Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft
File:                     CC8e6S_qY3P9odWuxG4vLYrorIc.mft (raw, json)
Hash identifier:          cVwX4DrT+HhxdLmv8+2VOqnwRYnX9ixs5hP6rLFphTo=
Subject key identifier:   C0:27:D2:BC:BC:6B:A0:01:4C:08:B7:99:A1:39:12:03:B2:93:56:03
Authority key identifier: 08:2F:1E:E9:2F:EA:63:73:FD:A1:D5:AE:C4:6E:2F:2D:8A:E8:AC:87
Certificate issuer:       /CN=A919F0DA/serialNumber=082F1EE92FEA6373FDA1D5AEC46E2F2D8AE8AC87
Certificate serial:       08A1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft
Manifest number:          6166
Signing time:             Tue 12 May 2026 14:15:22 +0000
Manifest this update:     Tue 12 May 2026 14:15:21 +0000
Manifest next update:     Tue 19 May 2026 14:15:21 +0000
Files and hashes:         1: CC8e6S_qY3P9odWuxG4vLYrorIc.crl (hash: iO2KyvXWwIVsa+tQwb5RiYRZyV0GpT4M7kE34AmEGrE=)
                          2: 813E372A946711F081C10711C4F9AE02.roa (hash: 57qvv/Ci0wiylgCxyBLGHmCnzd/A0UFm3lCKkdUKpX8=)
                          3: D64176D81B9911ECAB0E1678C4F9AE02.roa (hash: Bvd1DVqbTNJSqvO20x1gAUmMTRKzz6mu9NujNo2jErs=)
                          4: 8272E36003BD11EBB416B77DC4F9AE02.roa (hash: /zXttT1/Z+BZbViTAHk4/AzLjMQjrMWW94BldELHaro=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.crl
                          rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2209 (0x8a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F0DA, serialNumber=082F1EE92FEA6373FDA1D5AEC46E2F2D8AE8AC87
        Validity
            Not Before: May 12 14:15:21 2026 GMT
            Not After : May 19 14:15:21 2026 GMT
        Subject: CN=6a0335f9-bb02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e4:df:94:47:2c:f4:16:f1:de:9c:58:4c:22:
                    42:6d:15:54:a9:c7:04:47:97:35:ba:ea:24:d6:3d:
                    d0:a4:ed:0c:6e:35:57:c3:e6:b8:de:db:75:60:23:
                    5c:6c:a3:77:35:67:3e:15:76:de:e3:e7:b8:c6:87:
                    25:d1:4f:b0:04:11:8a:f1:44:bc:a7:12:50:84:0d:
                    3a:75:af:6b:da:a7:65:6f:1f:a7:50:2c:48:50:ee:
                    90:e3:33:64:83:35:e3:e6:84:bb:fc:62:36:11:77:
                    4b:65:ad:21:2b:e8:90:3e:32:05:e5:38:dd:be:63:
                    03:32:f1:50:18:d9:e2:49:39:da:d7:f4:2e:96:e7:
                    41:97:fb:9d:6c:d5:e8:4b:fb:cd:a8:8a:7c:6f:28:
                    f1:fd:b4:f1:fe:b1:2d:5f:d2:32:b7:01:b6:af:2e:
                    c9:9b:50:b3:09:4a:e3:f8:b0:7a:a5:59:30:4e:5b:
                    de:af:b8:75:b5:c0:64:19:de:ef:24:20:b2:6c:34:
                    66:b4:d9:a7:b0:bd:ee:d3:c4:0c:c5:76:e0:92:e4:
                    0b:bd:a0:4a:c7:0c:bf:cc:d5:34:70:c6:88:72:85:
                    70:d5:b8:21:24:52:fe:ca:6f:1f:39:36:3c:dc:ea:
                    cd:62:e3:e2:a3:98:1e:35:1e:df:86:a0:ec:37:92:
                    44:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:27:D2:BC:BC:6B:A0:01:4C:08:B7:99:A1:39:12:03:B2:93:56:03
            X509v3 Authority Key Identifier:
                keyid:08:2F:1E:E9:2F:EA:63:73:FD:A1:D5:AE:C4:6E:2F:2D:8A:E8:AC:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:ad:2b:5c:2a:ec:17:72:5a:a7:c2:4c:da:d5:bb:df:5a:0c:
         3d:8a:3d:7f:1c:91:33:28:ac:7f:1c:e5:84:b3:3c:90:4e:86:
         5c:34:d3:e3:0e:10:b5:c2:de:34:f7:f7:b8:34:0d:ca:a4:0c:
         70:eb:ea:51:3b:b0:f3:3a:72:51:f3:78:ad:6f:44:df:e5:72:
         8d:65:a6:f2:f6:c2:3c:fd:31:06:0c:9f:0a:5e:33:45:f1:5d:
         76:55:42:22:fb:08:b2:04:69:6c:60:27:5d:c0:9a:7c:f6:33:
         c1:78:61:ce:c7:f5:ea:10:38:70:13:18:24:29:06:4a:d6:ad:
         85:0c:d3:94:04:6a:db:3b:07:18:31:0a:57:a7:25:a7:95:ce:
         58:a2:be:1d:81:ff:fb:a3:d2:4c:a8:3b:5d:24:d4:49:2e:b4:
         74:fe:63:23:05:f2:c5:e9:34:5a:f6:2e:2c:3f:a8:2d:a6:f6:
         5c:44:5e:66:54:51:7a:60:b7:42:af:c8:4b:20:fb:3e:ad:40:
         70:7e:ef:09:f2:ea:8b:ea:d2:47:ab:f6:ee:70:56:6b:f7:30:
         03:8c:7f:f1:b9:d7:de:d7:6f:e8:60:e4:09:43:91:ab:af:8f:
         1b:ba:15:73:80:9f:52:12:dd:0e:34:b6:0e:7e:6f:39:ec:a3:
         0f:b3:5a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:36:42 2026 by rpki-client