Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft
File:                     cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft (raw, json)
Hash identifier:          SeWzua8wDgRfNn3djY9YdD+HxNysvNSh3vJQN3T19mQ=
Subject key identifier:   89:5B:FC:9F:81:03:33:A3:76:B7:E6:0E:60:36:8F:D2:3F:86:73:72
Authority key identifier: 71:17:3E:DA:73:05:CC:FD:10:BD:78:D8:3A:93:30:E8:C7:64:0D:F6
Certificate issuer:       /CN=A911F627/serialNumber=71173EDA7305CCFD10BD78D83A9330E8C7640DF6
Certificate serial:       0219
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft
Manifest number:          0214
Signing time:             Wed 13 May 2026 02:57:33 +0000
Manifest this update:     Wed 13 May 2026 02:57:32 +0000
Manifest next update:     Wed 20 May 2026 02:57:32 +0000
Files and hashes:         1: cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl (hash: xI/+EKa6Bz5SsKoZUDtjgpXNxed+7alctkNIsk90Uas=)
                          2: C001E5861FCC11EEB409C35EC4F9AE02.roa (hash: oX5jPgoEnJEiktMzwRJVvIVKVxoixwhb1Y5ipQvJJlg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl
                          rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:57:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 537 (0x219)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F627, serialNumber=71173EDA7305CCFD10BD78D83A9330E8C7640DF6
        Validity
            Not Before: May 13 02:57:32 2026 GMT
            Not After : May 20 02:57:32 2026 GMT
        Subject: CN=6a03e89d-6846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c4:ae:cd:0d:74:dd:55:0a:6b:4a:2d:50:f2:
                    89:25:f8:5d:f7:44:ce:b1:fe:de:9b:e4:ef:fe:2d:
                    e4:94:4a:d2:e0:97:bc:7a:d3:71:27:89:f1:e7:90:
                    83:38:fe:cb:8d:d0:81:b7:c8:7f:48:b3:c3:dd:e7:
                    61:02:42:38:88:a0:2d:07:b5:68:0d:df:ac:bc:69:
                    0d:00:f3:4a:b6:9a:c6:19:43:f1:b4:e8:d7:09:d3:
                    32:ce:d6:77:0e:b2:44:d1:21:89:47:06:83:29:df:
                    e9:3c:b0:f8:f8:d7:b6:27:44:a3:0b:66:0b:9c:1c:
                    8f:fd:42:16:e5:22:f6:18:f3:fc:ca:6b:f5:78:bc:
                    14:0b:9d:3b:09:76:2c:d0:c3:43:34:19:8b:31:90:
                    10:10:a1:84:4e:9f:b3:da:2e:35:27:13:4a:81:fa:
                    fe:aa:39:b9:c0:54:db:d7:93:12:55:e4:ae:14:d1:
                    f3:94:c3:f5:9e:ad:ed:67:51:b5:de:2a:31:3c:91:
                    ea:d7:3e:cc:02:33:10:e2:01:32:ed:de:cd:5b:ce:
                    4b:1d:45:13:88:46:9c:ef:4d:be:28:66:6c:7d:47:
                    18:91:d1:99:89:68:d7:c1:7e:a2:53:b8:0e:d0:62:
                    1b:eb:9c:36:79:27:64:fc:e2:7d:55:64:90:4a:4d:
                    c1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:5B:FC:9F:81:03:33:A3:76:B7:E6:0E:60:36:8F:D2:3F:86:73:72
