Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.mft
File:                     9cHnH7saQdeYC-JY2XxIc5qvgso.mft (raw, json)
Hash identifier:          vQNOe0iHxg72GOjZtYgUZWLuZK40S9YrLXUdhX2w4T0=
Subject key identifier:   56:37:98:4E:D1:AC:16:A8:F8:9D:83:8A:15:97:08:C1:D8:5B:0F:4C
Authority key identifier: F5:C1:E7:1F:BB:1A:41:D7:98:0B:E2:58:D9:7C:48:73:9A:AF:82:CA
Certificate issuer:       /CN=A913D16D/serialNumber=F5C1E71FBB1A41D7980BE258D97C48739AAF82CA
Certificate serial:       0521
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cHnH7saQdeYC-JY2XxIc5qvgso.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.mft
Manifest number:          0518
Signing time:             Wed 20 May 2026 23:39:58 +0000
Manifest this update:     Wed 20 May 2026 23:39:58 +0000
Manifest next update:     Wed 27 May 2026 23:39:58 +0000
Files and hashes:         1: 9cHnH7saQdeYC-JY2XxIc5qvgso.crl (hash: 915z0ICSCbQzODx7INdc9v89vuP+gJCJCfRoBnO1c8o=)
                          2: 3D546FCE4F0711EC960AFD0CC4F9AE02.roa (hash: wQRuE7hZR60ASbUdyxn7Q1yzJfs0TbeVvhz27sSwJvs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.crl
                          rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cHnH7saQdeYC-JY2XxIc5qvgso.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 23:39:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1313 (0x521)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D16D, serialNumber=F5C1E71FBB1A41D7980BE258D97C48739AAF82CA
        Validity
            Not Before: May 20 23:39:58 2026 GMT
            Not After : May 27 23:39:58 2026 GMT
        Subject: CN=6a0e464e-02b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e5:eb:16:83:44:53:9a:e6:7c:91:f1:39:1a:
                    fc:7a:af:11:45:fd:dc:a5:d0:a5:f6:64:7f:44:41:
                    e3:0a:49:b4:9f:72:bc:4e:d9:d7:d6:fc:23:c8:a8:
                    6a:ed:42:b9:82:5f:cf:8c:45:12:f4:c1:f8:3e:bf:
                    cf:6f:11:dc:ae:9f:87:7b:96:32:ec:8f:09:6e:e6:
                    c9:df:99:36:6e:dc:df:71:a9:99:59:1a:46:90:87:
                    56:bc:a3:b1:1f:7e:38:67:14:d2:19:af:7d:ce:80:
                    c7:45:19:5b:06:2a:2c:69:61:bf:4a:3e:55:c7:c3:
                    c6:2f:ef:c8:e3:0c:a0:c3:d5:e6:92:77:4e:04:4e:
                    34:e5:1d:07:ea:69:68:9c:1b:30:8d:e6:8e:b8:49:
                    c2:f4:1b:ce:3a:58:c2:ea:d7:fa:2d:df:2e:b4:c3:
                    c4:20:87:26:09:d6:c9:ee:25:09:87:cb:db:13:55:
                    27:6a:56:ab:21:62:3e:31:d6:70:89:3f:d8:39:66:
                    cf:ad:ea:46:a7:d1:8b:40:30:9e:e3:e9:97:9d:60:
                    b3:24:76:07:0f:e5:f7:54:60:90:41:e7:c4:26:1e:
                    66:fc:82:3e:1c:e9:6f:21:8b:a2:28:c2:c0:ff:36:
                    a9:a6:bb:a9:78:90:03:36:a6:02:6e:a2:c4:b4:e1:
                    df:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:37:98:4E:D1:AC:16:A8:F8:9D:83:8A:15:97:08:C1:D8:5B:0F:4C
            X509v3 Authority Key Identifier:
                keyid:F5:C1:E7:1F:BB:1A:41:D7:98:0B:E2:58:D9:7C:48:73:9A:AF:82:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cHnH7saQdeYC-JY2XxIc5qvgso.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:a7:91:8e:75:2c:08:39:69:99:a5:7d:38:09:ad:41:7f:2e:
         f7:64:7d:8b:50:32:86:c8:34:9a:ee:c6:2d:8f:81:fa:7f:03:
         17:e4:10:e8:d7:c1:4f:2e:a5:2b:2c:01:f4:3f:10:f1:ce:b9:
         29:9f:63:52:6e:22:a2:5b:6e:20:22:59:d8:6b:3c:68:d2:29:
         ce:6a:f8:29:17:ab:f5:0a:8a:8d:ff:04:1b:95:32:77:e4:a9:
         57:eb:7e:c8:83:25:32:85:eb:8d:84:aa:03:32:98:1d:2a:85:
         09:74:e6:a0:77:6b:dd:16:42:7e:86:38:2e:8e:ce:6e:b1:d4:
         e8:e1:c0:05:b6:a6:ea:5b:c2:29:6d:cd:bc:67:a0:9a:11:10:
         92:87:b1:91:ca:6c:ce:30:cd:f3:0d:96:8e:d6:cd:b6:bd:f2:
         95:0f:5e:d9:59:76:ec:dc:79:af:a5:2d:4a:dd:d8:71:5b:de:
         78:11:bc:33:57:fb:a5:3e:44:b2:c8:e0:01:9b:69:20:de:82:
         fb:eb:2a:e9:9c:44:ab:aa:40:98:90:9d:31:8f:4d:c1:45:af:
         48:2b:f3:e0:4a:89:b0:cf:93:9e:22:13:f0:d5:93:27:df:14:
         45:53:96:38:34:26:3c:1c:d6:ad:38:ac:95:fc:e4:b6:bb:27:
         9f:e5:26:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:19:22 2026 by rpki-client