Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft
File:                     p0YFy51QccoXKdkIeDRAfxTqhXA.mft (raw, json)
Hash identifier:          5vXbyhKF1heyJ7Wgawpf2ouTGxEya+gIAg0WavR2U0c=
Subject key identifier:   09:FB:F4:6F:B9:4D:A9:31:7F:DB:6E:2D:8C:19:DA:6D:55:7C:63:19
Authority key identifier: A7:46:05:CB:9D:50:71:CA:17:29:D9:08:78:34:40:7F:14:EA:85:70
Certificate issuer:       /CN=A911FABE/serialNumber=A74605CB9D5071CA1729D9087834407F14EA8570
Certificate serial:       0CE4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0YFy51QccoXKdkIeDRAfxTqhXA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft
Manifest number:          0CD9
Signing time:             Wed 20 May 2026 18:25:38 +0000
Manifest this update:     Wed 20 May 2026 18:25:38 +0000
Manifest next update:     Wed 27 May 2026 18:25:38 +0000
Files and hashes:         1: p0YFy51QccoXKdkIeDRAfxTqhXA.crl (hash: 8gaTl7AhtkMEpYQf8Jks2tVdy26SL0fAXq7YopDkWCQ=)
                          2: 3E51F73E0C5111EAAF46A23FC4F9AE02.roa (hash: uaZx4UT5TdPMfrcPW0R83sm6zgQCWLRIUviUfv851Ho=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.crl
                          rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0YFy51QccoXKdkIeDRAfxTqhXA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 18:25:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3300 (0xce4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911FABE, serialNumber=A74605CB9D5071CA1729D9087834407F14EA8570
        Validity
            Not Before: May 20 18:25:38 2026 GMT
            Not After : May 27 18:25:38 2026 GMT
        Subject: CN=6a0dfca2-8c55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:88:e6:aa:bc:4c:34:29:7d:d9:8a:87:4d:28:
                    eb:14:2d:f1:9c:06:89:35:7c:b9:be:77:9e:cc:61:
                    f0:83:71:cb:62:61:ed:63:c5:de:d3:7f:f5:06:bb:
                    12:1f:e7:cf:9d:6b:c7:c4:80:9c:8a:2d:80:bf:10:
                    a1:3a:4a:c0:12:93:f7:65:b4:cd:64:49:6c:9b:7d:
                    52:15:17:93:37:7c:93:c7:3a:98:69:3d:dc:b7:1a:
                    97:09:d9:26:78:05:41:d8:b5:24:ec:21:f0:50:46:
                    d6:d9:a4:57:97:c3:14:22:9d:5a:e0:92:7b:43:a5:
                    4a:ba:e4:da:b1:89:df:b5:bb:be:0d:c6:52:14:3a:
                    e6:11:aa:94:41:cb:0b:97:00:5e:88:6c:28:5e:50:
                    8a:09:6d:0b:99:9e:71:57:12:38:30:08:c8:a0:9f:
                    56:6a:26:29:b7:94:c9:bd:a3:71:b4:9a:24:95:11:
                    b1:69:05:7d:3e:21:c3:a9:0c:d7:31:82:1d:89:7f:
                    5c:11:7e:46:fb:52:92:c0:db:ad:91:8a:a9:62:ea:
                    2f:73:4c:d0:f7:63:50:0a:eb:50:7a:73:8e:a1:15:
                    1d:7e:3c:d4:02:9c:72:0b:da:5e:7d:97:fd:96:7f:
                    ed:58:ad:49:c8:73:e1:8b:4f:be:a5:81:61:02:03:
                    ef:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:FB:F4:6F:B9:4D:A9:31:7F:DB:6E:2D:8C:19:DA:6D:55:7C:63:19
            X509v3 Authority Key Identifier:
                keyid:A7:46:05:CB:9D:50:71:CA:17:29:D9:08:78:34:40:7F:14:EA:85:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0YFy51QccoXKdkIeDRAfxTqhXA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:d6:8b:e1:49:81:70:74:c8:8c:39:b4:ca:bf:5c:fe:f1:cd:
         5d:ce:25:bd:f6:89:15:a6:c1:b5:e1:4c:f9:8c:c6:d6:3b:0c:
         a8:47:af:7f:2e:9b:ef:d3:f2:17:0e:b5:40:4c:d2:c8:62:0d:
         d6:09:84:7c:02:bc:09:1f:4c:5f:9f:23:1e:69:65:c7:a1:f1:
         90:ca:06:42:8c:37:5b:79:73:26:fe:cd:3d:b3:66:70:e8:ca:
         07:53:de:cf:1f:d0:9f:2e:a0:92:fc:4c:39:69:cf:69:f7:34:
         a0:5c:86:f9:b2:ba:92:21:fe:dd:23:e3:2b:58:02:e2:28:ba:
         88:65:ed:53:5d:d6:23:0a:03:bc:3e:a5:bb:f2:49:db:c9:09:
         77:8f:55:a3:fe:38:76:90:3e:ae:ae:3d:2c:a5:12:12:3f:bb:
         9b:92:14:a7:57:39:17:8b:bd:18:61:41:d0:af:80:59:e8:62:
         8f:4b:69:5a:63:b3:49:71:be:9d:37:62:65:5a:88:28:14:80:
         aa:d6:26:26:30:83:cd:5b:5c:49:9e:eb:f4:fe:e0:ca:76:27:
         b9:1c:b3:d2:ab:04:9b:d7:b6:a1:70:a6:b6:cf:3d:84:9e:ac:
         5c:d5:27:c7:0e:44:a3:5a:5f:7d:9e:ea:4f:63:5f:67:03:05:
         c8:1c:f7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:54:41 2026 by rpki-client