Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft
File:                     nTQUKDsie49RLzBfKs20PN6eTRI.mft (raw, json)
Hash identifier:          pwJt7UFTn95p+hxBrAMo80ppcDLZw/iT1bMskhuzfOs=
Subject key identifier:   C3:F3:6E:30:06:B4:26:28:38:D8:2B:6B:42:50:3E:36:54:4A:2F:FD
Authority key identifier: 9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12
Certificate issuer:       /CN=A911ED2C/serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12
Certificate serial:       022C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft
Manifest number:          01ED
Signing time:             Mon 11 May 2026 03:50:44 +0000
Manifest this update:     Mon 11 May 2026 03:50:44 +0000
Manifest next update:     Mon 18 May 2026 03:50:44 +0000
Files and hashes:         1: nTQUKDsie49RLzBfKs20PN6eTRI.crl (hash: hs5TlECltaGfv8boMsRP4g3ITsiVkJehvGCF2om35Yo=)
                          2: EDAA86E4AD6D11EE83DA6253C4F9AE02.roa (hash: RuIzPpPmU5SYBxbzVmTPm1exsa1irL+SD8QrPzFj6WU=)
                          3: 3C880EBABEEF11EF9178186BC4F9AE02.roa (hash: gDBNV8FCQoQRlF4+Z0of3x2gK+wLXaHl7XFSFbaKadM=)
                          4: 31C9441E68ED11F0BA447B41C4F9AE02.roa (hash: Tw/mmccci9TsCg4wjjeIfCh0v/cTONBZG05kzKfAujc=)
                          5: C75B642268F211EFB7A6A06EC4F9AE02.roa (hash: cMO5zU9AD/RoFLcnPT+DXNczqdbBJpb9yT+lZHAEick=)
                          6: EC985F92AD6D11EE83DA6253C4F9AE02.roa (hash: BmXwbaUB2PnwCtWWwqTCrL/Z4ZUCXb6in34aW4SAhII=)
                          7: 551036FCF1CA11EFA1495230C4F9AE02.roa (hash: ph9mjxQXcLl4fEECl4pEGWMTp7mLbB/lR7kFkW96rzY=)
                          8: CA364B681A1711F0A1D93523C4F9AE02.roa (hash: VMXxFIYcOcmwdzE0TfKotJbGv4ASOkRQEsgw2BaIwTw=)
                          9: 908E69B20D4311F0B83AB36BC4F9AE02.roa (hash: 0rCihLa1R/JwK4jlGINRooaKzW7UBmX+YQfpTQsJlgY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl
                          rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 03:50:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 556 (0x22c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911ED2C, serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12
        Validity
            Not Before: May 11 03:50:44 2026 GMT
            Not After : May 18 03:50:44 2026 GMT
        Subject: CN=6a015214-5cf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:69:1e:c4:1d:b4:5d:00:41:80:7e:73:fa:7c:
                    ac:5d:15:a9:f7:59:1c:a1:c5:c0:eb:76:20:68:01:
                    4e:c3:ea:a2:bc:92:e6:d5:1d:e9:07:6a:70:fd:4c:
                    2e:55:91:32:2d:73:fd:09:9f:54:b5:32:49:e3:81:
                    2d:cc:3b:42:cd:00:20:65:aa:5d:9e:97:ac:f5:20:
                    aa:e0:ab:0d:53:df:67:1a:b5:86:55:dc:86:b6:ea:
                    ea:b4:31:d2:c1:ab:f5:7e:16:07:b6:d2:f2:ce:c5:
                    d5:ef:38:97:91:3b:62:ec:ec:2a:8e:62:ae:17:62:
                    0b:17:a9:9a:0a:14:e1:ad:8d:c9:72:67:1e:b6:ea:
                    7c:4e:87:6a:3d:0b:08:4f:c8:2d:69:69:2f:6f:b6:
                    c7:ba:c0:08:18:f8:76:65:4f:7e:e9:36:01:5f:13:
                    f7:3a:4d:f6:89:18:5a:d7:f2:2a:35:5f:d8:ed:ef:
