Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.mft
File:                     k8C6F5rKocB50zxmk_RGcBBPzZg.mft (raw, json)
Hash identifier:          zY4dC+iw32esTVg4be4a7yaSRwqU5kW+i+rwGWrmJqc=
Subject key identifier:   C5:9D:C0:FB:2D:75:FD:B3:F5:51:6D:D1:E3:93:F5:21:9D:86:84:9F
Authority key identifier: 93:C0:BA:17:9A:CA:A1:C0:79:D3:3C:66:93:F4:46:70:10:4F:CD:98
Certificate issuer:       /CN=A9111788/serialNumber=93C0BA179ACAA1C079D33C6693F44670104FCD98
Certificate serial:       02A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8C6F5rKocB50zxmk_RGcBBPzZg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.mft
Manifest number:          029C
Signing time:             Thu 21 May 2026 01:39:50 +0000
Manifest this update:     Thu 21 May 2026 01:39:50 +0000
Manifest next update:     Thu 28 May 2026 01:39:50 +0000
Files and hashes:         1: k8C6F5rKocB50zxmk_RGcBBPzZg.crl (hash: 8bt/RwSUodK387hQyRP+1IrIRw4eS7BF5q5dzVQqzz4=)
                          2: 6F57F77659AF11EDB5683587C4F9AE02.roa (hash: AS7hONAEbWURBwN9VRm/e1ZIfPOhEfiT7U5Yp4Gpb94=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.crl
                          rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8C6F5rKocB50zxmk_RGcBBPzZg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 01:39:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 675 (0x2a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111788, serialNumber=93C0BA179ACAA1C079D33C6693F44670104FCD98
        Validity
            Not Before: May 21 01:39:50 2026 GMT
            Not After : May 28 01:39:50 2026 GMT
        Subject: CN=6a0e6266-479e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:76:bc:24:7f:5d:db:20:05:08:00:6b:ef:b1:
                    94:81:5e:fc:56:6c:0e:01:4c:67:b6:a8:4a:7d:97:
                    b5:cb:5e:10:c6:8f:50:ab:e3:a3:0c:83:8b:96:ad:
                    f6:ab:ad:c2:b0:f4:23:78:21:cc:a3:b7:1d:6c:16:
                    da:3c:77:cb:22:89:e9:03:71:2c:62:f9:b5:97:20:
                    a7:f4:77:b6:81:3a:9f:93:89:de:21:dd:fb:6d:11:
                    4f:18:a4:00:eb:90:d5:ca:35:90:69:cb:f5:26:fa:
                    0b:1b:33:7c:1d:b3:f0:73:6d:8b:d0:87:47:f5:cb:
                    a1:cb:3b:fc:03:3c:c2:ef:77:75:25:05:17:7e:25:
                    c8:c0:d8:73:8c:15:75:16:30:cc:60:8f:74:82:ee:
                    84:4a:3f:e1:94:6d:3a:ef:8f:4c:01:c9:b5:eb:fd:
                    8e:83:36:15:e0:a5:cb:9d:30:67:e8:ff:17:0b:3b:
                    98:6b:ed:09:25:1e:bb:e5:72:49:83:7e:88:c2:e9:
                    4b:32:24:c9:50:67:c1:c9:3d:92:ba:43:32:5c:54:
                    6b:c1:56:a2:e0:6a:d0:81:0f:eb:34:8a:2e:3c:b3:
                    1f:e3:51:6f:61:74:81:06:db:c0:2b:6d:8c:81:57:
                    c3:d5:88:c3:08:b1:31:87:60:eb:38:e9:70:38:e5:
                    68:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:9D:C0:FB:2D:75:FD:B3:F5:51:6D:D1:E3:93:F5:21:9D:86:84:9F
            X509v3 Authority Key Identifier:
                keyid:93:C0:BA:17:9A:CA:A1:C0:79:D3:3C:66:93:F4:46:70:10:4F:CD:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8C6F5rKocB50zxmk_RGcBBPzZg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:97:8f:07:38:67:3c:44:26:4f:2b:ab:dc:6e:6c:d7:b6:d2:
         61:47:05:9c:b9:b1:d8:93:8f:cc:34:43:a0:17:27:a4:8e:30:
         5f:cc:11:63:75:e6:b9:e9:ab:43:38:4f:f6:76:93:1b:a3:a3:
         11:ca:44:c0:56:e6:1f:67:f8:c0:2e:eb:ca:66:f9:40:cb:df:
         90:55:d9:76:a3:89:c4:18:f7:20:92:5b:e2:82:f9:ad:62:17:
         02:9b:68:67:30:c9:e2:67:9c:94:44:50:7e:4a:ed:5e:16:33:
         02:ae:bc:9e:37:24:79:f7:3c:7e:c3:c9:ce:ac:63:35:d2:3a:
         50:99:97:32:35:0c:e2:23:ea:84:45:53:a1:0f:c6:81:97:34:
         02:3a:91:a1:0d:db:52:82:b3:4c:74:9c:96:3f:72:5d:3e:91:
         62:34:84:45:6a:7a:d0:f2:3b:5d:b1:09:bb:5c:77:13:75:d9:
         a5:76:7e:8e:b0:53:4a:f7:45:06:04:c3:99:21:4e:ca:30:b0:
         5b:f7:c2:33:1a:e9:5c:e8:5b:a0:80:51:33:2e:40:08:6a:19:
         79:f9:f3:a4:be:d5:a4:f8:c5:95:b0:36:64:3e:b2:38:26:f8:
         07:83:7b:46:4f:96:26:18:38:81:de:43:e0:e2:05:7a:4e:d0:
         cd:89:95:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 12:25:55 2026 by rpki-client