Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft
File:                     2xinykRiG1ZTwgBDlHaz8qOAhT4.mft (raw, json)
Hash identifier:          cP+cLKmowroiAS6SPs/5w3ZLWiWimuV9urOs9o3BqBU=
Subject key identifier:   8C:12:D6:69:9F:D3:54:CB:CF:E0:6F:9F:77:A6:3C:88:28:2D:9B:26
Authority key identifier: DB:18:A7:CA:44:62:1B:56:53:C2:00:43:94:76:B3:F2:A3:80:85:3E
Certificate issuer:       /CN=A918C774/serialNumber=DB18A7CA44621B5653C200439476B3F2A380853E
Certificate serial:       3549
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xinykRiG1ZTwgBDlHaz8qOAhT4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft
Manifest number:          3540
Signing time:             Tue 12 May 2026 14:55:01 +0000
Manifest this update:     Tue 12 May 2026 14:55:01 +0000
Manifest next update:     Tue 19 May 2026 14:55:01 +0000
Files and hashes:         1: 2xinykRiG1ZTwgBDlHaz8qOAhT4.crl (hash: AFkoKNHdnTR/MzorEryor8F8VgZ6wt79oDmLMJqivZ4=)
                          2: 0458A9A409FB11EA8742F60AC4F9AE02.roa (hash: LC97LkNyCch8PpadNtuDgtVq+g6dfVllu2MEvl1zkNM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.crl
                          rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xinykRiG1ZTwgBDlHaz8qOAhT4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13641 (0x3549)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C774, serialNumber=DB18A7CA44621B5653C200439476B3F2A380853E
        Validity
            Not Before: May 12 14:55:01 2026 GMT
            Not After : May 19 14:55:01 2026 GMT
        Subject: CN=6a033f45-ff09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:49:74:2c:1c:3f:74:56:52:cc:44:2e:d3:c7:
                    a3:0e:39:8d:47:10:19:ed:59:61:bd:12:c1:67:dc:
                    8c:01:93:c0:cb:cd:23:6c:24:a9:1e:61:4e:36:8a:
                    61:69:99:4d:7e:a2:c3:16:7c:47:68:c6:3b:9a:d4:
                    b5:b1:f2:b4:71:d5:8a:3d:9f:3c:16:d4:dd:0a:e5:
                    04:38:85:01:5c:84:32:9b:bf:e1:23:e7:37:72:ac:
                    4e:fa:94:59:f6:91:dd:68:c6:14:2b:de:49:d6:83:
                    c6:9e:30:c3:e3:24:28:2d:5f:83:d6:76:1a:d8:01:
                    96:dc:5d:f7:13:d7:ee:8e:b9:26:58:5c:ba:8c:d3:
                    e0:16:8b:3a:a5:44:35:54:bf:ed:ba:ed:83:28:d4:
                    99:e4:c4:ef:e9:09:0d:0f:a1:c4:c5:cd:22:63:1f:
                    55:51:5c:6a:42:69:9a:da:a9:77:f7:d7:5e:32:ba:
                    9a:08:c2:cb:bc:1d:7e:a8:9f:36:c3:61:68:52:a8:
                    7f:ba:3c:0b:56:0b:3d:f9:22:57:f8:32:de:2c:c6:
                    aa:16:52:bd:5f:cb:32:19:f2:6f:16:a7:84:a1:c1:
                    3a:5c:e6:a9:7e:b2:aa:db:65:1c:7e:a1:65:67:d5:
                    7e:9e:4c:ba:1f:3f:3f:03:47:01:f9:3b:fa:7c:dc:
                    56:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:12:D6:69:9F:D3:54:CB:CF:E0:6F:9F:77:A6:3C:88:28:2D:9B:26
            X509v3 Authority Key Identifier:
                keyid:DB:18:A7:CA:44:62:1B:56:53:C2:00:43:94:76:B3:F2:A3:80:85:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xinykRiG1ZTwgBDlHaz8qOAhT4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:99:a3:b7:df:81:b5:81:2e:43:72:e8:1c:f5:21:80:5b:df:
         a0:ca:76:bf:7b:f6:8e:90:e5:e9:5b:91:02:bf:28:07:5d:69:
         c7:13:17:c1:d5:0b:25:b5:a7:64:5c:da:2e:5d:2c:3d:99:c0:
         5e:a9:c9:d6:73:19:e2:78:4a:40:69:25:a4:11:95:fb:36:f2:
         70:be:33:34:28:cb:b2:45:b5:db:39:53:90:5a:dd:e0:e8:56:
         70:c4:09:2c:4b:16:be:6e:ea:04:9a:e5:a2:19:b4:3f:2b:be:
         07:39:fd:f1:45:ed:56:35:3a:49:5e:a3:ed:cd:3b:e7:cb:b4:
         f0:9e:99:9b:04:f7:8c:38:02:1d:46:35:40:03:90:fa:f1:8e:
         9d:2a:30:2d:f8:b6:ae:7f:20:15:ce:a2:29:03:19:3f:38:85:
         a7:d5:bb:b9:30:c5:6c:b6:b9:4f:ad:d8:0d:a1:86:c8:b5:16:
         c4:04:83:ff:12:c4:ce:a6:d7:e6:cf:ae:51:49:1a:57:65:f8:
         87:59:6e:ea:60:28:67:44:1f:c9:2e:2e:83:df:73:e6:ec:ed:
         7b:30:94:1e:8c:8c:82:49:2d:d1:37:35:ac:1e:1d:ee:45:84:
         15:10:67:5c:a9:7e:52:4c:ae:53:80:e0:a5:b6:71:08:61:de:
         24:0e:07:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:56:37 2026 by rpki-client