Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.mft
File:                     -Fr9bnRbCjR8ppbujrwWfQikT1Y.mft (raw, json)
Hash identifier:          UOqVl+ui8r6sny4RcBg7MRBJzPcqiD4UdAYfKt+1s4k=
Subject key identifier:   6C:CA:2D:69:97:C5:DB:67:16:40:2E:2D:1B:0D:AB:95:0E:50:0A:57
Authority key identifier: F8:5A:FD:6E:74:5B:0A:34:7C:A6:96:EE:8E:BC:16:7D:08:A4:4F:56
Certificate issuer:       /CN=A9192B84/serialNumber=F85AFD6E745B0A347CA696EE8EBC167D08A44F56
Certificate serial:       015C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Fr9bnRbCjR8ppbujrwWfQikT1Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.mft
Manifest number:          0151
Signing time:             Thu 21 May 2026 05:16:04 +0000
Manifest this update:     Thu 21 May 2026 05:16:04 +0000
Manifest next update:     Thu 28 May 2026 05:16:04 +0000
Files and hashes:         1: -Fr9bnRbCjR8ppbujrwWfQikT1Y.crl (hash: 7j4Dy4Y4GikZCjK5ljfExv6Hts1y9terfX+tHJnHUKc=)
                          2: A1F4D8F6ABF111F0AC423B0DC4F9AE02.roa (hash: MyEqbG5p3sxkSR55sby3+cu91j0S0JWZ2I4F2Mc+W3Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.crl
                          rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Fr9bnRbCjR8ppbujrwWfQikT1Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 05:16:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 348 (0x15c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192B84, serialNumber=F85AFD6E745B0A347CA696EE8EBC167D08A44F56
        Validity
            Not Before: May 21 05:16:04 2026 GMT
            Not After : May 28 05:16:04 2026 GMT
        Subject: CN=6a0e9514-54ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5a:92:86:90:19:15:ba:af:06:29:50:37:59:
                    11:b0:1f:e7:a9:4e:e6:f6:34:2c:6c:bf:1d:7b:9a:
                    b3:77:98:ab:02:1f:be:d1:81:f8:31:fb:60:98:58:
                    de:05:0c:51:b4:95:90:1a:48:27:6b:de:a0:79:6c:
                    e0:77:8e:75:2e:1c:d3:24:ae:93:8d:1b:19:84:fb:
                    1f:61:d9:82:b9:a7:b3:46:bf:2f:75:6d:68:1d:07:
                    5f:10:8c:8b:6d:e7:7d:17:74:38:1f:5e:f2:1a:28:
                    a9:ab:6a:c2:d8:29:e2:7d:b8:9e:43:cd:c1:12:bb:
                    55:3c:10:f0:1b:25:ff:d1:f1:b1:93:e3:58:56:d3:
                    69:48:a9:7b:3d:2f:1e:41:e6:4e:1f:4c:e6:64:ab:
                    3b:1b:d6:23:8b:0e:a2:b0:03:46:f6:c9:b9:b8:6c:
                    cf:39:41:86:11:75:ee:a7:dc:47:fc:62:9c:1b:d2:
                    c8:3d:1f:59:c9:49:dd:9e:09:08:47:03:d2:dd:63:
                    47:b5:b3:5f:8c:7d:c7:d7:7f:ac:91:f1:8a:ed:b9:
                    ca:6f:d1:42:cf:fd:80:68:06:1a:ce:ae:aa:ed:dd:
                    f9:f6:cc:5d:ac:70:c3:a7:c1:a1:ce:52:d3:d5:32:
                    7d:3a:74:a5:60:29:f0:af:35:39:e3:72:4f:12:d9:
                    da:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:CA:2D:69:97:C5:DB:67:16:40:2E:2D:1B:0D:AB:95:0E:50:0A:57
            X509v3 Authority Key Identifier:
                keyid:F8:5A:FD:6E:74:5B:0A:34:7C:A6:96:EE:8E:BC:16:7D:08:A4:4F:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Fr9bnRbCjR8ppbujrwWfQikT1Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:df:f6:d1:7b:af:d9:89:bb:f5:74:6b:ba:42:d2:e1:83:11:
         7b:68:88:ff:2d:f8:f1:18:24:15:4a:48:48:0b:3b:51:5e:63:
         8c:e0:92:89:d1:67:eb:85:26:91:49:e2:25:89:ff:aa:df:f9:
         b0:b6:26:fd:25:a1:9c:b4:a9:ba:66:df:4a:5a:33:97:27:91:
         ea:eb:15:f1:12:cd:e1:5c:f2:0f:6c:02:4d:9c:01:81:7f:9a:
         36:5a:d2:11:75:ae:9b:ba:87:23:6e:18:81:02:1a:12:0b:12:
         b1:59:f2:1b:90:cf:c8:eb:64:d3:70:52:5d:9a:1f:96:17:e4:
         75:94:e5:5d:45:4a:f5:14:05:ec:ca:15:4d:73:9f:b4:f2:b9:
         ee:dd:d9:c3:ed:63:f3:b4:ff:65:96:0e:2a:21:00:e8:c0:13:
         63:f5:1c:dd:f0:7f:aa:89:ec:55:a1:c4:c9:30:2b:b0:39:9b:
         cf:be:5b:8e:bf:60:79:28:2f:c7:63:86:0b:b4:0b:5b:4e:b3:
         ee:2d:bf:e8:d4:20:39:cb:da:1b:27:2b:a3:95:e0:a8:9e:eb:
         1b:d5:a5:45:1d:2e:40:f5:dd:28:5c:a8:84:48:67:1d:3b:bd:
         ea:9f:a2:ba:78:49:bc:cd:e8:4a:17:23:59:d8:0b:34:fd:55:
         bf:d9:05:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:15:11 2026 by rpki-client