Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft
File:                     tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft (raw, json)
Hash identifier:          8Y2fAQIXo7f05+Io5ze7ErD+xhyxe2lY8DJ2yUB2k1Y=
Subject key identifier:   34:C7:80:DD:6F:84:E3:E7:F8:40:5D:80:88:AF:4C:76:92:1E:8B:A4
Authority key identifier: B5:D9:55:97:7A:DA:46:83:AC:5B:59:C2:58:18:B4:43:81:C2:4F:E6
Certificate issuer:       /CN=A911A4F7/serialNumber=B5D955977ADA4683AC5B59C25818B44381C24FE6
Certificate serial:       0133
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft
Manifest number:          012B
Signing time:             Mon 11 May 2026 05:40:38 +0000
Manifest this update:     Mon 11 May 2026 05:40:37 +0000
Manifest next update:     Mon 18 May 2026 05:40:37 +0000
Files and hashes:         1: tdlVl3raRoOsW1nCWBi0Q4HCT-Y.crl (hash: Z8/N6ZkDUj4KOdyUhNwli7VTg4bkCK7VMq9b0cR5kLE=)
                          2: F17DA0FE85FC11EFBD7A485FC4F9AE02.roa (hash: NPEHXK4kvB3m3Mt2iQopHp4B8bUEbfWS8NtHZ6Qe9rU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.crl
                          rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 05:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 307 (0x133)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A4F7, serialNumber=B5D955977ADA4683AC5B59C25818B44381C24FE6
        Validity
            Not Before: May 11 05:40:37 2026 GMT
            Not After : May 18 05:40:37 2026 GMT
        Subject: CN=6a016bd5-a8a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:19:1d:3c:81:f4:61:f5:d1:15:d2:e5:46:27:
                    bf:48:3c:49:9f:15:fd:dc:25:c0:a1:8a:4a:c8:b6:
                    34:79:80:42:e6:56:8f:7c:9e:86:7f:03:a3:ec:70:
                    41:a2:a6:02:2f:15:73:5a:e1:52:0c:1c:f1:e2:18:
                    f8:18:9e:c4:80:ed:5c:15:bd:db:cf:d0:3b:74:32:
                    8b:80:a8:21:1f:dc:fe:89:79:b3:4f:8f:25:f0:cd:
                    b8:18:59:3b:b6:a6:31:a3:6b:88:b0:b9:8f:44:17:
                    dd:de:17:7a:e7:40:d1:2b:78:8a:30:eb:18:6b:ed:
                    67:c2:eb:a2:59:57:ef:6c:68:ec:d0:8f:b6:47:aa:
                    7a:4b:6d:9c:22:ea:90:f9:f2:72:e9:5b:af:54:a7:
                    1d:24:fb:66:0d:f6:6d:60:ae:a1:fd:ec:2c:ab:8a:
                    6e:4d:df:5a:3f:98:22:16:c9:bf:7e:15:3a:7d:5e:
                    54:00:6e:21:eb:e6:a0:a9:f0:8c:c6:76:70:9f:3c:
                    f4:6b:6b:74:66:a2:09:b3:05:da:d5:d2:30:fe:96:
                    42:12:30:d6:2c:19:54:4d:ce:64:81:a3:3b:98:e1:
                    c8:70:9d:91:02:b4:44:25:b4:d7:fd:6d:6d:2d:79:
                    a8:20:12:8f:52:2b:c2:93:23:36:db:c0:38:f2:6b:
                    1f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:C7:80:DD:6F:84:E3:E7:F8:40:5D:80:88:AF:4C:76:92:1E:8B:A4
