Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft
File:                     Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft (raw, json)
Hash identifier:          JDrlxxXskVMCMTL5u11YevHcrs6PCeNDs6THpSVryzE=
Subject key identifier:   BC:D8:90:F4:4D:07:84:23:04:C8:8F:01:2A:C9:22:FA:94:4A:78:A9
Authority key identifier: 32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D
Certificate issuer:       /CN=A917FA93/serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D
Certificate serial:       2445
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft
Manifest number:          23FD
Signing time:             Wed 06 May 2026 15:46:53 +0000
Manifest this update:     Wed 06 May 2026 15:46:53 +0000
Manifest next update:     Wed 13 May 2026 15:46:53 +0000
Files and hashes:         1: Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl (hash: KDaDM5Xy9+/f2MdL/8nip1Y/cE/7GVlYhy0uc3DZnNI=)
                          2: 4707F6CCB10F11E5A010921EC4F9AE02.roa (hash: JCPrD1uQLa6mO5UGYsREbdubhZ0qd7uDKpV9IJX0e5I=)
                          3: 4800F752477911F19E56FD3F95833773.roa (hash: nKprgXFIoFtiYaag6EoueAF9e18RWxQbnixS8TTrznA=)
                          4: 459A5D3EB10F11E5A010921EC4F9AE02.roa (hash: /9d5ufwGgNQ7zM38tyk/+4Sfdq1zdYvG1O4jWxq8U+M=)
                          5: 44059B50B10F11E5A010921EC4F9AE02.roa (hash: Vbmmu23AlBObytRTwt9j6G8iDN7Sx1IFw16gH03FE0E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl
                          rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 15:46:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9285 (0x2445)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917FA93, serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D
        Validity
            Not Before: May  6 15:46:53 2026 GMT
            Not After : May 13 15:46:53 2026 GMT
        Subject: CN=69fb626d-6fe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6a:4c:15:eb:35:77:db:d0:35:b2:15:8c:1f:
                    ba:a9:a9:4a:0f:5f:a9:0b:d8:32:92:1e:08:ae:67:
                    1f:3d:e2:1d:b6:fc:65:05:aa:6d:31:d9:8e:8e:01:
                    bf:c1:b7:f4:70:f2:26:8d:70:6b:ec:ae:5e:46:26:
                    0e:e7:1d:b4:7e:b3:37:43:58:f3:c2:c5:ce:6a:48:
                    f4:06:38:a2:da:b8:70:4d:3d:85:32:95:a4:73:64:
                    e2:3a:7b:9d:96:95:4e:b0:91:d6:56:80:fc:61:ce:
                    0e:ad:04:a8:a8:4b:fe:0a:21:86:2e:b0:26:4d:71:
                    8a:99:fb:3d:e5:a8:5b:68:ae:01:49:a8:e4:cc:93:
                    d2:a7:14:38:ef:b9:45:0a:b8:f2:cb:a1:17:02:9f:
                    86:a7:01:85:22:77:40:5d:84:ac:18:d0:d4:c2:96:
                    c5:a5:73:9b:d7:04:e2:c0:ce:7d:29:41:e5:d6:96:
                    7e:94:0b:a2:97:d3:4f:8e:4d:9b:38:46:bb:74:da:
                    7a:e6:4b:3c:56:7c:16:60:c9:95:49:ad:ce:e4:f1:
                    96:a5:54:26:58:e7:c2:2b:81:c2:8b:29:7f:6a:94:
                    90:b5:2a:6f:cf:28:75:89:8c:58:96:cb:25:1d:34:
                    70:bf:1a:83:4e:d5:a9:5c:ba:a0:37:97:f1:cb:09:
                    73:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D8:90:F4:4D:07:84:23:04:C8:8F:01:2A:C9:22:FA:94:4A:78:A9
            X509v3 Authority Key Identifier:
                keyid:32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:35:a9:20:63:1b:fa:fd:4b:5b:e8:f2:eb:68:fb:66:8d:e1:
         12:15:c3:29:21:32:61:85:4f:7a:75:08:78:b1:83:fe:bb:8d:
         9b:24:bf:11:70:fd:08:74:30:ca:6c:14:23:9d:c6:29:d2:5e:
         bd:e1:81:d7:20:cc:70:a0:93:14:ea:5d:56:b3:f6:77:b1:63:
         f7:7b:55:aa:5b:34:c5:bc:51:d2:79:b9:d2:e7:c7:36:aa:ab:
         e3:bd:30:d3:a8:55:cb:32:5c:ef:74:27:d6:79:39:bd:6f:05:
         d3:51:01:2b:64:24:2e:a9:dc:40:77:87:ef:28:8f:f3:a6:a6:
         4a:0a:ff:06:c8:fe:3b:a3:58:11:87:09:17:55:be:ee:3e:fd:
         28:42:98:5e:e0:ef:eb:f5:a1:d2:4d:c3:c2:79:61:79:3d:33:
         f5:fc:93:7a:21:e7:0c:97:13:d4:5f:8d:1c:08:55:16:8b:65:
         45:c6:da:8e:7e:2f:17:a2:a8:bd:44:06:b7:f5:ed:ab:45:0b:
         1f:11:85:30:88:6f:a8:d8:84:a7:0f:16:3a:c0:9d:c8:07:98:
         6c:ba:ee:74:af:89:67:c0:ce:9a:96:d3:8c:76:68:20:e1:64:
         88:26:18:ef:eb:e4:9b:8e:93:c4:f9:ef:f9:08:0d:42:7d:9e:
         f7:8a:e2:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 23:52:51 2026 by rpki-client