Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.mft
File:                     k32ZUe4fk_ysJDM7CD-dfy458Pk.mft (raw, json)
Hash identifier:          lxayatIzE+PYQknGFLq/J3ht/lictkNkiLkUCogqEG8=
Subject key identifier:   6D:B8:38:75:A1:CE:0C:15:1D:27:66:33:04:96:4B:F2:3E:64:57:76
Authority key identifier: 93:7D:99:51:EE:1F:93:FC:AC:24:33:3B:08:3F:9D:7F:2E:39:F0:F9
Certificate issuer:       /CN=A919C8C4/serialNumber=937D9951EE1F93FCAC24333B083F9D7F2E39F0F9
Certificate serial:       0955
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k32ZUe4fk_ysJDM7CD-dfy458Pk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.mft
Manifest number:          094C
Signing time:             Tue 12 May 2026 20:13:35 +0000
Manifest this update:     Tue 12 May 2026 20:13:34 +0000
Manifest next update:     Tue 19 May 2026 20:13:34 +0000
Files and hashes:         1: k32ZUe4fk_ysJDM7CD-dfy458Pk.crl (hash: cfR7j8VC1mc9eWrzMqmFNS1m1AwM+PkUVvFYAbMaXwA=)
                          2: 6A3C327ABD1711EA8A3C8E20C4F9AE02.roa (hash: Pw6T1S/nZtLTYHmY2Zzud22xLXHu+YOzXxHo79MrzN0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.crl
                          rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k32ZUe4fk_ysJDM7CD-dfy458Pk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:57:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2389 (0x955)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C8C4, serialNumber=937D9951EE1F93FCAC24333B083F9D7F2E39F0F9
        Validity
            Not Before: May 12 20:13:34 2026 GMT
            Not After : May 19 20:13:34 2026 GMT
        Subject: CN=6a0389ef-792b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a7:07:2c:a4:6d:03:c1:20:9e:03:ee:10:04:
                    6b:59:45:a9:ef:5f:48:a4:9d:2b:1e:e1:31:f7:0b:
                    e4:34:be:a8:ab:27:d6:71:08:3a:69:75:af:77:78:
                    96:35:bc:fd:6b:d2:4d:b0:cc:e2:14:86:92:55:57:
                    fd:c2:4f:c7:d9:57:84:59:a4:ab:fb:47:2f:ff:00:
                    23:4e:73:3f:23:1a:d8:97:69:9a:0c:29:e2:e4:f5:
                    34:2b:e2:aa:80:5d:2e:43:ab:ac:0a:a4:69:54:e3:
                    3e:cf:29:ef:a4:75:f2:68:57:0b:93:33:66:ef:e7:
                    36:09:84:3d:b2:ed:54:97:91:77:62:81:16:57:fa:
                    72:7a:78:a2:7f:b5:bc:ac:f8:f2:6c:6b:9a:6a:79:
                    d8:1f:80:04:11:96:5a:2f:2b:d9:6b:51:82:8e:2d:
                    0a:0c:5b:16:76:71:ba:e6:1a:32:38:6b:07:21:06:
                    6f:1b:d6:cb:23:6a:a6:ca:09:f4:e6:fa:9a:17:ef:
                    77:f5:b8:10:ca:03:d0:90:60:c6:34:ae:e7:13:74:
                    33:56:ac:ed:6e:3c:e0:9d:be:b8:9d:ec:87:99:4e:
                    24:4c:ce:80:b1:05:a2:80:ba:43:87:e5:24:21:a9:
                    27:63:16:82:0d:c6:96:c2:07:3b:64:db:05:2b:c7:
                    d4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:B8:38:75:A1:CE:0C:15:1D:27:66:33:04:96:4B:F2:3E:64:57:76
            X509v3 Authority Key Identifier:
                keyid:93:7D:99:51:EE:1F:93:FC:AC:24:33:3B:08:3F:9D:7F:2E:39:F0:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k32ZUe4fk_ysJDM7CD-dfy458Pk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:1a:06:06:79:a8:20:59:1e:1b:1d:1b:ec:9c:a7:fd:3f:28:
         fa:2c:ff:ae:15:35:e3:f4:8a:2b:ff:2f:7a:3e:71:d1:f7:6e:
         67:4b:b0:0a:4d:a4:08:3e:b9:d9:75:d7:7b:d5:58:26:06:e8:
         ed:c6:4f:40:63:a0:02:f3:93:1f:45:08:d6:2e:80:55:ea:fb:
         75:5e:c3:05:e2:6f:54:5b:bb:86:79:94:a0:0b:46:27:83:ad:
         02:f4:c0:bb:d2:31:5e:5e:36:4a:1e:33:9e:1e:67:f0:58:f0:
         d4:ea:b6:6e:29:4a:c2:79:8a:16:9e:b0:a5:8c:21:ea:6a:78:
         c7:2e:bb:8f:b9:d4:59:95:00:49:1f:47:86:ee:4c:d3:2a:3f:
         5a:7d:38:a6:20:6f:f1:56:d4:ca:8a:87:cc:b1:2a:e6:19:81:
         24:97:4d:9a:69:b3:30:22:50:84:a1:03:ea:96:a5:a3:c0:b0:
         7a:4b:43:23:95:da:27:32:ad:3e:74:0c:df:9f:6f:9b:e7:18:
         1e:e0:6e:ab:6c:31:78:e7:87:13:f6:ba:47:be:a3:5e:0f:8a:
         80:8a:f1:dd:21:cd:b4:70:2c:9a:78:5f:e8:9d:56:3a:4a:b8:
         12:b3:ef:69:f4:bf:80:d7:00:bd:35:c5:ff:01:a6:2b:66:e8:
         47:59:4d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:20:17 2026 by rpki-client