Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.mft
File:                     Exdoo2swNG49vr6_h7hIG6q-Pus.mft (raw, json)
Hash identifier:          4tmmKVVYc4KLVkpxSvJNWLGBIq4GWMBtVT9stmg/6fc=
Subject key identifier:   E0:BA:74:8E:15:FE:8D:F7:C6:14:ED:C2:30:6F:15:34:A9:A0:91:41
Authority key identifier: 13:17:68:A3:6B:30:34:6E:3D:BE:BE:BF:87:B8:48:1B:AA:BE:3E:EB
Certificate issuer:       /CN=A915C281/serialNumber=131768A36B30346E3DBEBEBF87B8481BAABE3EEB
Certificate serial:       35D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Exdoo2swNG49vr6_h7hIG6q-Pus.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.mft
Manifest number:          3595
Signing time:             Wed 20 May 2026 14:54:19 +0000
Manifest this update:     Wed 20 May 2026 14:54:18 +0000
Manifest next update:     Wed 27 May 2026 14:54:18 +0000
Files and hashes:         1: Exdoo2swNG49vr6_h7hIG6q-Pus.crl (hash: l3an+VpMe0LDu/0DoM0kN2k/RTr/qXTBt7xTyzQLOz4=)
                          2: 92078AAE0B5411EF957DA628C4F9AE02.roa (hash: 3dwH9a/utiC4SfLWlkTfOUAPg5RQr8BVu3u7eFbig/0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.crl
                          rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Exdoo2swNG49vr6_h7hIG6q-Pus.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 14:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13778 (0x35d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C281, serialNumber=131768A36B30346E3DBEBEBF87B8481BAABE3EEB
        Validity
            Not Before: May 20 14:54:18 2026 GMT
            Not After : May 27 14:54:18 2026 GMT
        Subject: CN=6a0dcb1b-847e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:9e:25:a7:41:fa:77:92:19:c3:e7:2e:e2:31:
                    4f:34:85:3b:e8:b5:f4:5e:98:ee:5e:d7:38:c8:6e:
                    2a:11:1e:ec:d2:9a:31:7b:fc:f6:95:fe:8f:9b:3c:
                    ef:d7:72:8f:14:3e:7d:ed:4b:9f:54:2a:3d:6c:54:
                    19:53:45:55:c3:92:f7:95:46:bf:2f:42:d4:3d:1f:
                    c0:ef:86:99:af:2d:0e:01:cd:88:0a:42:f1:e6:50:
                    25:c9:3a:4f:6a:b2:fc:36:08:b5:14:bb:69:f9:96:
                    7c:cd:dd:fc:c2:2a:a2:21:95:a3:2c:c8:07:f2:35:
                    5a:40:c2:c2:6d:8c:d4:f0:54:64:58:d5:f9:1d:96:
                    2c:a1:bc:d6:a3:6a:f6:cc:7f:18:62:55:60:a8:78:
                    78:bc:88:75:74:6b:7f:a3:f3:76:25:7e:96:89:75:
                    28:ce:a9:b4:b9:64:49:12:19:18:c2:d6:a5:4b:cc:
                    cd:0c:63:1f:cb:54:94:88:0d:e3:ef:d0:c7:83:48:
                    3b:73:b5:04:8f:cd:fa:a8:90:ba:56:81:12:fc:30:
                    b2:3e:1e:92:b5:36:25:a2:d1:cd:06:2d:1c:fc:6f:
                    1f:13:35:43:40:a8:d0:68:7a:2a:64:e8:2a:e5:be:
                    c5:95:b5:4b:d1:8b:b4:98:b6:a9:fe:e6:11:10:b6:
                    19:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:BA:74:8E:15:FE:8D:F7:C6:14:ED:C2:30:6F:15:34:A9:A0:91:41
            X509v3 Authority Key Identifier:
                keyid:13:17:68:A3:6B:30:34:6E:3D:BE:BE:BF:87:B8:48:1B:AA:BE:3E:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Exdoo2swNG49vr6_h7hIG6q-Pus.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:21:e1:32:26:98:14:ff:d9:70:93:1d:2c:dd:5b:31:57:cf:
         1a:e4:16:70:43:0a:52:72:ce:00:75:05:40:b8:d2:f3:1a:2d:
         c0:b8:27:e8:71:ab:64:dd:4d:18:ef:ed:e4:26:52:82:4c:f8:
         04:82:47:ff:ac:d9:ad:4f:db:9c:5e:c6:d6:2c:cf:37:fd:a2:
         b1:1d:a7:12:95:2e:51:68:bf:bf:66:15:53:10:da:ec:94:40:
         83:d2:cf:34:86:d4:ce:61:b2:e1:f0:99:0e:27:31:28:99:00:
         c8:0b:e8:db:7e:44:da:81:51:f7:b4:c8:99:77:a5:1d:d7:94:
         b8:7b:e4:d4:21:71:91:99:71:1d:05:fc:5b:cf:8b:d7:ea:8f:
         46:3a:15:d4:79:83:99:26:db:7f:7d:55:6c:b7:7f:d2:8a:35:
         76:53:e1:60:33:d8:b0:77:ae:39:30:8b:da:52:67:c2:17:59:
         ce:de:54:ae:cd:1d:46:e7:33:c5:d6:52:2d:38:e3:ab:0b:03:
         b1:cc:17:55:fe:43:e0:30:7c:40:3c:63:5a:77:eb:f6:d1:8a:
         36:ad:f5:e5:bc:ec:08:8b:70:f6:02:33:46:d8:2d:75:f4:e8:
         a2:8e:f5:7c:00:2f:7d:19:e0:ba:3a:3b:a5:cb:10:72:6d:10:
         ae:04:09:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:16:04 2026 by rpki-client