Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116372/E0C5EAE60C5611F199E2538B123D8C67/U150NDn0nPv9SODvV-b6fUsxGq8.mft
File:                     U150NDn0nPv9SODvV-b6fUsxGq8.mft (raw, json)
Hash identifier:          aIKO5lcmobUzcgC26T+vgVA+KBKYBxWDsrz6JEVeAec=
Subject key identifier:   C1:81:87:50:F6:56:A5:52:C9:02:BB:00:2C:26:A3:52:8E:42:C4:F0
Authority key identifier: 53:5E:74:34:39:F4:9C:FB:FD:48:E0:EF:57:E6:FA:7D:4B:31:1A:AF
Certificate issuer:       /CN=A9116372/serialNumber=535E743439F49CFBFD48E0EF57E6FA7D4B311AAF
Certificate serial:       37
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/U150NDn0nPv9SODvV-b6fUsxGq8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116372/E0C5EAE60C5611F199E2538B123D8C67/U150NDn0nPv9SODvV-b6fUsxGq8.mft
Manifest number:          34
Signing time:             Wed 13 May 2026 07:25:07 +0000
Manifest this update:     Wed 13 May 2026 07:25:07 +0000
Manifest next update:     Wed 20 May 2026 07:25:07 +0000
Files and hashes:         1: U150NDn0nPv9SODvV-b6fUsxGq8.crl (hash: x2tEbNHsFmhSW9DrmAraFmJZplMVdSdEPsTXgfK2X+E=)
                          2: 4FF63D680FE911F1BED32952083D8C67.roa (hash: L99vsE7QVMrcPtMmR6OsKMR7Y2Rb3mEx/QNb9KOL/Xg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116372/E0C5EAE60C5611F199E2538B123D8C67/U150NDn0nPv9SODvV-b6fUsxGq8.crl
                          rsync://rpki.apnic.net/member_repository/A9116372/E0C5EAE60C5611F199E2538B123D8C67/U150NDn0nPv9SODvV-b6fUsxGq8.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/U150NDn0nPv9SODvV-b6fUsxGq8.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116372, serialNumber=535E743439F49CFBFD48E0EF57E6FA7D4B311AAF
        Validity
            Not Before: May 13 07:25:07 2026 GMT
            Not After : May 20 07:25:07 2026 GMT
        Subject: CN=6a042753-3f93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:27:f7:c3:4b:aa:6d:41:c0:df:c8:bc:1b:8b:
                    04:9e:a7:b8:05:0d:b2:b9:9a:0f:1f:52:55:c5:21:
                    f5:34:47:ad:76:e0:91:d5:81:56:be:76:26:e5:42:
                    4c:dd:0f:74:d9:c7:48:25:00:41:fa:8a:de:d0:a8:
                    9a:3f:8f:9c:46:86:28:eb:8c:32:5c:34:1d:81:6c:
                    3a:bb:43:f0:78:dd:1e:33:5e:81:36:4b:2d:7b:31:
                    8a:32:da:6c:0f:db:6d:38:b9:aa:ec:50:5a:35:d6:
                    ad:cc:2c:55:15:9c:31:ce:f5:12:35:d5:bc:60:c6:
                    45:5a:5b:82:ab:97:24:8c:47:40:07:7e:8a:9b:50:
                    6d:4b:61:5b:72:f4:5b:1e:5c:cd:a0:9c:a2:94:7a:
                    1e:c2:6e:fc:32:4c:44:73:f7:24:f8:96:45:29:f3:
                    c1:ee:f9:5d:a4:32:ec:82:f0:ef:fb:66:21:06:1c:
                    93:8a:e6:97:0a:c0:bf:56:9e:01:a1:5b:91:4a:e6:
                    1b:5a:23:58:e3:2e:2b:2d:a3:a7:f6:95:17:6f:78:
                    76:18:b6:28:ea:ac:73:82:b0:3b:af:d2:fe:47:2c:
                    bd:32:14:b4:50:50:19:af:9a:ed:15:73:3c:65:82:
                    9f:4d:75:6b:d4:9d:0c:cf:28:80:8c:e9:60:30:9e:
                    81:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:81:87:50:F6:56:A5:52:C9:02:BB:00:2C:26:A3:52:8E:42:C4:F0