                    ab:e0:73:1d:b5:b1:2c:6e:dd:2c:af:02:5b:78:2c:
                    95:bf:ed:75:4b:f4:81:26:ca:1e:82:bc:6a:cd:1e:
                    af:8b:f4:7b:bd:33:6c:90:2a:48:dd:81:c3:02:27:
                    54:a7:23:a9:6b:22:cf:24:5a:bb:a8:d1:04:10:55:
                    49:d9:d0:0e:f3:1e:1a:95:64:70:0e:72:69:d6:02:
                    99:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F3:6E:30:06:B4:26:28:38:D8:2B:6B:42:50:3E:36:54:4A:2F:FD
            X509v3 Authority Key Identifier:
                keyid:9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:a2:8d:e2:03:b8:32:66:6d:1b:d2:89:90:e5:8b:81:07:14:
         28:dd:2d:b6:d5:0d:93:00:e5:5c:41:ad:1a:9e:43:f7:84:f2:
         69:ad:a6:17:fe:34:f6:a5:1c:70:a8:86:db:71:bf:8e:3f:57:
         c6:e9:52:fd:90:b8:4e:44:a6:b8:ae:4a:dc:6a:d2:db:c5:c9:
         a7:9a:40:33:8e:5f:5e:76:a0:97:ab:05:ea:78:0a:6d:a3:74:
         7e:1c:c0:5d:a2:36:c0:c5:80:84:0f:6d:87:b3:3c:6e:93:be:
         7e:d3:c5:81:3d:c2:fe:39:67:1a:d7:64:a0:a4:31:77:c2:78:
         2c:51:8c:71:be:28:ac:58:72:52:85:df:cd:40:6a:6b:4e:5a:
         68:07:7e:8c:9b:74:21:99:a8:eb:42:98:9a:a6:d4:ac:10:d7:
         cd:fe:60:f0:f7:17:68:2c:0b:ac:13:37:65:a9:ca:8c:13:4a:
         39:47:e4:8f:57:77:57:c8:3f:33:41:36:25:dc:e4:69:c5:80:
         12:b6:f9:88:ac:fe:c2:1a:f6:d5:7d:91:0b:0e:97:2c:01:c3:
         f3:83:17:9a:f9:47:f7:d2:9c:e7:ae:81:3a:40:99:81:70:7c:
         04:c4:10:71:0f:78:73:fe:e3:ae:04:6a:ac:85:2f:b0:c1:41:
         2b:0b:4a:81
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUVEMkMxMTAvBgNVBAUTKDlEMzQxNDI4M0IyMjdCOEY1MTJGMzA1RjJBQ0RCNDND
REU5RTREMTIwHhcNMjYwNTExMDM1MDQ0WhcNMjYwNTE4MDM1MDQ0WjAYMRYwFAYD
VQQDEw02YTAxNTIxNC01Y2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoGkexB20XQBBgH5z+nysXRWp91kcocXA63YgaAFOw+qivJLm1R3pB2pw/Uwu
VZEyLXP9CZ9UtTJJ44EtzDtCzQAgZapdnpes9SCq4KsNU99nGrWGVdyGturqtDHS
wav1fhYHttLyzsXV7ziXkTti7OwqjmKuF2ILF6maChThrY3Jcmcetup8TodqPQsI
T8gtaWkvb7bHusAIGPh2ZU9+6TYBXxP3Ok32iRha1/IqNV/Y7e+r4HMdtbEsbt0s
rwJbeCyVv+11S/SBJsoegrxqzR6vi/R7vTNskCpI3YHDAidUpyOpayLPJFq7qNEE
EFVJ2dAO8x4alWRwDnJp1gKZoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMPzbjAG
tCYoONgra0JQPjZUSi/9MB8GA1UdIwQYMBaAFJ00FCg7InuPUS8wXyrNtDzenk0S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUQyQy8wMDM3M0M2QzlC
QkMxMUVFODUxQURENTBDNEY5QUUwMi9uVFFVS0RzaWU0OVJMekJmS3MyMFBONmVU
UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25UUVVLRHNpZTQ5Ukx6QmZLczIwUE42ZVRSSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RUQyQy8wMDM3M0M2QzlCQkMxMUVFODUxQURENTBDNEY5QUUwMi9uVFFVS0RzaWU0
OVJMekJmS3MyMFBONmVUUkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqaKN4gO4MmZtG9KJkOWLgQcUKN0tttUNkwDlXEGtGp5D94Tyaa2mF/409qUc
cKiG23G/jj9XxulS/ZC4TkSmuK5K3GrS28XJp5pAM45fXnagl6sF6ngKbaN0fhzA
XaI2wMWAhA9th7M8bpO+ftPFgT3C/jlnGtdkoKQxd8J4LFGMcb4orFhyUoXfzUBq
a05aaAd+jJt0IZmo60KYmqbUrBDXzf5g8PcXaCwLrBM3ZanKjBNKOUfkj1d3V8g/
M0E2JdzkacWAErb5iKz+whr21X2RCw6XLAHD84MXmvlH99Kc566BOkCZgXB8BMQQ
cQ94c/7jrgRqrIUvsMFBKwtKgQ==
-----END CERTIFICATE-----
Generated at Wed May 13 00:22:05 2026 by rpki-client