Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft
File:                     0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft (raw, json)
Hash identifier:          ZBUwlgBBNw2svl5XzrIUnZVonDcMgtk1tBaVwZij6Bo=
Subject key identifier:   30:9F:67:05:A8:F4:51:13:2F:60:38:D0:BE:7F:54:19:79:1C:5B:CE
Authority key identifier: D2:10:22:C0:0F:0D:BB:E5:8A:99:A1:E6:73:D3:AE:1C:5D:FD:CB:89
Certificate issuer:       /CN=A917039B/serialNumber=D21022C00F0DBBE58A99A1E673D3AE1C5DFDCB89
Certificate serial:       03F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hAiwA8Nu-WKmaHmc9OuHF39y4k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft
Manifest number:          03ED
Signing time:             Thu 21 May 2026 00:34:08 +0000
Manifest this update:     Thu 21 May 2026 00:34:07 +0000
Manifest next update:     Thu 28 May 2026 00:34:07 +0000
Files and hashes:         1: 0hAiwA8Nu-WKmaHmc9OuHF39y4k.crl (hash: q80Q51l8EhkDUcXIBHieYl8YFQ2VhN40GpN28Uhq0Dw=)
                          2: A1CB8D62C13411ECA5838429C4F9AE02.roa (hash: Yt0TqJaTmIJd27cHaCbpte8qJaUobmzMaQoo+mme+Sg=)
                          3: A26E4F16C13411ECA5838429C4F9AE02.roa (hash: d2IO53QQHp9HhXVDc1CoUGPFf1YUTdGHgG7B3UV4InA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.crl
                          rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hAiwA8Nu-WKmaHmc9OuHF39y4k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 00:34:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1015 (0x3f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917039B, serialNumber=D21022C00F0DBBE58A99A1E673D3AE1C5DFDCB89
        Validity
            Not Before: May 21 00:34:07 2026 GMT
            Not After : May 28 00:34:07 2026 GMT
        Subject: CN=6a0e5300-cd01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:10:d8:c6:a4:e7:b9:5a:d6:c8:2f:22:f4:16:
                    38:f7:31:9d:4a:75:7b:fe:61:b7:e0:c9:5f:25:c8:
                    45:93:e0:0f:20:72:45:5f:d9:54:21:16:c0:ad:fb:
                    96:24:cf:95:dc:07:b2:a0:46:40:94:ba:a7:ff:31:
                    f8:6e:ae:30:6f:0d:81:76:e2:93:66:ab:24:40:8f:
                    f0:88:7d:32:32:b3:c9:9a:85:1f:2d:47:ec:fe:d2:
                    8a:11:6a:e1:d2:14:f1:a3:f4:4b:6a:2b:9e:cc:e3:
                    6a:7b:b5:6c:c0:aa:fe:8d:07:57:61:f5:c6:59:c1:
                    01:22:07:bf:80:fe:b9:2d:9d:8b:a1:20:34:5b:d0:
                    fd:e3:db:a7:b2:47:0d:0f:e1:28:87:f0:27:76:f2:
                    a9:fc:be:b9:5f:18:5e:62:7b:68:9e:b7:d0:a6:35:
                    2a:27:a6:8d:eb:fb:cb:47:c1:c4:8e:c0:4e:e4:1b:
                    9b:08:7b:cd:a6:44:1c:fb:40:e4:24:81:45:29:c5:
                    f2:89:e9:0d:bb:f2:76:10:7d:85:52:6f:2f:ef:92:
                    71:90:76:31:2a:6b:78:ee:65:9a:36:35:80:12:fa:
                    3b:f4:e3:21:94:fc:0b:f1:2d:27:45:53:27:ba:0e:
                    49:8d:38:b4:5a:11:3d:4f:2f:77:04:72:56:26:7a:
                    81:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:9F:67:05:A8:F4:51:13:2F:60:38:D0:BE:7F:54:19:79:1C:5B:CE
            X509v3 Authority Key Identifier:
                keyid:D2:10:22:C0:0F:0D:BB:E5:8A:99:A1:E6:73:D3:AE:1C:5D:FD:CB:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hAiwA8Nu-WKmaHmc9OuHF39y4k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:1d:40:b0:8f:11:a3:43:84:15:bc:e0:21:a9:3f:0f:ad:b8:
         a7:92:55:fa:2d:3f:26:0c:bf:d9:b7:95:71:b0:89:9b:05:66:
         55:f9:22:8c:f5:78:2c:17:d8:33:12:77:48:24:3b:ea:a9:37:
         69:84:62:1c:43:7b:a0:e7:61:a4:14:db:13:c0:12:f0:61:4c:
         25:fc:94:a1:33:49:94:6f:5d:e4:e1:01:71:d0:91:ec:d5:42:
         04:fd:f9:d8:ac:7f:a4:b6:18:a6:58:50:23:12:f7:88:5c:62:
         39:b8:eb:32:24:b3:25:f1:75:5c:7a:9a:22:0f:ab:99:e8:9c:
         6f:04:2d:c0:20:e8:bb:75:a2:4c:8b:fc:b0:c7:8f:89:ca:97:
         3d:cf:2c:00:c2:af:16:38:f4:d4:7d:28:9c:bd:cc:4d:72:33:
         76:bc:c1:5c:43:c3:67:15:dc:0f:4b:34:9b:07:1f:c9:8f:9f:
         bf:1e:5f:35:83:52:c4:13:77:fa:cf:f0:f9:9a:2e:d5:1e:41:
         dc:24:7a:2d:5c:6f:38:eb:d6:c2:b3:13:c5:0b:6a:e3:7a:6d:
         e7:5d:ac:a0:b1:cd:b2:91:0d:76:bd:d5:cc:38:99:a7:bb:b3:
         0b:75:f3:a2:f0:0e:02:65:66:02:bf:0d:35:ed:48:97:de:e2:
         fd:72:e9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:28:41 2026 by rpki-client