Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.mft
File:                     g--P6e5IafC5SpX3RvWJS6H7MPA.mft (raw, json)
Hash identifier:          qbNCiME2gaofpNuo2eKsiZEiQSGye46NXyrhr1YRCW8=
Subject key identifier:   B9:82:95:1B:F7:CB:5D:C3:0A:86:E1:D3:DA:54:0E:74:B8:BB:53:CE
Authority key identifier: 83:EF:8F:E9:EE:48:69:F0:B9:4A:95:F7:46:F5:89:4B:A1:FB:30:F0
Certificate issuer:       /CN=A914EB9A/serialNumber=83EF8FE9EE4869F0B94A95F746F5894BA1FB30F0
Certificate serial:       0178
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g--P6e5IafC5SpX3RvWJS6H7MPA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.mft
Manifest number:          0173
Signing time:             Sat 23 May 2026 04:46:30 +0000
Manifest this update:     Sat 23 May 2026 04:46:30 +0000
Manifest next update:     Sat 30 May 2026 04:46:30 +0000
Files and hashes:         1: g--P6e5IafC5SpX3RvWJS6H7MPA.crl (hash: OtZuF1Ay3WzWRdb9trHS1Gsqvn482KMckVsKFWk2IZY=)
                          2: A368B23623C411EFB7164123C4F9AE02.roa (hash: VVQzShIJbaueJ2kqgBg7iWLw4cnFdAHY6jIMdsEURbE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.crl
                          rsync://rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g--P6e5IafC5SpX3RvWJS6H7MPA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 04:46:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 376 (0x178)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EB9A, serialNumber=83EF8FE9EE4869F0B94A95F746F5894BA1FB30F0
        Validity
            Not Before: May 23 04:46:30 2026 GMT
            Not After : May 30 04:46:30 2026 GMT
        Subject: CN=6a113126-b771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d2:4e:e3:aa:2d:a5:28:ec:42:0e:53:5f:0b:
                    1c:bc:8f:08:01:4d:4e:15:b2:29:af:79:93:3e:90:
                    75:48:1e:94:13:fb:1e:e5:20:64:4d:66:00:71:aa:
                    d0:bb:cf:31:00:1c:87:c1:58:98:c0:69:bf:70:7e:
                    64:f1:aa:4a:df:57:7d:b5:0d:59:b7:e1:6f:7a:6d:
                    fe:69:98:ea:8b:7d:36:4b:bb:b2:35:bf:d2:54:6c:
                    b9:e0:ef:7a:3c:8b:ff:09:2a:26:21:26:b5:77:12:
                    bc:78:08:ec:41:89:65:ce:2e:45:30:04:ec:06:a0:
                    de:24:8b:18:cd:b6:09:07:43:47:a5:43:a6:d3:12:
                    cc:72:de:6e:e2:ad:77:dd:c3:00:92:20:b0:9d:d9:
                    c1:e6:09:2d:72:14:43:c9:17:f0:69:0a:59:95:13:
                    9f:61:65:96:2f:d8:0e:3e:42:a9:30:19:5a:f2:6d:
                    13:f6:73:0c:1b:5e:71:42:0f:10:54:fb:59:8e:23:
                    f3:3d:84:da:21:11:cd:08:4a:02:62:07:00:eb:10:
                    be:33:79:16:0f:e9:9a:7a:13:87:3f:7d:cd:ac:bf:
                    5a:7e:39:3f:4f:c6:e7:7a:f0:7f:b0:49:d3:8c:07:
                    9d:0a:53:f6:29:8f:4d:9a:a8:1e:51:e3:f3:88:99:
                    13:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:82:95:1B:F7:CB:5D:C3:0A:86:E1:D3:DA:54:0E:74:B8:BB:53:CE
            X509v3 Authority Key Identifier:
                keyid:83:EF:8F:E9:EE:48:69:F0:B9:4A:95:F7:46:F5:89:4B:A1:FB:30:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g--P6e5IafC5SpX3RvWJS6H7MPA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:b5:82:ee:56:91:1b:87:ce:95:fc:15:4d:4b:2c:c7:d9:f2:
         61:6a:28:0c:34:72:a0:c7:77:5c:a6:c6:1c:68:30:73:85:1c:
         0f:7c:53:b0:85:71:48:8e:d8:1d:66:f7:54:be:8d:6b:75:1e:
         37:88:e6:26:59:54:13:13:85:c8:77:b1:e4:a9:5e:10:69:1b:
         ae:7d:bc:e2:b5:ce:89:f3:04:67:17:bc:72:8b:ec:bc:f6:37:
         7e:c2:02:26:29:83:32:cc:2c:16:36:a9:0d:63:8b:11:d7:71:
         a5:ed:1d:bc:aa:96:20:18:60:49:3e:59:82:7f:87:9e:67:48:
         fe:c6:93:e4:cf:7a:0d:a1:98:a3:96:bf:32:40:5d:0c:2e:cb:
         b5:ab:08:f1:ce:b1:21:59:b3:e3:9c:a3:33:f7:8f:96:1f:9c:
         45:61:b7:4c:23:cb:ae:33:56:86:87:ff:6b:9d:16:dc:c0:7e:
         9a:74:ad:43:65:78:63:13:62:d2:cd:cb:e2:ad:8d:86:bb:5b:
         62:b4:b5:a7:be:ad:88:41:63:53:3a:09:b8:a8:fd:86:42:f9:
         82:26:f2:52:29:3b:98:d0:27:1f:00:44:09:10:a3:81:68:08:
         bd:e6:01:54:df:a1:2a:d2:5c:ab:2f:f1:25:5d:1e:a5:22:7c:
         46:e1:9c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 04:37:20 2026 by rpki-client