Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/0XRFPpVj66_LuzKsxs-Gb72OIvA.mft
File:                     0XRFPpVj66_LuzKsxs-Gb72OIvA.mft (raw, json)
Hash identifier:          QuQft2wRKjfvIr9DFiNeyf4zRB+vmh1/KC/PHW4WPGY=
Subject key identifier:   C5:42:46:73:6C:0C:BC:93:88:A8:AB:9A:44:52:31:84:E5:6B:F0:ED
Authority key identifier: D1:74:45:3E:95:63:EB:AF:CB:BB:32:AC:C6:CF:86:6F:BD:8E:22:F0
Certificate issuer:       /CN=A9187325/serialNumber=D174453E9563EBAFCBBB32ACC6CF866FBD8E22F0
Certificate serial:       011A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0XRFPpVj66_LuzKsxs-Gb72OIvA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/0XRFPpVj66_LuzKsxs-Gb72OIvA.mft
Manifest number:          0116
Signing time:             Wed 13 May 2026 06:01:46 +0000
Manifest this update:     Wed 13 May 2026 06:01:46 +0000
Manifest next update:     Wed 20 May 2026 06:01:46 +0000
Files and hashes:         1: 0XRFPpVj66_LuzKsxs-Gb72OIvA.crl (hash: qxUjRlCoSYBXj3p6v0aTO0ZlwjqHcYcZ6ds8kCoQTKk=)
                          2: D9DB29CCAAEF11EF9187EE2AC4F9AE02.roa (hash: R8HXpTKiYzOK8eX9NLZRgUVX35WrC+0ru/2MFWBu2jU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/0XRFPpVj66_LuzKsxs-Gb72OIvA.crl
                          rsync://rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/0XRFPpVj66_LuzKsxs-Gb72OIvA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0XRFPpVj66_LuzKsxs-Gb72OIvA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 06:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 282 (0x11a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187325, serialNumber=D174453E9563EBAFCBBB32ACC6CF866FBD8E22F0
        Validity
            Not Before: May 13 06:01:46 2026 GMT
            Not After : May 20 06:01:46 2026 GMT
        Subject: CN=6a0413ca-8b0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ad:db:94:eb:59:2a:1b:e0:ce:fa:59:cd:7f:
                    21:ed:59:59:04:1e:7d:62:12:f9:3e:ed:7e:fd:6f:
                    9b:5a:9d:b6:d4:24:97:95:bc:c7:37:92:67:5c:31:
                    aa:58:3d:e8:9d:03:4a:c4:89:12:42:40:02:b3:d1:
                    8c:aa:73:f2:80:0c:f2:f8:c4:06:73:13:8d:bc:e5:
                    7b:1b:5b:af:fe:18:6d:d4:23:be:d7:b4:04:0b:ed:
                    04:91:e3:0f:6e:ee:2e:1a:64:d8:38:e1:65:26:7d:
                    fb:4e:c7:13:0f:56:a7:81:9c:b7:d5:f1:13:93:58:
                    5b:28:66:a1:1b:22:83:ca:b1:b1:cd:80:d0:d3:9d:
                    bf:f4:06:b6:eb:a3:83:a9:81:24:a4:fe:fa:3b:5a:
                    72:26:bb:b9:5b:2d:77:84:a9:a3:5a:7a:da:fc:ec:
                    63:f5:81:1c:d6:da:69:e4:67:11:0a:c7:68:c0:ea:
                    ed:40:b2:01:3f:91:3c:b0:ac:95:81:ef:ad:2f:50:
                    e9:89:04:ae:03:92:b0:81:2f:d3:96:a2:ba:60:7b:
                    85:e1:d5:a3:aa:a9:46:df:df:35:4d:55:b7:4d:6e:
                    3c:22:06:f7:3d:33:c3:bd:4d:1a:2d:be:50:8d:47:
                    63:73:cd:48:32:e7:73:2b:10:79:9b:e7:a1:23:bf:
                    f7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:42:46:73:6C:0C:BC:93:88:A8:AB:9A:44:52:31:84:E5:6B:F0:ED
            X509v3 Authority Key Identifier:
                keyid:D1:74:45:3E:95:63:EB:AF:CB:BB:32:AC:C6:CF:86:6F:BD:8E:22:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/0XRFPpVj66_LuzKsxs-Gb72OIvA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0XRFPpVj66_LuzKsxs-Gb72OIvA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/0XRFPpVj66_LuzKsxs-Gb72OIvA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:c9:50:f0:5d:77:8f:33:ae:5c:7e:c8:94:c7:96:98:10:fc:
         c3:36:da:83:46:38:d8:fe:f3:a7:61:9c:b2:e4:08:4d:63:a6:
         27:fa:22:4f:49:d6:70:bf:e7:30:e3:7b:f2:95:3e:ec:bc:e5:
         a7:3f:b3:ac:d9:bc:42:2a:50:0e:ce:8f:a4:bd:ba:50:2d:49:
         7e:bf:e7:9d:e3:d9:cf:2e:0d:93:55:3f:ab:ec:63:c4:5d:81:
         2c:d8:ca:9c:21:f1:0d:fd:fd:28:dd:f9:a1:db:3f:57:82:53:
         38:d5:15:f6:2d:7f:84:70:43:3d:51:5f:31:95:4d:d0:6a:4e:
         62:c7:d0:b0:61:0b:e2:b3:53:30:47:48:c2:df:92:89:c1:17:
         51:70:cf:8e:9f:8f:f2:f9:96:da:a6:08:25:ce:47:f7:0d:cf:
         2a:58:0c:11:6c:9c:db:44:3e:e2:b2:c5:34:dd:22:b0:37:e5:
         db:68:7b:62:ea:b1:ff:20:b1:f6:d2:a0:37:c2:1a:92:6b:a0:
         07:e8:ae:e9:30:1e:75:78:34:83:54:e1:5c:79:6d:d3:b3:f6:
         df:e6:77:28:c0:79:0e:1b:ec:35:b8:59:3f:d2:48:e1:d7:b5:
         c5:b8:df:af:ac:05:d9:b6:c9:61:be:06:7f:c3:cb:56:1d:2e:
         c7:41:fa:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:51:27 2026 by rpki-client