Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft
File:                     Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft (raw, json)
Hash identifier:          b4qdyU0H28aoMArtH4T16BhisaKPLWP+z0eU5cMs0Cw=
Subject key identifier:   DB:0C:52:0E:CC:CF:89:A8:B5:14:CE:A8:66:5E:C4:F4:D5:EB:51:D4
Authority key identifier: 4E:7E:D9:51:C4:F8:9F:11:F1:94:46:8E:A8:15:44:D7:33:5E:4F:59
Certificate issuer:       /CN=A9176C8F/serialNumber=4E7ED951C4F89F11F194468EA81544D7335E4F59
Certificate serial:       014D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft
Manifest number:          0146
Signing time:             Fri 15 May 2026 05:26:29 +0000
Manifest this update:     Fri 15 May 2026 05:26:28 +0000
Manifest next update:     Fri 22 May 2026 05:26:28 +0000
Files and hashes:         1: Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.crl (hash: YQcC/wkbo3QeHajNFWrV3jrg3utF8UhoENVNLFUz1G0=)
                          2: 4E9597086B5C11EFABB11F60C4F9AE02.roa (hash: xaj9ev9gObxEarMjWAx7hyuUavQ9BGr2NQce4XrNjSg=)
                          3: 43749A72824E11F0A1C4B018C4F9AE02.roa (hash: o9Xs3io38RTaw4LTZVDWVNHdH5+V8NMTsg37SGZ03EY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.crl
                          rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 May 2026 05:26:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 333 (0x14d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176C8F, serialNumber=4E7ED951C4F89F11F194468EA81544D7335E4F59
        Validity
            Not Before: May 15 05:26:28 2026 GMT
            Not After : May 22 05:26:28 2026 GMT
        Subject: CN=6a06ae84-0155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:12:72:ec:a1:45:08:7f:d2:27:37:5c:c9:6b:
                    ad:7e:a3:f3:61:28:23:01:c7:74:25:ba:17:d6:49:
                    77:80:6a:4b:f2:73:88:8e:ac:3d:79:74:99:aa:98:
                    b6:c4:6e:5c:99:b4:f5:ee:2f:e3:30:87:f0:95:6a:
                    1a:b3:fd:26:97:49:a3:38:32:51:70:92:12:71:ee:
                    d8:ee:79:c9:c3:0b:95:6c:35:25:6c:77:bd:7d:d7:
                    c4:71:a5:8c:e7:7b:36:21:c2:eb:10:ae:c8:88:dc:
                    c8:ea:85:19:1b:47:36:6d:00:7c:68:a8:88:4a:68:
                    aa:4b:42:c1:44:c6:2f:e0:d0:62:fb:03:d9:eb:48:
                    c7:08:33:e1:ac:51:ad:d2:35:12:2a:fd:78:45:7c:
                    4d:5f:06:7f:87:25:80:80:ea:2c:d1:2f:f5:1d:86:
                    fd:ca:6d:0d:88:71:da:28:b2:fd:62:3d:91:16:8c:
                    e3:a8:14:29:80:5d:d4:96:41:f9:79:f7:1d:d4:76:
                    f3:7a:f2:04:be:b1:7e:cb:86:35:94:80:9a:a6:69:
                    ea:49:33:73:af:4f:4d:23:a4:1f:d6:c7:97:8f:cf:
                    2c:63:50:3a:c2:0e:18:48:08:a3:9f:14:36:d1:91:
                    8f:f1:80:d6:63:a1:ea:9d:49:aa:25:cc:af:3a:cb:
                    2d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:0C:52:0E:CC:CF:89:A8:B5:14:CE:A8:66:5E:C4:F4:D5:EB:51:D4
            X509v3 Authority Key Identifier:
                keyid:4E:7E:D9:51:C4:F8:9F:11:F1:94:46:8E:A8:15:44:D7:33:5E:4F:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:8f:cc:f6:5c:f7:90:ed:a3:95:68:e9:29:b9:f1:85:9e:2e:
         1a:0d:33:f6:74:36:d1:64:09:86:6a:83:f4:9d:23:fb:1d:3a:
         53:00:9b:aa:30:bc:d6:91:b8:80:2c:6b:11:9a:70:c5:d3:7f:
         6d:45:75:fb:3b:ce:5e:77:64:39:ea:d1:75:77:40:37:ab:92:
         68:0e:ce:b3:43:9d:00:83:ab:16:d7:67:91:db:a8:77:63:a8:
         d1:cf:ae:9a:38:01:14:25:8e:c2:d7:82:66:9e:44:fd:4b:d2:
         4e:93:27:12:ef:47:0c:d1:ce:ab:03:a1:2a:a4:57:0e:8d:ab:
         8b:4c:ef:28:33:88:7a:97:37:59:e9:77:f8:c4:1c:2a:12:73:
         65:38:05:c3:b1:f7:fa:36:e2:33:17:d5:51:c4:98:e9:49:da:
         88:06:d7:20:fc:0b:0a:d9:0a:c7:4a:01:71:2f:6f:07:11:ad:
         9a:d1:56:b5:9b:54:28:48:06:b7:a3:c9:91:28:11:c4:55:80:
         d1:da:af:b2:8a:e7:87:0d:87:c7:0e:c2:57:d8:8c:15:a4:cc:
         c9:ec:9f:3f:e7:36:ef:3f:63:72:14:e2:9d:4f:ab:0c:c6:e3:
         77:62:69:5f:7c:77:2e:3c:90:78:ad:d6:e3:00:75:76:41:2e:
         51:26:75:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 23:30:39 2026 by rpki-client