Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C47E/88B8B746380E11F1BA0BB15495833773/9A-TqdIRaxiksirqdTW59eNunlE.mft
File:                     9A-TqdIRaxiksirqdTW59eNunlE.mft (raw, json)
Hash identifier:          XbZ6IE9/qfWGMe8krsAOSbaiRSKBDpEjl33OQpvbbTw=
Subject key identifier:   B0:70:26:A1:56:F3:18:B2:0D:E3:1B:32:95:B4:99:56:F5:BD:09:FE
Authority key identifier: F4:0F:93:A9:D2:11:6B:18:A4:B2:2A:EA:75:35:B9:F5:E3:6E:9E:51
Certificate issuer:       /CN=A919C47E/serialNumber=F40F93A9D2116B18A4B22AEA7535B9F5E36E9E51
Certificate serial:       18
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9A-TqdIRaxiksirqdTW59eNunlE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C47E/88B8B746380E11F1BA0BB15495833773/9A-TqdIRaxiksirqdTW59eNunlE.mft
Manifest number:          16
Signing time:             Tue 12 May 2026 16:58:08 +0000
Manifest this update:     Tue 12 May 2026 16:58:07 +0000
Manifest next update:     Tue 19 May 2026 16:58:07 +0000
Files and hashes:         1: 9A-TqdIRaxiksirqdTW59eNunlE.crl (hash: dCo/F/eeq7q4B7znID67wdbbwhDhrsJtgtEMTVfI4MU=)
                          2: 934C25D238C011F1AD0BCD9C99833773.roa (hash: w2PsXC0NzHE/Q5fkR14UN3mHcPylNIHmDef5Q25n5fw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C47E/88B8B746380E11F1BA0BB15495833773/9A-TqdIRaxiksirqdTW59eNunlE.crl
                          rsync://rpki.apnic.net/member_repository/A919C47E/88B8B746380E11F1BA0BB15495833773/9A-TqdIRaxiksirqdTW59eNunlE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9A-TqdIRaxiksirqdTW59eNunlE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 16:58:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C47E, serialNumber=F40F93A9D2116B18A4B22AEA7535B9F5E36E9E51
        Validity
            Not Before: May 12 16:58:07 2026 GMT
            Not After : May 19 16:58:07 2026 GMT
        Subject: CN=6a035c1f-e54a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0f:16:86:f2:34:e6:43:67:88:89:42:27:e6:
                    eb:d9:87:e8:ac:8e:d6:e9:74:e1:84:57:75:e3:d4:
                    67:b8:69:8f:8f:db:2f:94:bf:20:14:16:55:d8:fd:
                    18:53:3d:de:c1:9c:09:63:38:35:0e:97:85:ad:69:
                    01:b7:c9:ff:9e:78:61:76:4f:49:aa:cf:d4:64:da:
                    15:4c:72:ae:91:ec:58:45:4a:e9:7a:be:a0:61:95:
                    a0:46:a2:3b:84:a6:31:e9:4c:86:48:cb:14:9b:0e:
                    18:1a:89:87:76:2a:10:c5:5b:d4:3f:f7:9a:79:cb:
                    99:eb:f4:f9:d4:1e:0a:cd:db:5f:2f:a1:05:04:62:
                    c8:ed:be:7d:09:f4:09:b5:4d:63:a1:1c:e0:66:2f:
                    17:2a:e6:a9:47:2c:fa:c5:95:a5:38:51:86:fb:b2:
                    b2:bc:b5:44:ef:f9:72:8e:3e:ce:aa:74:3b:34:86:
                    7b:f2:51:4c:fa:d8:3a:aa:4a:9f:ac:5f:9a:a0:ea:
                    ab:07:85:e0:e5:d1:40:be:15:70:6c:50:76:ed:d2:
                    84:77:2d:24:37:a5:a2:93:7c:0b:00:e4:54:89:96:
                    3e:f7:83:9c:d3:28:34:69:a6:5d:71:35:34:f0:aa:
                    93:17:8d:f1:de:1f:dd:33:ce:b8:3f:fb:d9:46:5a:
                    40:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:70:26:A1:56:F3:18:B2:0D:E3:1B:32:95:B4:99:56:F5:BD:09:FE
            X509v3 Authority Key Identifier:
                keyid:F4:0F:93:A9:D2:11:6B:18:A4:B2:2A:EA:75:35:B9:F5:E3:6E:9E:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C47E/88B8B746380E11F1BA0BB15495833773/9A-TqdIRaxiksirqdTW59eNunlE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9A-TqdIRaxiksirqdTW59eNunlE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C47E/88B8B746380E11F1BA0BB15495833773/9A-TqdIRaxiksirqdTW59eNunlE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:28:e2:9d:77:78:b6:41:7d:53:f7:c5:ba:2c:71:75:53:79:
         8d:9e:71:8e:43:63:51:0d:60:01:42:1f:4c:6d:b6:14:e5:01:
         79:b9:1a:bc:ae:3e:78:57:e1:d8:3e:54:5f:fc:67:b3:84:88:
         96:e6:7c:4e:e3:12:68:da:bf:c0:6d:be:d6:1e:5d:5c:6e:44:
         e0:95:af:18:49:f7:de:56:76:ba:06:0a:a8:b2:dc:ba:b0:7d:
         75:ef:ad:fb:49:42:4f:75:e0:d2:4c:a5:e0:b2:b5:c2:25:da:
         c2:17:b6:7b:81:12:65:83:d0:d0:30:a7:8c:cb:3a:a6:c8:d6:
         12:f1:ca:ca:95:d0:40:44:9e:a4:db:29:00:0c:f2:b2:b1:9c:
         18:d3:74:4b:4c:df:68:cf:b7:59:2d:4b:71:64:c8:21:37:78:
         b8:3c:63:b2:51:82:2a:fe:b3:5f:a3:cf:e8:80:ca:ca:da:19:
         6c:fb:c4:44:56:18:22:cf:83:e6:55:eb:77:d2:7c:72:d0:35:
         ac:8e:06:3f:27:ff:c3:a3:d1:5d:d4:e8:c0:ad:7b:95:30:0e:
         0e:4f:4a:a4:c9:65:36:66:eb:6f:c1:db:e7:c5:49:84:73:88:
         1a:97:98:fd:08:fe:06:41:e1:cb:7d:00:35:f0:0e:b7:fb:f6:
         15:5f:79:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:23:52 2026 by rpki-client