Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.mft
File:                     _PdT00aqq5WrFMYmdRXN8T-A-7s.mft (raw, json)
Hash identifier:          9m+33MgENB4+aQ0ibxYSGr2zt3UioySFnDn9DzdbNgo=
Subject key identifier:   BF:20:2B:89:FE:E3:E8:61:2F:B1:8E:E9:86:7D:28:91:2D:60:3D:84
Authority key identifier: FC:F7:53:D3:46:AA:AB:95:AB:14:C6:26:75:15:CD:F1:3F:80:FB:BB
Certificate issuer:       /CN=A9179F22/serialNumber=FCF753D346AAAB95AB14C6267515CDF13F80FBBB
Certificate serial:       01F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_PdT00aqq5WrFMYmdRXN8T-A-7s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.mft
Manifest number:          01DF
Signing time:             Thu 21 May 2026 03:40:59 +0000
Manifest this update:     Thu 21 May 2026 03:40:58 +0000
Manifest next update:     Thu 28 May 2026 03:40:58 +0000
Files and hashes:         1: _PdT00aqq5WrFMYmdRXN8T-A-7s.crl (hash: WkO2c/F6bPnYLQ43SPUfUXvAP2qaEXnzUrGXJwRkjxo=)
                          2: 4120F6A28F3011EEA61ACF62C4F9AE02.roa (hash: vlIQijSPBbvP9L65iKqCctaPnA/4JGm7yNBkYuL1NNg=)
                          3: 41969D1C8F3011EEA61ACF62C4F9AE02.roa (hash: gg1NxyOoVbC4W+3Hh9sYPb23rvpu8aUKKSd8lTa2xx4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.crl
                          rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_PdT00aqq5WrFMYmdRXN8T-A-7s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 03:40:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 497 (0x1f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179F22, serialNumber=FCF753D346AAAB95AB14C6267515CDF13F80FBBB
        Validity
            Not Before: May 21 03:40:58 2026 GMT
            Not After : May 28 03:40:58 2026 GMT
        Subject: CN=6a0e7ecb-c2cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b4:ed:dd:e5:85:3f:fb:8e:74:f9:76:a2:71:
                    1d:61:e5:00:00:88:8f:e9:21:fd:d2:f3:f9:c5:8a:
                    41:fa:96:ae:88:60:8e:b6:c1:3e:fa:bd:e8:91:5e:
                    ea:b0:37:d2:3d:5b:89:b6:59:9c:f6:c6:09:74:0c:
                    91:d1:db:07:fd:89:7e:e3:67:46:56:85:e6:1c:7e:
                    26:82:45:4c:76:d7:b6:d4:bc:ad:62:ee:b1:d1:24:
                    57:c2:0f:48:ba:23:96:a7:08:d8:56:a2:41:b4:88:
                    7b:d1:55:c3:e6:62:96:a2:b8:02:f7:3f:ba:42:dc:
                    35:80:15:86:98:30:bc:11:67:31:f7:6c:2d:f3:c4:
                    ad:11:79:71:20:1f:b5:a5:03:5b:33:41:46:68:37:
                    c2:e8:6b:6c:2d:41:c3:a9:8b:6d:1e:1c:d5:a5:46:
                    df:af:b3:57:9c:21:3c:a1:81:1a:34:58:ab:30:1c:
                    56:3a:7b:3b:a1:df:7e:43:e0:02:bb:a5:99:00:d3:
                    f7:95:7a:26:86:51:0f:09:d2:df:8e:aa:98:f6:e0:
                    70:27:c2:b9:1a:a9:d2:13:cc:c9:6b:8b:7f:7d:64:
                    82:51:3e:1b:1f:44:c5:f2:9a:0e:b3:a2:eb:38:db:
                    90:bc:17:4a:b6:69:e8:83:fe:05:82:32:c3:5e:9b:
                    71:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:20:2B:89:FE:E3:E8:61:2F:B1:8E:E9:86:7D:28:91:2D:60:3D:84
            X509v3 Authority Key Identifier:
                keyid:FC:F7:53:D3:46:AA:AB:95:AB:14:C6:26:75:15:CD:F1:3F:80:FB:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_PdT00aqq5WrFMYmdRXN8T-A-7s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:8e:6c:45:86:da:d5:b0:e7:d5:e0:a2:34:28:d9:d5:e4:15:
         62:a4:c4:d8:4f:d3:88:d1:51:aa:c3:d7:8f:64:d7:92:dc:ef:
         b1:e9:d5:b8:ad:10:f8:34:db:6f:75:ca:36:ee:e9:8b:0f:44:
         0a:fc:bb:05:68:0d:bf:2b:b4:af:97:d1:14:71:70:84:6a:54:
         04:8b:8f:62:c5:6e:83:75:3d:10:3f:32:60:28:88:25:a8:dd:
         e2:a1:17:65:3e:24:f6:9f:c1:d5:97:98:5a:87:04:34:99:95:
         d7:bb:23:15:87:a7:c1:33:2a:ec:68:27:4c:2a:04:89:bf:29:
         2f:61:e8:6f:be:a4:97:39:16:b6:b7:42:62:25:70:83:52:47:
         27:b4:12:ea:ec:20:75:bc:34:20:9e:72:50:55:78:9d:77:4a:
         14:e7:29:df:e7:57:f7:2e:82:42:d1:e3:96:24:bf:07:f6:a6:
         5e:89:64:6d:e0:07:7f:42:e2:d4:18:cc:34:61:bc:79:7c:29:
         8f:15:51:de:e1:c1:5b:fa:42:6c:ca:f1:5f:c5:4b:c5:9e:81:
         d4:28:ca:8f:6b:7d:bf:3f:1b:66:2b:ec:35:88:84:2a:50:c3:
         5b:19:0d:03:b8:fa:f2:a2:b5:1f:68:28:40:8a:fc:03:89:58:
         a6:53:a5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:09:48 2026 by rpki-client