Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft
File:                     -ty5VaOsFGWZfQjySL-GxDNE-3g.mft (raw, json)
Hash identifier:          xqbmxt9OKD8MeCs5YqIu1CLpRIrDWgzik2NBSQ6omNg=
Subject key identifier:   73:B2:9A:37:1A:DC:89:1D:FA:77:76:43:03:AB:D4:8E:0A:8E:1B:05
Authority key identifier: FA:DC:B9:55:A3:AC:14:65:99:7D:08:F2:48:BF:86:C4:33:44:FB:78
Certificate issuer:       /CN=A9148F32/serialNumber=FADCB955A3AC1465997D08F248BF86C43344FB78
Certificate serial:       0678
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft
Manifest number:          0671
Signing time:             Wed 20 May 2026 22:37:25 +0000
Manifest this update:     Wed 20 May 2026 22:37:24 +0000
Manifest next update:     Wed 27 May 2026 22:37:24 +0000
Files and hashes:         1: -ty5VaOsFGWZfQjySL-GxDNE-3g.crl (hash: K8w+d9Lvgh/drrAJOJYK74yxLxgD16z3PT1K7qxhZD8=)
                          2: 4D470362C55811EB981FA987C4F9AE02.roa (hash: jONR2iUJdd8sTfAf2GKMQLcf6yBJF3ccZJWFs5abXDA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.crl
                          rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 22:37:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1656 (0x678)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148F32, serialNumber=FADCB955A3AC1465997D08F248BF86C43344FB78
        Validity
            Not Before: May 20 22:37:24 2026 GMT
            Not After : May 27 22:37:24 2026 GMT
        Subject: CN=6a0e37a5-154d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:80:99:2a:4b:7b:24:3d:42:5c:55:f7:e3:90:
                    47:86:94:f1:1e:ec:c9:44:e3:36:87:5f:1e:63:b1:
                    2f:1a:40:82:4b:a0:68:38:e4:e4:a5:1d:58:ed:0c:
                    d7:cc:09:66:aa:8b:4d:6d:96:02:3a:e5:83:57:0e:
                    73:8c:8a:3d:53:dc:e1:08:4e:90:f8:ed:be:91:27:
                    dc:2b:18:8f:a4:43:1b:e0:e4:12:54:97:e5:dd:cc:
                    5c:e5:7b:9d:ba:a4:c3:a2:e9:4d:3e:9e:3f:3d:3a:
                    87:a1:56:01:91:0c:27:7a:80:ac:34:61:48:3a:ef:
                    16:93:b9:d4:51:48:ce:50:6d:bf:e0:1a:fc:da:b0:
                    ed:95:fc:98:a4:0c:d2:66:53:c1:5c:ab:d7:81:dc:
                    89:51:b2:ea:92:c1:0e:06:ce:c0:72:60:a5:04:dd:
                    b3:0a:9d:e6:04:31:f9:d4:8e:1a:3c:34:6b:59:8f:
                    ff:90:ea:1b:29:6e:a7:c9:0a:bc:53:da:f5:86:31:
                    85:f1:bb:58:7d:ad:0a:e0:5c:62:7b:53:de:19:88:
                    33:8b:50:ae:9a:22:08:d4:7f:13:b3:ea:bd:70:36:
                    80:5e:09:a7:60:a6:5e:06:4e:f9:18:e3:7e:97:84:
                    40:0b:53:b4:aa:7c:04:82:c2:e2:15:c2:77:3a:0b:
                    46:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:B2:9A:37:1A:DC:89:1D:FA:77:76:43:03:AB:D4:8E:0A:8E:1B:05
            X509v3 Authority Key Identifier:
                keyid:FA:DC:B9:55:A3:AC:14:65:99:7D:08:F2:48:BF:86:C4:33:44:FB:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ty5VaOsFGWZfQjySL-GxDNE-3g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F32/E06475CEC55511EB9AE59E86C4F9AE02/-ty5VaOsFGWZfQjySL-GxDNE-3g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:7b:8b:9a:c6:7f:23:fd:eb:aa:95:50:1f:93:49:4b:05:26:
         ff:67:fa:c6:cc:73:74:a0:88:4c:2f:db:4c:09:9b:b7:2d:8f:
         95:55:ce:ec:a7:6e:33:c1:d2:02:1d:e6:99:4f:d3:f1:2e:ed:
         ca:b2:fb:b0:7d:96:c3:85:b4:12:aa:2f:0b:10:d4:d2:f1:5a:
         58:f6:b0:ca:13:45:c1:17:87:0c:93:11:00:02:ca:65:de:5b:
         30:e0:ef:0e:63:76:d1:21:6a:2c:79:ca:54:5f:e3:61:e9:09:
         ac:c3:50:d8:26:79:50:d6:e3:e5:19:b0:77:e2:f8:5f:f2:43:
         2f:94:55:49:a7:2d:6e:4d:08:8f:ee:3d:54:8a:31:46:2f:16:
         8b:9d:f9:dd:52:e4:c1:03:4b:d7:df:0b:10:86:d0:22:d3:6b:
         86:e3:80:ff:a0:d8:d8:d3:76:da:34:99:49:bf:05:9b:6a:09:
         a2:5a:af:54:c4:a8:75:0e:a8:d1:b0:7d:4c:9f:84:07:73:d8:
         53:d9:3d:65:40:67:d1:00:cb:3f:4a:bb:8b:40:ee:04:ba:6b:
         78:80:1a:fd:a6:7a:98:d6:af:c5:48:9f:d1:c6:7b:51:0b:74:
         f7:85:d0:27:54:e1:06:d3:25:02:14:d7:34:53:f8:e6:c3:ef:
         91:43:08:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:15 2026 by rpki-client