Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft
File:                     czPiYYsz1lD-GNg_eCVFwj1PWp4.mft (raw, json)
Hash identifier:          9byveESCblUytg3PMfw7y0GAWxQzxO9wCmQJIt2JhIA=
Subject key identifier:   B3:21:05:47:E7:F9:BD:66:6B:09:5C:E3:C3:C1:29:E6:82:D7:1F:B2
Authority key identifier: 73:33:E2:61:8B:33:D6:50:FE:18:D8:3F:78:25:45:C2:3D:4F:5A:9E
Certificate issuer:       /CN=A918098B/serialNumber=7333E2618B33D650FE18D83F782545C23D4F5A9E
Certificate serial:       0D14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft
Manifest number:          0D09
Signing time:             Wed 20 May 2026 18:11:18 +0000
Manifest this update:     Wed 20 May 2026 18:11:17 +0000
Manifest next update:     Wed 27 May 2026 18:11:17 +0000
Files and hashes:         1: czPiYYsz1lD-GNg_eCVFwj1PWp4.crl (hash: KSkX9zznGnQua8g6geI5WdgC7zaQ1HS606MANxcv4ps=)
                          2: 0C1D4BF8038F11EA82150D4AC4F9AE02.roa (hash: P1ioyOhHYSe5vrV+nsOcBMRyefJ8DwpbFXIw1wGtzrQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.crl
                          rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 18:11:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3348 (0xd14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918098B, serialNumber=7333E2618B33D650FE18D83F782545C23D4F5A9E
        Validity
            Not Before: May 20 18:11:17 2026 GMT
            Not After : May 27 18:11:17 2026 GMT
        Subject: CN=6a0df946-4741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:72:46:fe:76:c3:ff:1a:64:1d:29:bd:fa:fc:
                    96:ac:34:75:79:cb:ae:d5:23:62:33:8f:e7:e4:ae:
                    2f:7e:57:bd:c5:17:fe:1d:00:29:e9:1f:17:35:8e:
                    8c:3a:30:d1:c4:c5:75:01:a0:a6:f8:2d:08:e4:a5:
                    71:00:d8:50:75:b1:80:15:5b:5c:a0:50:f0:f4:c6:
                    51:47:52:f6:cd:ed:af:12:5b:67:57:4f:cd:43:da:
                    6d:9b:76:b1:8e:02:95:12:ab:06:08:82:f5:f4:5d:
                    3a:ea:83:d9:08:32:cb:dc:d4:e6:ee:7a:40:3e:2e:
                    44:74:c1:ff:f4:b6:0a:4b:d2:ed:e6:80:f6:2f:42:
                    c1:d8:2b:35:8f:6b:5f:8f:41:b8:08:00:5b:ec:80:
                    45:e6:22:45:0b:a8:2d:e5:77:3a:f1:13:ab:39:46:
                    f5:45:b2:c8:fd:b6:35:21:80:3e:8a:14:e4:16:40:
                    16:48:85:25:6b:73:52:fa:f0:9d:c8:4f:07:ab:ad:
                    b4:3d:31:e8:f0:15:34:c7:4e:4d:5e:d6:54:8d:3c:
                    21:dd:b4:4d:7e:52:e0:63:8c:cd:19:5c:41:19:03:
                    8f:90:8d:33:1b:6a:47:00:e7:4a:37:88:65:ee:dd:
                    4b:fa:05:07:4a:e3:8d:8f:a7:88:18:a2:4f:9a:92:
                    c3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:21:05:47:E7:F9:BD:66:6B:09:5C:E3:C3:C1:29:E6:82:D7:1F:B2
            X509v3 Authority Key Identifier:
                keyid:73:33:E2:61:8B:33:D6:50:FE:18:D8:3F:78:25:45:C2:3D:4F:5A:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:00:14:3b:11:c3:31:61:72:84:d8:5e:96:68:63:f1:12:16:
         83:6a:ec:57:45:2e:3b:3d:d5:ab:c2:d3:14:8b:7c:17:7e:ac:
         b0:c1:bd:3d:4d:65:5a:b3:62:55:f9:b7:d9:67:cd:54:cf:16:
         e4:eb:5a:c3:fe:13:11:47:0d:f9:4c:b5:ce:d7:15:e5:b0:fe:
         48:10:de:06:c6:c4:12:06:e9:3b:4e:3d:f6:c5:86:e8:c9:b9:
         ea:86:28:43:f8:59:1e:7e:43:0f:bb:a2:7a:b8:de:fe:aa:82:
         b6:45:9b:ea:66:ea:73:2b:16:22:69:a2:6f:4b:12:86:d1:d7:
         f7:40:c8:1b:55:2b:0a:0d:ea:b5:3d:86:e5:aa:e1:03:f3:4b:
         8e:58:d8:7d:65:ce:da:fd:e1:86:1e:7d:8c:3c:14:3a:bc:49:
         af:72:37:ee:24:e0:0d:84:1b:f4:95:d6:de:3c:81:9a:b5:c6:
         0f:6a:67:56:c6:ee:14:ad:00:33:3f:33:53:80:2d:41:fb:b0:
         23:47:f1:9b:eb:23:76:23:02:94:13:12:69:f6:73:ac:ac:20:
         f8:05:91:41:d8:32:fb:1a:e6:d6:18:60:34:bd:6f:3f:1c:75:
         c6:4a:a0:72:52:04:69:72:04:ca:98:d9:8c:5f:47:07:ba:1f:
         d0:d0:23:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:54:40 2026 by rpki-client