Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.mft
File:                     E5zB22udJLk7FJKKdRjQTrOyajo.mft (raw, json)
Hash identifier:          t3FSqQzXrUA9LBL8ByLoETTNRPE9dNKcaO0VXzXUpj8=
Subject key identifier:   D2:3F:A7:FB:B3:E7:D2:ED:EA:72:4D:09:37:85:6C:CD:53:E0:70:54
Authority key identifier: 13:9C:C1:DB:6B:9D:24:B9:3B:14:92:8A:75:18:D0:4E:B3:B2:6A:3A
Certificate issuer:       /CN=A919DAF2/serialNumber=139CC1DB6B9D24B93B14928A7518D04EB3B26A3A
Certificate serial:       22C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5zB22udJLk7FJKKdRjQTrOyajo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.mft
Manifest number:          2284
Signing time:             Tue 12 May 2026 15:51:54 +0000
Manifest this update:     Tue 12 May 2026 15:51:54 +0000
Manifest next update:     Tue 19 May 2026 15:51:54 +0000
Files and hashes:         1: E5zB22udJLk7FJKKdRjQTrOyajo.crl (hash: D2EON2qVd1o/MdCQTiLxuSDIMflrdncNEGl7Wt+4oAM=)
                          2: C4F05AA6144911EF85E2DC26C4F9AE02.roa (hash: QxCNiNBYMR2TGsewuzvNm3DKJS3QbU2M8ViaV5gW44A=)
                          3: FF59EC70144911EFA2053B27C4F9AE02.roa (hash: wxjDOjPUxRLRD34v8WE1H+az7Rx+TeyfiWHK2UqJLRI=)
                          4: A20F01CCE1E511EEA0477018C4F9AE02.roa (hash: SAQ/7mXh/NtmmnV+LJmzxsU68oluvkfBK75HrdKY5ew=)
                          5: 5AE16D9A386F11EFABF4E132C4F9AE02.roa (hash: X++G4W4xVTOlRaDR1fv18JyctaLbbXwbI4BhZbctNFo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.crl
                          rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5zB22udJLk7FJKKdRjQTrOyajo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:51:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8904 (0x22c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DAF2, serialNumber=139CC1DB6B9D24B93B14928A7518D04EB3B26A3A
        Validity
            Not Before: May 12 15:51:54 2026 GMT
            Not After : May 19 15:51:54 2026 GMT
        Subject: CN=6a034c9a-a3d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:32:f9:3d:c9:81:f4:36:9a:0c:22:ee:60:2a:
                    0e:bb:c6:92:21:8d:c1:1c:c2:a0:53:25:7a:9c:d1:
                    2e:e6:fa:16:eb:d3:26:d0:8e:7a:1d:af:54:15:ec:
                    42:d3:b7:4f:73:e3:c3:fd:60:f4:84:85:82:8c:e3:
                    ee:45:6c:a1:c5:e1:03:00:57:2e:bc:f5:ee:18:cb:
                    b5:f9:ff:b5:6b:e5:15:d0:d8:f3:a4:bb:e9:53:3c:
                    85:2b:99:81:01:0a:1c:37:cd:c2:57:2d:56:b6:60:
                    da:3b:3d:83:06:01:0b:4e:24:31:31:c5:5e:d3:81:
                    91:36:b3:76:15:3f:e8:d4:bb:31:f8:9c:01:03:49:
                    51:e6:56:c8:cc:a0:d4:4b:f9:a0:a2:17:5d:04:de:
                    23:ae:2a:38:65:85:05:02:99:90:56:75:5e:c0:44:
                    1f:3d:17:43:45:06:7f:a3:95:7c:0d:b8:4f:a4:c0:
                    39:97:fc:ab:c7:6b:df:e1:69:f4:11:3d:21:b6:6e:
                    52:02:21:66:05:e0:1e:d6:23:69:8e:28:34:da:f0:
                    18:ea:39:1d:81:b0:ec:14:38:fc:ad:90:16:b2:5b:
                    a5:2e:04:3d:d8:57:f9:ca:fa:67:2c:cb:5a:4a:9f:
                    2d:a0:f0:15:7b:fc:01:d0:d4:3f:e4:ec:72:94:ae:
                    93:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:3F:A7:FB:B3:E7:D2:ED:EA:72:4D:09:37:85:6C:CD:53:E0:70:54
            X509v3 Authority Key Identifier:
                keyid:13:9C:C1:DB:6B:9D:24:B9:3B:14:92:8A:75:18:D0:4E:B3:B2:6A:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5zB22udJLk7FJKKdRjQTrOyajo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:85:ad:45:bb:f0:9d:4c:9c:ce:e0:84:e1:21:b2:76:ac:ca:
         a8:99:27:3c:03:28:06:00:9e:ca:20:68:57:22:a8:cb:21:26:
         e4:8f:6e:26:e1:12:4c:92:7f:73:12:1b:41:48:14:99:47:71:
         cb:9d:66:b3:2e:36:32:de:c6:57:68:90:5a:8f:fa:68:26:06:
         a0:19:80:0d:5b:af:fe:7d:31:bc:9c:c2:d5:94:1d:32:ab:cb:
         9b:26:2a:8e:df:75:2b:fa:21:2c:d5:7e:87:f9:5b:6f:b1:93:
         52:e8:74:6b:7e:d0:47:22:8e:c1:d6:26:68:47:6b:08:95:21:
         04:82:6b:78:ff:0f:e3:f2:73:19:4b:2d:aa:74:06:8e:97:41:
         63:53:da:f1:e6:30:7f:22:ec:a7:43:89:07:2f:a0:d4:41:50:
         bd:aa:0d:55:8d:31:e5:de:1e:41:88:07:f4:d4:93:54:0f:55:
         ec:45:f6:f5:36:66:a0:fb:2b:1a:73:2b:8d:bf:66:f1:69:d1:
         47:40:7c:31:c5:9d:92:c1:46:40:bf:25:4c:bc:dd:f1:79:ec:
         2b:20:1c:dc:6d:cf:f5:1b:ae:e9:d4:15:ee:eb:3a:3a:a9:e1:
         42:9b:d2:62:8d:c3:77:a5:4b:e5:03:a2:cf:31:3f:be:c2:78:
         dc:b9:48:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:19:33 2026 by rpki-client