Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft
File:                     VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft (raw, json)
Hash identifier:          SoqxlhCfiJMfhXTCakqwycBvo+sEJBDvhPFh9yQCLr4=
Subject key identifier:   FF:10:37:E1:76:9E:8A:63:4D:D6:C5:D6:A7:CE:56:29:FB:B0:61:DC
Authority key identifier: 55:E4:85:18:8C:5C:9D:2E:24:C8:34:5C:97:BC:34:62:72:1C:98:CE
Certificate issuer:       /CN=A912FBD2/serialNumber=55E485188C5C9D2E24C8345C97BC3462721C98CE
Certificate serial:       04C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VeSFGIxcnS4kyDRcl7w0YnIcmM4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft
Manifest number:          04C0
Signing time:             Tue 12 May 2026 23:58:40 +0000
Manifest this update:     Tue 12 May 2026 23:58:39 +0000
Manifest next update:     Tue 19 May 2026 23:58:39 +0000
Files and hashes:         1: VeSFGIxcnS4kyDRcl7w0YnIcmM4.crl (hash: hW3UzRTMjw3d2J7ZP37ZgMz92axfakXYmIVyROObR40=)
                          2: 8A7E8D5C6F5511ECB5FAA20FC4F9AE02.roa (hash: Ye+a8GT+XgDN4u+M9N9k3FjrUxRsvTyLwzxddvL9o4Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.crl
                          rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VeSFGIxcnS4kyDRcl7w0YnIcmM4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 23:58:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1222 (0x4c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FBD2, serialNumber=55E485188C5C9D2E24C8345C97BC3462721C98CE
        Validity
            Not Before: May 12 23:58:39 2026 GMT
            Not After : May 19 23:58:39 2026 GMT
        Subject: CN=6a03beb0-03a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3d:a2:31:47:8f:d9:d7:01:2e:96:9e:ae:32:
                    70:d7:f0:ff:f7:ad:9d:5d:d2:60:d0:8d:3e:d4:a7:
                    5c:4c:fc:cf:fc:81:ba:af:7f:d9:03:77:1b:32:78:
                    9e:78:73:70:3f:94:67:a9:05:39:f0:be:95:3e:61:
                    26:80:4f:f7:54:7b:0e:23:ab:cd:e0:7e:07:3a:86:
                    34:6e:e5:03:2a:a6:ec:48:92:18:44:84:69:a2:18:
                    34:f9:34:f4:5c:fe:79:7b:5f:27:ab:ac:3e:4a:3f:
                    28:04:ba:5f:11:98:60:1d:7f:70:6d:71:45:9b:67:
                    8b:23:3a:d5:37:3a:4c:88:69:37:ec:00:f4:61:87:
                    f8:e1:46:4d:cb:b2:0d:18:80:05:bd:3d:39:15:f5:
                    5a:fa:c3:e1:c3:c9:a5:6c:97:9f:01:12:ed:b8:b7:
                    ee:68:fd:b0:a6:2a:cf:37:a5:46:18:98:5e:e2:c5:
                    45:99:f4:f6:96:58:77:b6:80:ed:54:55:4e:2a:db:
                    b1:fc:43:58:78:60:6c:ee:07:e1:67:87:77:05:90:
                    71:ed:0d:f5:b2:14:09:cb:1f:0f:33:25:a0:00:a8:
                    d0:04:d4:b5:58:ea:f5:9d:ce:de:db:0e:f0:c9:ef:
                    e6:a8:d6:0b:c5:10:66:f4:57:df:ab:95:5c:01:18:
