Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.mft
File:                     k0_yOzjsbVimyqtwe3lVUcicMf0.mft (raw, json)
Hash identifier:          s5lqlkCS9J5G9SADEVWRyf2T4ObL84M6+r/ttuw2plI=
Subject key identifier:   31:9A:1D:46:86:4D:30:C0:30:BB:E4:BA:06:B0:E1:EA:31:AE:51:05
Authority key identifier: 93:4F:F2:3B:38:EC:6D:58:A6:CA:AB:70:7B:79:55:51:C8:9C:31:FD
Certificate issuer:       /CN=A917392B/serialNumber=934FF23B38EC6D58A6CAAB707B795551C89C31FD
Certificate serial:       052F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0_yOzjsbVimyqtwe3lVUcicMf0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.mft
Manifest number:          0528
Signing time:             Wed 20 May 2026 23:36:59 +0000
Manifest this update:     Wed 20 May 2026 23:36:59 +0000
Manifest next update:     Wed 27 May 2026 23:36:59 +0000
Files and hashes:         1: k0_yOzjsbVimyqtwe3lVUcicMf0.crl (hash: /lKIBr4E8qpqtudFmjMFcK25GAzJfKt3z1Tn3BxiwN4=)
                          2: B7BE1DAC482511ECA1A68F13C4F9AE02.roa (hash: SOuuEngzMzJn6tRotSYMuHwkZUu/qid4gvYTernifnc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.crl
                          rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0_yOzjsbVimyqtwe3lVUcicMf0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 23:36:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1327 (0x52f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917392B, serialNumber=934FF23B38EC6D58A6CAAB707B795551C89C31FD
        Validity
            Not Before: May 20 23:36:59 2026 GMT
            Not After : May 27 23:36:59 2026 GMT
        Subject: CN=6a0e459b-fe5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:49:2d:36:19:0f:6b:a3:b7:43:d9:eb:f3:ff:
                    d6:c4:39:b9:e8:8a:64:ba:ec:1a:86:ae:4b:83:6d:
                    88:87:e5:68:d9:da:3a:10:86:52:b4:ff:e2:8c:bd:
                    23:d9:b0:c1:3c:fb:0e:88:f0:02:2c:49:8e:e9:4b:
                    11:33:07:ba:a9:03:8a:12:a9:cc:59:b7:43:b6:59:
                    0d:83:15:22:d5:4d:0a:f9:b6:4e:2d:a1:5a:86:26:
                    06:07:ef:2c:1d:25:c1:d4:ca:30:33:21:77:df:c9:
                    38:a9:22:10:3d:14:ce:25:dc:11:53:fc:ec:67:cd:
                    d4:5a:16:d4:b2:3a:32:87:f8:4f:15:16:1f:25:2d:
                    ef:9d:0a:d1:54:0f:09:82:f4:29:f4:00:88:4d:43:
                    c2:dc:d9:15:4f:9e:d2:6a:e7:ae:2b:91:02:9c:d6:
                    dc:34:7e:7e:c3:4d:2a:c0:b1:24:5d:bb:ce:f6:7e:
                    a8:81:85:5c:b4:e0:a7:3f:55:0f:48:41:9d:51:02:
                    69:cb:06:5c:5a:b2:1f:55:9e:3d:e5:81:24:03:e5:
                    c8:e7:1c:09:c8:b3:44:6b:96:c4:7e:04:57:82:ed:
                    c6:68:e4:08:d8:f8:5a:24:7b:94:0e:f4:a3:a5:25:
                    06:b5:8e:c4:ab:b3:2f:40:d3:7a:1c:13:34:0f:7e:
                    88:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:9A:1D:46:86:4D:30:C0:30:BB:E4:BA:06:B0:E1:EA:31:AE:51:05
            X509v3 Authority Key Identifier:
                keyid:93:4F:F2:3B:38:EC:6D:58:A6:CA:AB:70:7B:79:55:51:C8:9C:31:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0_yOzjsbVimyqtwe3lVUcicMf0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:a0:1b:bc:f4:48:e0:fd:b1:48:78:d3:9c:80:c5:6e:24:39:
         5b:47:02:68:68:2c:10:d7:38:dd:58:e3:ef:ce:44:d3:5b:a8:
         28:ee:a3:c1:31:51:41:4d:a2:b5:d8:28:f4:86:5a:5f:4b:12:
         9b:5e:12:5f:da:38:f7:13:3f:ca:fd:af:35:fd:d6:6e:40:9d:
         b7:93:34:45:ef:0a:d2:a8:ff:31:7b:77:51:33:a4:7a:d2:77:
         7b:d0:c0:be:f4:5a:e0:f1:55:63:d7:fa:6f:25:00:56:85:30:
         37:cc:ce:e3:7c:9f:ad:df:0f:1f:a3:90:aa:44:00:b1:ff:f1:
         bd:06:f4:c8:40:41:75:c0:28:7d:ce:2f:da:cb:2f:85:ce:73:
         eb:0e:98:00:15:c5:8f:c4:80:a5:87:f9:05:b0:20:62:34:3e:
         e1:0b:b0:9c:f0:05:c0:b0:96:6a:8f:a2:7a:bb:76:ca:4a:09:
         8a:b3:14:9e:24:31:8e:43:4b:82:70:a2:a0:ef:db:a3:39:e5:
         93:0e:c1:34:cd:28:28:d2:0e:98:87:9e:58:0a:06:bd:05:3e:
         0f:c4:05:86:fa:c0:79:29:75:cc:67:62:3e:54:a9:78:2b:8a:
         aa:6f:1b:43:e9:b3:7d:39:e9:3d:6b:eb:20:6c:d5:d9:a4:3d:
         2f:57:57:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:52 2026 by rpki-client