Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.mft
File:                     0PY4xbmK6K_NbO4FA4JBl0CcPpM.mft (raw, json)
Hash identifier:          Ea+WBb++fEgj+p5AVDJ/fObRQ1poEK2QAIlTajki8CE=
Subject key identifier:   65:51:D5:49:CA:AA:91:88:8E:98:47:53:9D:7F:45:19:C7:9E:A7:79
Authority key identifier: D0:F6:38:C5:B9:8A:E8:AF:CD:6C:EE:05:03:82:41:97:40:9C:3E:93
Certificate issuer:       /CN=A9132667/serialNumber=D0F638C5B98AE8AFCD6CEE0503824197409C3E93
Certificate serial:       68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0PY4xbmK6K_NbO4FA4JBl0CcPpM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.mft
Manifest number:          66
Signing time:             Tue 19 May 2026 07:47:43 +0000
Manifest this update:     Tue 19 May 2026 07:47:43 +0000
Manifest next update:     Tue 26 May 2026 07:47:43 +0000
Files and hashes:         1: 0PY4xbmK6K_NbO4FA4JBl0CcPpM.crl (hash: WQGLmWvYhvXCmJHXkm+7TJgp4uST528mbkut5J5ePLw=)
                          2: 4FFB27E2BDBE11F0999C417DC4F9AE02.roa (hash: BAu12vyqXmR0qHLygAuhUs2RE7FdNd2Ix/Ksj7XLnkk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.crl
                          rsync://rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0PY4xbmK6K_NbO4FA4JBl0CcPpM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 May 2026 07:47:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132667, serialNumber=D0F638C5B98AE8AFCD6CEE0503824197409C3E93
        Validity
            Not Before: May 19 07:47:43 2026 GMT
            Not After : May 26 07:47:43 2026 GMT
        Subject: CN=6a0c159f-8439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:98:20:e8:29:9e:51:33:14:a6:c5:2e:94:38:
                    7a:5a:33:ed:3c:e2:48:0d:a6:44:c1:89:8a:2f:e8:
                    f1:c5:90:dd:f8:69:b6:0b:22:ba:fa:95:6a:3e:86:
                    07:2b:85:cc:3d:ab:ae:b8:81:07:66:e4:1d:55:3d:
                    35:fe:00:43:f4:aa:66:02:3e:56:2f:24:89:83:17:
                    38:18:50:3f:77:77:65:05:24:64:55:f5:c8:dc:28:
                    12:f7:a1:3a:66:fe:e1:21:8b:d5:6f:24:66:83:ed:
                    07:ab:da:c3:99:3e:7f:53:17:e4:5a:75:6b:85:91:
                    69:47:d3:c0:5e:89:e5:5e:40:35:75:7e:f8:41:1e:
                    ba:f7:e3:cd:5d:d7:73:ee:a8:03:7c:20:54:99:a0:
                    d0:ee:8f:76:f2:1c:32:cc:8a:e9:bf:97:62:a7:94:
                    3e:03:9b:0a:2f:b2:78:7d:ff:35:95:d5:0d:93:1e:
                    9e:4c:83:9d:58:60:2d:a6:3f:0c:ac:48:92:02:2c:
                    1a:f4:d8:de:c8:9a:11:ba:81:af:17:6d:2a:74:09:
                    8f:fc:23:8d:19:86:be:86:ae:5d:00:5f:99:7d:b0:
                    64:68:af:b4:69:51:f0:83:29:74:b3:a5:1e:3a:cd:
                    72:52:c1:2c:32:90:a6:e0:0c:e6:c6:90:dd:8e:1a:
                    9d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:51:D5:49:CA:AA:91:88:8E:98:47:53:9D:7F:45:19:C7:9E:A7:79
            X509v3 Authority Key Identifier:
                keyid:D0:F6:38:C5:B9:8A:E8:AF:CD:6C:EE:05:03:82:41:97:40:9C:3E:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0PY4xbmK6K_NbO4FA4JBl0CcPpM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132667/91592B4ABB9C11F0A5A3D815C4F9AE02/0PY4xbmK6K_NbO4FA4JBl0CcPpM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:2e:2a:09:90:9d:1e:56:c4:46:24:b8:66:98:9b:32:ce:94:
         6e:5e:be:10:27:7b:e6:bf:31:70:a4:02:dc:51:bc:78:a4:2c:
         9c:03:0a:10:33:75:f4:83:34:00:a7:3b:a2:21:9e:08:7f:54:
         75:67:a5:fd:b6:ff:49:bf:9e:d7:ed:93:86:06:0b:f7:56:5b:
         58:cf:47:70:32:8f:d5:c5:1d:52:70:59:91:30:74:6d:61:a8:
         21:f8:6b:c4:b4:55:22:e4:39:a3:e9:cc:19:54:bb:57:a0:53:
         53:6b:7e:7b:59:b4:50:f1:41:ae:0a:86:0a:bb:b5:2e:b9:6d:
         8a:8d:4d:99:e0:be:e8:97:16:e1:28:a1:06:59:a7:46:50:13:
         3e:89:24:4e:4c:5b:a0:c7:be:d0:da:a6:55:d2:34:86:e7:24:
         ad:8d:d7:c6:ee:d7:7f:6e:f2:f3:ce:3c:fb:10:9a:9c:3d:2c:
         75:76:a4:b8:e6:21:94:4e:f1:ee:f2:6a:0a:69:23:51:4f:ab:
         e5:e2:ac:71:80:0e:0b:c8:b0:59:b3:e8:d6:df:b3:ac:c2:05:
         74:3e:80:e8:b2:01:1e:d2:ef:0d:2b:fe:22:00:c4:09:d0:58:
         2a:3f:fa:3a:91:bf:d7:c2:a8:c5:54:20:45:81:cd:3a:9a:23:
         3b:00:ce:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:39:08 2026 by rpki-client