Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft
File:                     jX4wWDULuN_v_Od3C7yMhrdioeQ.mft (raw, json)
Hash identifier:          I4d0jlMw/whgBz0hCpOIwustqJcV6dmlhdhMTxb+if8=
Subject key identifier:   85:74:BE:EE:74:4D:98:0B:5D:4D:70:38:36:45:04:07:7A:B7:C9:F2
Authority key identifier: 8D:7E:30:58:35:0B:B8:DF:EF:FC:E7:77:0B:BC:8C:86:B7:62:A1:E4
Certificate issuer:       /CN=A9110C51/serialNumber=8D7E3058350BB8DFEFFCE7770BBC8C86B762A1E4
Certificate serial:       0AE5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft
Manifest number:          0ABE
Signing time:             Wed 20 May 2026 19:32:53 +0000
Manifest this update:     Wed 20 May 2026 19:32:52 +0000
Manifest next update:     Wed 27 May 2026 19:32:52 +0000
Files and hashes:         1: jX4wWDULuN_v_Od3C7yMhrdioeQ.crl (hash: 7Tmy4yPIlbJK1BfkeE4DLmsTnpPCP+Vl9DrwAh1Bbmo=)
                          2: 1043B2347BBD11EA8356C986C4F9AE02.roa (hash: G4Pq7se+uCSto4s/dTIZSlEZboyru+n0V8CsdH+dfQ0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.crl
                          rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 19:32:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2789 (0xae5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110C51, serialNumber=8D7E3058350BB8DFEFFCE7770BBC8C86B762A1E4
        Validity
            Not Before: May 20 19:32:52 2026 GMT
            Not After : May 27 19:32:52 2026 GMT
        Subject: CN=6a0e0c65-ca9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b9:68:bc:f7:23:69:5d:61:ff:c9:76:9f:96:
                    1a:da:b3:02:77:db:72:49:19:bf:42:8b:82:e1:0a:
                    d0:81:4b:1e:20:92:86:cc:ac:fe:44:d9:cb:f0:ce:
                    a1:db:3e:a0:eb:c2:95:24:28:6f:2e:cd:11:db:7c:
                    6f:98:d6:29:88:92:0b:44:01:29:5b:ad:6b:ed:94:
                    4d:ae:d5:49:31:88:e6:5d:d7:f8:bf:1d:e2:17:2b:
                    dd:a2:2f:95:49:43:90:8e:92:26:5d:e7:83:13:e1:
                    7f:94:0a:1a:2c:b7:8f:3e:ef:a5:b4:18:98:ed:39:
                    14:d9:86:ce:ae:f3:2d:28:f0:a4:2c:f2:d9:bc:a0:
                    31:c8:fa:6a:d3:76:16:38:91:5f:db:b2:0d:c9:8d:
                    20:4c:c7:e6:a5:44:bc:20:c0:2e:fe:f4:84:d8:47:
                    e1:2c:5a:7e:9b:ae:1f:91:18:a2:31:74:05:1d:5f:
                    e0:1f:71:17:d7:a6:0b:46:6a:bb:29:c8:06:e2:e7:
                    3b:06:7c:fc:5c:7b:54:9d:5b:ed:ad:ea:46:f2:90:
                    59:e1:9f:83:f1:e2:ba:dc:86:8b:47:26:8c:05:88:
                    ef:ec:ab:73:2c:05:9b:30:31:8c:62:07:48:af:40:
                    db:86:b0:c6:b0:f1:a7:a3:12:f2:5c:aa:10:e7:dc:
                    47:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:74:BE:EE:74:4D:98:0B:5D:4D:70:38:36:45:04:07:7A:B7:C9:F2
            X509v3 Authority Key Identifier:
                keyid:8D:7E:30:58:35:0B:B8:DF:EF:FC:E7:77:0B:BC:8C:86:B7:62:A1:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:d2:00:4b:e7:80:1c:b7:65:25:d7:af:5d:64:da:41:16:3e:
         67:87:58:45:03:7d:95:bf:f0:e2:94:7a:cc:f0:c1:ff:bf:a3:
         8d:d2:25:c0:ec:58:09:c6:18:c3:b6:d0:4c:44:6c:9b:cd:d6:
         be:3c:41:c1:f7:7b:98:ef:47:ff:d4:e6:b4:e3:38:0d:e4:d9:
         ae:06:04:27:f4:1f:ed:1a:e3:f9:73:41:58:56:34:7a:a1:5d:
         14:3c:09:04:3e:a7:e6:f4:ca:40:c7:d6:fd:d2:b1:19:b7:1f:
         33:b4:84:33:2e:38:6c:de:06:d8:20:03:aa:27:bc:c3:77:e9:
         ce:42:c0:76:60:3b:5c:4f:1a:0b:0c:1a:a5:72:12:c1:af:99:
         9b:1d:41:14:6e:1a:08:54:99:cb:e2:d7:ce:6d:a2:20:62:1b:
         37:2e:2b:b0:56:af:ef:f2:34:38:ad:68:83:d8:d4:de:c2:17:
         e5:ae:c6:52:c2:b2:24:c7:8b:02:0b:3e:29:b9:e0:79:cc:4c:
         d9:87:d6:42:59:5c:0d:59:ce:7f:78:17:f4:fe:30:5a:aa:7c:
         69:18:26:36:65:0b:2e:42:2b:6a:06:21:45:40:b4:ee:a0:2c:
         33:db:f0:9f:25:e9:4a:05:02:2e:3b:c1:6a:44:00:d6:f9:db:
         0b:8a:05:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:54:39 2026 by rpki-client