            X509v3 Authority Key Identifier:
                keyid:53:5E:74:34:39:F4:9C:FB:FD:48:E0:EF:57:E6:FA:7D:4B:31:1A:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116372/E0C5EAE60C5611F199E2538B123D8C67/U150NDn0nPv9SODvV-b6fUsxGq8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/U150NDn0nPv9SODvV-b6fUsxGq8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116372/E0C5EAE60C5611F199E2538B123D8C67/U150NDn0nPv9SODvV-b6fUsxGq8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:c1:f2:99:44:1c:10:2e:40:2d:e4:02:b4:d2:66:64:2f:0f:
         d5:66:6f:8a:80:76:ec:ea:ca:1f:ce:72:f4:f9:4a:ff:c1:62:
         82:6b:f3:c0:8a:e8:15:e5:6e:de:2f:4b:cf:6b:74:81:85:07:
         d9:3b:2d:b5:d6:55:d0:14:21:e3:e1:d1:ec:f6:31:de:f1:1b:
         fe:62:5f:27:d0:5b:ee:0e:67:c1:fc:48:e3:ab:14:1f:2d:02:
         50:5f:6d:44:a8:7e:86:78:b2:c4:cf:73:b5:50:a6:ce:55:d4:
         fe:e9:35:65:71:db:d5:dc:50:d6:2e:dd:0e:7b:08:dd:2e:30:
         29:41:2b:10:68:88:1f:ea:96:c8:f2:91:36:7a:e6:a3:9d:c7:
         2a:1a:10:81:34:5d:ec:c1:79:a0:d5:d8:71:a4:86:c7:1d:59:
         8d:90:e5:c6:c7:89:85:d6:1f:c3:3c:e3:fe:c6:92:95:ea:22:
         d1:0d:a5:d3:c2:a7:42:41:4b:e7:eb:53:79:f2:9a:35:df:ab:
         5f:d1:48:57:8e:d0:0b:f3:e6:08:8a:81:23:34:6b:66:2b:d2:
         b3:ed:92:31:92:f9:0a:e2:54:e7:4a:6b:c8:88:fe:86:b2:c2:
         eb:eb:f8:ee:16:ab:fb:67:48:75:ed:19:8e:96:54:27:2c:8a:
         9a:2a:a9:fa
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
NjM3MjExMC8GA1UEBRMoNTM1RTc0MzQzOUY0OUNGQkZENDhFMEVGNTdFNkZBN0Q0
QjMxMUFBRjAeFw0yNjA1MTMwNzI1MDdaFw0yNjA1MjAwNzI1MDdaMBgxFjAUBgNV
BAMTDTZhMDQyNzUzLTNmOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCfJ/fDS6ptQcDfyLwbiwSep7gFDbK5mg8fUlXFIfU0R6124JHVgVa+diblQkzd
D3TZx0glAEH6it7QqJo/j5xGhijrjDJcNB2BbDq7Q/B43R4zXoE2Sy17MYoy2mwP
2204uarsUFo11q3MLFUVnDHO9RI11bxgxkVaW4KrlySMR0AHfoqbUG1LYVty9Fse
XM2gnKKUeh7CbvwyTERz9yT4lkUp88Hu+V2kMuyC8O/7ZiEGHJOK5pcKwL9WngGh
W5FK5htaI1jjListo6f2lRdveHYYtijqrHOCsDuv0v5HLL0yFLRQUBmvmu0Vczxl
gp9NdWvUnQzPKICM6WAwnoEvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUwYGHUPZW
pVLJArsALCajUo5CxPAwHwYDVR0jBBgwFoAUU150NDn0nPv9SODvV+b6fUsxGq8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2MzcyL0UwQzVFQUU2MEM1
NjExRjE5OUUyNTM4QjEyM0Q4QzY3L1UxNTBORG4wblB2OVNPRHZWLWI2ZlVzeEdx
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvVTE1ME5EbjBuUHY5U09EdlYtYjZmVXN4R3E4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2
MzcyL0UwQzVFQUU2MEM1NjExRjE5OUUyNTM4QjEyM0Q4QzY3L1UxNTBORG4wblB2
OVNPRHZWLWI2ZlVzeEdxOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBEwfKZRBwQLkAt5AK00mZkLw/VZm+KgHbs6sofznL0+Ur/wWKCa/PAiugV5W7e
L0vPa3SBhQfZOy211lXQFCHj4dHs9jHe8Rv+Yl8n0FvuDmfB/EjjqxQfLQJQX21E
qH6GeLLEz3O1UKbOVdT+6TVlcdvV3FDWLt0OewjdLjApQSsQaIgf6pbI8pE2euaj
nccqGhCBNF3swXmg1dhxpIbHHVmNkOXGx4mF1h/DPOP+xpKV6iLRDaXTwqdCQUvn
61N58po136tf0UhXjtAL8+YIioEjNGtmK9Kz7ZIxkvkK4lTnSmvIiP6GssLr6/ju
Fqv7Z0h17RmOllQnLIqaKqn6
-----END CERTIFICATE-----
Generated at Wed May 13 15:19:59 2026 by rpki-client