Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft
File:                     ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft (raw, json)
Hash identifier:          hJQ1krdC+qF/tjlMrtTmEsPy3KUMYdHC3wAjaz9K+yU=
Subject key identifier:   D4:62:32:25:89:3F:D5:1C:FC:81:EA:AD:60:2F:85:86:73:5F:A4:75
Authority key identifier: B2:C4:7C:2E:3D:4F:C7:ED:C9:9A:E2:0E:46:B1:74:B1:0A:03:75:F6
Certificate issuer:       /CN=A9131067/serialNumber=B2C47C2E3D4FC7EDC99AE20E46B174B10A0375F6
Certificate serial:       0732
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft
Manifest number:          06FF
Signing time:             Wed 20 May 2026 22:27:33 +0000
Manifest this update:     Wed 20 May 2026 22:27:32 +0000
Manifest next update:     Wed 27 May 2026 22:27:32 +0000
Files and hashes:         1: ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl (hash: 7yPAoW67NtB/9Cs5SFvqhPd/QM0iS1faIzAVyGqqCRk=)
                          2: BD9AE4AE55D111F0A7CFBB2BC4F9AE02.roa (hash: I0fdKsHvXdyMww8h7AjfWaIz+Z8MPQG9V3zDhTuhz2k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl
                          rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 22:27:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1842 (0x732)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131067, serialNumber=B2C47C2E3D4FC7EDC99AE20E46B174B10A0375F6
        Validity
            Not Before: May 20 22:27:32 2026 GMT
            Not After : May 27 22:27:32 2026 GMT
        Subject: CN=6a0e3554-dd29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:09:e3:1f:cf:4d:4e:1d:38:90:04:47:3b:da:
                    79:e2:81:83:89:64:85:90:e7:dc:0a:e2:5f:19:8c:
                    a0:f4:bf:ee:b5:e1:4b:80:cc:a1:e7:98:53:26:3a:
                    e3:36:9d:a1:6e:23:cb:7f:fd:87:fc:d4:ac:90:74:
                    7e:b8:49:e4:5d:c3:80:10:71:91:cc:00:60:d5:29:
                    7a:ea:65:53:0c:43:24:91:96:13:e3:0d:d3:fc:b7:
                    88:41:0f:b7:c2:84:49:cd:34:33:19:67:01:58:3d:
                    f5:a0:a9:c2:11:4c:84:b4:5a:fc:84:cb:6a:50:46:
                    63:5e:02:dc:93:b8:c4:0b:1b:7e:9a:49:84:8c:2d:
                    6d:89:c6:f4:4b:33:8d:47:26:fc:65:8c:8c:1d:75:
                    6b:6b:f6:a1:f9:8f:09:56:b0:d8:56:b8:df:5f:62:
                    25:6f:17:e0:12:c0:fa:5e:69:98:d6:08:c5:35:ff:
                    f6:73:55:72:d0:a2:a6:fe:20:b4:b7:cd:0a:3a:3e:
                    04:ad:1d:cf:7a:37:9d:4f:a9:a4:60:9c:39:63:bd:
                    be:fb:bb:b9:98:12:be:38:49:51:00:c0:05:33:de:
                    34:0b:43:77:b2:32:b3:bb:65:75:9b:00:ff:bd:8e:
                    96:b1:b4:08:79:d3:01:44:c9:bf:44:fa:fc:3d:33:
                    02:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:62:32:25:89:3F:D5:1C:FC:81:EA:AD:60:2F:85:86:73:5F:A4:75
            X509v3 Authority Key Identifier:
                keyid:B2:C4:7C:2E:3D:4F:C7:ED:C9:9A:E2:0E:46:B1:74:B1:0A:03:75:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:6e:20:e5:81:11:11:06:8f:d5:bb:ba:d1:26:cc:1a:a8:a1:
         7e:23:73:e1:fe:65:9b:e2:39:68:f3:5d:c8:ca:f1:dc:ac:3a:
         12:32:92:2c:71:42:5b:29:9c:dd:ab:76:c3:fe:55:03:50:8c:
         15:f2:b7:67:e7:a3:74:f3:b0:4c:19:d2:0f:af:12:95:d8:7b:
         64:fe:94:ad:92:f0:2e:5b:9d:7d:bb:ca:6d:35:19:82:0f:e7:
         3a:ec:aa:3e:f2:b5:25:0f:5e:10:7a:ac:e9:39:b5:8b:a2:9d:
         fd:f0:8f:20:fd:f6:69:8e:bb:cb:4a:a1:86:8b:a1:bf:f9:45:
         e1:38:dc:72:cb:27:2d:06:5d:fb:b8:b3:43:6f:99:2e:16:d2:
         49:5d:90:d1:e8:e0:a1:12:6f:f5:29:99:9a:44:9c:1c:99:8d:
         59:3c:e9:02:aa:f7:dd:78:93:2a:d7:9a:8f:dd:1a:f7:5f:2e:
         e8:c3:35:5a:a7:06:ab:95:93:8c:2a:53:dc:ee:64:09:35:d4:
         40:41:98:8d:8d:e3:b9:17:52:49:da:10:e2:ff:13:db:b8:55:
         f1:45:c7:99:22:83:d6:19:a9:64:19:6c:ab:b8:15:0a:3b:f0:
         e2:47:ac:a9:c4:e9:25:3d:79:9d:00:e9:43:8b:6c:9f:02:49:
         15:f6:28:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:19:30 2026 by rpki-client