Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft
File:                     xMZ-u2st3Gkku7llXn4PghhTDGU.mft (raw, json)
Hash identifier:          Eqiij1YdWSSPFIj/CeSDvNf630w0CbJeQgpQz29OIjU=
Subject key identifier:   A1:62:F0:DC:CC:94:E8:34:BF:60:17:FA:88:E9:DC:52:88:E8:6D:C0
Authority key identifier: C4:C6:7E:BB:6B:2D:DC:69:24:BB:B9:65:5E:7E:0F:82:18:53:0C:65
Certificate issuer:       /CN=A9122D51/serialNumber=C4C67EBB6B2DDC6924BBB9655E7E0F8218530C65
Certificate serial:       0195
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xMZ-u2st3Gkku7llXn4PghhTDGU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft
Manifest number:          018E
Signing time:             Wed 13 May 2026 04:30:20 +0000
Manifest this update:     Wed 13 May 2026 04:30:19 +0000
Manifest next update:     Wed 20 May 2026 04:30:19 +0000
Files and hashes:         1: xMZ-u2st3Gkku7llXn4PghhTDGU.crl (hash: ndoepERuDbHkw+kTY1EAdEwkwTaylVK+3dxpitl5wdA=)
                          2: 6D610A58F23711EEA11AA759C4F9AE02.roa (hash: CDh8LELSQpCINvTVnbkjWg6FuGY4yhT7jRqEhYdsypk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.crl
                          rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xMZ-u2st3Gkku7llXn4PghhTDGU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 04:30:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 405 (0x195)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122D51, serialNumber=C4C67EBB6B2DDC6924BBB9655E7E0F8218530C65
        Validity
            Not Before: May 13 04:30:19 2026 GMT
            Not After : May 20 04:30:19 2026 GMT
        Subject: CN=6a03fe5b-e8f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:49:eb:0d:80:ef:ed:34:dd:77:0b:3e:ec:f7:
                    1c:23:45:b5:68:9d:6d:3f:de:83:37:d7:54:ea:08:
                    ce:b6:64:db:33:bc:e6:52:4b:e5:69:59:7f:b5:8f:
                    6a:a7:16:52:ce:c9:10:02:2e:94:57:85:6a:72:5c:
                    1f:07:21:d3:ba:30:92:95:69:ce:03:74:45:b3:04:
                    69:23:a3:ec:c1:56:20:dc:f5:e7:9a:f2:40:82:b0:
                    65:da:a0:a0:f4:8e:98:95:aa:fd:c7:78:09:f9:cb:
                    00:c3:c7:31:00:3d:86:fd:68:ff:6e:3d:25:58:5d:
                    08:72:41:6f:5b:4a:ec:aa:96:68:4a:5c:78:14:ee:
                    31:2b:a1:77:57:d7:3d:fa:fe:f4:d2:70:14:a8:09:
                    9d:2b:c9:a4:a6:73:69:90:e5:d6:be:6a:76:59:a0:
                    14:26:a7:95:80:ed:6f:bd:75:a7:d9:bb:2f:04:d9:
                    ae:18:47:0f:3a:d3:8c:74:fc:14:7a:84:af:1e:dc:
                    7c:91:6c:1f:34:c2:e6:d5:58:6a:f3:81:eb:92:71:
                    af:1c:2c:9f:2f:17:96:6e:95:7e:29:03:a5:15:56:
                    df:8c:30:5d:76:e8:61:ec:12:a1:d6:90:f8:b6:c2:
                    56:5c:a6:12:47:45:02:04:b7:1e:1a:13:d8:92:a5:
                    36:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:62:F0:DC:CC:94:E8:34:BF:60:17:FA:88:E9:DC:52:88:E8:6D:C0
            X509v3 Authority Key Identifier:
                keyid:C4:C6:7E:BB:6B:2D:DC:69:24:BB:B9:65:5E:7E:0F:82:18:53:0C:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xMZ-u2st3Gkku7llXn4PghhTDGU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:71:58:ce:93:24:c1:ad:c7:f0:2b:7f:e8:b4:4f:df:4d:76:
         97:55:6a:e0:80:c4:9a:87:6b:93:94:e9:25:10:b3:05:47:4b:
         02:9c:5c:c3:5f:af:82:15:61:d0:ef:72:2c:d6:1c:df:53:91:
         99:a5:67:50:13:1f:2b:0b:3d:e5:11:bb:8b:36:e4:f6:97:89:
         d3:9c:bb:8d:78:15:f1:63:42:1d:d1:1a:47:3a:e4:eb:94:36:
         29:89:5b:2c:ce:ab:1b:b6:e9:80:9e:45:a0:0e:ad:bb:02:d4:
         d2:14:93:79:2f:7b:5b:a4:ee:fd:f7:fb:49:58:ca:67:c4:cd:
         61:f0:79:f5:ba:32:54:b2:be:7d:a2:17:0e:b0:aa:f3:16:8c:
         75:20:8e:6d:c0:71:e0:5b:f3:7a:60:65:0a:eb:ad:79:eb:b2:
         1f:b2:25:a5:10:45:94:a3:b7:bd:b6:75:b2:4e:b3:e9:b0:7f:
         96:fd:0c:73:15:1c:61:dd:35:ac:67:a4:97:c1:81:9c:2d:f2:
         04:b8:d2:4d:e7:0e:5f:ea:67:c9:00:55:c2:54:4a:c7:f2:5f:
         47:de:d4:53:12:9a:6d:21:e8:7e:7d:85:c2:67:4c:76:9e:8c:
         62:64:18:40:4f:50:7f:c4:0f:3d:71:a5:e2:43:93:f6:81:eb:
         07:09:c0:db
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjJENTExMTAvBgNVBAUTKEM0QzY3RUJCNkIyRERDNjkyNEJCQjk2NTVFN0UwRjgy
MTg1MzBDNjUwHhcNMjYwNTEzMDQzMDE5WhcNMjYwNTIwMDQzMDE5WjAYMRYwFAYD
VQQDEw02YTAzZmU1Yi1lOGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAl0nrDYDv7TTddws+7PccI0W1aJ1tP96DN9dU6gjOtmTbM7zmUkvlaVl/tY9q
pxZSzskQAi6UV4VqclwfByHTujCSlWnOA3RFswRpI6PswVYg3PXnmvJAgrBl2qCg
9I6Ylar9x3gJ+csAw8cxAD2G/Wj/bj0lWF0IckFvW0rsqpZoSlx4FO4xK6F3V9c9
+v700nAUqAmdK8mkpnNpkOXWvmp2WaAUJqeVgO1vvXWn2bsvBNmuGEcPOtOMdPwU
eoSvHtx8kWwfNMLm1Vhq84HrknGvHCyfLxeWbpV+KQOlFVbfjDBdduhh7BKh1pD4
tsJWXKYSR0UCBLceGhPYkqU2VwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKFi8NzM
lOg0v2AX+ojp3FKI6G3AMB8GA1UdIwQYMBaAFMTGfrtrLdxpJLu5ZV5+D4IYUwxl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkQ1MS9FQUU1RkNBQUYy
MzYxMUVFOEM4Qjk3NThDNEY5QUUwMi94TVotdTJzdDNHa2t1N2xsWG40UGdoaFRE
R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hNWi11MnN0M0dra3U3bGxYbjRQZ2hoVERHVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MkQ1MS9FQUU1RkNBQUYyMzYxMUVFOEM4Qjk3NThDNEY5QUUwMi94TVotdTJzdDNH
a2t1N2xsWG40UGdoaFRER1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVnFYzpMkwa3H8Ct/6LRP3012l1Vq4IDEmodrk5TpJRCzBUdLApxcw1+vghVh
0O9yLNYc31ORmaVnUBMfKws95RG7izbk9peJ05y7jXgV8WNCHdEaRzrk65Q2KYlb
LM6rG7bpgJ5FoA6tuwLU0hSTeS97W6Tu/ff7SVjKZ8TNYfB59boyVLK+faIXDrCq
8xaMdSCObcBx4FvzemBlCuuteeuyH7IlpRBFlKO3vbZ1sk6z6bB/lv0McxUcYd01
rGekl8GBnC3yBLjSTecOX+pnyQBVwlRKx/JfR97UUxKabSHofn2FwmdMdp6MYmQY
QE9Qf8QPPXGl4kOT9oHrBwnA2w==
-----END CERTIFICATE-----
Generated at Wed May 13 08:27:24 2026 by rpki-client