            X509v3 Authority Key Identifier:
                keyid:71:17:3E:DA:73:05:CC:FD:10:BD:78:D8:3A:93:30:E8:C7:64:0D:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:34:13:8d:ae:71:4a:c1:77:42:a5:15:7a:a2:fb:8e:e5:53:
         c2:dd:78:47:94:3d:79:45:d6:23:ed:96:11:bf:17:df:ae:0d:
         e8:74:49:c8:e8:63:e2:76:dc:bd:a8:e8:9b:07:d2:b6:5d:bc:
         9e:2c:ee:17:18:2f:8e:c4:12:e4:b9:01:1f:39:e2:70:b3:31:
         82:7a:40:0e:cf:a4:cc:9c:44:27:c1:f1:09:90:d9:ce:9e:2c:
         44:c6:e8:89:2d:4d:48:b0:8f:5e:d6:3e:b8:37:6a:c0:78:2a:
         d4:4d:b4:31:3f:ee:ac:49:48:d8:6c:16:8b:01:e5:f6:09:14:
         a2:f0:61:e5:62:ee:24:2e:c7:a1:32:93:67:90:30:5e:78:61:
         b9:eb:92:e5:1b:87:9f:27:69:3e:ae:c5:8a:9d:8c:9a:4f:a3:
         f6:a2:a8:82:73:d3:fc:32:11:5f:bf:8f:72:30:d4:84:cf:dd:
         8f:8d:01:35:46:9d:9b:e4:85:aa:61:b3:fe:e3:8d:27:24:94:
         dd:f5:e8:02:e9:60:06:06:4a:3c:89:f8:80:6a:07:43:ad:01:
         45:53:1e:7a:f6:d4:25:f9:06:87:97:3b:42:0d:65:21:d6:2d:
         9b:52:95:9f:75:a3:37:bd:e5:f4:d3:43:0f:4e:64:d9:07:14:
         c6:20:82:d6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUY2MjcxMTAvBgNVBAUTKDcxMTczRURBNzMwNUNDRkQxMEJENzhEODNBOTMzMEU4
Qzc2NDBERjYwHhcNMjYwNTEzMDI1NzMyWhcNMjYwNTIwMDI1NzMyWjAYMRYwFAYD
VQQDEw02YTAzZTg5ZC02ODQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAh8SuzQ103VUKa0otUPKJJfhd90TOsf7em+Tv/i3klErS4Je8etNxJ4nx55CD
OP7LjdCBt8h/SLPD3edhAkI4iKAtB7VoDd+svGkNAPNKtprGGUPxtOjXCdMyztZ3
DrJE0SGJRwaDKd/pPLD4+Ne2J0SjC2YLnByP/UIW5SL2GPP8ymv1eLwUC507CXYs
0MNDNBmLMZAQEKGETp+z2i41JxNKgfr+qjm5wFTb15MSVeSuFNHzlMP1nq3tZ1G1
3ioxPJHq1z7MAjMQ4gEy7d7NW85LHUUTiEac702+KGZsfUcYkdGZiWjXwX6iU7gO
0GIb65w2eSdk/OJ9VWSQSk3BXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIlb/J+B
AzOjdrfmDmA2j9I/hnNyMB8GA1UdIwQYMBaAFHEXPtpzBcz9EL142DqTMOjHZA32
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjYyNy80OTNEQTM2NjFG
QzkxMUVFOTk5RjU5NjBDNEY5QUUwMi9jUmMtMm5NRnpQMFF2WGpZT3BNdzZNZGtE
ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NSYy0ybk1GelAwUXZYallPcE13Nk1ka0RmWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RjYyNy80OTNEQTM2NjFGQzkxMUVFOTk5RjU5NjBDNEY5QUUwMi9jUmMtMm5NRnpQ
MFF2WGpZT3BNdzZNZGtEZlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqzQTja5xSsF3QqUVeqL7juVTwt14R5Q9eUXWI+2WEb8X364N6HRJyOhj4nbc
vajomwfStl28nizuFxgvjsQS5LkBHznicLMxgnpADs+kzJxEJ8HxCZDZzp4sRMbo
iS1NSLCPXtY+uDdqwHgq1E20MT/urElI2GwWiwHl9gkUovBh5WLuJC7HoTKTZ5Aw
XnhhueuS5RuHnydpPq7Fip2Mmk+j9qKognPT/DIRX7+PcjDUhM/dj40BNUadm+SF
qmGz/uONJySU3fXoAulgBgZKPIn4gGoHQ60BRVMeevbUJfkGh5c7Qg1lIdYtm1KV
n3WjN73l9NNDD05k2QcUxiCC1g==
-----END CERTIFICATE-----
Generated at Wed May 13 18:27:54 2026 by rpki-client