Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft
File:                     PSzMkYN0TcaWqFVry5BDhI6V33A.mft (raw, json)
Hash identifier:          8riWqFlzWQoMN7p21jK/9YoKM5ktqIPN1iYyA2sigBk=
Subject key identifier:   AC:EF:0A:A5:4F:35:CE:18:FB:70:57:6E:F1:2B:C7:91:92:C6:D8:78
Authority key identifier: 3D:2C:CC:91:83:74:4D:C6:96:A8:55:6B:CB:90:43:84:8E:95:DF:70
Certificate issuer:       /CN=A912D826/serialNumber=3D2CCC9183744DC696A8556BCB9043848E95DF70
Certificate serial:       0438
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft
Manifest number:          0426
Signing time:             Mon 11 May 2026 00:25:37 +0000
Manifest this update:     Mon 11 May 2026 00:25:37 +0000
Manifest next update:     Mon 18 May 2026 00:25:37 +0000
Files and hashes:         1: PSzMkYN0TcaWqFVry5BDhI6V33A.crl (hash: a/85CoAMwl6blHsLP/8pugtyYkMdtE4gJSBL0OlhnoM=)
                          2: 804B03560A7211EE8FA2CD58C4F9AE02.roa (hash: i18vAYWYZqWUAwFZVSlGk7OxKqt1gz8XjzU2hmpsWh8=)
                          3: 69A20286514B11F0B8A8C66DC4F9AE02.roa (hash: NkI+pmzBqCxF9snRnYsLLFaunC0T93+l8haq4O7khjQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.crl
                          rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 00:25:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1080 (0x438)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D826, serialNumber=3D2CCC9183744DC696A8556BCB9043848E95DF70
        Validity
            Not Before: May 11 00:25:37 2026 GMT
            Not After : May 18 00:25:37 2026 GMT
        Subject: CN=6a012201-c635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b2:11:c1:a3:a6:7b:5a:9a:24:2e:07:b0:a5:
                    9b:e0:ea:06:7c:40:70:97:6f:c0:96:bf:87:9d:0e:
                    e2:b5:c4:bb:94:50:66:d7:94:a3:1a:99:65:ec:10:
                    52:3d:1e:37:bb:03:38:21:42:0c:30:de:a9:05:f0:
                    09:77:8f:6e:40:ce:58:67:ce:67:24:21:10:80:61:
                    0b:7a:22:24:0c:a8:ae:24:b5:93:5e:c0:45:90:84:
                    60:0e:cf:5c:48:e8:79:53:f5:07:c3:cd:6b:68:9a:
                    61:2d:4c:a4:9a:d0:a5:b8:f2:f2:e6:2f:1c:fe:ff:
                    8c:ac:e6:88:9a:91:17:8e:3b:eb:93:54:ed:49:8b:
                    b9:47:c2:11:ff:42:19:b3:54:ce:b9:74:61:58:81:
                    31:f2:ac:b1:78:72:4e:bf:45:1a:58:84:9b:54:3b:
                    bd:84:5f:a4:2f:d5:24:a6:5a:d4:8d:80:b1:a8:8f:
                    22:83:fd:89:36:ab:9a:49:c1:ba:3d:13:20:17:eb:
                    10:07:a2:cd:9a:d6:a8:5b:10:33:77:b8:82:a2:7c:
                    44:07:7b:56:dd:23:92:3d:b8:12:c8:24:1d:38:ea:
                    90:b8:92:8b:a0:13:97:3a:83:2b:d3:82:f4:c7:8d:
                    30:86:74:ed:cd:4c:fc:09:74:0e:a0:41:2b:68:92:
