Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193227/0C2494A2413C11F186C8B6FEC2833773/sFj21VmeHSKajtv1m-VIIwPWoaM.mft
File:                     sFj21VmeHSKajtv1m-VIIwPWoaM.mft (raw, json)
Hash identifier:          bru9GhTvYvIUZkfnBsEGNF+EXLdXXdsRlOPXIivIw7s=
Subject key identifier:   CC:B9:7B:07:CC:7D:BE:B9:94:4D:5E:52:8B:8C:27:17:00:63:5D:9E
Authority key identifier: B0:58:F6:D5:59:9E:1D:22:9A:8E:DB:F5:9B:E5:48:23:03:D6:A1:A3
Certificate issuer:       /CN=A9193227/serialNumber=B058F6D5599E1D229A8EDBF59BE5482303D6A1A3
Certificate serial:       0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFj21VmeHSKajtv1m-VIIwPWoaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193227/0C2494A2413C11F186C8B6FEC2833773/sFj21VmeHSKajtv1m-VIIwPWoaM.mft
Manifest number:          0B
Signing time:             Mon 11 May 2026 09:20:32 +0000
Manifest this update:     Mon 11 May 2026 09:20:31 +0000
Manifest next update:     Mon 18 May 2026 09:20:31 +0000
Files and hashes:         1: sFj21VmeHSKajtv1m-VIIwPWoaM.crl (hash: QIH/NnLEHhfMzeAl41g55JsmryVAKW0prTSLuNh+d2k=)
                          2: 569B3232420111F1AA14ACFFC2833773.roa (hash: enP2l9Yw9Erb0zLPmEIe/iV0hnyi1aOiDafc8Z1cM0E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193227/0C2494A2413C11F186C8B6FEC2833773/sFj21VmeHSKajtv1m-VIIwPWoaM.crl
                          rsync://rpki.apnic.net/member_repository/A9193227/0C2494A2413C11F186C8B6FEC2833773/sFj21VmeHSKajtv1m-VIIwPWoaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFj21VmeHSKajtv1m-VIIwPWoaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 09:20:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193227, serialNumber=B058F6D5599E1D229A8EDBF59BE5482303D6A1A3
        Validity
            Not Before: May 11 09:20:31 2026 GMT
            Not After : May 18 09:20:31 2026 GMT
        Subject: CN=6a019f5f-2764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5c:13:3d:44:37:c5:7a:b7:d8:03:41:c8:1f:
                    f0:d1:2b:74:e5:c2:f8:b3:17:54:24:20:97:0e:0f:
                    4f:95:f5:d1:de:f2:ef:7d:45:4b:9a:91:d0:3f:ca:
                    f1:c6:ba:f7:d1:4c:ad:be:25:33:96:7a:a0:0e:a9:
                    ca:94:3e:19:34:42:45:c2:2a:04:c4:f6:ff:b9:a7:
                    14:47:7f:8a:59:24:1d:49:9b:75:9c:d2:42:35:a5:
                    3d:f5:7c:91:3e:de:a6:3a:ea:3a:c5:fb:fa:01:46:
                    49:dc:43:72:a9:78:ed:bf:94:de:20:d4:12:84:c7:
                    7c:4b:30:37:4f:bb:48:c4:81:3d:12:a7:65:f4:36:
                    f5:2d:e7:2c:4f:5e:25:bc:bf:c8:12:21:92:da:a3:
                    7e:9e:24:d0:ab:a2:f1:63:5f:80:c5:42:ce:6e:1b:
                    09:82:e7:4f:31:36:4e:1b:3d:71:44:6e:51:34:4e:
                    27:05:7a:81:83:b3:da:52:11:86:b6:04:09:4c:55:
                    97:85:7e:85:18:7c:6e:aa:f5:00:3c:50:f3:ef:85:
                    8a:80:81:42:2a:72:06:84:56:cf:8a:f0:89:ce:cc:
                    06:80:39:01:4f:ec:14:d3:95:e3:91:47:cc:b2:5b:
                    c6:53:ba:65:39:6b:ec:45:e6:4b:57:07:7e:c1:41:
                    28:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:B9:7B:07:CC:7D:BE:B9:94:4D:5E:52:8B:8C:27:17:00:63:5D:9E
            X509v3 Authority Key Identifier:
                keyid:B0:58:F6:D5:59:9E:1D:22:9A:8E:DB:F5:9B:E5:48:23:03:D6:A1:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193227/0C2494A2413C11F186C8B6FEC2833773/sFj21VmeHSKajtv1m-VIIwPWoaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFj21VmeHSKajtv1m-VIIwPWoaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193227/0C2494A2413C11F186C8B6FEC2833773/sFj21VmeHSKajtv1m-VIIwPWoaM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:6c:cb:9b:d7:bd:4f:94:38:fd:85:20:a3:93:2f:ef:b3:d5:
         07:c4:46:80:e0:96:6d:67:8d:1c:e9:39:f6:f2:67:e3:48:e2:
         11:4e:f2:18:54:1f:2f:b1:6a:14:ef:87:50:f5:93:6a:27:88:
         37:4d:c3:ce:2c:b3:44:40:a0:e0:f4:b0:95:d5:14:ea:28:04:
         8a:9b:d6:00:20:df:1d:c9:95:76:95:77:a4:d0:eb:c3:f4:cd:
         7e:ba:b8:64:af:dd:11:dc:8e:b4:a0:cb:a6:88:b6:c0:73:12:
         1b:ff:32:d5:a6:e6:78:b7:6b:64:0a:b9:e0:93:a1:fc:de:fd:
         b6:6c:54:57:3a:ea:de:e3:91:fc:79:2b:67:39:96:1a:5a:c2:
         e8:33:97:1c:68:bd:7e:97:23:40:de:71:c5:f6:97:d6:07:93:
         b6:95:6b:31:79:c1:01:0f:eb:64:97:fe:f1:fc:83:cd:2c:0b:
         c5:77:75:d2:0c:a3:6f:41:90:b9:ef:c5:2c:13:d0:67:8e:66:
         67:72:3e:fb:15:66:38:e0:ad:b0:96:a4:a0:69:72:27:2c:b5:
         53:8c:3f:49:d9:53:d3:97:ea:04:4c:3a:04:7d:64:38:eb:e3:
         10:f4:47:03:94:d7:69:99:10:04:16:73:1d:af:d7:a4:07:c3:
         98:7a:59:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:36:06 2026 by rpki-client