Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft
File:                     2p0fnE_Zonx12sp94imVaDgMCFk.mft (raw, json)
Hash identifier:          ko16BtN05ltYyYNUh9pKKDDtl9C8sPZcUdVvwW2IiXo=
Subject key identifier:   31:60:C3:4E:27:F6:08:0A:8E:B2:74:D6:89:B9:A1:F5:DB:E8:EF:23
Authority key identifier: DA:9D:1F:9C:4F:D9:A2:7C:75:DA:CA:7D:E2:29:95:68:38:0C:08:59
Certificate issuer:       /CN=A9195BA9/serialNumber=DA9D1F9C4FD9A27C75DACA7DE2299568380C0859
Certificate serial:       0A8F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft
Manifest number:          0A74
Signing time:             Tue 12 May 2026 19:40:06 +0000
Manifest this update:     Tue 12 May 2026 19:40:06 +0000
Manifest next update:     Tue 19 May 2026 19:40:06 +0000
Files and hashes:         1: 2p0fnE_Zonx12sp94imVaDgMCFk.crl (hash: nBguYw5Sr3BA1WgLaIpTFxXnK7zglogGFmUsorrVP38=)
                          2: E9EDE9AAF05A11ECBD921381C4F9AE02.roa (hash: kdGWDUBBwv7cJ1dopKP4Pf5YTmUxxvJuv1IOgZRikQU=)
                          3: 6322249E033E11EDA7401850C4F9AE02.roa (hash: pGyuW5enksJ2G+9mcRO+cELx6+FB88OJUmeOOQetTPM=)
                          4: 55892E84839011EAB5B82263C4F9AE02.roa (hash: QmhFOsJakuRPvilxf18zot/c04GvDsCOSbSfIAJQQfc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.crl
                          rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:40:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2703 (0xa8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9195BA9, serialNumber=DA9D1F9C4FD9A27C75DACA7DE2299568380C0859
        Validity
            Not Before: May 12 19:40:06 2026 GMT
            Not After : May 19 19:40:06 2026 GMT
        Subject: CN=6a038216-3770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f5:07:b5:de:8e:1f:c6:98:36:90:a2:c9:de:
                    95:52:0b:03:0f:33:6f:84:4b:2a:1f:b7:a5:b8:b3:
                    98:0c:8e:1a:e1:7c:d9:40:c1:82:99:4c:2c:50:fa:
                    3d:a7:a0:df:b5:ee:cc:d1:83:c4:8f:e7:c1:f7:b8:
                    b0:62:90:9b:24:01:7d:49:34:fa:bf:07:87:4f:fd:
                    55:cb:bb:82:13:8d:71:5f:49:e9:d4:56:90:fc:f1:
                    c6:91:4a:5f:e9:14:34:c8:65:36:35:2d:0e:23:5b:
                    88:65:41:02:e7:44:46:4f:9f:5f:a2:75:26:ea:7f:
                    65:1a:4a:02:3b:e5:52:93:45:e5:25:69:f0:c5:c6:
                    d3:de:08:64:92:bc:f0:74:6f:f7:b6:df:a7:c4:6d:
                    39:a4:90:3f:44:3f:90:3a:7b:68:2b:6a:da:de:c6:
                    38:c2:62:46:c7:63:02:32:23:59:1d:5d:c5:e4:d4:
                    94:22:c8:ec:70:94:64:b3:8e:d3:0f:b7:95:15:95:
                    de:f0:cb:b5:f1:2a:af:0d:2c:ca:4c:23:6e:40:09:
                    06:0a:3b:e1:6d:88:3c:06:42:91:13:61:f9:04:db:
                    06:17:fb:43:fa:52:24:06:b2:6d:e3:5b:af:b9:c2:
                    54:65:60:a9:86:34:36:fc:b5:58:85:61:70:9d:2e:
                    6b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:60:C3:4E:27:F6:08:0A:8E:B2:74:D6:89:B9:A1:F5:DB:E8:EF:23
            X509v3 Authority Key Identifier:
                keyid:DA:9D:1F:9C:4F:D9:A2:7C:75:DA:CA:7D:E2:29:95:68:38:0C:08:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:af:5b:e3:82:77:3b:9b:7c:43:d9:43:a4:5d:a0:46:3a:2e:
         6f:6b:4b:41:54:d6:d6:89:9e:5f:5a:f4:de:36:c3:42:36:72:
         87:33:92:3f:79:1e:5a:96:82:87:a1:83:a3:0e:9e:b3:a3:41:
         b5:2d:63:4a:4d:14:e9:7f:a4:71:94:49:56:4c:fe:18:2d:a9:
         88:c6:45:89:1d:63:36:ce:d0:60:15:5e:7b:d8:e5:ce:82:ef:
         f9:30:61:05:7d:f5:61:2b:ed:10:61:11:ae:d4:32:d7:82:84:
         68:5f:69:2c:42:03:b4:cf:d0:27:9b:56:de:68:cd:d7:20:dc:
         d5:59:67:6f:5c:b0:c1:3d:d5:6f:6e:0a:d5:47:cd:b0:40:a5:
         a0:b0:ed:2d:36:6f:11:68:e2:15:63:a3:61:86:da:3a:1c:c9:
         09:17:d6:e4:3a:91:59:78:09:4a:3c:13:dc:b4:f3:16:f7:31:
         3a:a8:a3:0e:9c:fe:42:4f:e9:a0:fd:aa:a0:24:2b:82:ae:74:
         a6:af:78:12:d4:e5:7d:f3:a3:c3:e9:34:c4:55:dc:10:73:d3:
         77:27:e6:c5:b8:bb:77:45:5c:5b:ce:7a:e2:c1:e9:f3:1a:9d:
         fe:6b:a7:ef:55:85:06:db:4b:54:5d:1e:fe:53:bf:2f:4c:b4:
         fa:5c:dc:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:21:05 2026 by rpki-client