Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.mft
File:                     -XeXeNpwxYpaeWRd0olhEbpv68w.mft (raw, json)
Hash identifier:          TJumie6sn8ExjAvq4TaPgh9WiNBYsIW8kSeejMYa624=
Subject key identifier:   E8:32:3A:EF:31:41:E4:5B:E9:B9:56:AF:60:F4:95:00:73:D0:10:C9
Authority key identifier: F9:77:97:78:DA:70:C5:8A:5A:79:64:5D:D2:89:61:11:BA:6F:EB:CC
Certificate issuer:       /CN=A9196629/serialNumber=F9779778DA70C58A5A79645DD2896111BA6FEBCC
Certificate serial:       0295
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XeXeNpwxYpaeWRd0olhEbpv68w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.mft
Manifest number:          0289
Signing time:             Wed 13 May 2026 01:56:56 +0000
Manifest this update:     Wed 13 May 2026 01:56:56 +0000
Manifest next update:     Wed 20 May 2026 01:56:56 +0000
Files and hashes:         1: -XeXeNpwxYpaeWRd0olhEbpv68w.crl (hash: pPy8Vip59V91c1wnnONFCDMSzcwADcL54SYEmZVaOOU=)
                          2: BC5434647ABF11EDA9C3947EC4F9AE02.roa (hash: QKMAj5oVDcVogqlTrx41/NbrU6v80sS6Oreeo4WKGNg=)
                          3: 69349714157D11F0876A4D62C4F9AE02.roa (hash: oYbFnj0zT39rqmZi1wLTMzBUy8GKiMXQ3BORFFXqKM8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.crl
                          rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XeXeNpwxYpaeWRd0olhEbpv68w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 01:22:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 661 (0x295)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196629, serialNumber=F9779778DA70C58A5A79645DD2896111BA6FEBCC
        Validity
            Not Before: May 13 01:56:56 2026 GMT
            Not After : May 20 01:56:56 2026 GMT
        Subject: CN=6a03da68-2f51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b6:e6:f6:66:9c:0c:86:98:2b:18:61:37:1a:
                    84:6a:ad:75:cd:bf:db:e0:28:37:61:de:37:df:a5:
                    be:91:8f:c2:80:5a:19:61:22:2b:5c:f6:a0:66:e5:
                    d7:32:31:f9:1c:7e:79:9d:5b:cc:a0:00:d1:e0:58:
                    9a:6c:5f:c5:1b:28:5d:eb:ce:9f:0e:f4:ae:94:43:
                    fd:00:66:b5:e0:47:44:7e:0c:1f:a5:3d:1b:18:f9:
                    f1:69:d1:ac:81:cc:97:a3:d4:f0:8c:33:f8:be:e9:
                    45:3a:72:f6:e1:41:75:6a:4e:1d:8c:31:df:6f:52:
                    10:40:2a:75:82:b8:95:0e:dc:e0:46:92:75:a9:2d:
                    8a:c5:f5:77:b6:96:87:33:52:36:26:63:cc:af:fe:
                    e8:a1:52:6d:cd:70:5b:87:13:95:8e:74:34:91:aa:
                    42:9a:67:30:a0:c9:44:f1:51:6a:72:4d:26:ca:70:
                    dc:4e:37:a4:6e:0f:5c:72:c8:8e:01:04:1c:2d:29:
                    06:94:78:9e:e6:cd:08:9c:7f:6c:bd:71:7b:19:a5:
                    62:f1:80:81:93:db:51:ea:a6:e7:3c:9c:5e:0d:52:
                    d8:73:4d:c8:aa:c6:14:1c:64:31:ed:68:78:fb:fd:
                    7e:c3:cd:f1:26:2e:a0:bd:48:dc:a5:0c:ad:cc:08:
                    3a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:32:3A:EF:31:41:E4:5B:E9:B9:56:AF:60:F4:95:00:73:D0:10:C9
            X509v3 Authority Key Identifier:
                keyid:F9:77:97:78:DA:70:C5:8A:5A:79:64:5D:D2:89:61:11:BA:6F:EB:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XeXeNpwxYpaeWRd0olhEbpv68w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:f4:b4:1c:5b:4c:e8:38:c7:17:59:1d:31:cf:9d:1a:df:8f:
         b0:b6:f9:9f:02:8e:e6:1f:f4:d2:00:50:83:d3:00:e3:4f:4e:
         26:3e:62:aa:1e:b5:76:15:d9:c1:53:13:a1:f4:71:bc:a7:19:
         32:b6:b4:00:71:f8:b2:60:ac:e8:c1:58:0c:b6:65:4e:e8:23:
         55:6a:9b:99:3e:25:b8:9c:38:90:0e:32:79:93:cf:b1:b9:a4:
         26:1a:77:52:1f:fb:37:c7:13:51:f0:da:dd:77:9d:79:93:80:
         30:62:4b:af:8f:39:af:bb:a1:65:e1:1e:ac:c5:a9:87:ee:42:
         fb:b0:1f:82:c7:db:0e:93:dc:2c:35:a5:7d:53:c0:f6:01:3d:
         18:b7:15:2b:5b:7d:a2:e5:55:c8:1e:24:e8:33:04:0f:08:01:
         f7:84:80:31:8d:a6:ef:53:60:60:8f:eb:05:96:9c:dc:76:9c:
         ed:8a:a4:4f:74:63:21:40:d2:43:af:6e:86:db:ad:91:1f:58:
         bb:41:f9:bc:27:7b:82:71:fa:10:e2:be:15:a1:11:42:60:43:
         33:db:eb:5b:dc:f3:99:13:4c:0f:73:c4:4a:2a:48:84:1f:f0:
         2d:aa:1d:b7:84:2f:45:68:a4:d9:d9:28:c5:ce:64:14:d8:f0:
         ca:58:d6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:01:04 2026 by rpki-client