECeBepAT/s6eA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/0D9CE5F244AA11F1AA4D012E99EE528E/_KtbpyYSYFeOSNmqwBIRqzpaIwk.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/0D9CE5F244AA11F1AA4D012E99EE528E/_KtbpyYSYFeOSNmqwBIRqzpaIwk.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/_KtbpyYSYFeOSNmqwBIRqzpaIwk.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:50:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=FCAB5BA7261260578E48D9AAC01211AB3A5A2309
        Validity
            Not Before: May 12 15:34:30 2026 GMT
            Not After : May 19 15:34:30 2026 GMT
        Subject: CN=6a034886-af47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:19:89:4d:3a:1f:79:9c:9e:86:18:c6:70:93:
                    db:3f:72:8c:d3:60:5c:ca:d2:4b:9b:66:53:96:6a:
                    9e:4e:1b:14:a6:67:c3:32:aa:03:3d:29:5f:0c:16:
                    fd:37:84:6e:e2:5d:ec:95:09:0e:6d:db:d0:97:c2:
                    3b:89:f0:57:d3:54:1f:50:02:fd:c5:1d:b0:76:1c:
                    84:bc:dc:e4:54:68:5e:41:1a:54:6e:18:0f:75:f2:
                    c9:f1:f9:d3:5c:89:c4:dc:d6:1a:44:8a:c0:5c:4a:
                    21:f6:16:29:63:3a:a7:6e:54:92:7e:fd:da:84:71:
                    b9:c7:5d:ec:fd:82:e9:e8:f9:c0:8d:29:b0:3f:dc:
                    ed:00:73:34:8d:32:3a:5f:63:05:4f:28:48:be:0b:
                    4b:ff:d5:98:bf:17:39:e3:75:d6:b5:ed:c4:bd:f9:
                    36:d1:73:49:87:cd:3c:36:77:4d:83:1d:1c:eb:69:
                    18:59:5b:df:f0:9b:05:7a:d2:4f:c6:f3:83:47:2d:
                    bf:2e:32:d7:c9:35:76:fb:d9:09:3b:02:a4:10:68:
                    b1:93:97:03:19:f9:bf:3a:bc:37:5e:1d:87:17:04:
                    26:31:01:ab:02:f6:8a:d4:30:ab:56:e7:e3:70:45:
                    9b:74:ee:0e:9b:37:37:42:e5:26:05:a6:6e:ee:da:
                    bf:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:51:69:C1:19:21:9F:79:D8:48:38:76:EF:B9:20:8F:70:E9:6E:4C
            X509v3 Authority Key Identifier:
                keyid:FC:AB:5B:A7:26:12:60:57:8E:48:D9:AA:C0:12:11:AB:3A:5A:23:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/0D9CE5F244AA11F1AA4D012E99EE528E/_KtbpyYSYFeOSNmqwBIRqzpaIwk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/_KtbpyYSYFeOSNmqwBIRqzpaIwk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/0D9CE5F244AA11F1AA4D012E99EE528E/_KtbpyYSYFeOSNmqwBIRqzpaIwk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:50:77:f4:d4:80:ed:5e:b1:b6:6a:ca:1f:3e:5d:74:89:45:
         e9:fd:55:fd:4b:aa:c7:33:5c:4d:75:c1:76:f3:13:65:ee:0c:
         0c:12:8f:fd:0b:30:cf:39:0f:9d:fb:27:3c:fe:4d:e9:7f:48:
         09:bf:43:82:02:4d:d5:c2:52:71:05:1d:af:76:81:ce:b6:f4:
         68:32:69:1d:29:68:1e:ce:34:62:88:3c:77:73:23:01:9e:06:
         5a:87:a8:6f:b7:e8:b3:bd:91:6a:1a:a4:64:29:30:58:29:7c:
         ac:87:72:a7:8b:3f:30:e5:b8:46:32:19:05:97:74:82:f9:ca:
         e9:f5:51:6e:1e:34:c7:0f:52:e3:7d:ec:06:8e:12:f5:36:f0:
         72:36:25:af:3b:52:f9:1a:d8:55:1e:c3:50:1b:02:d1:31:63:
         32:c3:ca:8b:4d:b6:41:75:56:c2:44:23:fa:93:f0:d5:29:9c:
         cb:90:64:fc:41:2d:03:0c:38:cb:50:a2:da:bd:1b:0f:5e:47:
         a4:53:cb:a2:78:b5:45:09:50:d0:65:ab:9d:52:c9:fd:0f:99:
         86:62:f3:56:75:a4:29:40:1a:bd:ae:b5:2e:50:45:15:f7:33:
         1f:a5:3f:51:69:38:f6:f0:56:19:37:5a:bb:e6:fc:0a:45:38:
         fa:09:06:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:54:36 2026 by rpki-client