Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.mft
File:                     apVIHOj0DdiJXR-3rukOWVm6g8E.mft (raw, json)
Hash identifier:          ObK9WR7CypZD9foNJG1S5IcIPik0wknRls2cGMVnElQ=
Subject key identifier:   FA:62:4B:B1:55:A7:45:8B:AB:E5:F5:DD:25:BD:61:B6:D4:7A:1C:E9
Authority key identifier: 6A:95:48:1C:E8:F4:0D:D8:89:5D:1F:B7:AE:E9:0E:59:59:BA:83:C1
Certificate issuer:       /CN=A918DA0C/serialNumber=6A95481CE8F40DD8895D1FB7AEE90E5959BA83C1
Certificate serial:       0610
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apVIHOj0DdiJXR-3rukOWVm6g8E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.mft
Manifest number:          0604
Signing time:             Tue 12 May 2026 22:59:09 +0000
Manifest this update:     Tue 12 May 2026 22:59:09 +0000
Manifest next update:     Tue 19 May 2026 22:59:09 +0000
Files and hashes:         1: apVIHOj0DdiJXR-3rukOWVm6g8E.crl (hash: 5J2O3pGcc4qSWFRSQTSZpioPiU2a0StgJPQW+jE6Xg0=)
                          2: 0C3D8674345511EFA05D0C10C4F9AE02.roa (hash: HRou4YD/uzujxN885LS4SB7lyLQ56IuCpK60S++EpqE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.crl
                          rsync://rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apVIHOj0DdiJXR-3rukOWVm6g8E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:59:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1552 (0x610)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918DA0C, serialNumber=6A95481CE8F40DD8895D1FB7AEE90E5959BA83C1
        Validity
            Not Before: May 12 22:59:09 2026 GMT
            Not After : May 19 22:59:09 2026 GMT
        Subject: CN=6a03b0bd-383e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:14:55:28:93:c7:52:ea:75:f9:19:7e:08:75:
                    fd:4a:33:6d:12:e4:d8:ce:2d:22:97:8a:7a:6a:79:
                    e8:d1:bc:da:79:28:07:fd:3c:64:f0:3a:b0:98:46:
                    9e:f1:b8:4b:3a:cf:69:e6:fd:aa:c5:51:df:5f:f9:
                    39:90:f9:7d:dd:97:14:14:82:2f:5f:d1:3b:fe:c9:
                    b4:12:67:1d:3e:45:8b:72:a0:1b:ef:bf:ca:14:3e:
                    71:29:33:a1:39:33:c9:70:01:2c:e9:54:e4:48:aa:
                    8a:97:c1:77:bb:cd:cf:07:dc:ca:79:18:50:eb:d0:
                    76:df:0a:b2:2a:23:e7:be:11:1a:3c:5f:e9:6c:f8:
                    00:e0:e6:12:e8:ee:ec:51:3b:d0:f9:34:84:9d:15:
                    31:c7:4a:60:20:e9:87:68:43:bd:bb:f3:d4:d5:39:
                    75:ef:4c:ab:ae:0b:39:f5:c1:dc:7b:48:ee:19:b5:
                    0b:75:d1:9b:19:75:8e:2d:87:0a:ea:41:5d:a6:66:
                    7d:c2:d8:f5:00:a5:d8:a3:75:e9:1b:b8:13:15:f2:
                    4d:8e:a6:46:ad:2b:c0:61:b4:12:31:a3:91:55:07:
                    e2:ea:6c:e7:29:13:26:d5:15:c9:81:5d:79:00:cd:
                    a2:b3:f6:82:9d:52:ed:5c:33:d5:45:9f:62:6b:e1:
                    0f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:62:4B:B1:55:A7:45:8B:AB:E5:F5:DD:25:BD:61:B6:D4:7A:1C:E9
            X509v3 Authority Key Identifier:
                keyid:6A:95:48:1C:E8:F4:0D:D8:89:5D:1F:B7:AE:E9:0E:59:59:BA:83:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apVIHOj0DdiJXR-3rukOWVm6g8E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:a6:03:91:fa:4b:9d:00:9f:eb:04:a6:0a:a4:8d:d2:10:9a:
         ad:49:33:13:97:23:f2:e2:96:21:76:02:2d:6c:f6:12:f7:b7:
         c7:f4:f9:d0:e9:d9:6d:01:f4:02:31:10:93:6c:16:41:9e:c3:
         f8:83:5d:48:62:88:3e:59:a7:52:41:13:e7:13:28:d7:55:0a:
         86:54:aa:49:db:41:dc:64:12:91:24:d3:ac:ef:3e:a7:83:15:
         44:2b:ac:75:62:fc:99:33:b5:8a:fa:75:81:88:ca:f8:6a:87:
         fb:63:62:bd:88:c5:62:2c:aa:79:0a:a4:a9:34:97:82:b4:2f:
         39:d9:51:bc:34:00:1f:44:8d:47:fe:ca:15:c9:d3:5d:b7:fc:
         95:40:b9:dd:d5:34:2b:58:64:b4:5e:f8:80:72:1b:45:1c:b1:
         c2:dd:c4:99:de:02:17:47:df:4b:18:24:df:8d:82:b4:81:62:
         89:01:67:63:fb:f0:1e:76:0c:29:87:b6:4c:ea:32:c0:b1:33:
         c3:ee:c1:ff:32:34:c1:62:97:05:4a:4f:2c:04:44:e9:6b:eb:
         ce:d0:64:25:06:fe:25:e0:0a:6d:1f:06:b7:d0:62:13:19:ca:
         0f:22:9d:4e:34:47:20:a0:f5:9b:ff:70:71:2a:ef:00:22:5f:
         7d:39:8d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:37:20 2026 by rpki-client