Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft
File:                     h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft (raw, json)
Hash identifier:          VEX0+wHKpHdcaluwF6Uvjj2pvMj5gfz7qs7LqoBxLSo=
Subject key identifier:   1E:58:12:C6:14:71:A7:85:34:D9:6C:47:E5:B6:F6:55:9D:2B:44:BC
Authority key identifier: 87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B
Certificate issuer:       /CN=A919F9A8/serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B
Certificate serial:       01C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft
Manifest number:          01A4
Signing time:             Wed 13 May 2026 04:27:19 +0000
Manifest this update:     Wed 13 May 2026 04:27:18 +0000
Manifest next update:     Wed 20 May 2026 04:27:18 +0000
Files and hashes:         1: h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl (hash: yxBXLuwlbxEjQXRBxkgLmAVIg/LNxUy8vgb2hMOx2pY=)
                          2: 9E54710E16D511F09EF28A4EC4F9AE02.roa (hash: PS353luWU5EZRXf1V5KYpvKbmWd2t8tkTqJLhBlN/tY=)
                          3: F2D5C21216F511F086107D74C4F9AE02.roa (hash: ZuKywPCk/DkKyCpqoZBfyKV9L6QxTxAVdxmCPTDjvq8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl
                          rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 04:27:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 450 (0x1c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F9A8, serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B
        Validity
            Not Before: May 13 04:27:18 2026 GMT
            Not After : May 20 04:27:18 2026 GMT
        Subject: CN=6a03fda6-9e42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:57:55:0c:01:2a:48:4c:9b:71:55:ef:18:29:
                    fa:9e:e3:9f:e9:e1:fe:55:c9:6b:da:83:31:1b:c4:
                    88:8a:0f:98:0e:5d:c3:37:e8:eb:eb:11:44:9f:a6:
                    12:ee:8e:47:22:90:c3:62:2f:cb:2d:0d:3a:d9:aa:
                    3a:d6:85:13:38:36:a1:4f:6b:60:ff:22:27:cc:8d:
                    d4:7f:30:f3:57:e3:b5:0c:20:ec:44:b0:43:7f:1e:
                    02:1a:51:97:9f:d8:92:a6:be:28:9c:33:59:78:85:
                    36:a9:fd:5a:39:12:1a:2c:0e:da:87:ca:e3:0b:c7:
                    ee:b9:aa:63:43:f9:df:20:92:49:3d:fd:48:dd:b8:
                    ca:06:a0:dd:6d:9a:5c:2f:d0:16:37:b4:48:e1:d9:
                    1c:fe:8f:2e:0b:d9:67:fa:45:6c:ff:6a:fb:59:a4:
                    d5:35:82:fb:ef:29:7a:fb:16:0a:e8:99:19:5d:24:
                    21:56:a4:75:6f:5e:a9:f1:2e:32:9c:fe:67:67:20:
                    3c:44:dd:97:15:b8:34:11:f5:21:48:62:1f:11:6a:
                    9b:9a:8f:0d:68:1d:4c:77:67:b6:e2:4e:2d:4d:1b:
                    81:01:c1:18:7e:00:4c:8e:00:95:60:30:89:47:fd:
                    7e:92:92:51:3d:9a:80:f0:be:e4:2f:e6:d9:f5:0a:
                    ce:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:58:12:C6:14:71:A7:85:34:D9:6C:47:E5:B6:F6:55:9D:2B:44:BC
            X509v3 Authority Key Identifier:
                keyid:87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:e4:9e:22:c5:e3:49:76:de:fb:c5:ae:f4:ff:fe:39:6d:4d:
         bc:43:ae:30:d9:24:50:6a:c4:0e:d1:ae:1e:2e:3f:3f:59:08:
         0c:47:1a:f2:2a:05:f2:6b:70:4a:4f:5b:93:9d:0c:2b:15:37:
         bb:e7:1d:7e:db:ae:74:ba:ba:65:b1:2e:58:0e:4e:45:74:7e:
         61:cb:4a:5e:60:f5:53:38:15:39:0e:98:ac:76:7a:74:a1:cf:
         d8:80:1f:d1:be:89:ad:f1:14:03:bf:e5:8f:53:22:a9:87:b4:
         f5:f5:5d:de:7e:e0:02:3b:bd:21:83:2e:bb:0a:bc:e7:0e:06:
         a7:37:fa:ba:6a:1e:c6:c1:68:d9:37:be:4c:ac:87:98:7d:59:
         ce:53:26:5a:5b:ed:32:14:52:ed:1f:10:d0:b3:f3:47:ff:71:
         54:80:37:83:4a:be:f0:33:5d:c4:1c:46:c2:83:27:e1:2d:b3:
         39:63:1c:4b:87:15:2c:9b:17:12:39:c4:66:71:fc:5c:b2:03:
         2a:62:dc:d5:55:d8:d5:68:8b:31:42:81:54:56:b6:c2:9f:8f:
         7b:3d:d9:e8:67:18:bb:7c:f5:89:36:0b:1e:29:2c:27:6c:7f:
         fb:6f:32:f9:b9:e4:80:cc:d8:b2:c3:41:cb:bf:57:4c:84:9e:
         bc:8a:27:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:27:43 2026 by rpki-client