Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.mft
File:                     8FIaW22wTXVvopUqDymjkSEsWLI.mft (raw, json)
Hash identifier:          ekth4avjfZAtvqSGt8afKmDxsTGH0dS8smhLpNQhSnE=
Subject key identifier:   2F:04:28:0E:7D:42:5E:C7:92:83:E5:E9:A5:8D:9E:C5:8A:90:63:47
Authority key identifier: F0:52:1A:5B:6D:B0:4D:75:6F:A2:95:2A:0F:29:A3:91:21:2C:58:B2
Certificate issuer:       /CN=A919AE6A/serialNumber=F0521A5B6DB04D756FA2952A0F29A391212C58B2
Certificate serial:       63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8FIaW22wTXVvopUqDymjkSEsWLI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.mft
Manifest number:          61
Signing time:             Mon 11 May 2026 08:09:21 +0000
Manifest this update:     Mon 11 May 2026 08:09:20 +0000
Manifest next update:     Mon 18 May 2026 08:09:20 +0000
Files and hashes:         1: 8FIaW22wTXVvopUqDymjkSEsWLI.crl (hash: Lv33mPCMzIdFvyJBv9ry/MSGtG1a087/LNxTncCz1Bw=)
                          2: E9689162C8FE11F0BCA3A555C4F9AE02.roa (hash: ivbdN4NvvnbB10SMOQMCGpQDBPImMhiYIJBpIIj7B+I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.crl
                          rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8FIaW22wTXVvopUqDymjkSEsWLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:09:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919AE6A, serialNumber=F0521A5B6DB04D756FA2952A0F29A391212C58B2
        Validity
            Not Before: May 11 08:09:20 2026 GMT
            Not After : May 18 08:09:20 2026 GMT
        Subject: CN=6a018eb0-38f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:15:40:e2:87:d1:c0:e5:6c:df:a7:85:6d:ed:
                    ab:18:06:e7:49:67:9b:15:d5:03:93:55:b4:93:bc:
                    1a:49:a6:c4:3e:76:87:5e:5a:09:6a:7d:66:71:50:
                    3c:ab:9a:77:e3:95:5d:22:92:a5:75:75:b5:4b:49:
                    33:e7:51:c7:ef:6a:3f:c2:16:73:d9:65:54:9e:f4:
                    aa:ed:33:2d:9f:b2:75:72:33:28:17:f5:fb:25:48:
                    64:d4:87:40:e3:be:c4:d4:a6:f0:8a:a2:c4:5c:83:
                    9c:9f:6e:a7:59:89:02:6c:f7:75:a1:7f:67:8b:db:
                    1b:9a:84:18:5c:14:4b:6a:01:a4:00:cf:a5:b0:0e:
                    67:df:48:c0:a8:ca:99:03:84:ee:4a:da:39:0e:c3:
                    d4:b1:d7:5c:4e:73:08:4a:06:36:20:45:fd:e8:b9:
                    b1:0b:ca:71:d5:21:05:8d:f7:5c:46:d5:a0:5a:4d:
                    44:03:b5:33:56:92:f2:e1:38:e7:82:cf:bb:7f:7c:
                    45:4f:e0:09:cf:7e:cf:f6:03:38:7b:ee:44:75:39:
                    50:3a:0c:00:34:19:63:85:6f:ef:b1:4a:18:8f:e4:
                    cc:04:85:ed:be:20:51:e2:69:e1:34:27:43:52:a7:
                    ca:83:d5:14:45:ac:ae:1a:36:a2:c3:ec:2f:e2:47:
                    46:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:04:28:0E:7D:42:5E:C7:92:83:E5:E9:A5:8D:9E:C5:8A:90:63:47
            X509v3 Authority Key Identifier:
                keyid:F0:52:1A:5B:6D:B0:4D:75:6F:A2:95:2A:0F:29:A3:91:21:2C:58:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8FIaW22wTXVvopUqDymjkSEsWLI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:fb:5f:4e:a0:70:f2:3f:7c:d1:8f:8d:a4:9a:65:5c:92:67:
         6f:6f:27:40:af:e9:15:ed:f7:de:08:e7:60:5a:3d:72:44:90:
         1b:50:9f:bf:c6:c2:ad:f2:1e:75:55:a7:17:f6:1f:ed:c5:fd:
         94:8d:15:97:1f:d8:47:77:ea:ad:e2:aa:29:96:6a:3c:bc:28:
         59:11:b4:9a:18:4e:81:a2:5c:52:66:67:bc:5b:11:43:72:f8:
         19:35:a1:c7:fd:38:16:57:62:29:7a:4e:9e:5f:eb:60:c0:26:
         07:a6:b1:c6:49:a1:30:12:96:94:dc:fa:ca:74:b4:8c:e9:8c:
         07:3e:5f:d8:aa:2b:93:7d:c9:34:68:f4:eb:fa:6a:a2:f3:9d:
         9b:4d:21:08:6b:86:a3:6b:df:88:8d:7d:5c:8d:cb:a7:f3:48:
         73:fa:7a:a0:91:6f:62:98:8f:19:2c:dc:48:f3:4c:df:eb:ff:
         92:d1:cb:76:86:2b:4d:8a:d0:fb:d2:4b:d9:0d:86:17:1b:4b:
         16:6e:49:4f:62:9b:cd:cb:12:88:d2:43:d9:bd:6c:dc:4c:1c:
         98:de:2c:50:92:27:2e:ff:34:ad:00:95:22:98:9f:c0:ae:20:
         57:54:9a:78:0f:02:d4:51:e8:6d:78:d5:5c:08:a1:76:0c:4c:
         34:86:55:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:15:30 2026 by rpki-client