                    5a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:EF:0A:A5:4F:35:CE:18:FB:70:57:6E:F1:2B:C7:91:92:C6:D8:78
            X509v3 Authority Key Identifier:
                keyid:3D:2C:CC:91:83:74:4D:C6:96:A8:55:6B:CB:90:43:84:8E:95:DF:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:fe:60:47:7e:80:39:32:61:59:62:81:d8:fb:0e:ac:98:04:
         67:0d:68:5c:1f:b6:85:89:ca:a0:a6:fc:6f:0b:d7:09:73:b2:
         02:90:75:94:12:dc:21:c1:1f:38:45:f7:77:3b:85:f0:4d:54:
         59:0c:ef:3d:ee:0b:e3:a1:5f:65:30:12:8b:ea:34:6b:9f:2d:
         9c:07:ee:d2:17:25:71:92:cc:22:7b:78:85:8c:50:b4:58:5a:
         fb:81:db:53:2e:6b:a4:a9:6a:98:63:ef:b6:4c:9c:89:a2:af:
         c7:2c:56:7b:7a:30:7a:a3:90:ab:93:32:c6:1e:16:97:bc:54:
         0f:43:56:96:96:81:d8:7e:a9:7c:4b:5e:90:1b:15:dd:ad:96:
         d8:4f:77:6f:93:a4:ca:f4:e4:c0:8a:97:de:ee:42:8b:81:1c:
         43:a2:98:6e:27:67:a1:73:31:0f:bc:50:8d:5f:dc:1f:5e:36:
         cd:5f:f4:e9:71:ab:d8:ea:bc:1c:65:02:9f:31:2e:a2:0d:bd:
         e4:a3:29:d6:bf:65:1d:99:d3:68:18:49:d0:57:89:9d:0f:30:
         4d:aa:0d:de:b3:83:57:92:28:c6:17:38:7a:f1:c0:2d:82:47:
         e3:d7:3b:f1:5c:01:af:2c:7c:b6:0d:62:a3:70:0e:9d:a0:b0:
         22:38:dc:59
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkQ4MjYxMTAvBgNVBAUTKDNEMkNDQzkxODM3NDREQzY5NkE4NTU2QkNCOTA0Mzg0
OEU5NURGNzAwHhcNMjYwNTExMDAyNTM3WhcNMjYwNTE4MDAyNTM3WjAYMRYwFAYD
VQQDEw02YTAxMjIwMS1jNjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApLIRwaOme1qaJC4HsKWb4OoGfEBwl2/Alr+HnQ7itcS7lFBm15SjGpll7BBS
PR43uwM4IUIMMN6pBfAJd49uQM5YZ85nJCEQgGELeiIkDKiuJLWTXsBFkIRgDs9c
SOh5U/UHw81raJphLUykmtCluPLy5i8c/v+MrOaImpEXjjvrk1TtSYu5R8IR/0IZ
s1TOuXRhWIEx8qyxeHJOv0UaWISbVDu9hF+kL9UkplrUjYCxqI8ig/2JNquaScG6
PRMgF+sQB6LNmtaoWxAzd7iConxEB3tW3SOSPbgSyCQdOOqQuJKLoBOXOoMr04L0
x40whnTtzUz8CXQOoEEraJJaPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKzvCqVP
Nc4Y+3BXbvErx5GSxth4MB8GA1UdIwQYMBaAFD0szJGDdE3GlqhVa8uQQ4SOld9w
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDgyNi9DRjRFMUQ3NEFF
NEExMUVDODQ2RjNGNjhDNEY5QUUwMi9QU3pNa1lOMFRjYVdxRlZyeTVCRGhJNlYz
M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BTek1rWU4wVGNhV3FGVnJ5NUJEaEk2VjMzQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RDgyNi9DRjRFMUQ3NEFFNEExMUVDODQ2RjNGNjhDNEY5QUUwMi9QU3pNa1lOMFRj
YVdxRlZyeTVCRGhJNlYzM0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAR/5gR36AOTJhWWKB2PsOrJgEZw1oXB+2hYnKoKb8bwvXCXOyApB1lBLcIcEf
OEX3dzuF8E1UWQzvPe4L46FfZTASi+o0a58tnAfu0hclcZLMInt4hYxQtFha+4Hb
Uy5rpKlqmGPvtkyciaKvxyxWe3oweqOQq5Myxh4Wl7xUD0NWlpaB2H6pfEtekBsV
3a2W2E93b5OkyvTkwIqX3u5Ci4EcQ6KYbidnoXMxD7xQjV/cH142zV/06XGr2Oq8
HGUCnzEuog295KMp1r9lHZnTaBhJ0FeJnQ8wTaoN3rODV5Ioxhc4evHALYJH49c7
8VwBryx8tg1io3AOnaCwIjjcWQ==
-----END CERTIFICATE-----
Generated at Wed May 13 01:13:36 2026 by rpki-client