Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D6BA/D21F35EC4B5D11F195097115AF833773/05gN65FABIn5D_5q7xfErdhrEh0.mft
File:                     05gN65FABIn5D_5q7xfErdhrEh0.mft (raw, json)
Hash identifier:          bvJ/ls90N5QgzqqBkNxYjCFuC08W6ktxt7vHxl8oN04=
Subject key identifier:   8E:ED:88:08:A6:90:70:51:D4:7E:7E:39:4C:8A:A1:37:FC:C5:DE:38
Authority key identifier: D3:98:0D:EB:91:40:04:89:F9:0F:FE:6A:EF:17:C4:AD:D8:6B:12:1D
Certificate issuer:       /CN=A916D6BA/serialNumber=D3980DEB91400489F90FFE6AEF17C4ADD86B121D
Certificate serial:       09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05gN65FABIn5D_5q7xfErdhrEh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D6BA/D21F35EC4B5D11F195097115AF833773/05gN65FABIn5D_5q7xfErdhrEh0.mft
Manifest number:          08
Signing time:             Thu 21 May 2026 09:19:36 +0000
Manifest this update:     Thu 21 May 2026 09:19:36 +0000
Manifest next update:     Thu 28 May 2026 09:19:36 +0000
Files and hashes:         1: 05gN65FABIn5D_5q7xfErdhrEh0.crl (hash: rw5qiv06S8ktqnR942l9tWhpyp1nfCySFCLe/1sJTj4=)
                          2: 990DC3124B5E11F1A334296EAF833773.roa (hash: ZrU1yEE9T1CVij7RmKAnUigJhTMs5XRxyKi/FLpZjq8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D6BA/D21F35EC4B5D11F195097115AF833773/05gN65FABIn5D_5q7xfErdhrEh0.crl
                          rsync://rpki.apnic.net/member_repository/A916D6BA/D21F35EC4B5D11F195097115AF833773/05gN65FABIn5D_5q7xfErdhrEh0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05gN65FABIn5D_5q7xfErdhrEh0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 09:09:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D6BA, serialNumber=D3980DEB91400489F90FFE6AEF17C4ADD86B121D
        Validity
            Not Before: May 21 09:19:36 2026 GMT
            Not After : May 28 09:19:36 2026 GMT
        Subject: CN=6a0ece28-d31e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b4:bc:18:99:ad:d4:6b:65:c3:96:6c:cf:41:
                    f8:09:48:8c:5e:7f:0f:46:9b:7e:df:71:11:2d:06:
                    a6:b7:15:be:e6:7b:77:ef:81:49:a9:03:e4:67:c9:
                    bd:99:c2:40:02:ca:8b:40:18:10:e8:2e:0a:5e:05:
                    22:34:b0:63:e2:31:59:a8:ab:63:9d:18:a1:17:2c:
                    30:5d:33:33:2f:39:40:04:fe:c2:c4:b2:fe:b5:fc:
                    74:47:9d:1c:2b:fd:2e:7e:e6:58:ab:34:75:1b:75:
                    48:a4:11:7d:35:94:8b:3e:61:66:fa:48:a9:2c:ca:
                    02:02:dd:07:69:ca:ac:23:97:11:22:c0:c6:a9:31:
                    f4:77:51:ea:6e:3c:ec:40:d4:d2:7d:70:a1:d5:54:
                    f6:30:12:dc:11:cf:5f:48:cf:18:a9:9d:74:c7:37:
                    50:af:5c:13:b9:2e:5b:b1:b7:e9:bf:50:53:ea:ed:
                    de:8b:4a:c3:e3:04:7b:9a:7b:1c:14:f3:fc:d2:29:
                    30:26:c2:3e:00:ef:60:c4:43:96:0d:e0:04:cc:63:
                    92:6f:05:90:06:15:f4:64:06:52:74:23:82:da:cc:
                    3f:b7:06:e9:cd:01:3f:68:31:79:49:ea:d0:00:cf:
                    71:8a:54:6f:6a:67:76:f8:0a:88:7e:52:33:ae:f9:
                    8c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:ED:88:08:A6:90:70:51:D4:7E:7E:39:4C:8A:A1:37:FC:C5:DE:38
            X509v3 Authority Key Identifier:
                keyid:D3:98:0D:EB:91:40:04:89:F9:0F:FE:6A:EF:17:C4:AD:D8:6B:12:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D6BA/D21F35EC4B5D11F195097115AF833773/05gN65FABIn5D_5q7xfErdhrEh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05gN65FABIn5D_5q7xfErdhrEh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D6BA/D21F35EC4B5D11F195097115AF833773/05gN65FABIn5D_5q7xfErdhrEh0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:4e:aa:22:0a:b1:e8:a4:1b:d6:21:75:1d:ed:31:2e:8d:e2:
         91:aa:3d:7e:5e:59:c2:c3:58:a1:f8:3d:f9:a3:5a:a3:f3:58:
         14:cc:03:94:33:cb:29:4e:0c:84:55:b3:e8:56:4f:d8:81:65:
         e2:2c:77:e3:76:8a:63:5b:45:f4:4c:74:db:74:d6:e7:ea:a0:
         06:9d:a9:86:b5:cd:8f:5f:d7:af:2a:39:6e:25:18:50:67:dc:
         8b:ad:bd:55:3f:9d:bd:60:f8:70:ec:b3:f4:d6:c2:7c:17:23:
         28:f5:b8:a7:ff:dc:38:0b:a7:bc:c1:45:e0:56:a0:82:04:30:
         21:04:8f:84:8a:5b:92:94:6e:93:05:90:85:fe:88:02:46:83:
         91:c0:dd:04:74:a1:be:8f:82:cc:f5:22:60:d9:90:20:6b:52:
         0b:64:a8:c7:bd:64:fd:73:34:9f:af:6e:00:ba:e7:1e:a2:8d:
         b2:b4:b6:43:7d:4e:b4:5c:13:c4:a0:43:9c:27:16:56:02:9a:
         83:e7:32:6b:2c:72:5f:51:cb:15:4e:77:9e:3b:b0:ce:28:dd:
         d1:f6:0d:de:3f:75:21:62:a9:6a:d3:95:d4:3d:37:ef:94:3d:
         1d:3d:ff:24:62:78:8e:ca:16:cb:d0:7c:84:1e:ce:43:75:cd:
         8a:56:af:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 12:23:07 2026 by rpki-client