Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft
File:                     a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft (raw, json)
Hash identifier:          kT2F7oECZf14Cx1M8i1qozFUlit4IXxBaYY1400nI9E=
Subject key identifier:   FC:11:72:75:1E:35:7C:40:15:E5:62:5D:8C:8F:ED:E2:34:69:6A:7D
Authority key identifier: 6B:49:57:66:2A:D4:C2:1B:D4:22:A8:7D:B4:1B:8B:CF:C9:D6:DD:8E
Certificate issuer:       /CN=A9165BD7/serialNumber=6B4957662AD4C21BD422A87DB41B8BCFC9D6DD8E
Certificate serial:       025B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0lXZirUwhvUIqh9tBuLz8nW3Y4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft
Manifest number:          0255
Signing time:             Thu 21 May 2026 02:21:47 +0000
Manifest this update:     Thu 21 May 2026 02:21:46 +0000
Manifest next update:     Thu 28 May 2026 02:21:46 +0000
Files and hashes:         1: a0lXZirUwhvUIqh9tBuLz8nW3Y4.crl (hash: jPDjx4F+utpyrO3uoDJj4ghLZzHs2/ORqx72inUUpF8=)
                          2: A92EC53AC95B11ED9ABE6935C4F9AE02.roa (hash: NYxhWaPU66RmCDpGdJedGH47SKUvMoNmc0ScNkfJxsc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.crl
                          rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0lXZirUwhvUIqh9tBuLz8nW3Y4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 02:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 603 (0x25b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165BD7, serialNumber=6B4957662AD4C21BD422A87DB41B8BCFC9D6DD8E
        Validity
            Not Before: May 21 02:21:46 2026 GMT
            Not After : May 28 02:21:46 2026 GMT
        Subject: CN=6a0e6c3b-d760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3a:ce:5a:68:c3:54:28:31:35:71:2a:7f:53:
                    09:b4:2b:a3:85:74:23:89:50:db:52:e8:4a:19:d6:
                    b1:02:e1:33:31:21:56:c5:5f:4d:fa:bb:d7:45:dd:
                    38:15:fa:02:1e:16:dc:f6:7d:c3:f5:a2:ea:51:c8:
                    ee:28:65:85:b8:13:ec:7e:64:0d:cc:25:45:3d:39:
                    66:15:55:54:43:8d:ed:12:43:19:43:98:ae:f0:d9:
                    85:b2:60:6e:c9:ec:cc:a4:12:fe:6b:19:2a:5c:ab:
                    df:ea:8d:bc:0f:a2:dc:f3:01:76:a3:d9:9e:46:8d:
                    7b:ec:43:45:48:8c:b3:da:87:32:fd:e5:58:bd:e2:
                    7a:9a:ca:db:b0:b8:7e:42:db:ac:4a:07:56:d6:29:
                    4b:2f:3e:fa:15:df:df:a8:75:fe:6b:1b:99:2f:03:
                    38:55:93:eb:bd:c8:84:3b:f1:7a:20:4e:bc:bf:32:
                    a7:e7:51:d5:ce:5f:d1:e3:fb:39:e6:a1:6c:65:fe:
                    7a:c2:b0:8b:d3:0d:ac:e7:8c:64:72:37:1d:20:f7:
                    2d:32:19:7e:d1:bd:9b:ab:43:c7:4d:2e:4e:a6:e1:
                    a0:3f:19:84:ed:1c:f5:4f:ff:dd:33:aa:08:e4:c6:
                    c1:f9:52:1f:0d:94:b2:9a:03:90:4b:9c:a8:f6:e0:
                    df:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:11:72:75:1E:35:7C:40:15:E5:62:5D:8C:8F:ED:E2:34:69:6A:7D
            X509v3 Authority Key Identifier:
                keyid:6B:49:57:66:2A:D4:C2:1B:D4:22:A8:7D:B4:1B:8B:CF:C9:D6:DD:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0lXZirUwhvUIqh9tBuLz8nW3Y4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165BD7/8A62C82AC95811ED918E8C34C4F9AE02/a0lXZirUwhvUIqh9tBuLz8nW3Y4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:fa:9e:f2:d3:07:62:bc:13:a5:f5:e5:5b:fa:39:ff:fb:b9:
         8e:86:0e:47:cc:9d:1d:61:82:21:ae:e6:fe:31:42:3a:b5:60:
         e7:90:2c:cb:3e:e3:84:fc:18:45:d0:6f:1c:1c:d8:99:e3:04:
         81:66:0a:7d:15:90:20:b5:ff:59:7e:ef:e1:aa:43:05:f1:12:
         01:ce:9f:21:a7:83:d7:67:dd:f4:6f:dd:86:9d:5c:9b:5d:03:
         eb:5e:8c:7d:82:f0:bc:c4:26:b7:d6:3f:9f:2c:d7:bc:1d:d1:
         ef:d0:17:6e:53:d3:c4:4a:e5:c6:4b:32:8d:28:a4:35:40:08:
         06:36:b0:5a:76:4a:2a:ce:5c:d7:2c:b2:f3:36:7f:5e:92:13:
         54:1a:5c:ff:70:34:8a:21:19:87:77:a0:78:ae:55:57:e6:51:
         37:b4:db:cc:75:64:d3:b3:8c:aa:93:a8:94:67:40:92:b5:72:
         fe:0c:80:b6:1c:79:61:73:e9:e4:52:0a:01:ea:a8:b6:3d:0d:
         31:91:8b:65:29:24:3c:d4:ee:5e:ff:8b:16:e1:9f:1e:0b:cc:
         4f:c2:c6:51:b2:1e:95:f1:3a:9d:5c:68:84:56:37:15:cc:1e:
         c8:9c:d4:2c:f7:47:f6:ef:b7:9b:8a:2c:60:9d:e1:b4:58:97:
         26:e2:72:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:52 2026 by rpki-client