Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft
File:                     asqbm3MwkHBq_T-FI8wMwYzWjjE.mft (raw, json)
Hash identifier:          U7BL9h4/SoxM3MSokGjhOFDTSCRUf7qi6yUKp/sGJas=
Subject key identifier:   39:7C:B4:FE:C7:DD:B7:EA:15:D8:DD:BE:2A:2C:41:F1:DC:9E:36:EB
Authority key identifier: 6A:CA:9B:9B:73:30:90:70:6A:FD:3F:85:23:CC:0C:C1:8C:D6:8E:31
Certificate issuer:       /CN=A9130EA4/serialNumber=6ACA9B9B733090706AFD3F8523CC0CC18CD68E31
Certificate serial:       0C7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft
Manifest number:          0C71
Signing time:             Wed 20 May 2026 18:41:59 +0000
Manifest this update:     Wed 20 May 2026 18:41:59 +0000
Manifest next update:     Wed 27 May 2026 18:41:59 +0000
Files and hashes:         1: asqbm3MwkHBq_T-FI8wMwYzWjjE.crl (hash: knzBPJSUP9axTqMJ32j/QRmj++cw8keVCPq9Rxwnzd8=)
                          2: 08754752218611EAA5DF883CC4F9AE02.roa (hash: 9BPurM+bulBYlNNGJgaGdzigQeRd9Aok8jx7Ea5CeBI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.crl
                          rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 18:41:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3199 (0xc7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130EA4, serialNumber=6ACA9B9B733090706AFD3F8523CC0CC18CD68E31
        Validity
            Not Before: May 20 18:41:59 2026 GMT
            Not After : May 27 18:41:59 2026 GMT
        Subject: CN=6a0e0077-d5c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:af:eb:2d:b9:29:6e:e9:c8:39:b1:b1:b6:34:
                    be:c0:78:79:dd:8e:2c:a7:da:f8:cd:6e:0b:dd:07:
                    95:e3:d2:98:94:3b:01:e9:b0:91:d6:32:63:ff:a6:
                    94:d4:e4:b6:ad:e1:2d:c3:29:80:9a:32:22:0a:5c:
                    72:aa:66:2c:21:a9:2f:d3:5e:58:6f:cf:ae:30:60:
                    66:ea:66:7d:50:1f:5d:a3:65:67:4a:f1:58:4e:94:
                    61:90:19:ac:98:02:c7:90:ba:d2:88:cf:fc:28:65:
                    59:be:b9:79:6a:b1:d1:3b:95:df:df:94:e5:bb:69:
                    de:b5:da:4c:b7:e4:a8:2d:16:5a:0f:07:1c:8e:cc:
                    26:5f:b4:d9:cc:51:1b:43:d9:96:2f:c8:5a:41:75:
                    30:6b:c5:4d:29:72:f0:d0:d9:8f:b7:7e:20:55:da:
                    8a:0b:42:a3:ac:a9:c8:a3:21:e6:5f:89:45:e1:dd:
                    b8:f5:8b:2d:15:18:48:67:6c:d7:d0:93:9b:b1:0c:
                    a2:13:7e:ff:c1:ca:c2:8a:32:34:20:11:8f:9b:1a:
                    81:12:be:a0:4b:f8:ee:2a:58:97:0e:a2:c9:c3:b1:
                    21:cd:7b:3f:9a:04:45:4f:c9:30:ec:b4:01:e5:a9:
                    0d:99:b8:b9:06:79:cb:ec:44:81:e2:07:3d:0d:92:
                    cc:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:7C:B4:FE:C7:DD:B7:EA:15:D8:DD:BE:2A:2C:41:F1:DC:9E:36:EB
            X509v3 Authority Key Identifier:
                keyid:6A:CA:9B:9B:73:30:90:70:6A:FD:3F:85:23:CC:0C:C1:8C:D6:8E:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:5c:70:e8:76:a3:7b:73:0e:10:b8:46:fe:87:44:45:d6:aa:
         e6:f6:af:97:52:60:ad:20:55:e3:3d:9c:75:fb:b1:e0:95:f3:
         5a:00:98:b1:57:e8:75:45:27:b0:ab:11:ef:3f:01:25:11:6d:
         d8:80:3b:53:ab:32:2d:ce:57:a0:19:66:0b:fb:d1:f0:04:5f:
         5c:f6:e7:25:3c:76:de:f7:26:77:ef:92:4d:d1:7e:83:22:b3:
         3b:01:6c:7f:c0:f8:3d:33:fd:7f:e6:4a:79:e8:ec:f0:11:85:
         00:a9:2f:b9:24:5b:6a:68:10:ca:83:96:24:87:01:05:19:9d:
         3b:84:a9:f4:5e:ed:00:e8:58:40:10:b3:85:03:fb:31:2d:cf:
         ca:87:07:f1:01:b0:04:b1:ef:ca:76:b9:dd:f9:15:25:e2:be:
         dd:34:2d:8c:ab:ce:a5:cf:a8:3e:df:ab:da:12:b1:c1:3f:35:
         de:ff:bd:b2:94:7b:51:9d:a0:77:7a:54:02:7f:48:31:d5:35:
         fc:45:4e:0f:10:d4:f1:d7:5c:41:4f:7f:15:2f:f3:07:d8:54:
         21:b3:fe:48:8b:f3:81:18:50:cf:f7:cd:64:cf:4b:4c:e3:19:
         25:48:bc:c6:2e:a7:66:23:8b:50:10:26:ba:ef:db:ad:ca:02:
         dd:2e:1a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:58:45 2026 by rpki-client