Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft
File:                     30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft (raw, json)
Hash identifier:          kbSzM/wb4U1Zr4u4e87A+L3OnjWGYMQxJgZqEptgnoc=
Subject key identifier:   86:E1:B9:F2:CF:B8:51:3F:92:0B:4E:8B:E7:E3:D3:35:8A:FB:FF:5B
Authority key identifier: DF:40:69:F2:46:E9:FE:A9:7B:0A:BE:3A:5F:EC:77:8E:53:93:17:93
Certificate issuer:       /CN=A9118479/serialNumber=DF4069F246E9FEA97B0ABE3A5FEC778E53931793
Certificate serial:       353D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft
Manifest number:          353D
Signing time:             Tue 12 May 2026 15:01:18 +0000
Manifest this update:     Tue 12 May 2026 15:01:17 +0000
Manifest next update:     Tue 19 May 2026 15:01:17 +0000
Files and hashes:         1: 30Bp8kbp_ql7Cr46X-x3jlOTF5M.crl (hash: lStc99WaoCzQdrWMMTXQPi2+/NDJ5v7ERtNwNOFldW8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.crl
                          rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13629 (0x353d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118479, serialNumber=DF4069F246E9FEA97B0ABE3A5FEC778E53931793
        Validity
            Not Before: May 12 15:01:17 2026 GMT
            Not After : May 19 15:01:17 2026 GMT
        Subject: CN=6a0340bd-b838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:47:d4:f2:61:70:95:ca:bd:21:25:e8:79:a7:
                    06:c0:ad:f0:b1:99:84:7a:df:f2:b7:b7:65:72:d3:
                    69:76:fa:f6:5f:b2:6b:8b:97:0d:f8:68:07:f8:e8:
                    13:31:1b:0b:4b:f3:c6:74:88:78:b2:4c:1f:24:dd:
                    4a:52:9b:9c:99:e8:58:6d:f8:0f:bb:60:89:f4:da:
                    e7:30:11:b1:b3:63:65:ac:0d:0c:42:35:89:c4:8b:
                    61:e1:d9:92:e3:09:14:a8:ab:fc:97:66:52:92:fc:
                    f0:d1:6b:c5:c5:86:71:ef:62:4d:8a:92:4f:02:d1:
                    6d:3a:1a:21:0a:e3:c2:84:06:4c:0c:05:51:01:22:
                    6c:c5:ec:09:ec:45:44:38:26:49:5a:ea:65:0c:40:
                    ad:9e:0e:90:db:7c:98:a0:16:4c:39:db:31:2a:c6:
                    bf:aa:38:86:d8:60:c9:dc:49:ba:89:44:f3:41:34:
                    ca:00:ba:07:c0:b7:b6:d4:50:b1:04:ba:d7:5f:f7:
                    2f:92:2e:42:ab:54:89:4f:f7:b8:a5:d4:56:0e:24:
                    ea:33:27:38:9f:60:66:15:d2:9c:45:2b:a6:2e:01:
                    48:f1:92:09:df:08:b9:e9:a8:34:74:68:61:03:f8:
                    e0:c3:15:69:c8:96:a9:bf:f1:84:f0:af:40:a5:e1:
                    ea:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:E1:B9:F2:CF:B8:51:3F:92:0B:4E:8B:E7:E3:D3:35:8A:FB:FF:5B
            X509v3 Authority Key Identifier:
                keyid:DF:40:69:F2:46:E9:FE:A9:7B:0A:BE:3A:5F:EC:77:8E:53:93:17:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:a1:40:da:54:e3:c3:c0:cf:e9:9f:ee:c1:12:4e:09:50:75:
         cc:3e:97:00:b2:ab:7a:8f:ec:ae:2b:3c:10:4c:29:ba:93:39:
         83:e8:5f:ff:e0:fd:8c:b1:ee:a6:e0:56:3a:91:b5:f2:42:b4:
         c3:d7:37:a5:d4:39:4a:e9:1b:9b:91:a6:01:ab:06:b0:a7:83:
         32:bb:e9:ad:2e:da:bd:a2:1e:2c:62:04:d5:f1:b1:8f:4f:de:
         fa:a9:37:1f:9f:4c:a8:fc:4f:0e:48:a7:87:3e:cc:bf:e1:d8:
         96:0a:52:e3:00:6e:9f:ad:52:a8:7e:44:12:09:33:e3:15:37:
         2d:be:6d:27:87:b0:ee:5c:af:25:4a:2c:e8:e0:2c:96:b9:a3:
         6b:bf:c0:c0:f8:34:8a:c1:b4:d5:12:a8:aa:b1:cb:5a:60:3a:
         c0:7e:7c:7d:14:40:a7:01:38:22:4c:92:03:de:f8:13:33:9c:
         d7:23:cd:83:05:20:6d:83:82:06:63:2f:89:55:68:af:d7:dd:
         25:55:6f:20:a3:95:9e:15:06:a1:6f:a9:3e:b9:75:f5:2b:d0:
         8e:77:24:10:21:66:88:c1:31:8f:27:a9:00:fc:30:b4:82:cf:
         cb:c5:86:6e:d3:d7:9e:68:b0:27:71:9a:4f:00:5a:d1:50:a6:
         e9:6d:94:f3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTg0NzkxMTAvBgNVBAUTKERGNDA2OUYyNDZFOUZFQTk3QjBBQkUzQTVGRUM3NzhF
NTM5MzE3OTMwHhcNMjYwNTEyMTUwMTE3WhcNMjYwNTE5MTUwMTE3WjAYMRYwFAYD
VQQDEw02YTAzNDBiZC1iODM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn0fU8mFwlcq9ISXoeacGwK3wsZmEet/yt7dlctNpdvr2X7Jri5cN+GgH+OgT
MRsLS/PGdIh4skwfJN1KUpucmehYbfgPu2CJ9NrnMBGxs2NlrA0MQjWJxIth4dmS
4wkUqKv8l2ZSkvzw0WvFxYZx72JNipJPAtFtOhohCuPChAZMDAVRASJsxewJ7EVE
OCZJWuplDECtng6Q23yYoBZMOdsxKsa/qjiG2GDJ3Em6iUTzQTTKALoHwLe21FCx
BLrXX/cvki5Cq1SJT/e4pdRWDiTqMyc4n2BmFdKcRSumLgFI8ZIJ3wi56ag0dGhh
A/jgwxVpyJapv/GE8K9ApeHqhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIbhufLP
uFE/kgtOi+fj0zWK+/9bMB8GA1UdIwQYMBaAFN9AafJG6f6pewq+Ol/sd45TkxeT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODQ3OS83QzdCQkYwODFE
OUUxMUUyQTg3RTdCOEUwOEIwMkNEMi8zMEJwOGticF9xbDdDcjQ2WC14M2psT1RG
NU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzMwQnA4a2JwX3FsN0NyNDZYLXgzamxPVEY1TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
ODQ3OS83QzdCQkYwODFEOUUxMUUyQTg3RTdCOEUwOEIwMkNEMi8zMEJwOGticF9x
bDdDcjQ2WC14M2psT1RGNU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAqFA2lTjw8DP6Z/uwRJOCVB1zD6XALKreo/sris8EEwpupM5g+hf/+D9jLHu
puBWOpG18kK0w9c3pdQ5Sukbm5GmAasGsKeDMrvprS7avaIeLGIE1fGxj0/e+qk3
H59MqPxPDkinhz7Mv+HYlgpS4wBun61SqH5EEgkz4xU3Lb5tJ4ew7lyvJUos6OAs
lrmja7/AwPg0isG01RKoqrHLWmA6wH58fRRApwE4IkySA974EzOc1yPNgwUgbYOC
BmMviVVor9fdJVVvIKOVnhUGoW+pPrl19SvQjnckECFmiMExjyepAPwwtILPy8WG
btPXnmiwJ3GaTwBa0VCm6W2U8w==
-----END CERTIFICATE-----
Generated at Wed May 13 13:28:29 2026 by rpki-client