Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft
File:                     C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft (raw, json)
Hash identifier:          d5ZAagntiG4AVqeT32QgTShOLnkV2hu49OPOebzo3JU=
Subject key identifier:   F3:B0:C6:7C:E0:F9:FC:83:99:15:68:B8:D7:BA:7A:E8:89:39:3C:37
Authority key identifier: 0B:6C:D1:27:D0:4E:EC:3E:8E:E4:18:39:19:41:4F:D7:EF:39:D9:24
Certificate issuer:       /CN=A918EF87/serialNumber=0B6CD127D04EEC3E8EE4183919414FD7EF39D924
Certificate serial:       B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft
Manifest number:          B6
Signing time:             Wed 13 May 2026 07:10:37 +0000
Manifest this update:     Wed 13 May 2026 07:10:36 +0000
Manifest next update:     Wed 20 May 2026 07:10:36 +0000
Files and hashes:         1: C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl (hash: tF1wkjI1BImHTWOvcYCofbqYlq7zOtJZRgOkVdTdCqo=)
                          2: 4C2B8F143BAD11F08B837C50C4F9AE02.roa (hash: M42F29+lHWSZmf5X/47K8ifG1ySfiTbA4ZzoyOCU96w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl
                          rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 07:10:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184 (0xb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EF87, serialNumber=0B6CD127D04EEC3E8EE4183919414FD7EF39D924
        Validity
            Not Before: May 13 07:10:36 2026 GMT
            Not After : May 20 07:10:36 2026 GMT
        Subject: CN=6a0423ec-3090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1e:a5:37:6f:fc:b5:5e:69:0b:8b:a0:60:25:
                    a7:47:34:4d:90:90:15:e0:3f:1a:03:d5:f0:a3:6a:
                    80:10:58:57:f6:7e:0f:12:b5:da:e1:b5:4a:a1:41:
                    a9:a2:fd:a7:09:43:7f:a4:14:16:0e:4f:48:c1:a0:
                    cf:a9:dc:a1:1c:97:61:86:d3:ab:1a:65:3c:65:50:
                    4c:3d:41:3c:c3:95:d2:f0:69:88:04:a9:95:32:16:
                    6d:19:d3:87:e7:0c:19:b6:15:ad:33:ab:b9:d2:94:
                    28:ea:6e:74:85:5c:ff:b9:7b:5f:72:69:b2:c0:de:
                    bf:1a:2d:0b:34:e0:fc:bc:b5:28:70:a3:d8:ad:46:
                    e7:59:f0:58:b0:43:0a:94:73:29:e7:27:7a:07:e5:
                    7a:d0:e7:6e:a1:a1:85:76:2f:87:4b:5e:30:32:f1:
                    75:3e:61:e1:ac:9b:5a:96:5b:38:f4:8f:c0:0a:40:
                    49:4b:e8:08:13:77:9a:bf:63:be:76:50:1d:eb:ed:
                    9d:71:59:21:b5:96:15:6a:1d:6d:f6:e4:38:3b:66:
                    4d:d0:15:c3:05:59:de:d2:8e:bd:8c:ff:b1:7a:4b:
                    52:b3:96:e5:3d:1c:14:15:62:2a:70:92:78:91:1b:
                    d1:97:7b:3f:37:b7:7a:bb:ce:df:51:5d:86:89:5c:
                    41:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:B0:C6:7C:E0:F9:FC:83:99:15:68:B8:D7:BA:7A:E8:89:39:3C:37
            X509v3 Authority Key Identifier:
                keyid:0B:6C:D1:27:D0:4E:EC:3E:8E:E4:18:39:19:41:4F:D7:EF:39:D9:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:a9:79:73:2c:2d:e8:ec:7c:c7:68:e6:14:e2:fd:9e:43:9c:
         55:ed:bf:60:d0:5a:0b:94:9b:fb:52:cd:ec:b6:30:d0:ff:a5:
         b4:8a:7e:47:18:aa:01:80:f7:ef:bb:b6:0a:0b:a8:0d:e3:cb:
         2f:01:f9:06:19:8a:aa:a7:b8:6d:10:c7:82:74:ac:d3:9c:f3:
         a3:c3:6e:19:bf:14:95:7e:f5:f9:ab:62:a3:66:33:4b:37:d1:
         6e:6e:e7:20:1e:3e:58:6c:5d:43:26:31:da:88:43:2e:5c:76:
         a6:44:16:a1:8e:7a:f3:bf:8d:b7:d9:83:0c:88:9c:4e:ef:7b:
         21:1e:66:55:d6:8d:1e:f1:ce:f1:67:df:1a:17:5f:13:b3:e3:
         0b:1d:48:20:ed:c5:77:40:f9:61:f8:c3:0b:c8:0a:bc:ee:a0:
         86:e3:ac:47:ec:b6:32:12:d0:29:07:02:93:b9:c0:24:ee:76:
         84:c5:36:34:9d:6c:cd:4d:64:bc:3b:0b:cd:7d:1c:18:33:ea:
         31:40:47:a4:9c:4a:41:d7:b0:e5:0d:d4:c9:e8:b7:2c:c3:40:
         64:17:fd:4c:80:ef:5d:bc:f1:90:49:00:39:85:b7:6a:f5:d1:
         d7:da:0f:6b:be:40:78:31:1f:83:ad:ae:34:20:45:3a:28:1f:
         30:46:de:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:16:31 2026 by rpki-client