Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft
File:                     Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft (raw, json)
Hash identifier:          EoBiYXgjOLjnDS9JMPCGMv4LSl4kPFFlm4GuWpRXoSI=
Subject key identifier:   DB:C7:D1:F0:5A:42:91:1C:10:8B:6A:5B:D1:43:43:A5:3C:8A:50:DA
Authority key identifier: 1E:57:B4:3F:04:4D:4A:BA:82:22:A4:09:78:66:14:28:0A:A7:39:A1
Certificate issuer:       /CN=A911112F/serialNumber=1E57B43F044D4ABA8222A409786614280AA739A1
Certificate serial:       01D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft
Manifest number:          01BD
Signing time:             Wed 13 May 2026 04:05:27 +0000
Manifest this update:     Wed 13 May 2026 04:05:27 +0000
Manifest next update:     Wed 20 May 2026 04:05:27 +0000
Files and hashes:         1: Hle0PwRNSrqCIqQJeGYUKAqnOaE.crl (hash: +mPNBYTLiQjRTVb3P/3W1CUSIMV7I8lHCIfPMCRgrBQ=)
                          2: 1CD34B6CEDFC11EE880F6F58C4F9AE02.roa (hash: 843592kmHI2mJyXbkDnRzoJpw2lZFHjhOJjwKGMqHsI=)
                          3: E4BA0144BA8E11EE91E3AF15C4F9AE02.roa (hash: rTksk/NcwRNUlpEN58oWLKJieEnMmoGQor+Ru3sGYqQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.crl
                          rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 04:05:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 471 (0x1d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911112F, serialNumber=1E57B43F044D4ABA8222A409786614280AA739A1
        Validity
            Not Before: May 13 04:05:27 2026 GMT
            Not After : May 20 04:05:27 2026 GMT
        Subject: CN=6a03f887-3705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:e3:6e:d4:f4:e6:1e:3f:28:8f:bd:80:22:1a:
                    1b:ce:35:88:ad:00:8d:90:28:af:d7:27:7d:58:47:
                    cc:16:db:b0:c8:96:c1:91:6b:f2:d5:65:2b:f1:20:
                    41:58:a0:eb:70:d0:6e:c6:be:f5:d7:fd:84:ad:7a:
                    e9:1c:43:13:07:b5:08:e3:d2:55:b8:e6:5a:08:7e:
                    6c:8b:bd:06:c4:79:17:a6:0d:c0:4b:c8:3c:fd:51:
                    e9:b3:a8:ec:a5:33:0f:2f:40:30:01:e6:88:9e:5d:
                    27:28:2f:de:1c:d2:28:bd:27:81:33:61:84:c2:25:
                    7a:b0:4a:75:a5:a3:b9:16:28:b4:be:e3:85:5b:9d:
                    da:b7:d6:3d:b7:be:e9:e1:03:30:ce:c3:01:ce:82:
                    b5:e7:13:51:a9:f0:f2:14:08:53:ca:74:8d:a0:74:
                    ea:35:3e:bf:41:d5:53:29:f1:48:3e:fd:d7:78:2f:
                    76:e6:33:56:b9:d4:01:6f:8c:d8:97:f5:bb:12:c5:
                    dd:2e:32:2a:e7:07:4c:04:71:ce:ed:dc:25:2e:8d:
                    81:18:75:4e:37:04:0e:cb:fa:bf:4f:b2:b3:5f:d6:
                    6b:5b:f9:5b:c5:da:9b:5f:49:ec:5a:64:fa:48:2c:
                    f8:58:ed:02:20:50:bb:75:ba:b9:15:7d:a3:87:c8:
                    43:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C7:D1:F0:5A:42:91:1C:10:8B:6A:5B:D1:43:43:A5:3C:8A:50:DA
            X509v3 Authority Key Identifier:
                keyid:1E:57:B4:3F:04:4D:4A:BA:82:22:A4:09:78:66:14:28:0A:A7:39:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:9b:79:15:78:00:ea:db:ff:90:6b:48:57:83:32:fe:9f:03:
         67:f0:78:be:bd:98:da:be:26:c5:08:7e:75:4b:9a:89:8f:01:
         1f:16:c0:da:43:cb:19:2e:b0:3f:d5:23:93:55:2d:a9:e6:52:
         3b:bc:c3:ef:0a:0b:a3:f1:02:58:e6:57:68:28:ad:42:d6:91:
         35:69:2a:bf:c2:14:7b:ee:ab:f9:ea:bd:3c:94:c4:dc:ee:02:
         91:0d:ae:15:bc:3c:2e:bd:f3:19:1f:93:23:38:c7:ed:f4:ed:
         a8:19:0f:52:3e:19:4c:06:01:83:90:0f:4f:8f:32:0a:76:68:
         24:90:b6:2c:3c:83:53:37:57:42:09:2f:e8:4b:e0:c2:c2:75:
         33:39:64:f8:6e:45:bf:43:90:a1:83:ce:43:6d:35:ba:86:ba:
         a9:b9:2b:00:8f:b0:a1:0e:eb:4b:37:db:b9:e3:b8:e0:32:83:
         87:ff:c0:6b:98:91:3b:30:83:f2:3b:03:5d:bd:2a:df:e0:d7:
         47:c9:cb:67:f0:7e:9a:85:9d:99:96:a7:7b:3d:f0:41:69:10:
         9c:d6:24:bc:b0:f1:15:f1:3b:f8:85:36:06:cc:ea:48:a5:01:
         63:6b:0c:ac:53:75:53:0c:f6:3a:6a:6f:d6:f9:93:ec:1d:8a:
         60:b5:7a:ae
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTExMkYxMTAvBgNVBAUTKDFFNTdCNDNGMDQ0RDRBQkE4MjIyQTQwOTc4NjYxNDI4
MEFBNzM5QTEwHhcNMjYwNTEzMDQwNTI3WhcNMjYwNTIwMDQwNTI3WjAYMRYwFAYD
VQQDEw02YTAzZjg4Ny0zNzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6+Nu1PTmHj8oj72AIhobzjWIrQCNkCiv1yd9WEfMFtuwyJbBkWvy1WUr8SBB
WKDrcNBuxr711/2ErXrpHEMTB7UI49JVuOZaCH5si70GxHkXpg3AS8g8/VHps6js
pTMPL0AwAeaInl0nKC/eHNIovSeBM2GEwiV6sEp1paO5Fii0vuOFW53at9Y9t77p
4QMwzsMBzoK15xNRqfDyFAhTynSNoHTqNT6/QdVTKfFIPv3XeC925jNWudQBb4zY
l/W7EsXdLjIq5wdMBHHO7dwlLo2BGHVONwQOy/q/T7KzX9ZrW/lbxdqbX0nsWmT6
SCz4WO0CIFC7dbq5FX2jh8hDzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNvH0fBa
QpEcEItqW9FDQ6U8ilDaMB8GA1UdIwQYMBaAFB5XtD8ETUq6giKkCXhmFCgKpzmh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTEyRi85NjREQzY5QUJB
OEQxMUVFODI4QTg5NDZDNEY5QUUwMi9IbGUwUHdSTlNycUNJcVFKZUdZVUtBcW5P
YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hsZTBQd1JOU3JxQ0lxUUplR1lVS0Fxbk9hRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MTEyRi85NjREQzY5QUJBOEQxMUVFODI4QTg5NDZDNEY5QUUwMi9IbGUwUHdSTlNy
cUNJcVFKZUdZVUtBcW5PYUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAO5t5FXgA6tv/kGtIV4My/p8DZ/B4vr2Y2r4mxQh+dUuaiY8BHxbA2kPLGS6w
P9Ujk1UtqeZSO7zD7woLo/ECWOZXaCitQtaRNWkqv8IUe+6r+eq9PJTE3O4CkQ2u
Fbw8Lr3zGR+TIzjH7fTtqBkPUj4ZTAYBg5APT48yCnZoJJC2LDyDUzdXQgkv6Evg
wsJ1Mzlk+G5Fv0OQoYPOQ201uoa6qbkrAI+woQ7rSzfbueO44DKDh//Aa5iROzCD
8jsDXb0q3+DXR8nLZ/B+moWdmZanez3wQWkQnNYkvLDxFfE7+IU2BszqSKUBY2sM
rFN1Uwz2Ompv1vmT7B2KYLV6rg==
-----END CERTIFICATE-----
Generated at Wed May 13 14:45:26 2026 by rpki-client