Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915AA2E/7AFC9DF05AE511EFB11C4945C4F9AE02/9YAtkD2hDNA_zz6OFlX1IcHYV4M.mft
File:                     9YAtkD2hDNA_zz6OFlX1IcHYV4M.mft (raw, json)
Hash identifier:          M0N75AFZnI95wdREAQI/5O+l8A3hfh2DJ3J6RtaAWzQ=
Subject key identifier:   3F:30:65:0D:88:68:EF:50:4B:FA:91:51:69:45:37:1B:35:4B:C0:E1
Authority key identifier: F5:80:2D:90:3D:A1:0C:D0:3F:CF:3E:8E:16:55:F5:21:C1:D8:57:83
Certificate issuer:       /CN=A915AA2E/serialNumber=F5802D903DA10CD03FCF3E8E1655F521C1D85783
Certificate serial:       015A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9YAtkD2hDNA_zz6OFlX1IcHYV4M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915AA2E/7AFC9DF05AE511EFB11C4945C4F9AE02/9YAtkD2hDNA_zz6OFlX1IcHYV4M.mft
Manifest number:          0150
Signing time:             Thu 21 May 2026 05:13:55 +0000
Manifest this update:     Thu 21 May 2026 05:13:54 +0000
Manifest next update:     Thu 28 May 2026 05:13:54 +0000
Files and hashes:         1: 9YAtkD2hDNA_zz6OFlX1IcHYV4M.crl (hash: rfXPq3S2YEfnEMTz3dULtmBSaUFYRSxSQ1GLOvJakfA=)
                          2: 485D1C1AABD111F09DF58512C4F9AE02.roa (hash: EZ3/Kk3uRqT229OhpdvT9ZtoEOP/xAjuG1tip+FaJI4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915AA2E/7AFC9DF05AE511EFB11C4945C4F9AE02/9YAtkD2hDNA_zz6OFlX1IcHYV4M.crl
                          rsync://rpki.apnic.net/member_repository/A915AA2E/7AFC9DF05AE511EFB11C4945C4F9AE02/9YAtkD2hDNA_zz6OFlX1IcHYV4M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9YAtkD2hDNA_zz6OFlX1IcHYV4M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 04:46:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 346 (0x15a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915AA2E, serialNumber=F5802D903DA10CD03FCF3E8E1655F521C1D85783
        Validity
            Not Before: May 21 05:13:54 2026 GMT
            Not After : May 28 05:13:54 2026 GMT
        Subject: CN=6a0e9493-b496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:63:64:21:76:eb:5b:b0:93:1a:24:d2:6a:e8:
                    1f:cd:89:02:86:02:d2:98:6e:bd:e4:82:4a:ee:bc:
                    1e:3a:e8:c9:b9:b0:c5:1d:04:71:38:59:e3:69:84:
                    bb:f6:74:8f:cc:bc:89:c3:99:0c:74:20:c1:68:d4:
                    a9:b4:0e:40:bb:60:be:d0:05:c2:3c:f1:4c:7d:d9:
                    c5:67:c7:4d:86:c6:bb:42:1e:68:89:17:a4:89:4f:
                    54:7e:04:3b:07:ab:66:66:95:19:73:82:bc:f7:a9:
                    5f:fb:43:de:b1:c9:30:56:64:1f:0c:d9:2f:aa:a1:
                    81:32:c5:de:da:32:3a:c9:78:31:0e:9e:65:9c:4c:
                    6a:ea:b3:03:34:e9:52:df:56:81:6d:7b:f8:85:9c:
                    65:4a:51:65:66:ea:35:4a:f9:66:1f:93:e5:90:85:
                    8d:2a:93:1f:82:12:0e:a3:98:4f:46:df:03:20:92:
                    f8:8e:01:43:2e:72:fe:a3:07:b2:f8:c1:ec:09:6a:
                    88:81:89:ff:2a:e5:06:75:b8:f3:37:09:ff:01:9d:
                    53:b7:1d:f3:f4:80:20:f1:22:ae:30:80:f9:c1:6c:
                    77:21:f4:8b:c5:36:23:ea:68:af:89:dc:88:6a:e6:
                    9a:fc:ca:9b:5b:53:92:f4:1d:54:42:67:75:52:c1:
                    9d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:30:65:0D:88:68:EF:50:4B:FA:91:51:69:45:37:1B:35:4B:C0:E1
            X509v3 Authority Key Identifier:
                keyid:F5:80:2D:90:3D:A1:0C:D0:3F:CF:3E:8E:16:55:F5:21:C1:D8:57:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915AA2E/7AFC9DF05AE511EFB11C4945C4F9AE02/9YAtkD2hDNA_zz6OFlX1IcHYV4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9YAtkD2hDNA_zz6OFlX1IcHYV4M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AA2E/7AFC9DF05AE511EFB11C4945C4F9AE02/9YAtkD2hDNA_zz6OFlX1IcHYV4M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:c4:05:6a:1f:53:78:b1:31:27:06:d4:36:cb:94:52:b7:5d:
         03:65:e7:14:85:37:f8:18:4a:40:31:e0:3d:a7:e3:55:5d:d0:
         d1:f7:4d:63:e8:94:79:39:db:9f:2e:fa:39:26:61:a9:e0:1e:
         0f:fb:36:95:ee:3b:f3:a6:62:75:7d:ab:db:19:bd:dd:0a:3d:
         a5:58:c0:01:d5:c7:10:9b:0c:f9:e1:59:3e:ca:b5:5a:48:df:
         50:dc:bf:e7:80:90:bb:c8:26:34:02:22:23:07:9c:01:aa:b2:
         e8:c8:d6:15:99:36:91:29:a3:7f:ac:11:16:39:7b:74:62:7c:
         b5:53:76:9e:06:ff:06:85:e5:a8:e7:a3:09:1b:96:46:17:36:
         b8:cd:af:c8:61:21:20:66:5d:68:b4:f8:91:85:78:a5:9f:95:
         a6:d8:b0:f6:b7:09:6c:e0:60:9c:66:2a:87:f6:40:86:5c:8d:
         47:ab:d7:bb:39:a7:94:ff:f7:ad:2e:6e:8e:28:76:45:2e:a3:
         6a:22:b5:50:ab:51:7d:06:9d:26:22:5f:50:23:d3:14:0c:68:
         18:45:08:70:91:c2:e8:a5:38:90:b6:0c:9e:b9:38:0c:2e:19:
         1b:d5:6e:0a:56:50:92:8b:aa:33:ea:41:73:50:7b:70:15:dc:
         c4:94:14:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:36:33 2026 by rpki-client