            X509v3 Authority Key Identifier:
                keyid:B5:D9:55:97:7A:DA:46:83:AC:5B:59:C2:58:18:B4:43:81:C2:4F:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:44:06:8d:51:f6:26:c9:7c:e0:a4:9a:d0:3a:c7:2f:79:6a:
         d2:4f:9b:ee:e7:ad:50:22:32:39:6d:0f:74:9f:e0:54:88:db:
         fb:10:14:85:97:85:31:29:f7:62:b5:85:8b:02:b3:40:f4:12:
         63:15:db:b1:16:3f:56:a3:b4:ff:7c:9f:e0:cd:fa:77:e5:df:
         38:e6:fb:04:b4:34:fb:05:73:f3:60:e6:18:a2:2d:e9:00:22:
         5c:da:9c:31:59:9c:d9:f2:02:92:ac:10:96:ff:5c:3d:2c:0b:
         f7:4c:a9:4f:28:71:73:64:61:79:42:e9:a6:f3:1d:93:35:4c:
         59:ec:f1:d5:1d:26:f6:73:0e:79:22:c1:d3:38:7b:87:f0:c1:
         9b:85:c2:4e:06:cf:6e:f8:07:8c:13:ee:45:4d:45:15:85:72:
         3f:f3:6d:95:84:2e:60:c2:9b:b5:97:be:fa:8d:da:d7:15:e8:
         70:80:9e:6a:22:96:61:c9:fc:a7:91:8d:e0:6a:7e:b0:91:89:
         dd:d1:c2:56:bc:8c:4c:78:0c:2f:31:ce:7a:2c:a7:9e:10:c7:
         c7:2c:66:17:94:4c:85:cb:55:47:8e:b5:27:fb:d2:a9:d5:95:
         20:68:3c:be:2d:cb:c1:f1:09:4b:a2:78:4b:46:37:f5:2a:44:
         de:73:8d:53
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUE0RjcxMTAvBgNVBAUTKEI1RDk1NTk3N0FEQTQ2ODNBQzVCNTlDMjU4MThCNDQz
ODFDMjRGRTYwHhcNMjYwNTExMDU0MDM3WhcNMjYwNTE4MDU0MDM3WjAYMRYwFAYD
VQQDEw02YTAxNmJkNS1hOGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlhkdPIH0YfXRFdLlRie/SDxJnxX93CXAoYpKyLY0eYBC5laPfJ6GfwOj7HBB
oqYCLxVzWuFSDBzx4hj4GJ7EgO1cFb3bz9A7dDKLgKghH9z+iXmzT48l8M24GFk7
tqYxo2uIsLmPRBfd3hd650DRK3iKMOsYa+1nwuuiWVfvbGjs0I+2R6p6S22cIuqQ
+fJy6VuvVKcdJPtmDfZtYK6h/ewsq4puTd9aP5giFsm/fhU6fV5UAG4h6+agqfCM
xnZwnzz0a2t0ZqIJswXa1dIw/pZCEjDWLBlUTc5kgaM7mOHIcJ2RArREJbTX/W1t
LXmoIBKPUivCkyM228A48msfUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDTHgN1v
hOPn+EBdgIivTHaSHoukMB8GA1UdIwQYMBaAFLXZVZd62kaDrFtZwlgYtEOBwk/m
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTRGNy85QTU4QzM4QTg1
RkMxMUVGQkMyMTBGNUVDNEY5QUUwMi90ZGxWbDNyYVJvT3NXMW5DV0JpMFE0SENU
LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3RkbFZsM3JhUm9Pc1cxbkNXQmkwUTRIQ1QtWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QTRGNy85QTU4QzM4QTg1RkMxMUVGQkMyMTBGNUVDNEY5QUUwMi90ZGxWbDNyYVJv
T3NXMW5DV0JpMFE0SENULVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgkQGjVH2Jsl84KSa0DrHL3lq0k+b7uetUCIyOW0PdJ/gVIjb+xAUhZeFMSn3
YrWFiwKzQPQSYxXbsRY/VqO0/3yf4M36d+XfOOb7BLQ0+wVz82DmGKIt6QAiXNqc
MVmc2fICkqwQlv9cPSwL90ypTyhxc2RheULppvMdkzVMWezx1R0m9nMOeSLB0zh7
h/DBm4XCTgbPbvgHjBPuRU1FFYVyP/NtlYQuYMKbtZe++o3a1xXocICeaiKWYcn8
p5GN4Gp+sJGJ3dHCVryMTHgMLzHOeiynnhDHxyxmF5RMhctVR461J/vSqdWVIGg8
vi3LwfEJS6J4S0Y39SpE3nONUw==
-----END CERTIFICATE-----
Generated at Wed May 13 03:29:46 2026 by rpki-client