Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft
File:                     aNpOhaeYSz_RCu80x9HQDxtGRTE.mft (raw, json)
Hash identifier:          Y0ObxWndh1f85ktdrRNKFOG0iH8tcz/93F708gcnBUg=
Subject key identifier:   20:C4:DE:E0:EA:3A:A4:A9:74:31:DA:5D:22:82:77:F5:7A:8B:37:3D
Authority key identifier: 68:DA:4E:85:A7:98:4B:3F:D1:0A:EF:34:C7:D1:D0:0F:1B:46:45:31
Certificate issuer:       /CN=A918D931/serialNumber=68DA4E85A7984B3FD10AEF34C7D1D00F1B464531
Certificate serial:       0860
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNpOhaeYSz_RCu80x9HQDxtGRTE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft
Manifest number:          0857
Signing time:             Sun 31 May 2026 21:25:21 +0000
Manifest this update:     Sun 31 May 2026 21:25:21 +0000
Manifest next update:     Sun 07 Jun 2026 21:25:21 +0000
Files and hashes:         1: aNpOhaeYSz_RCu80x9HQDxtGRTE.crl (hash: lkLvcos5aAcLHRV4G1ZJAx8coN2OOXDDLHv2gasO+MQ=)
                          2: F575D65A085A11EBA6864D71C4F9AE02.roa (hash: 0tPpCFmY2RtQMNi50P1oO91h+coSEhJnlpMk0tERKfA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.crl
                          rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNpOhaeYSz_RCu80x9HQDxtGRTE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Jun 2026 21:25:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2144 (0x860)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D931, serialNumber=68DA4E85A7984B3FD10AEF34C7D1D00F1B464531
        Validity
            Not Before: May 31 21:25:21 2026 GMT
            Not After : Jun  7 21:25:21 2026 GMT
        Subject: CN=6a1ca741-47b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:98:dc:45:33:91:66:92:a2:26:06:ec:e9:47:
                    b1:b7:6e:c1:ee:06:53:e1:e2:8e:2e:ee:06:8c:13:
                    2d:26:3f:ee:df:fa:19:0b:70:d4:51:d3:4f:30:be:
                    80:97:24:fd:19:10:9f:6a:f4:05:4c:92:54:62:7d:
                    31:86:c0:66:90:f1:e6:be:da:a0:2d:53:9c:ec:4e:
                    40:94:69:cf:e3:83:f4:45:4f:74:e6:55:a7:57:7a:
                    3a:65:48:5f:49:29:98:4f:5a:f4:8f:e7:c5:b7:64:
                    30:45:73:b2:79:f5:c2:08:37:76:37:c5:a8:3d:b7:
                    1e:65:8d:89:0a:58:72:ec:68:65:1d:10:30:1f:2a:
                    65:d6:46:59:c0:6c:2c:25:b8:56:f1:8c:d3:f2:42:
                    2d:63:a9:bd:c9:f0:c3:52:b5:dc:38:5b:0e:62:9d:
                    54:35:a2:6a:16:40:cb:32:ae:23:19:11:28:57:7d:
                    6a:6d:4f:8e:da:7f:35:5f:15:5a:44:46:fc:e0:27:
                    3e:aa:ce:d0:96:7f:3e:e1:34:ef:e9:59:08:83:3a:
                    99:9f:cc:b3:19:72:95:5b:cd:4c:5e:38:41:83:40:
                    4f:db:63:54:f3:f7:f2:b9:fa:f8:b7:34:a7:4d:c3:
                    05:75:c5:ac:8d:31:5a:8b:37:95:0e:fa:7e:dd:74:
                    a1:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:C4:DE:E0:EA:3A:A4:A9:74:31:DA:5D:22:82:77:F5:7A:8B:37:3D
            X509v3 Authority Key Identifier:
                keyid:68:DA:4E:85:A7:98:4B:3F:D1:0A:EF:34:C7:D1:D0:0F:1B:46:45:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNpOhaeYSz_RCu80x9HQDxtGRTE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:6f:b0:38:70:b0:ca:92:50:37:f4:13:6b:50:2c:70:51:a8:
         12:d8:0b:ad:bc:b1:a4:3c:86:7c:7d:31:9a:c3:8b:5d:dd:ae:
         7a:0a:c1:c8:8a:f5:7d:55:a9:53:bf:80:85:94:33:c3:29:63:
         79:8a:b8:ea:af:ed:fe:57:25:3b:57:ec:72:8b:b9:ee:5f:fc:
         50:7f:fe:61:b1:e1:c6:4f:de:de:be:d4:ea:34:a9:7e:85:97:
         58:82:e0:9f:1a:4d:55:64:8b:d8:f6:fe:a7:9b:54:d4:5e:3b:
         fc:8d:85:b3:4b:f9:d5:90:80:c8:86:bf:5b:98:bd:ea:08:ff:
         81:38:98:de:b7:49:53:3d:86:d8:11:2c:6b:f9:6f:4f:02:cb:
         a8:40:4a:63:ca:73:24:a2:a0:d8:57:02:2c:33:5a:9b:0a:c9:
         33:44:8c:2f:8b:8e:08:2a:9d:70:c5:51:9e:94:82:1c:38:a5:
         8c:11:01:61:f8:47:35:de:ef:96:fc:9c:91:3d:5b:df:7d:0f:
         fd:23:94:71:86:3c:46:66:cd:d4:31:c3:80:56:c4:46:ff:09:
         0a:64:a2:5e:d3:3f:79:8f:99:71:d5:3c:54:9b:cc:9a:9f:6e:
         7f:2b:8b:bb:4a:c0:4a:fa:0b:04:52:d7:04:85:af:5b:02:b7:
         13:55:d3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:41:15 2026 by rpki-client