Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft
File:                     Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft (raw, json)
Hash identifier:          svYHq/3h+nv2YNJohHnZNv01ukLC3P63NsmFIAPu10k=
Subject key identifier:   75:27:C4:41:70:5F:22:EB:7E:21:84:0F:5C:2E:04:4A:05:22:F0:1B
Authority key identifier: 42:4E:0A:38:43:F3:FA:1F:44:B6:AF:2E:F3:EE:11:81:5C:4B:52:09
Certificate issuer:       /CN=A912C8AF/serialNumber=424E0A3843F3FA1F44B6AF2EF3EE11815C4B5209
Certificate serial:       07E8
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft
Manifest number:          07DC
Signing time:             Tue 12 May 2026 19:19:42 +0000
Manifest this update:     Tue 12 May 2026 19:19:41 +0000
Manifest next update:     Tue 19 May 2026 19:19:41 +0000
Files and hashes:         1: Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl (hash: hpxA0ICkKbd/Cw+r6yXe/9g05Mnp0W7FlGPwDa/Y11c=)
                          2: 510308503E8211EBA910FF57C4F9AE02.roa (hash: O/lTB0pDSB8sB0dRmgz1yxjauyhwEgNkjtUoJWKHyCo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl
                          rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:19:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2024 (0x7e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C8AF, serialNumber=424E0A3843F3FA1F44B6AF2EF3EE11815C4B5209
        Validity
            Not Before: May 12 19:19:41 2026 GMT
            Not After : May 19 19:19:41 2026 GMT
        Subject: CN=6a037d4d-9fd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:57:00:fc:9f:e7:75:8e:54:78:e4:0d:a1:3b:
                    c4:cf:ba:71:21:2a:f1:8c:eb:fc:45:6e:08:fa:e7:
                    75:d6:d3:4d:87:3c:b9:4d:32:e9:11:fa:37:79:5d:
                    4e:0c:bf:d5:f4:e9:05:0b:49:37:e3:0f:a9:30:17:
                    dc:76:19:8b:c4:f1:57:c6:19:28:67:b2:11:2a:5f:
                    f5:61:99:54:00:60:c8:37:b5:99:8a:09:ce:c6:d3:
                    2b:c1:b4:21:0a:44:b5:24:f8:57:e3:1f:2e:61:13:
                    1c:55:cd:5c:a5:f6:ce:ba:a0:a1:a4:ab:cc:94:95:
                    b0:f9:09:3b:0c:99:c0:12:f4:6f:7e:08:ec:11:c4:
                    2c:32:17:77:56:b0:a3:e4:3d:ce:70:d8:dd:a6:92:
                    37:63:eb:92:db:fa:62:c8:05:9d:d8:4d:06:c8:c4:
                    f7:07:8a:5b:98:2e:42:0f:a0:d2:30:3f:45:00:8a:
                    63:a4:1b:71:86:3c:aa:7e:06:73:de:83:81:16:26:
                    af:0a:73:72:0d:8e:e3:a4:86:59:43:c0:9a:2c:99:
                    91:cc:28:a4:bd:b8:3e:a4:58:06:66:66:74:7c:a1:
                    d6:c9:1a:2c:bd:12:cc:2b:c6:5b:31:03:8b:7e:0d:
                    68:4c:c4:f3:22:08:f1:c2:7e:ab:99:a4:19:ba:38:
                    1e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:27:C4:41:70:5F:22:EB:7E:21:84:0F:5C:2E:04:4A:05:22:F0:1B
