Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft
File:                     -AoX4Y4_OhL3UjNnLorGf4DlL98.mft (raw, json)
Hash identifier:          wvU9yIuE55OA9ae+pNTUfXDStwzZVijql7LMXUqDavw=
Subject key identifier:   A5:6B:4C:A9:8E:B2:33:FA:2B:2D:C3:55:FB:D5:6A:AA:F5:60:6D:17
Authority key identifier: F8:0A:17:E1:8E:3F:3A:12:F7:52:33:67:2E:8A:C6:7F:80:E5:2F:DF
Certificate issuer:       /CN=A916423B/serialNumber=F80A17E18E3F3A12F75233672E8AC67F80E52FDF
Certificate serial:       022C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft
Manifest number:          0227
Signing time:             Thu 21 May 2026 02:46:12 +0000
Manifest this update:     Thu 21 May 2026 02:46:11 +0000
Manifest next update:     Thu 28 May 2026 02:46:11 +0000
Files and hashes:         1: -AoX4Y4_OhL3UjNnLorGf4DlL98.crl (hash: zfuUh2vxOiESzBv/dE1C9q99s0eilozoe0IYNEiGnas=)
                          2: 593888C40AB811EE97CC7A32C4F9AE02.roa (hash: jKf/2MU5Ip9D+4pRX+4cB+cT7JgiaWNbV4ALOM87qH4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.crl
                          rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 02:46:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 556 (0x22c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916423B, serialNumber=F80A17E18E3F3A12F75233672E8AC67F80E52FDF
        Validity
            Not Before: May 21 02:46:11 2026 GMT
            Not After : May 28 02:46:11 2026 GMT
        Subject: CN=6a0e71f4-34bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b8:20:4e:8f:25:d1:59:12:80:50:4e:c8:f4:
                    0c:c7:45:41:5e:ef:fd:5b:65:f4:e3:ee:d6:44:fe:
                    e4:00:a2:c0:53:c0:5d:61:90:90:bf:6c:e8:da:43:
                    57:c7:c8:40:cf:09:6f:8b:db:55:30:cc:35:7b:80:
                    55:2f:24:e3:88:5e:55:ad:7c:90:d7:3e:19:77:ed:
                    16:07:02:37:44:e4:25:b9:17:a4:32:de:2f:ff:da:
                    0d:b1:f2:7a:f2:f4:0f:a7:54:52:4a:c9:e0:c1:94:
                    ab:b5:bd:34:0e:66:bc:60:e0:8e:2a:91:43:fb:16:
                    f2:75:a0:3f:a4:68:ff:3e:c7:f0:a8:45:5c:e9:b1:
                    11:95:35:b4:1e:7f:ca:89:a2:c4:ad:13:df:c7:ef:
                    1f:dd:9c:c7:86:76:97:48:f4:a9:30:1f:76:2b:bd:
                    10:02:2f:e8:83:9a:35:e2:2a:60:fb:8d:3e:4e:69:
                    1b:51:bb:f8:e4:ad:23:db:d3:c2:15:97:4e:9d:b4:
                    4e:4e:48:9e:b7:dd:78:43:8a:87:58:4c:bd:01:f9:
                    04:e8:e7:58:18:f8:85:72:55:a7:76:43:cd:dc:08:
                    06:5c:96:c8:96:09:13:c0:b9:fc:14:88:52:7f:4a:
                    aa:c0:bb:fd:a8:76:f7:e5:e6:42:73:40:ce:b2:1d:
                    cf:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:6B:4C:A9:8E:B2:33:FA:2B:2D:C3:55:FB:D5:6A:AA:F5:60:6D:17
            X509v3 Authority Key Identifier:
                keyid:F8:0A:17:E1:8E:3F:3A:12:F7:52:33:67:2E:8A:C6:7F:80:E5:2F:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:0c:75:6b:be:18:04:7d:50:46:44:23:8b:d4:3e:92:6a:f3:
         6d:22:8d:f1:df:7b:cf:15:0e:27:1a:38:59:09:96:54:a3:ee:
         ed:b7:2c:b1:55:4d:93:bf:14:8d:a1:d0:cf:b1:8b:60:a8:ef:
         b4:50:80:da:36:05:eb:53:a6:4b:99:d8:06:4b:3b:a0:53:03:
         db:8a:cd:ab:0f:a4:93:77:c9:1d:14:7c:78:6f:be:f5:7c:25:
         21:7a:fa:eb:65:ba:00:e9:67:48:fc:fb:76:ac:e3:7c:0a:09:
         29:90:87:15:30:54:73:db:60:47:bf:b5:22:91:06:2e:7e:93:
         2c:38:22:20:07:5d:fb:de:85:59:a2:47:e1:20:4c:90:87:7e:
         24:2e:c8:f1:3e:50:e4:eb:38:7a:88:d3:00:4b:9a:f8:af:83:
         03:d5:28:af:5b:32:d3:a3:cb:54:46:58:00:aa:d4:90:b1:be:
         ea:dc:4d:91:3c:f5:38:b5:7c:c2:48:c8:90:69:d7:21:e1:32:
         ab:10:99:7e:86:d2:e9:88:34:bd:56:a0:6d:08:7c:f5:44:5c:
         34:8d:59:3f:0b:b4:93:28:99:37:48:f2:e0:6a:9b:35:4f:7b:
         01:da:09:f1:26:0f:7c:76:e8:b6:c4:31:38:0e:a4:6e:ef:42:
         5f:d6:8a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:26 2026 by rpki-client