Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft
File:                     rEGRrDoak5bnjWEvN026zI8tkbU.mft (raw, json)
Hash identifier:          eq+C8dSeWM4Yc5/Dys+e2I329E+9CNv0Xqasx+Mn8r0=
Subject key identifier:   46:ED:B0:A2:BC:99:92:F4:40:B7:8F:DA:A5:72:5D:BD:6B:D0:24:60
Authority key identifier: AC:41:91:AC:3A:1A:93:96:E7:8D:61:2F:37:4D:BA:CC:8F:2D:91:B5
Certificate issuer:       /CN=A9169CD3/serialNumber=AC4191AC3A1A9396E78D612F374DBACC8F2D91B5
Certificate serial:       2567
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft
Manifest number:          2546
Signing time:             Wed 20 May 2026 15:45:46 +0000
Manifest this update:     Wed 20 May 2026 15:45:45 +0000
Manifest next update:     Wed 27 May 2026 15:45:45 +0000
Files and hashes:         1: rEGRrDoak5bnjWEvN026zI8tkbU.crl (hash: xKzOgIHOhZ2HjvxxTA4cocEoMc1fgWiCAYkUO3EjARU=)
                          2: 174B2A3441B611F0A03F6C24C4F9AE02.roa (hash: i+GdPwFxjLjj+7bNWOxBthvhtqMbDPp4GipdpNEloMI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.crl
                          rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 15:45:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9575 (0x2567)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169CD3, serialNumber=AC4191AC3A1A9396E78D612F374DBACC8F2D91B5
        Validity
            Not Before: May 20 15:45:45 2026 GMT
            Not After : May 27 15:45:45 2026 GMT
        Subject: CN=6a0dd72a-e820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:36:19:c5:ac:0e:19:2d:5f:ac:f1:20:9a:06:
                    30:41:4e:94:43:cc:ea:f8:34:48:8a:6d:d1:4a:6c:
                    c1:0c:d7:21:92:38:bb:1e:9f:80:b0:53:d2:56:ef:
                    3d:07:d5:a3:0e:d8:42:0f:b9:99:b8:d2:80:a2:cc:
                    77:d4:35:12:85:7c:c7:c1:06:60:27:75:6b:1f:a1:
                    4a:42:00:25:47:55:5b:f4:ac:34:f3:6f:5c:c7:ba:
                    ba:5d:c2:dd:5f:eb:3c:94:3e:32:70:78:5f:0f:1c:
                    fb:7f:ca:7d:8e:b2:eb:0c:b9:8f:a4:3b:dd:02:47:
                    3b:3b:ae:62:00:a7:81:f4:84:29:e6:2c:ed:a6:fd:
                    ed:19:27:2f:ff:e4:62:9b:7b:c4:f4:5f:bd:7f:e9:
                    30:70:2d:41:a5:49:d2:5a:3f:e1:91:cb:bd:94:1f:
                    93:a8:01:e8:d6:bf:1f:2e:d4:97:01:11:4d:37:8d:
                    b5:a4:97:d7:f9:ac:38:42:1f:d1:7a:29:92:73:15:
                    02:99:d7:71:46:49:23:a6:70:d7:af:a3:03:3c:86:
                    d1:c4:6e:84:88:11:10:5c:f0:1c:c9:90:ad:1d:f2:
                    c3:5a:e9:9d:78:e1:76:3f:6a:ba:00:42:94:9c:f7:
                    8e:7c:de:ed:05:8a:3d:b3:1d:13:30:18:8c:3b:bb:
                    81:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:ED:B0:A2:BC:99:92:F4:40:B7:8F:DA:A5:72:5D:BD:6B:D0:24:60
            X509v3 Authority Key Identifier:
                keyid:AC:41:91:AC:3A:1A:93:96:E7:8D:61:2F:37:4D:BA:CC:8F:2D:91:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:20:b0:19:05:39:c6:ad:6e:25:65:0a:09:0b:3b:54:c4:c8:
         fd:b9:f9:37:76:66:e9:77:c6:29:63:af:e1:41:5b:75:f2:e1:
         3a:91:bb:13:33:e6:7f:d5:f0:72:26:6a:48:3f:99:f7:33:64:
         5a:25:46:1e:ed:52:1d:2b:b4:bc:0c:cc:88:dd:e9:d8:b7:44:
         7c:a8:32:21:a7:63:78:77:4a:16:e8:72:07:53:71:9d:e9:79:
         29:9f:02:0c:4d:8c:7d:90:a6:1e:12:59:2c:a9:b0:d7:d6:77:
         92:4c:97:37:1b:80:8f:e7:20:fc:bf:1b:1f:5f:3a:af:57:24:
         7a:2e:af:5c:79:e5:1a:59:f4:b4:c3:e1:dd:ab:e3:9d:63:15:
         9d:f9:26:47:15:1c:85:fc:fa:cb:a2:06:c0:5d:16:8f:e3:da:
         85:b3:c4:f3:b9:76:21:0a:2d:64:02:ba:fd:4b:6e:32:e9:1d:
         88:b0:e9:4a:6f:11:e2:06:05:27:71:1c:85:fb:c6:56:a1:e7:
         0b:fe:77:9c:ba:44:43:c4:74:f6:7f:bf:86:dd:4d:d3:fd:83:
         07:df:fe:fe:ee:a2:6b:53:a8:b6:a9:69:9f:e4:12:28:4b:24:
         e1:d1:89:1d:12:e3:9f:a1:15:17:c0:94:dc:b9:fa:d1:23:1d:
         a1:c4:61:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:37:51 2026 by rpki-client