Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft
File:                     9y59Xhu0VCq3_3dzZYg8FgEDTek.mft (raw, json)
Hash identifier:          s5it3W1lQuLu7lHrJoS6WnOHw69tiDMGKKJliYGnq4E=
Subject key identifier:   BB:C2:EC:9E:43:31:5A:62:84:C6:CD:41:43:CD:43:5D:66:9B:B8:CC
Authority key identifier: F7:2E:7D:5E:1B:B4:54:2A:B7:FF:77:73:65:88:3C:16:01:03:4D:E9
Certificate issuer:       /CN=A919631C/serialNumber=F72E7D5E1BB4542AB7FF777365883C1601034DE9
Certificate serial:       0F76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y59Xhu0VCq3_3dzZYg8FgEDTek.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft
Manifest number:          0F62
Signing time:             Tue 12 May 2026 17:34:13 +0000
Manifest this update:     Tue 12 May 2026 17:34:13 +0000
Manifest next update:     Tue 19 May 2026 17:34:13 +0000
Files and hashes:         1: 9y59Xhu0VCq3_3dzZYg8FgEDTek.crl (hash: aAZ8YJ87sAetY9FOlcuCBmb9u5tmZuxGvQODkEmGQIY=)
                          2: DCB2531AC75911EF979D593BC4F9AE02.roa (hash: xeSp+ee2o5QPG9Bonf7PC8aiLXnBIzPrcdEWH1qZB/w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.crl
                          rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y59Xhu0VCq3_3dzZYg8FgEDTek.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 17:34:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3958 (0xf76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919631C, serialNumber=F72E7D5E1BB4542AB7FF777365883C1601034DE9
        Validity
            Not Before: May 12 17:34:13 2026 GMT
            Not After : May 19 17:34:13 2026 GMT
        Subject: CN=6a036495-d4f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ae:71:d8:a6:6b:a7:30:4c:5a:ca:91:1f:a1:
                    45:24:51:7a:cc:7c:56:fb:14:ad:e1:db:30:86:f6:
                    94:12:ef:4b:d4:24:af:97:60:c2:eb:f0:f2:09:46:
                    34:83:46:7e:6c:9c:6c:dc:23:8c:65:75:cf:3d:ca:
                    e5:8e:1d:77:68:f7:5b:21:76:c7:35:75:6f:a0:85:
                    2e:c3:05:3a:18:af:3c:76:c6:d2:81:af:ad:ca:73:
                    f2:9a:23:8e:dc:7a:55:ba:38:6e:f8:48:96:62:68:
                    da:d5:de:5e:b2:61:a6:d8:37:ad:82:a9:98:2b:09:
                    30:e6:b8:c9:fb:56:0d:2b:77:7a:94:93:00:a4:b4:
                    7d:7f:6e:5d:e3:73:70:b1:de:f1:6f:c4:4e:d6:7b:
                    f8:4f:a4:d4:b5:7b:3d:1a:2b:a5:31:09:12:ad:4d:
                    3d:21:0a:12:f1:79:50:4b:92:10:54:25:29:57:a8:
                    21:39:d3:c4:55:f8:6f:e8:99:47:d9:ae:12:a4:a5:
                    e8:2d:2a:26:0d:86:a5:2e:ef:5d:b2:66:12:0b:ff:
                    65:ef:5f:d7:c9:64:31:0f:a3:82:12:f6:aa:2f:ca:
                    05:93:9f:6d:e1:41:e0:ed:bb:9d:3c:1c:2f:49:66:
                    80:1f:90:ed:60:9c:45:0f:e0:78:26:7a:9a:29:b3:
                    68:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:C2:EC:9E:43:31:5A:62:84:C6:CD:41:43:CD:43:5D:66:9B:B8:CC
            X509v3 Authority Key Identifier:
                keyid:F7:2E:7D:5E:1B:B4:54:2A:B7:FF:77:73:65:88:3C:16:01:03:4D:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y59Xhu0VCq3_3dzZYg8FgEDTek.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:a0:7c:32:fe:44:36:92:c5:fa:15:20:08:dc:f5:72:4c:d4:
         4c:91:49:9f:35:41:7e:1d:db:dd:df:69:c3:9c:e6:e7:93:5a:
         0a:2e:78:a0:79:90:90:67:10:7c:0b:cd:25:2f:bd:0d:fc:d7:
         5a:a2:33:89:67:06:b4:44:0a:d8:3d:79:a4:6d:88:6e:ba:66:
         f5:db:79:d5:0d:ee:be:8d:dc:32:f7:6d:3f:1a:97:15:dc:16:
         14:73:cb:0f:b1:6c:c1:9d:1b:28:6c:48:81:f4:80:e5:e4:04:
         96:f7:0e:b8:d0:ea:1c:f9:00:01:88:fd:ea:32:15:34:52:b3:
         32:d7:eb:a4:22:83:ab:fe:c0:4c:bb:92:76:fa:62:bb:57:d3:
         c4:4e:32:8b:22:fd:ea:6a:8d:8d:f4:d1:50:b4:9e:59:39:dc:
         80:4d:7d:bf:ea:61:62:3a:dc:6d:0a:7b:29:d1:d3:96:12:37:
         10:89:6d:46:15:73:2b:09:6d:fd:18:40:c0:a0:b3:5d:69:18:
         e9:e3:3a:06:5a:8b:c8:6b:73:7a:19:fb:a6:c8:45:fb:14:6b:
         b0:b8:89:36:b0:1e:30:06:a4:2b:e0:9e:22:79:00:fb:5b:81:
         d3:4a:b5:4a:47:51:6b:5b:61:3d:cd:21:8c:de:83:28:ed:0b:
         6c:8b:ad:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:17:38 2026 by rpki-client