            X509v3 Authority Key Identifier:
                keyid:42:4E:0A:38:43:F3:FA:1F:44:B6:AF:2E:F3:EE:11:81:5C:4B:52:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:c7:bb:c0:55:81:42:83:df:82:8b:dd:ff:7a:60:cf:e5:2e:
         5f:ef:75:45:15:e4:f2:89:cb:a8:58:07:19:99:83:84:23:77:
         8d:d4:e5:cc:0c:f5:a3:8a:ed:77:5c:cb:a2:b8:e8:86:8a:50:
         ed:e8:c7:f4:31:4f:02:24:f3:ca:d5:83:cb:81:56:dd:0b:19:
         87:23:28:6a:08:6e:c3:b9:c4:f4:1a:a5:2f:01:90:2c:24:24:
         90:5c:8c:c5:69:44:28:b7:95:2a:ff:f9:7a:a2:3e:64:ab:e6:
         d7:c5:f3:d1:3b:07:81:f0:d7:fb:38:40:ec:7b:4a:f2:9d:d7:
         86:44:4a:dc:6f:3a:f9:62:e8:d4:9c:6c:1c:82:de:17:9c:10:
         bc:be:e6:9e:81:a6:7e:7b:1d:67:b1:ee:b5:af:02:70:c6:5a:
         1a:a5:2a:28:34:b5:b6:0d:23:aa:55:22:43:7f:01:4f:fc:7c:
         f2:66:a2:25:ef:d9:d0:03:77:79:23:f8:7e:0a:4c:eb:ba:9a:
         bd:7d:0c:7c:d5:2f:9d:01:69:27:bd:1b:3f:f7:72:18:1a:b7:
         db:69:3f:65:5e:5b:ca:b2:d9:11:7d:82:54:a2:ca:dc:24:e7:
         cb:d1:80:51:b3:16:d2:78:59:17:fa:85:df:03:c7:b5:77:4b:
         fc:ca:9e:d0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB+gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkM4QUYxMTAvBgNVBAUTKDQyNEUwQTM4NDNGM0ZBMUY0NEI2QUYyRUYzRUUxMTgx
NUM0QjUyMDkwHhcNMjYwNTEyMTkxOTQxWhcNMjYwNTE5MTkxOTQxWjAYMRYwFAYD
VQQDEw02YTAzN2Q0ZC05ZmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3lcA/J/ndY5UeOQNoTvEz7pxISrxjOv8RW4I+ud11tNNhzy5TTLpEfo3eV1O
DL/V9OkFC0k34w+pMBfcdhmLxPFXxhkoZ7IRKl/1YZlUAGDIN7WZignOxtMrwbQh
CkS1JPhX4x8uYRMcVc1cpfbOuqChpKvMlJWw+Qk7DJnAEvRvfgjsEcQsMhd3VrCj
5D3OcNjdppI3Y+uS2/piyAWd2E0GyMT3B4pbmC5CD6DSMD9FAIpjpBtxhjyqfgZz
3oOBFiavCnNyDY7jpIZZQ8CaLJmRzCikvbg+pFgGZmZ0fKHWyRosvRLMK8ZbMQOL
fg1oTMTzIgjxwn6rmaQZujgebwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHUnxEFw
XyLrfiGED1wuBEoFIvAbMB8GA1UdIwQYMBaAFEJOCjhD8/ofRLavLvPuEYFcS1IJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhBRi9FRTBBRUVDQTNF
ODExMUVCOUFCRDkyMEZDNEY5QUUwMi9RazRLT0VQei1oOUV0cTh1OC00UmdWeExV
Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL1FrNEtPRVB6LWg5RXRxOHU4LTRSZ1Z4TFVnay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QzhBRi9FRTBBRUVDQTNFODExMUVCOUFCRDkyMEZDNEY5QUUwMi9RazRLT0VQei1o
OUV0cTh1OC00UmdWeExVZ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQse7wFWBQoPfgovd/3pgz+UuX+91RRXk8onLqFgHGZmDhCN3jdTlzAz1o4rt
d1zLorjohopQ7ejH9DFPAiTzytWDy4FW3QsZhyMoaghuw7nE9BqlLwGQLCQkkFyM
xWlEKLeVKv/5eqI+ZKvm18Xz0TsHgfDX+zhA7HtK8p3XhkRK3G86+WLo1JxsHILe
F5wQvL7mnoGmfnsdZ7Huta8CcMZaGqUqKDS1tg0jqlUiQ38BT/x88maiJe/Z0AN3
eSP4fgpM67qavX0MfNUvnQFpJ70bP/dyGBq322k/ZV5byrLZEX2CVKLK3CTny9GA
UbMW0nhZF/qF3wPHtXdL/Mqe0A==
-----END CERTIFICATE-----
Generated at Wed May 13 05:48:46 2026 by rpki-client