Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.mft
File:                     fJsp8fVuh-6usb90B2lNtO3a1Ts.mft (raw, json)
Hash identifier:          c+6yHfsArbPkLdyPzCBEf1IyaQEvldzIEbNtaM/RwEY=
Subject key identifier:   DD:48:1F:D9:D0:3E:56:8C:6A:06:49:2A:16:A4:B9:68:47:0C:91:7C
Authority key identifier: 7C:9B:29:F1:F5:6E:87:EE:AE:B1:BF:74:07:69:4D:B4:ED:DA:D5:3B
Certificate issuer:       /CN=A9171845/serialNumber=7C9B29F1F56E87EEAEB1BF7407694DB4EDDAD53B
Certificate serial:       0596
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJsp8fVuh-6usb90B2lNtO3a1Ts.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.mft
Manifest number:          058D
Signing time:             Wed 20 May 2026 23:17:53 +0000
Manifest this update:     Wed 20 May 2026 23:17:53 +0000
Manifest next update:     Wed 27 May 2026 23:17:53 +0000
Files and hashes:         1: fJsp8fVuh-6usb90B2lNtO3a1Ts.crl (hash: DHTlAvpVHcB/4xEl1H/Joynxw6Arg1eAV8SKa7kQ+Ck=)
                          2: FE5E15E2216911EC82319078C4F9AE02.roa (hash: g3gsNvkXAeD0LqTvPButkL1dsuXDCkq774OmJJkZZZ8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.crl
                          rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJsp8fVuh-6usb90B2lNtO3a1Ts.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 23:17:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1430 (0x596)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171845, serialNumber=7C9B29F1F56E87EEAEB1BF7407694DB4EDDAD53B
        Validity
            Not Before: May 20 23:17:53 2026 GMT
            Not After : May 27 23:17:53 2026 GMT
        Subject: CN=6a0e4121-1c82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a3:f2:d7:df:77:5b:1c:01:53:0d:cd:22:bd:
                    1d:b8:c9:1d:ba:b7:74:00:b5:40:55:9b:35:b6:e9:
                    c5:19:9a:46:0b:fd:28:a6:30:0b:13:1f:ff:d5:b5:
                    83:0d:e2:aa:0b:4e:68:d7:e6:1c:1f:3c:a5:57:d5:
                    dc:cf:a3:fb:4a:ef:50:b8:83:ae:28:0f:83:f4:86:
                    ee:f8:9d:7d:84:07:57:6f:92:e7:44:a6:a4:26:83:
                    40:6e:39:bf:9d:c6:1f:a8:26:04:74:3c:01:9c:df:
                    18:97:52:dd:0c:81:73:cb:88:3a:5d:8c:20:d2:a6:
                    b2:00:23:27:69:58:0d:7a:f1:7c:66:1d:47:ba:d2:
                    0f:32:fb:9e:9e:4f:3e:29:f0:85:dc:8b:11:e1:e4:
                    1c:16:11:fd:01:2f:00:6f:01:52:4e:31:c6:53:60:
                    d5:31:a8:82:3f:aa:dd:8a:bb:6a:b8:22:a0:c9:46:
                    98:19:b7:fd:bb:2d:62:e6:d7:f5:d3:4f:ac:a8:44:
                    eb:3c:23:25:fc:5a:88:dc:36:c9:52:5b:ae:10:cb:
                    3a:e0:c8:69:c4:09:f5:62:b4:b2:05:25:a4:98:20:
                    f2:2f:a6:59:a6:0d:d6:c3:0f:a8:b7:26:fc:ce:12:
                    b8:2c:4c:01:6c:37:03:b9:72:31:29:bd:d0:24:f1:
                    c4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:48:1F:D9:D0:3E:56:8C:6A:06:49:2A:16:A4:B9:68:47:0C:91:7C
            X509v3 Authority Key Identifier:
                keyid:7C:9B:29:F1:F5:6E:87:EE:AE:B1:BF:74:07:69:4D:B4:ED:DA:D5:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJsp8fVuh-6usb90B2lNtO3a1Ts.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:58:6a:2f:23:65:a3:82:97:5e:6d:de:7a:7e:f4:9e:0a:7c:
         4c:c5:e4:81:1d:9f:41:bb:e9:f4:9a:21:6d:2f:28:19:dd:b7:
         bc:0d:83:0b:2e:7c:00:f3:a2:8d:1c:c2:ca:76:3e:ca:e4:b2:
         33:a2:69:22:a7:5d:44:5a:bb:d5:75:5a:98:0f:c4:d9:2c:3a:
         75:0d:a2:84:1d:07:dc:03:53:4d:75:b4:84:2e:ee:2d:31:3a:
         66:22:6a:7c:55:0b:d2:c7:1e:cb:7b:ce:69:60:e1:79:d7:65:
         14:7a:df:f0:7e:ff:a0:e5:3d:46:54:9a:c2:0b:6b:7b:b1:b8:
         18:2a:64:2c:61:b2:70:37:ea:81:f5:3b:6d:eb:c9:9f:10:54:
         0e:dc:99:67:54:f2:c4:4a:93:4a:0b:3f:94:24:cd:6e:92:16:
         60:00:80:0b:e3:99:f4:af:9d:0c:42:b8:3e:a5:5c:b7:5d:19:
         43:dd:97:6d:bb:ee:e8:7d:7b:e6:ff:a4:d2:c5:8c:a8:0b:81:
         fd:2f:6d:87:94:6c:eb:f8:40:b3:6a:a8:19:2a:f4:e0:07:7e:
         07:6b:40:c7:05:e2:30:dc:7d:63:b4:6b:5c:b8:3e:86:e8:c1:
         0f:c4:cc:30:4b:ca:84:46:00:9d:53:a7:17:97:bc:20:7a:9a:
         9e:b0:87:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 12:20:51 2026 by rpki-client