Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D71D/1E0F992E36CE11F0A2A69C1FC4F9AE02/lSpNx8TWEJWYvu5awKIG0nuFxWo.mft
File:                     lSpNx8TWEJWYvu5awKIG0nuFxWo.mft (raw, json)
Hash identifier:          rLybHlDKQtEzWdOchAFiz8N3c1xcPqAfwBtTcirsGuc=
Subject key identifier:   01:EA:B8:75:86:62:D2:86:C7:8F:6C:9E:D4:5C:6A:5E:C5:AB:38:AE
Authority key identifier: 95:2A:4D:C7:C4:D6:10:95:98:BE:EE:5A:C0:A2:06:D2:7B:85:C5:6A
Certificate issuer:       /CN=A912D71D/serialNumber=952A4DC7C4D6109598BEEE5AC0A206D27B85C56A
Certificate serial:       BB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSpNx8TWEJWYvu5awKIG0nuFxWo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D71D/1E0F992E36CE11F0A2A69C1FC4F9AE02/lSpNx8TWEJWYvu5awKIG0nuFxWo.mft
Manifest number:          B7
Signing time:             Mon 11 May 2026 07:11:20 +0000
Manifest this update:     Mon 11 May 2026 07:11:19 +0000
Manifest next update:     Mon 18 May 2026 07:11:19 +0000
Files and hashes:         1: lSpNx8TWEJWYvu5awKIG0nuFxWo.crl (hash: bpdEo52KZTiq6BstyuveaUZ/GeNb4ca5hloBmqiDybo=)
                          2: 4002AE6236CF11F0AA705D26C4F9AE02.roa (hash: PYLDscz39D9VfGo8zcZSUWDhN0EWb8SMMJ0oBjb9APU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D71D/1E0F992E36CE11F0A2A69C1FC4F9AE02/lSpNx8TWEJWYvu5awKIG0nuFxWo.crl
                          rsync://rpki.apnic.net/member_repository/A912D71D/1E0F992E36CE11F0A2A69C1FC4F9AE02/lSpNx8TWEJWYvu5awKIG0nuFxWo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSpNx8TWEJWYvu5awKIG0nuFxWo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 07:11:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 187 (0xbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D71D, serialNumber=952A4DC7C4D6109598BEEE5AC0A206D27B85C56A
        Validity
            Not Before: May 11 07:11:19 2026 GMT
            Not After : May 18 07:11:19 2026 GMT
        Subject: CN=6a018117-effc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:87:fb:f8:b1:d8:18:0e:3f:55:36:4c:20:87:
                    a8:17:b0:be:58:1d:c4:52:eb:5b:1a:eb:98:a8:f7:
                    51:d9:5b:c7:6d:d6:98:e1:8c:8f:43:1d:6b:9b:33:
                    3e:8d:de:f7:0f:fc:12:6f:b8:5f:93:84:fd:d2:9c:
                    fd:34:51:a8:54:4a:fb:24:77:f7:f8:a6:b1:a5:ea:
                    57:85:2a:89:a9:e7:15:2a:fc:ed:2a:38:69:d9:58:
                    8d:ee:67:ad:db:38:23:70:f6:24:36:ca:5b:2d:82:
                    cc:bf:93:cb:89:dc:cc:63:d1:6b:d8:09:dd:3c:98:
                    d1:2b:4a:13:37:51:6e:d9:fc:dd:99:f8:6f:0b:36:
                    b8:67:25:73:20:aa:81:d3:3d:dc:10:92:50:e9:a5:
                    ef:af:dc:b3:ba:8b:80:ce:ae:e8:fa:f3:5b:cd:a2:
                    38:52:3a:c2:08:dd:c6:07:15:f0:a2:c0:c8:cd:c1:
                    51:9e:37:e3:e0:39:ea:10:fe:9d:82:31:9a:26:44:
                    32:10:51:91:db:ae:eb:b2:6a:66:8f:4e:50:c6:3b:
                    db:20:ed:60:b4:19:e1:40:65:5a:4f:78:47:e1:84:
                    ce:0c:f0:82:99:d4:53:5a:26:0f:ae:bb:0f:be:74:
                    55:84:87:b1:48:22:3c:2d:e8:57:a9:c0:3d:ac:8e:
