Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.mft
File:                     RCHzqdfkHW9Ht4b90-eojeQrB7k.mft (raw, json)
Hash identifier:          HXIWHP3x67x6eivZ6CUQ2MtdrqEijhCXdbx2x1DWUC4=
Subject key identifier:   24:68:BD:49:92:55:71:95:DB:23:EE:D3:7F:B5:CB:90:7B:BD:C9:53
Authority key identifier: 44:21:F3:A9:D7:E4:1D:6F:47:B7:86:FD:D3:E7:A8:8D:E4:2B:07:B9
Certificate issuer:       /CN=A913442A/serialNumber=4421F3A9D7E41D6F47B786FDD3E7A88DE42B07B9
Certificate serial:       0365
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RCHzqdfkHW9Ht4b90-eojeQrB7k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.mft
Manifest number:          035E
Signing time:             Thu 21 May 2026 00:59:45 +0000
Manifest this update:     Thu 21 May 2026 00:59:44 +0000
Manifest next update:     Thu 28 May 2026 00:59:44 +0000
Files and hashes:         1: RCHzqdfkHW9Ht4b90-eojeQrB7k.crl (hash: 4YaPHqknzCfgjDGdxetBDTnwVWpyjUuLnYnyiN7WiNc=)
                          2: 0F9DB8E0FC3D11ECAD619C35C4F9AE02.roa (hash: ncZ5sqUN2e07RUTT/QMvuN5PhxtUUQgW+T5Lo9bRtVc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.crl
                          rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RCHzqdfkHW9Ht4b90-eojeQrB7k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 00:59:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 869 (0x365)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913442A, serialNumber=4421F3A9D7E41D6F47B786FDD3E7A88DE42B07B9
        Validity
            Not Before: May 21 00:59:44 2026 GMT
            Not After : May 28 00:59:44 2026 GMT
        Subject: CN=6a0e5901-656a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fb:49:2c:02:21:9e:c9:7a:52:bf:6b:22:49:
                    4d:53:9c:ae:41:ce:39:7f:f5:c6:6d:01:03:0b:46:
                    04:87:b9:bf:02:f3:cb:2c:91:5b:13:a3:21:00:8d:
                    a7:2c:3c:8f:62:0a:c4:c5:45:cb:c7:12:ef:6d:d3:
                    c8:54:b4:3e:38:d8:f7:3d:a3:b7:00:03:47:dc:eb:
                    d4:04:e1:c2:42:c8:05:c6:3f:fc:46:8e:52:30:67:
                    d9:9c:0d:65:4d:7f:aa:8f:71:3d:24:09:58:b7:e6:
                    b4:3d:d3:ff:a3:8a:bd:4a:16:fa:10:bb:fb:ca:c5:
                    23:c8:69:47:28:20:3f:94:e5:1f:7d:bb:bd:87:4a:
                    05:a2:f1:b7:9e:2f:79:4f:f0:70:bd:b6:65:09:c9:
                    08:27:bd:4d:c7:0b:59:2b:bb:9f:ea:23:cd:14:eb:
                    86:ed:e8:4b:8c:4f:4e:50:25:20:bf:65:f4:c4:f4:
                    74:1d:25:ea:6d:5d:1a:53:95:40:04:d4:03:32:f1:
                    03:84:51:c0:03:66:7a:17:45:5c:79:e6:f5:b0:97:
                    fb:8f:6d:87:5e:13:0b:b7:27:87:77:88:93:a5:bd:
                    8e:64:ad:28:4e:74:0a:26:5d:a8:4d:52:58:46:0d:
                    5d:cc:85:50:d2:19:90:50:e4:ad:84:ff:80:3a:42:
                    c3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:68:BD:49:92:55:71:95:DB:23:EE:D3:7F:B5:CB:90:7B:BD:C9:53
            X509v3 Authority Key Identifier:
                keyid:44:21:F3:A9:D7:E4:1D:6F:47:B7:86:FD:D3:E7:A8:8D:E4:2B:07:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RCHzqdfkHW9Ht4b90-eojeQrB7k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:ad:7c:1b:3e:10:85:cb:b1:76:44:0c:ec:d1:04:61:b8:94:
         a7:16:c2:59:f9:5d:57:0c:26:f7:de:85:c6:5e:1a:6f:21:c6:
         9a:ec:b4:48:a3:05:c9:92:a4:c2:a3:7d:aa:c1:18:aa:13:1d:
         35:b3:ea:65:eb:9e:e5:a3:69:3a:25:6b:40:64:da:b8:54:48:
         e4:a8:4e:5b:4c:ce:3b:5c:84:19:2f:44:d0:3f:42:b9:bf:85:
         a4:77:84:51:96:75:ca:01:87:be:0c:16:54:71:a6:fc:9f:7c:
         0d:a2:93:b4:af:9f:8b:b5:16:8f:b3:d7:cf:3b:f3:b2:c3:31:
         a1:c5:16:7b:75:de:a0:fc:32:27:a8:94:8c:f5:5e:14:f0:dd:
         40:71:5c:bd:8c:bf:ac:cc:64:35:c7:84:45:28:a3:f9:1c:5c:
         2f:bd:c3:e6:99:23:e9:40:f5:06:86:e5:78:6c:89:6f:bc:b3:
         75:d5:ae:f6:49:83:83:ec:91:22:44:9a:3a:53:10:35:18:72:
         ef:dd:53:1d:a5:05:79:55:1d:d1:4d:53:dd:28:2f:70:34:06:
         63:a6:f5:f3:23:3d:84:e0:b3:18:a7:df:bd:b8:f5:ae:1a:cf:
         6f:bf:e6:86:0e:d9:ab:4c:3e:a6:e8:32:db:c8:15:03:17:96:
         ab:cf:c8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:53:41 2026 by rpki-client