Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft
File:                     B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft (raw, json)
Hash identifier:          7ARHLGtOQ1KSxbsH9DIVH1jGKri25JAvibS54KDmz48=
Subject key identifier:   CC:D5:3A:36:CB:18:50:44:77:58:18:46:E1:7E:03:0B:74:E0:C9:E2
Authority key identifier: 07:53:2C:F6:D2:BC:4C:A9:D9:27:F3:07:D0:E6:B8:28:77:D8:EE:4D
Certificate issuer:       /CN=A915D1F2/serialNumber=07532CF6D2BC4CA9D927F307D0E6B82877D8EE4D
Certificate serial:       1241
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft
Manifest number:          1235
Signing time:             Wed 20 May 2026 17:07:41 +0000
Manifest this update:     Wed 20 May 2026 17:07:41 +0000
Manifest next update:     Wed 27 May 2026 17:07:41 +0000
Files and hashes:         1: B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.crl (hash: nZ8F6t/FaDdwDxeIyR9iSp8hTRQJKSZ6bPoiobfs2Z8=)
                          2: 9467361CFEAA11E89E73E75BC4F9AE02.roa (hash: rSIn+ZNNC6xv6esvJccL4Qb3tpchRQqRJ3vtYusQf6M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.crl
                          rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 17:07:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4673 (0x1241)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D1F2, serialNumber=07532CF6D2BC4CA9D927F307D0E6B82877D8EE4D
        Validity
            Not Before: May 20 17:07:41 2026 GMT
            Not After : May 27 17:07:41 2026 GMT
        Subject: CN=6a0dea5d-c227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4c:d2:e3:83:d6:b3:e1:42:1b:2d:65:80:07:
                    f5:74:78:1a:45:37:dd:83:0c:de:11:83:fd:7d:57:
                    75:09:47:9f:ce:e1:96:76:13:09:e6:c9:b5:dd:9e:
                    a8:c1:4f:7b:cb:1a:b6:42:a3:90:b8:3f:a5:11:6d:
                    84:c0:9c:fc:12:5e:08:f2:15:83:e8:07:fd:db:c3:
                    5f:73:1f:b4:20:f9:5a:6c:55:1e:f8:a6:d6:88:31:
                    fc:13:72:eb:db:40:d8:7c:b6:ab:44:98:9b:9c:2a:
                    19:c6:4d:c1:3e:d3:57:0e:85:92:04:0e:b5:2e:82:
                    1d:76:7a:0d:8f:36:cc:f5:25:62:a1:6a:e9:15:9d:
                    b2:cb:0b:80:02:6f:dd:ed:55:2f:89:bc:e1:6a:25:
                    50:69:cf:03:dc:30:cd:ad:7d:97:81:e8:b2:0e:fb:
                    b6:11:b2:d0:56:47:25:b4:09:f8:0a:c5:00:1f:6c:
                    0f:9c:bc:2b:1e:ec:9d:e8:d4:2b:93:a2:30:ec:ca:
                    32:c7:9f:65:17:3a:f3:42:3b:2d:30:24:8b:e3:9d:
                    94:5c:72:c8:af:4f:90:da:10:8b:69:90:14:ed:11:
                    29:30:be:75:73:47:7c:a7:71:e5:04:00:7c:e4:2c:
                    68:91:3d:f6:b6:33:8d:70:1e:f1:d1:63:d0:0a:f0:
                    a8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:D5:3A:36:CB:18:50:44:77:58:18:46:E1:7E:03:0B:74:E0:C9:E2
            X509v3 Authority Key Identifier:
                keyid:07:53:2C:F6:D2:BC:4C:A9:D9:27:F3:07:D0:E6:B8:28:77:D8:EE:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:58:e5:74:93:1c:7a:fc:3c:f5:4c:10:6a:8b:ad:a5:1c:14:
         b6:42:18:fd:91:26:48:32:52:b7:86:5c:26:2e:dc:01:06:1a:
         74:dd:8a:5c:4d:6a:bd:e4:fa:18:f6:51:5c:1b:ca:5f:22:fa:
         bd:40:d7:c0:d0:18:ba:5e:e0:c2:31:ef:3b:cd:86:42:cb:7d:
         d2:dc:ed:46:94:4c:aa:f4:0c:43:04:b3:53:4a:c7:51:43:22:
         79:67:b2:f1:f0:63:eb:b3:46:f8:d1:0c:39:09:9f:2b:90:e4:
         80:a4:5a:0d:e1:d6:20:b5:ee:c5:41:e5:31:6a:79:72:64:6f:
         1a:c1:01:ae:b9:cc:e6:51:5a:0c:78:4c:f1:70:f5:69:53:14:
         1b:6b:8e:23:31:b6:e4:0e:fa:8c:df:56:7f:b4:5e:f1:6a:0f:
         ad:80:04:15:04:19:8b:5e:2e:e2:8c:23:61:b0:ec:cb:b4:96:
         99:0b:44:b0:85:67:71:68:ff:66:10:ed:53:0e:4e:a0:98:ab:
         be:27:c9:3b:53:3e:21:c2:c3:5f:e9:b3:ce:c5:31:4e:54:af:
         bc:15:0b:76:57:5e:e6:d6:51:3b:37:67:c2:8e:18:7a:21:cb:
         e7:42:c4:71:30:6b:8a:5a:d7:26:bc:11:cb:e1:28:80:42:43:
         fc:61:1b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:14:40 2026 by rpki-client