Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.mft
File:                     jTeJSwlB7P1NawXh4UyrhWmHsF0.mft (raw, json)
Hash identifier:          vuvfzOLkgVJKlPZTdw2iN34CaCqFbtBKqqc6XTqQ2Jg=
Subject key identifier:   E4:C5:FC:33:25:B1:F0:AF:AF:53:C7:F2:89:29:F9:F6:09:BA:50:38
Authority key identifier: 8D:37:89:4B:09:41:EC:FD:4D:6B:05:E1:E1:4C:AB:85:69:87:B0:5D
Certificate issuer:       /CN=A915890D/serialNumber=8D37894B0941ECFD4D6B05E1E14CAB856987B05D
Certificate serial:       217F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jTeJSwlB7P1NawXh4UyrhWmHsF0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.mft
Manifest number:          2176
Signing time:             Wed 20 May 2026 15:55:13 +0000
Manifest this update:     Wed 20 May 2026 15:55:13 +0000
Manifest next update:     Wed 27 May 2026 15:55:13 +0000
Files and hashes:         1: jTeJSwlB7P1NawXh4UyrhWmHsF0.crl (hash: KbcVf+Sa4Z+17S6IYid4qKicLC5R14PKadu9PTK4Mjo=)
                          2: B492147E047B11EBBA181F4FC4F9AE02.roa (hash: q6obv3XbPXxFh/9pkLqSgiabaqoDxZSpOGQbzF+b7F4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.crl
                          rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jTeJSwlB7P1NawXh4UyrhWmHsF0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 15:55:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8575 (0x217f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915890D, serialNumber=8D37894B0941ECFD4D6B05E1E14CAB856987B05D
        Validity
            Not Before: May 20 15:55:13 2026 GMT
            Not After : May 27 15:55:13 2026 GMT
        Subject: CN=6a0dd961-8041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bb:8e:76:84:71:20:ee:85:ff:6e:9b:7c:20:
                    b7:12:5b:77:70:fe:a3:f9:b4:58:0c:79:04:40:7f:
                    e3:c8:68:87:de:d7:bd:49:66:da:fa:c9:ff:5c:e6:
                    13:1a:b1:f2:90:ce:aa:32:a9:1d:c2:64:1a:0e:72:
                    2e:61:b5:9d:05:56:c4:36:94:60:0d:47:64:85:e6:
                    34:fa:37:db:1b:60:d9:e0:a8:3d:c5:c9:4f:c2:83:
                    1f:df:0b:ab:9e:95:c7:5c:e0:50:6f:6e:cd:d2:88:
                    7a:c2:5e:4a:c9:9a:0c:94:35:ac:44:57:2e:0e:cd:
                    6a:a5:d8:03:9a:9f:7b:03:38:e7:10:7f:10:00:1a:
                    4a:c5:d4:ab:26:c6:d5:48:55:1d:58:31:cf:4c:55:
                    fa:10:e9:ed:ed:44:2a:53:99:17:a0:81:8e:af:60:
                    29:79:cd:11:4e:2b:66:d9:65:16:14:8d:81:b0:ad:
                    ca:31:2e:6d:c6:0f:09:db:00:fa:d0:04:75:10:55:
                    e3:cf:62:f3:a8:74:76:cc:b6:5e:99:fd:f7:0b:76:
                    3d:60:7f:5a:77:c9:2c:4d:94:31:69:63:a4:8e:13:
                    9d:a5:a0:9d:51:9c:6e:24:37:4a:a5:92:d5:b0:7f:
                    ce:38:39:a1:89:33:3c:bf:26:7b:82:e1:00:eb:76:
                    8e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C5:FC:33:25:B1:F0:AF:AF:53:C7:F2:89:29:F9:F6:09:BA:50:38
            X509v3 Authority Key Identifier:
                keyid:8D:37:89:4B:09:41:EC:FD:4D:6B:05:E1:E1:4C:AB:85:69:87:B0:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jTeJSwlB7P1NawXh4UyrhWmHsF0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915890D/21B7A80EFFFC11E586B4D964C4F9AE02/jTeJSwlB7P1NawXh4UyrhWmHsF0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:eb:3a:4d:af:cc:63:80:4f:63:bc:43:51:5d:df:c6:32:0b:
         84:f2:41:6b:71:5b:c6:72:b1:92:48:44:8d:dc:a6:eb:96:02:
         bb:f8:a4:f2:c1:2a:0f:ae:2b:ec:f5:e4:71:67:9b:b3:40:ea:
         99:b9:6a:85:a3:af:ef:04:08:bb:92:38:d7:99:ae:38:db:ec:
         9f:97:ea:10:5d:67:c8:9b:60:02:01:55:dc:a1:3a:db:c7:2b:
         31:eb:4b:d4:da:ff:1f:d1:77:84:68:55:69:73:a6:aa:4f:c8:
         56:09:d2:c0:c7:fc:25:54:10:0f:78:15:ae:1e:6a:d0:d9:9c:
         4e:0e:e5:d3:36:db:e8:77:bd:0c:8d:66:44:61:3b:be:f3:ce:
         dd:73:86:4d:8a:23:50:0a:41:5b:cb:66:de:b5:19:a8:1c:d4:
         dd:f6:55:ef:ef:9d:d7:e9:7d:fd:54:02:8c:2f:12:9e:ef:80:
         87:e1:5b:0f:6e:d0:66:29:7c:f0:13:fc:b5:c3:38:1d:3e:13:
         a8:44:23:98:ca:e0:51:dd:6f:7e:29:6b:0b:e1:07:b1:ee:a6:
         df:43:25:6e:25:5d:13:f3:ba:bb:20:3e:bd:de:4d:76:dc:24:
         4e:4b:d4:52:68:45:5b:ee:18:07:3b:92:bd:49:67:10:ae:b8:
         03:b2:16:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:15:41 2026 by rpki-client