Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193F42/800ED9CCA2B311F09466E235C4F9AE02/tB02AK8mCZMOgvCWAMevmPLdbJ8.mft
File:                     tB02AK8mCZMOgvCWAMevmPLdbJ8.mft (raw, json)
Hash identifier:          5epUY9ONPu3faJGgraFQGjwci9bq+BFQAVo+JySSs9s=
Subject key identifier:   78:4E:7C:5E:BB:17:BC:44:C6:62:19:A3:BF:A3:63:F2:AE:5C:91:E2
Authority key identifier: B4:1D:36:00:AF:26:09:93:0E:82:F0:96:00:C7:AF:98:F2:DD:6C:9F
Certificate issuer:       /CN=A9193F42/serialNumber=B41D3600AF2609930E82F09600C7AF98F2DD6C9F
Certificate serial:       76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tB02AK8mCZMOgvCWAMevmPLdbJ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193F42/800ED9CCA2B311F09466E235C4F9AE02/tB02AK8mCZMOgvCWAMevmPLdbJ8.mft
Manifest number:          73
Signing time:             Mon 11 May 2026 07:57:46 +0000
Manifest this update:     Mon 11 May 2026 07:57:46 +0000
Manifest next update:     Mon 18 May 2026 07:57:46 +0000
Files and hashes:         1: tB02AK8mCZMOgvCWAMevmPLdbJ8.crl (hash: nyfkENEOL4sFgIlqKJ45nU1NhI67fy8NfJhCn1c3EuY=)
                          2: E8D991EAA2B311F09C429E36C4F9AE02.roa (hash: rX5/7gKSXJTLeHn8vFsBC/ibmFcKVc04ia3nrFa3Qck=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193F42/800ED9CCA2B311F09466E235C4F9AE02/tB02AK8mCZMOgvCWAMevmPLdbJ8.crl
                          rsync://rpki.apnic.net/member_repository/A9193F42/800ED9CCA2B311F09466E235C4F9AE02/tB02AK8mCZMOgvCWAMevmPLdbJ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tB02AK8mCZMOgvCWAMevmPLdbJ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 07:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193F42, serialNumber=B41D3600AF2609930E82F09600C7AF98F2DD6C9F
        Validity
            Not Before: May 11 07:57:46 2026 GMT
            Not After : May 18 07:57:46 2026 GMT
        Subject: CN=6a018bfa-c663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b8:46:c4:a3:8e:a8:bc:5b:cb:ca:95:bd:8e:
                    25:aa:18:2c:e3:d6:6d:43:6a:49:c2:6d:69:9e:8b:
                    20:28:38:75:e8:43:91:91:93:b2:7d:41:f9:d1:4a:
                    f1:aa:7c:a4:b5:20:28:99:b1:6b:3b:38:ba:cb:43:
                    96:c3:4a:22:d7:6f:45:dd:3d:85:47:4a:a0:98:be:
                    f5:e4:5e:a2:3e:5b:09:e3:94:22:7b:08:84:0a:0d:
                    0f:12:95:d3:cc:85:b2:64:8f:ea:a1:50:0f:7a:1a:
                    a0:fa:36:76:9d:09:d2:b4:97:d2:dd:94:96:74:61:
                    af:f7:70:3c:ee:9b:85:7c:f4:83:16:5b:be:0f:fc:
                    8f:29:51:4f:06:42:7e:a3:fe:27:2f:ca:bb:11:a8:
                    f5:5d:f9:35:cf:93:fb:ca:df:5c:cb:4c:0c:40:f4:
                    bc:7c:2f:f7:ba:f1:c8:28:c7:0e:dc:32:8f:ea:6a:
                    d6:d2:46:56:90:53:74:60:cf:c9:5a:41:28:60:29:
                    5c:05:cb:d0:b3:16:a1:8a:a2:2a:b6:11:91:e3:e3:
                    91:f8:5b:57:72:f4:78:ee:2a:9d:fc:54:8a:95:bb:
                    b5:88:a7:3e:ee:59:21:2b:a1:71:47:d2:d9:0f:ae:
                    aa:c3:76:21:dc:3b:d9:b5:f7:8b:f7:1c:2d:00:60:
                    e8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:4E:7C:5E:BB:17:BC:44:C6:62:19:A3:BF:A3:63:F2:AE:5C:91:E2
            X509v3 Authority Key Identifier:
                keyid:B4:1D:36:00:AF:26:09:93:0E:82:F0:96:00:C7:AF:98:F2:DD:6C:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193F42/800ED9CCA2B311F09466E235C4F9AE02/tB02AK8mCZMOgvCWAMevmPLdbJ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tB02AK8mCZMOgvCWAMevmPLdbJ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193F42/800ED9CCA2B311F09466E235C4F9AE02/tB02AK8mCZMOgvCWAMevmPLdbJ8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:f7:ba:7d:fa:66:75:e9:8f:e8:4e:09:50:88:74:c7:e6:53:
         c0:e6:11:4c:db:e9:ff:ed:72:65:68:ee:43:7c:8e:6d:f9:4d:
         25:34:80:ad:75:13:a3:d0:55:dc:ac:55:76:27:d9:39:d2:aa:
         49:55:fd:a7:95:ef:4f:fd:c6:6e:dc:27:99:26:5e:84:e4:85:
         a4:fe:72:8b:9e:34:5d:df:0d:f0:89:d6:8a:82:cd:61:7b:3d:
         85:ac:23:0e:3e:f2:a8:d4:90:bd:5d:f3:6a:98:c6:00:ea:64:
         70:bb:b4:e1:2e:ab:e5:bc:23:0e:7a:c9:44:0c:ae:e5:2a:af:
         d6:1b:04:f9:7d:a3:cf:16:94:4b:93:10:04:c9:9e:88:94:5a:
         f1:07:61:d9:f1:ff:ea:ef:73:77:e2:75:8a:10:5c:8a:39:e9:
         2c:e9:21:a2:97:d7:e3:a1:63:d8:36:ab:7d:ae:9a:5d:e4:50:
         27:95:16:14:29:80:80:ca:fe:aa:50:f1:31:3b:17:70:fe:71:
         19:cf:75:84:67:c3:a7:64:29:0b:7b:d7:0d:d5:a2:ae:ea:f5:
         80:a3:49:28:6b:cc:82:87:0b:40:48:93:20:fb:4f:fa:4e:8c:
         d5:e2:ad:f6:c5:43:60:f7:b7:9d:8f:96:8e:7a:79:b6:fe:0d:
         7a:15:a6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:09:47 2026 by rpki-client