                    16:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:EA:B8:75:86:62:D2:86:C7:8F:6C:9E:D4:5C:6A:5E:C5:AB:38:AE
            X509v3 Authority Key Identifier:
                keyid:95:2A:4D:C7:C4:D6:10:95:98:BE:EE:5A:C0:A2:06:D2:7B:85:C5:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D71D/1E0F992E36CE11F0A2A69C1FC4F9AE02/lSpNx8TWEJWYvu5awKIG0nuFxWo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSpNx8TWEJWYvu5awKIG0nuFxWo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D71D/1E0F992E36CE11F0A2A69C1FC4F9AE02/lSpNx8TWEJWYvu5awKIG0nuFxWo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:cb:6b:85:d9:d7:99:f4:c7:6b:fc:d2:1c:18:16:52:1a:ad:
         81:d5:27:ce:62:4d:07:ed:a5:c7:0d:c6:b8:0d:cc:22:e9:d9:
         8c:f8:44:3f:a9:e9:8e:fb:75:05:34:d4:69:d0:2b:31:1b:5e:
         27:7a:07:b8:28:e5:f9:e2:94:51:1a:2a:24:63:47:8d:fb:da:
         6c:16:75:71:65:34:33:54:b7:b2:2e:ac:1a:25:ff:d0:e2:50:
         c8:28:19:29:e2:ad:ae:53:56:5c:43:e1:7b:44:f0:e8:c0:b7:
         bd:dd:c6:b8:0e:bf:7f:b8:d5:f1:0f:ea:c8:6b:5c:ad:48:3f:
         cf:46:19:db:5d:1f:5e:77:56:9a:87:32:3a:b1:1b:be:aa:0f:
         0d:8a:4a:63:9c:20:84:a8:52:75:e4:d2:db:21:64:19:09:f2:
         1c:ad:f4:3e:75:74:42:88:71:21:74:11:4a:6e:85:0f:d6:24:
         1e:52:59:85:c2:99:91:c7:d7:fd:ac:fe:93:7e:d8:10:e8:c2:
         9b:6a:68:5f:03:80:e1:1e:83:fe:94:5c:3c:c9:37:4f:68:c6:
         1a:78:99:16:99:30:98:0d:73:23:7d:43:4c:36:6e:30:30:a6:
         f9:09:68:2f:2b:05:56:cc:77:2f:22:ec:89:48:a4:04:84:78:
         26:6d:86:75
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkQ3MUQxMTAvBgNVBAUTKDk1MkE0REM3QzRENjEwOTU5OEJFRUU1QUMwQTIwNkQy
N0I4NUM1NkEwHhcNMjYwNTExMDcxMTE5WhcNMjYwNTE4MDcxMTE5WjAYMRYwFAYD
VQQDEw02YTAxODExNy1lZmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxYf7+LHYGA4/VTZMIIeoF7C+WB3EUutbGuuYqPdR2VvHbdaY4YyPQx1rmzM+
jd73D/wSb7hfk4T90pz9NFGoVEr7JHf3+KaxpepXhSqJqecVKvztKjhp2ViN7met
2zgjcPYkNspbLYLMv5PLidzMY9Fr2AndPJjRK0oTN1Fu2fzdmfhvCza4ZyVzIKqB
0z3cEJJQ6aXvr9yzuouAzq7o+vNbzaI4UjrCCN3GBxXwosDIzcFRnjfj4DnqEP6d
gjGaJkQyEFGR267rsmpmj05QxjvbIO1gtBnhQGVaT3hH4YTODPCCmdRTWiYPrrsP
vnRVhIexSCI8LehXqcA9rI4WmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAHquHWG
YtKGx49sntRcal7FqziuMB8GA1UdIwQYMBaAFJUqTcfE1hCVmL7uWsCiBtJ7hcVq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDcxRC8xRTBGOTkyRTM2
Q0UxMUYwQTJBNjlDMUZDNEY5QUUwMi9sU3BOeDhUV0VKV1l2dTVhd0tJRzBudUZ4
V28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2xTcE54OFRXRUpXWXZ1NWF3S0lHMG51RnhXby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RDcxRC8xRTBGOTkyRTM2Q0UxMUYwQTJBNjlDMUZDNEY5QUUwMi9sU3BOeDhUV0VK
V1l2dTVhd0tJRzBudUZ4V28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAX8trhdnXmfTHa/zSHBgWUhqtgdUnzmJNB+2lxw3GuA3MIunZjPhEP6npjvt1
BTTUadArMRteJ3oHuCjl+eKUURoqJGNHjfvabBZ1cWU0M1S3si6sGiX/0OJQyCgZ
KeKtrlNWXEPhe0Tw6MC3vd3GuA6/f7jV8Q/qyGtcrUg/z0YZ210fXndWmocyOrEb
vqoPDYpKY5wghKhSdeTS2yFkGQnyHK30PnV0QohxIXQRSm6FD9YkHlJZhcKZkcfX
/az+k37YEOjCm2poXwOA4R6D/pRcPMk3T2jGGniZFpkwmA1zI31DTDZuMDCm+Qlo
LysFVsx3LyLsiUikBIR4Jm2GdQ==
-----END CERTIFICATE-----
Generated at Wed May 13 05:22:49 2026 by rpki-client