Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft
File:                     Ad9hVyR3ojDnn48oz91tKDd_Iis.mft (raw, json)
Hash identifier:          E/ZfSPsaWwLlkyvOi3UtJWd1IU8vKfKXW2oxBFRAICA=
Subject key identifier:   D2:E6:FC:89:66:86:A8:99:A7:80:09:4F:BD:9C:4D:EC:F2:6D:3B:C6
Authority key identifier: 01:DF:61:57:24:77:A2:30:E7:9F:8F:28:CF:DD:6D:28:37:7F:22:2B
Certificate issuer:       /CN=A914E5AE/serialNumber=01DF61572477A230E79F8F28CFDD6D28377F222B
Certificate serial:       05DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ad9hVyR3ojDnn48oz91tKDd_Iis.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft
Manifest number:          05CE
Signing time:             Wed 20 May 2026 23:08:13 +0000
Manifest this update:     Wed 20 May 2026 23:08:13 +0000
Manifest next update:     Wed 27 May 2026 23:08:13 +0000
Files and hashes:         1: Ad9hVyR3ojDnn48oz91tKDd_Iis.crl (hash: 7psf9Hshno7S5hJCSCS8X3burc9YjLyrmj7HxWqdnc8=)
                          2: 0DA7E9A84E5E11F18A6201F7A4833773.roa (hash: RfB9xkFiIdCV5oVAdDDP61O6abiPBSL2qkBmqr65dgQ=)
                          3: C847114C07D411ECBF875117C4F9AE02.roa (hash: RTJD+7WiiJ9osfnBTe3ZJqaDqHxNHYqplthmyXrSeGU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.crl
                          rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ad9hVyR3ojDnn48oz91tKDd_Iis.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 23:08:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1498 (0x5da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E5AE, serialNumber=01DF61572477A230E79F8F28CFDD6D28377F222B
        Validity
            Not Before: May 20 23:08:13 2026 GMT
            Not After : May 27 23:08:13 2026 GMT
        Subject: CN=6a0e3edd-5a03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:cc:1d:67:52:55:4c:65:7f:83:3b:14:72:63:
                    ba:ef:5d:e0:bd:e3:ad:43:91:55:6f:74:fa:dd:75:
                    60:b0:57:6b:92:17:2e:4b:e1:d3:6f:4f:60:2e:bb:
                    03:42:29:f1:04:01:80:27:1e:96:20:51:30:b8:85:
                    9f:a1:0c:28:ed:f6:e6:7b:a7:4d:ae:e4:9b:c5:62:
                    33:3b:ed:de:01:f0:a7:4d:c2:9a:15:7e:f3:3d:93:
                    81:7d:24:bf:c7:d0:11:6f:e7:cb:6d:60:b1:f8:bf:
                    a5:79:30:de:65:cd:61:a0:64:bd:ca:60:30:a0:b0:
                    87:58:35:2f:88:c4:08:8c:88:e9:b2:fb:49:21:3d:
                    24:2d:9f:39:8c:2a:d5:27:32:24:df:4b:c8:4e:3b:
                    9c:e5:c6:4c:3c:1c:c3:d9:77:24:22:ae:c9:04:36:
                    17:90:98:6c:a4:8b:d1:b5:b9:3a:ed:3f:36:68:ab:
                    bf:06:1b:f9:cb:13:81:25:a0:13:b5:35:1c:2f:76:
                    87:88:88:bf:2c:8c:57:40:b9:e2:d9:51:0d:a0:9d:
                    f4:26:33:19:c2:b1:12:9c:65:c0:77:dc:7a:07:4b:
                    eb:c6:16:c4:06:75:04:8f:80:8a:7a:39:e5:5f:15:
                    9b:2a:ec:f4:33:b8:f0:25:e6:74:ac:58:7a:a9:5e:
                    80:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E6:FC:89:66:86:A8:99:A7:80:09:4F:BD:9C:4D:EC:F2:6D:3B:C6
            X509v3 Authority Key Identifier:
                keyid:01:DF:61:57:24:77:A2:30:E7:9F:8F:28:CF:DD:6D:28:37:7F:22:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ad9hVyR3ojDnn48oz91tKDd_Iis.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:d3:f8:0b:6d:f2:2b:bd:53:8d:c8:65:20:e6:32:16:04:45:
         1b:91:c3:b3:f2:7b:93:a9:1a:85:e4:39:e5:02:84:5d:55:6a:
         f2:6b:34:45:54:98:58:d8:2b:b2:95:c6:3c:4d:78:88:6c:ee:
         c2:1e:05:aa:dc:4d:bc:4f:54:18:c2:8d:ac:ff:94:b6:5d:0c:
         9c:43:91:7d:ea:48:2b:6f:f4:b5:7b:99:76:ba:d5:58:bf:bc:
         be:1e:f6:ec:cb:fd:ba:f3:71:a3:75:d1:8e:d9:3f:ea:27:09:
         33:dd:fe:7e:be:a6:c1:f9:03:eb:fe:19:bd:8b:30:37:f8:4f:
         94:15:32:8b:7d:cd:a4:58:b9:56:c0:02:9a:c0:59:21:a9:79:
         41:ed:26:d8:a1:20:24:21:a5:13:13:e9:44:0c:6f:0b:d9:7e:
         39:2f:64:0c:5a:bf:d5:7c:e8:61:0c:76:57:b1:be:66:70:da:
         c2:68:ad:00:6d:81:56:29:4c:f7:77:3c:3e:f2:00:15:8b:4b:
         a4:16:cc:a2:08:83:10:2a:e1:1c:c5:f7:95:07:e4:58:97:43:
         05:53:ad:3a:03:2d:a0:08:53:13:fe:2b:36:14:c5:79:2a:bf:
         ec:7a:72:61:5b:6d:65:3d:9b:6a:05:06:3d:ef:ff:3a:6f:90:
         bf:ca:91:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:15:54 2026 by rpki-client