Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft
File:                     1cjx3JTTw0gdbGlTaVakpSjV7cM.mft (raw, json)
Hash identifier:          /FLsfIC7G46fx68G4onHrCslw3MX2PifNCk4/WppE1g=
Subject key identifier:   C7:FC:EA:DC:05:FE:6B:36:B7:97:C5:CC:C3:CE:A0:F1:14:C6:E5:C5
Authority key identifier: D5:C8:F1:DC:94:D3:C3:48:1D:6C:69:53:69:56:A4:A5:28:D5:ED:C3
Certificate issuer:       /CN=A918AA4D/serialNumber=D5C8F1DC94D3C3481D6C69536956A4A528D5EDC3
Certificate serial:       3107
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft
Manifest number:          30D4
Signing time:             Tue 12 May 2026 15:27:50 +0000
Manifest this update:     Tue 12 May 2026 15:27:50 +0000
Manifest next update:     Tue 19 May 2026 15:27:50 +0000
Files and hashes:         1: 1cjx3JTTw0gdbGlTaVakpSjV7cM.crl (hash: OY/NhGzJhC7WBblKUtrUztjFzrMASj9Pytywjre8+PY=)
                          2: 517E7D1AB0EC11E5A6934B42C4F9AE02.roa (hash: 5DRF3OBPfXV3lU2bu3oUnMJrvoo8XlLJ7cqTsx4GaH0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.crl
                          rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:27:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12551 (0x3107)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918AA4D, serialNumber=D5C8F1DC94D3C3481D6C69536956A4A528D5EDC3
        Validity
            Not Before: May 12 15:27:50 2026 GMT
            Not After : May 19 15:27:50 2026 GMT
        Subject: CN=6a0346f6-012a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:03:6a:63:8c:81:7c:e2:cb:26:5d:49:7d:15:
                    cd:cf:21:eb:12:22:7b:a3:6a:c9:77:08:95:35:b0:
                    5a:c7:a9:87:d0:e7:4e:b4:43:f3:c9:38:f5:1c:96:
                    ce:6f:f7:c8:2a:2e:97:86:2b:d9:d9:d7:cd:3e:7d:
                    0e:b4:97:fc:e3:c6:d0:e4:1f:80:29:b1:1e:93:97:
                    42:a1:38:47:ae:2e:dc:f6:b8:a3:18:6c:ee:a3:34:
                    19:7f:91:84:8e:51:90:39:a2:3f:23:81:fc:f1:f1:
                    17:4c:b7:75:15:4c:c8:21:15:37:72:60:24:7f:c2:
                    e7:83:f9:6d:0c:c9:ad:f4:f4:5d:c3:e0:d8:ab:69:
                    5e:d3:82:c5:32:49:77:c9:8e:69:8b:a9:63:9d:a2:
                    17:11:7b:e3:5c:28:dd:bc:81:fb:3d:0a:21:be:a3:
                    d1:2e:e7:b2:a4:8e:f1:3a:1c:de:bc:03:5f:f4:74:
                    bf:67:7c:40:62:81:d0:1c:1c:b8:35:8d:2a:ef:71:
                    25:ec:bb:38:be:b4:c9:f8:72:99:2d:f8:cc:ae:45:
                    bb:85:0e:4e:6a:57:f9:0a:db:ba:19:58:2b:86:87:
                    1c:99:d2:23:a9:ba:6e:a6:ad:67:2e:df:4f:38:3c:
                    db:db:14:83:d7:e7:ce:ac:eb:e6:3d:8e:06:22:ed:
                    81:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:FC:EA:DC:05:FE:6B:36:B7:97:C5:CC:C3:CE:A0:F1:14:C6:E5:C5
            X509v3 Authority Key Identifier:
                keyid:D5:C8:F1:DC:94:D3:C3:48:1D:6C:69:53:69:56:A4:A5:28:D5:ED:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:db:59:29:92:f6:36:b1:7f:80:40:34:a4:18:92:37:57:6d:
         d7:50:a6:ca:f9:69:6a:73:06:3d:8e:e9:64:a3:bc:7b:0c:2c:
         65:3d:15:3a:ae:a4:e8:15:03:7b:1f:cc:72:6d:8e:4d:16:54:
         8a:7b:cb:0f:27:19:50:48:2b:d5:e3:ab:07:cc:5b:68:92:34:
         a2:44:e8:4f:3c:52:3c:43:d6:81:55:1e:fc:01:ef:77:4a:05:
         23:04:60:68:91:95:18:17:7b:0a:77:6b:35:bc:fc:25:04:79:
         b4:2e:71:70:bf:a5:a4:a5:39:0c:72:3d:a1:b6:d6:84:52:b4:
         32:46:fa:84:82:c1:9a:03:60:ff:9c:2b:8e:ce:06:a7:e9:71:
         d8:48:b5:04:88:c9:cf:a6:21:6c:60:fc:c5:0d:cb:78:ad:c1:
         7f:7e:f8:d3:f7:57:e8:b3:cc:bf:15:72:a5:39:a9:ba:9c:65:
         cc:8e:3f:4c:74:9b:64:d7:e8:76:04:46:59:e6:b7:4b:84:34:
         d5:eb:be:af:22:e7:76:dc:38:55:50:db:2d:3e:5d:54:4b:42:
         c0:86:9a:40:25:fc:46:ec:31:7c:bb:b8:7c:f6:b9:93:00:6e:
         89:eb:b0:fc:f8:32:87:c3:ea:67:9d:23:ef:53:1a:82:d4:96:
         ed:6c:40:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:16:36 2026 by rpki-client