Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.mft
File:                     A0iYvB-xsaJGF6zZvIMq6D6vni0.mft (raw, json)
Hash identifier:          SD5ZWkL9emcZuAbA4hnZ+FK1V4ZR2RrTNd1Uu5cHQfw=
Subject key identifier:   AB:6E:CD:4D:C8:B9:7F:3F:5C:2D:FF:9A:06:B7:31:E3:FA:42:34:68
Authority key identifier: 03:48:98:BC:1F:B1:B1:A2:46:17:AC:D9:BC:83:2A:E8:3E:AF:9E:2D
Certificate issuer:       /CN=A918D727/serialNumber=034898BC1FB1B1A24617ACD9BC832AE83EAF9E2D
Certificate serial:       020E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0iYvB-xsaJGF6zZvIMq6D6vni0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.mft
Manifest number:          0209
Signing time:             Thu 21 May 2026 03:04:01 +0000
Manifest this update:     Thu 21 May 2026 03:04:00 +0000
Manifest next update:     Thu 28 May 2026 03:04:00 +0000
Files and hashes:         1: A0iYvB-xsaJGF6zZvIMq6D6vni0.crl (hash: PHOtAqwWkMpVV5rk+JKnUZctesfQhGTDUtaLgeWY6jU=)
                          2: A7E3DAB237FB11EEBB03FD6CC4F9AE02.roa (hash: 9g+cXzlenM5QdNB0vC6zwv+Sc4F3maBeP/ANCVxlI0k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.crl
                          rsync://rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0iYvB-xsaJGF6zZvIMq6D6vni0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 03:04:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 526 (0x20e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D727, serialNumber=034898BC1FB1B1A24617ACD9BC832AE83EAF9E2D
        Validity
            Not Before: May 21 03:04:00 2026 GMT
            Not After : May 28 03:04:00 2026 GMT
        Subject: CN=6a0e7621-564c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:57:5c:14:bf:76:36:62:35:48:8c:1d:7a:03:
                    97:b3:e1:41:7f:7d:5a:ab:7f:54:2a:5c:61:30:94:
                    e4:c8:20:63:78:36:10:cb:25:a2:7e:47:c3:95:20:
                    74:72:9a:99:ec:78:8e:16:2d:6b:e9:2c:1d:eb:5c:
                    38:73:de:68:24:f0:cc:79:f4:12:4e:b2:5b:7e:64:
                    2c:4d:be:f5:68:58:5e:d5:09:4b:33:ba:2c:37:c4:
                    28:11:c3:5a:28:18:a0:e2:85:9f:5a:15:b6:29:0a:
                    14:8b:84:a1:4e:88:9b:7d:e7:34:38:51:8c:52:31:
                    c0:d5:27:46:8f:dd:10:36:82:c6:9b:64:df:9e:79:
                    32:f3:d1:2b:64:66:bf:5d:75:1a:3a:71:dc:22:42:
                    73:9a:5f:bd:29:b6:17:35:a1:c6:81:d1:63:38:8c:
                    9e:6a:8d:77:7d:ce:89:8d:62:18:de:38:db:62:30:
                    40:94:e6:d4:e8:4e:6d:83:a2:e6:8b:4f:ee:e0:63:
                    c2:12:d8:f0:0c:b6:e1:a1:12:ce:60:56:22:bc:ca:
                    1c:ab:a9:65:59:46:e0:43:b8:88:43:a5:92:5c:2e:
                    73:51:ac:a3:ef:03:a3:16:a8:43:ca:79:d2:e2:9a:
                    6f:f0:33:c8:1d:27:72:98:95:21:95:71:47:bf:c6:
                    76:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:6E:CD:4D:C8:B9:7F:3F:5C:2D:FF:9A:06:B7:31:E3:FA:42:34:68
            X509v3 Authority Key Identifier:
                keyid:03:48:98:BC:1F:B1:B1:A2:46:17:AC:D9:BC:83:2A:E8:3E:AF:9E:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0iYvB-xsaJGF6zZvIMq6D6vni0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:f6:8b:16:1e:7f:8e:aa:75:f7:21:f2:78:c7:f7:84:ef:08:
         13:9e:9f:77:90:38:7b:d1:1c:4e:99:39:e6:f5:8d:38:f1:3b:
         31:75:22:d1:af:8e:be:0e:12:09:f4:81:4b:94:2a:39:0c:bb:
         0b:70:5d:4c:f3:fe:b3:b9:39:b6:18:e6:54:f2:79:5d:80:6f:
         63:9d:a5:48:a4:f3:79:c1:c9:52:cf:50:e5:94:01:30:d3:06:
         37:3f:7a:72:91:b4:5b:e4:78:23:d0:ac:61:dc:a5:9d:94:9a:
         c0:97:56:45:b0:9c:47:ce:e1:29:fd:cd:9e:b0:99:79:38:55:
         ca:a4:92:68:ac:7f:39:e9:f3:3e:f1:ed:ae:09:70:ff:33:90:
         2a:3b:26:97:9e:da:b7:e3:62:88:62:c8:e9:00:b7:4d:9c:0c:
         7b:aa:a5:a2:bd:ce:41:47:26:56:f7:60:99:99:f7:cf:a2:fa:
         87:79:02:9c:e1:c8:cb:e1:23:cf:9b:0c:c5:ad:05:f0:10:fd:
         3a:9f:dd:94:e2:9e:2a:c7:2e:1d:68:74:b9:a8:45:63:96:2d:
         cc:77:18:24:bf:65:7c:4c:77:ca:1c:e1:50:b6:29:96:0f:46:
         c2:81:15:ed:b7:a1:f1:2c:6b:67:89:c9:d1:c7:ee:d3:1c:fe:
         28:8b:40:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:38:24 2026 by rpki-client