Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913841B/D5F118EE60C011F0A2F1EA2CC4F9AE02/-vIwziL75k9oiZnvfNiU3b2biSU.mft
File:                     -vIwziL75k9oiZnvfNiU3b2biSU.mft (raw, json)
Hash identifier:          +mPVrGn2k/mSZOup3ayAPF6qPvNQ+py7Zo6G9NE/JWw=
Subject key identifier:   D9:1A:DF:E5:78:52:14:7F:07:06:9A:61:7B:84:49:DE:17:CA:22:AE
Authority key identifier: FA:F2:30:CE:22:FB:E6:4F:68:89:99:EF:7C:D8:94:DD:BD:9B:89:25
Certificate issuer:       /CN=A913841B/serialNumber=FAF230CE22FBE64F688999EF7CD894DDBD9B8925
Certificate serial:       A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-vIwziL75k9oiZnvfNiU3b2biSU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913841B/D5F118EE60C011F0A2F1EA2CC4F9AE02/-vIwziL75k9oiZnvfNiU3b2biSU.mft
Manifest number:          A3
Signing time:             Thu 21 May 2026 07:24:43 +0000
Manifest this update:     Thu 21 May 2026 07:24:42 +0000
Manifest next update:     Thu 28 May 2026 07:24:42 +0000
Files and hashes:         1: -vIwziL75k9oiZnvfNiU3b2biSU.crl (hash: H5tFawJdjDh5jhMCeK9uLykkqOwKAxsOmALiFXFQUsI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913841B/D5F118EE60C011F0A2F1EA2CC4F9AE02/-vIwziL75k9oiZnvfNiU3b2biSU.crl
                          rsync://rpki.apnic.net/member_repository/A913841B/D5F118EE60C011F0A2F1EA2CC4F9AE02/-vIwziL75k9oiZnvfNiU3b2biSU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-vIwziL75k9oiZnvfNiU3b2biSU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 07:24:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163 (0xa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913841B, serialNumber=FAF230CE22FBE64F688999EF7CD894DDBD9B8925
        Validity
            Not Before: May 21 07:24:42 2026 GMT
            Not After : May 28 07:24:42 2026 GMT
        Subject: CN=6a0eb33b-7cc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:24:cf:44:00:85:7d:bf:ac:4a:7e:92:94:7a:
                    8d:4e:12:89:01:0f:39:37:35:bf:5a:a9:8c:42:fc:
                    33:aa:d1:2a:0d:d5:73:2d:88:8e:3d:b8:ab:18:b7:
                    00:e0:da:fe:2d:41:9a:da:93:fe:1a:50:d5:73:dc:
                    f0:c3:3d:1b:e2:00:0a:9d:02:73:83:fe:f4:2e:f1:
                    33:bc:f6:70:ea:70:16:d0:4c:a5:b0:1e:bf:9b:ff:
                    73:50:71:f5:7c:d7:f9:21:22:a1:28:f2:c3:b0:d7:
                    9a:67:30:38:de:c9:41:b5:43:b8:0f:90:d0:4b:2d:
                    25:0c:fb:ec:98:f7:a0:87:05:34:85:26:17:7a:b6:
                    b3:59:a0:9d:54:eb:b5:31:55:e7:24:2c:31:3f:cb:
                    e3:72:f9:83:bb:fa:d1:fc:ca:6b:84:a8:70:72:88:
                    c9:92:fd:b0:83:f0:30:bf:fb:f0:05:b8:27:df:8a:
                    2a:89:de:24:67:53:7f:d4:e0:5b:32:de:05:e0:a7:
                    50:42:df:e0:90:0b:7c:d7:eb:4f:da:36:d2:95:27:
                    07:6e:3d:a2:f9:0c:97:a7:4c:a7:9e:be:28:15:70:
                    28:02:4f:b8:5e:c6:4f:29:13:21:08:98:c5:2e:dd:
                    b9:8b:22:3f:fd:04:c5:2d:29:29:b3:fe:d3:1d:11:
                    0d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:1A:DF:E5:78:52:14:7F:07:06:9A:61:7B:84:49:DE:17:CA:22:AE
            X509v3 Authority Key Identifier:
                keyid:FA:F2:30:CE:22:FB:E6:4F:68:89:99:EF:7C:D8:94:DD:BD:9B:89:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913841B/D5F118EE60C011F0A2F1EA2CC4F9AE02/-vIwziL75k9oiZnvfNiU3b2biSU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-vIwziL75k9oiZnvfNiU3b2biSU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913841B/D5F118EE60C011F0A2F1EA2CC4F9AE02/-vIwziL75k9oiZnvfNiU3b2biSU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:42:21:60:55:e0:c7:fd:4f:7e:6c:ce:5e:e1:38:ec:35:03:
         da:ca:5f:62:62:50:da:9b:e3:e7:06:13:d3:89:ce:0e:ca:18:
         53:60:2a:a2:f2:0f:82:39:5a:0c:57:1f:51:bd:40:a9:ca:b8:
         e2:74:9b:d6:9a:53:a2:de:9c:1c:f9:4c:35:53:44:77:f4:e3:
         a5:64:55:30:70:7a:7f:b5:05:1a:09:d8:cf:a8:54:11:fa:44:
         71:7d:65:74:fb:b5:69:2b:8a:c0:c7:4c:ef:ee:a9:47:24:73:
         a5:55:88:7d:2e:4a:99:ee:fc:40:c1:46:08:44:c9:04:7d:1b:
         0b:e3:5c:cf:84:88:81:0c:b8:25:59:1f:85:6b:dc:db:06:ca:
         4b:fb:c3:c6:9d:00:f6:ec:40:a7:e8:55:1b:81:20:ea:ba:04:
         31:72:34:3b:68:21:cb:87:1d:66:ff:e1:3f:15:55:5b:60:55:
         0a:58:e7:6c:04:77:e8:19:3f:54:a7:07:b2:e5:3d:f3:7a:e5:
         bb:07:7e:34:c0:b3:e6:e6:0e:62:fb:df:de:1f:b3:02:b2:10:
         1f:7c:4f:0d:3b:a4:bf:f6:c1:f4:fa:14:a5:c8:52:98:e1:65:
         42:fd:cb:1a:c8:b3:09:6d:68:b6:8c:d0:87:10:b2:42:79:fe:
         14:ad:1f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:15:57 2026 by rpki-client