Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft
File:                     mqwVb6kYtDBXQdrp1duikzdGzoc.mft (raw, json)
Hash identifier:          MkFN4BKb7NwzVcl5q3n7U+3O6WWHI/vDb5wNkwZyX4s=
Subject key identifier:   5B:64:59:D3:30:EC:FD:D5:2E:F7:71:C1:FF:5F:59:F7:66:26:A5:01
Authority key identifier: 9A:AC:15:6F:A9:18:B4:30:57:41:DA:E9:D5:DB:A2:93:37:46:CE:87
Certificate issuer:       /CN=A9133CD2/serialNumber=9AAC156FA918B4305741DAE9D5DBA2933746CE87
Certificate serial:       0280
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft
Manifest number:          0272
Signing time:             Thu 21 May 2026 02:09:03 +0000
Manifest this update:     Thu 21 May 2026 02:09:02 +0000
Manifest next update:     Thu 28 May 2026 02:09:02 +0000
Files and hashes:         1: mqwVb6kYtDBXQdrp1duikzdGzoc.crl (hash: Hn4o5cD3l6eQ5v16Nhqw75wJFduNrmwk+UnDlr3M8mU=)
                          2: A46B24207D3811EF8EE86E6BC4F9AE02.roa (hash: nko7oXcOwkjYvH5kMeaot9wb2VmnzHR8v/MSp3IbrH0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.crl
                          rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 02:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 640 (0x280)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133CD2, serialNumber=9AAC156FA918B4305741DAE9D5DBA2933746CE87
        Validity
            Not Before: May 21 02:09:02 2026 GMT
            Not After : May 28 02:09:02 2026 GMT
        Subject: CN=6a0e693f-f6aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4a:a5:66:fd:2d:48:55:6a:ec:b8:66:eb:fc:
                    f0:77:f6:bb:8b:f8:28:7c:c1:5d:6b:6e:01:99:8f:
                    bb:db:e9:3d:c6:3e:bd:f3:d5:15:6c:1b:ac:cd:8a:
                    b2:6e:46:50:1e:4f:ee:7d:c7:cc:fa:ca:a1:e1:37:
                    b0:36:12:83:4c:27:c6:f7:34:5f:36:c3:ea:2e:96:
                    30:b1:b7:82:60:b3:d0:0e:9f:23:27:33:28:59:c9:
                    07:95:92:6d:93:d1:9e:42:a4:4c:b0:a0:12:a5:65:
                    f5:aa:be:92:45:25:4a:11:cc:4d:f2:a8:f6:52:0c:
                    27:9c:09:d2:e9:70:ff:c8:6f:9e:b8:6e:ac:78:8d:
                    cb:ab:51:09:9c:a1:3d:c4:c8:fd:64:c7:81:9e:a5:
                    23:1a:32:6f:e1:92:cd:31:89:66:d2:0b:a9:04:9a:
                    50:26:a6:f2:51:06:84:69:55:63:2f:1c:93:21:9b:
                    09:31:06:ac:32:64:0c:db:75:0c:5f:30:67:ba:03:
                    84:a2:58:b0:81:87:db:68:06:26:67:82:b4:f0:2d:
                    fe:9a:5b:18:4e:6c:57:d9:0b:59:1b:7b:f5:30:e6:
                    2a:76:e3:3d:3b:26:76:e3:c0:32:cd:71:ad:56:52:
                    2a:6b:87:5e:c9:43:fa:f8:3b:8e:b9:e1:78:94:be:
                    31:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:64:59:D3:30:EC:FD:D5:2E:F7:71:C1:FF:5F:59:F7:66:26:A5:01
            X509v3 Authority Key Identifier:
                keyid:9A:AC:15:6F:A9:18:B4:30:57:41:DA:E9:D5:DB:A2:93:37:46:CE:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:db:11:b3:73:52:33:89:e4:0d:5f:7f:57:a9:30:97:a2:47:
         6b:a1:14:96:4d:30:c1:a9:d9:0d:0c:41:c4:5c:5e:89:fc:29:
         a2:97:2f:bd:fb:37:76:3d:23:54:6d:0a:91:7e:a2:9a:cf:74:
         06:cd:e9:23:29:b5:1e:47:e4:74:4a:7c:f3:cc:0f:bd:76:0c:
         c3:00:83:97:5f:95:94:b0:7b:91:3b:b1:55:3a:1e:b5:a2:a4:
         21:44:5f:29:ec:29:0a:6b:a5:2f:91:14:92:21:d5:d6:8a:14:
         c2:08:24:c5:1e:de:e2:e3:c2:0d:ec:ce:5c:6e:d3:36:8c:b2:
         fb:90:c6:ff:03:d2:51:d6:17:be:3f:db:55:c7:01:4f:5e:22:
         02:41:86:32:71:5f:dc:d8:92:d0:a1:83:07:77:03:99:6c:c6:
         aa:9e:37:5f:3b:04:a9:86:50:4f:5c:07:74:63:24:ee:10:8e:
         71:ad:1d:f0:59:94:56:af:aa:90:ed:60:0c:53:ef:f0:5a:4b:
         fb:07:e4:c0:b3:34:44:e1:6d:a6:fd:7c:c5:fe:c6:69:05:f4:
         9a:0c:a6:1b:6d:d3:f7:31:d5:30:7b:9a:fc:6f:fa:a8:b1:cb:
         9f:8c:4c:af:d6:86:6b:4a:fd:7c:53:cf:26:d9:86:47:ee:b2:
         73:07:f5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 14:13:37 2026 by rpki-client