                    31:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:10:37:E1:76:9E:8A:63:4D:D6:C5:D6:A7:CE:56:29:FB:B0:61:DC
            X509v3 Authority Key Identifier:
                keyid:55:E4:85:18:8C:5C:9D:2E:24:C8:34:5C:97:BC:34:62:72:1C:98:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VeSFGIxcnS4kyDRcl7w0YnIcmM4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:bf:52:9a:68:7f:96:af:da:eb:8b:19:f5:da:6a:71:c9:91:
         46:70:b0:31:4d:95:6c:cf:d4:f7:f8:a6:d9:64:be:f9:4f:81:
         fd:aa:8a:a4:b2:15:29:2b:f9:01:89:91:39:97:0f:37:49:4c:
         a5:4b:7f:32:c5:fa:df:07:7a:91:71:14:5d:50:7f:be:c4:e4:
         2e:5e:b8:c7:42:b6:b2:b8:00:2a:75:cf:72:b8:2b:69:11:cb:
         e1:bb:13:6a:ea:f5:f0:67:44:e8:4a:6d:48:ca:9a:38:e0:1a:
         29:a1:c4:04:7c:91:b3:c4:31:08:5a:dd:13:fa:bd:c8:61:a8:
         d6:f0:b4:5a:cc:d8:d7:86:2a:d9:99:60:87:d1:30:63:88:3b:
         fd:aa:47:cd:08:2c:a0:14:6e:24:44:cf:fb:a1:79:31:a6:93:
         4b:71:6b:3f:3f:92:c0:f3:96:ac:f3:e6:8d:8c:c4:5d:35:4f:
         fe:d7:a6:fa:ec:d5:9c:39:2d:6f:55:7a:f0:0b:1d:cb:48:30:
         c2:58:05:5a:1a:a8:3b:15:6c:a1:5c:1c:f2:46:38:f7:cc:b1:
         81:ef:d9:6e:15:88:1f:1e:85:7f:72:2c:3d:02:43:b6:c5:14:
         2b:e9:1b:5f:dd:a9:b4:d9:c8:c9:cf:24:12:74:68:fe:47:3b:
         a1:df:1b:55
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkZCRDIxMTAvBgNVBAUTKDU1RTQ4NTE4OEM1QzlEMkUyNEM4MzQ1Qzk3QkMzNDYy
NzIxQzk4Q0UwHhcNMjYwNTEyMjM1ODM5WhcNMjYwNTE5MjM1ODM5WjAYMRYwFAYD
VQQDEw02YTAzYmViMC0wM2E1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0T2iMUeP2dcBLpaerjJw1/D/962dXdJg0I0+1KdcTPzP/IG6r3/ZA3cbMnie
eHNwP5RnqQU58L6VPmEmgE/3VHsOI6vN4H4HOoY0buUDKqbsSJIYRIRpohg0+TT0
XP55e18nq6w+Sj8oBLpfEZhgHX9wbXFFm2eLIzrVNzpMiGk37AD0YYf44UZNy7IN
GIAFvT05FfVa+sPhw8mlbJefARLtuLfuaP2wpirPN6VGGJhe4sVFmfT2llh3toDt
VFVOKtux/ENYeGBs7gfhZ4d3BZBx7Q31shQJyx8PMyWgAKjQBNS1WOr1nc7e2w7w
ye/mqNYLxRBm9Fffq5VcARgx4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP8QN+F2
nopjTdbF1qfOVin7sGHcMB8GA1UdIwQYMBaAFFXkhRiMXJ0uJMg0XJe8NGJyHJjO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkJEMi82RDc0OTc4QzZG
NTExMUVDOTY1MURBMDlDNEY5QUUwMi9WZVNGR0l4Y25TNGt5RFJjbDd3MFluSWNt
TTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZlU0ZHSXhjblM0a3lEUmNsN3cwWW5JY21NNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RkJEMi82RDc0OTc4QzZGNTExMUVDOTY1MURBMDlDNEY5QUUwMi9WZVNGR0l4Y25T
NGt5RFJjbDd3MFluSWNtTTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJL9Smmh/lq/a64sZ9dpqccmRRnCwMU2VbM/U9/im2WS++U+B/aqKpLIVKSv5
AYmROZcPN0lMpUt/MsX63wd6kXEUXVB/vsTkLl64x0K2srgAKnXPcrgraRHL4bsT
aur18GdE6EptSMqaOOAaKaHEBHyRs8QxCFrdE/q9yGGo1vC0WszY14Yq2Zlgh9Ew
Y4g7/apHzQgsoBRuJETP+6F5MaaTS3FrPz+SwPOWrPPmjYzEXTVP/tem+uzVnDkt
b1V68Asdy0gwwlgFWhqoOxVsoVwc8kY498yxge/ZbhWIHx6Ff3IsPQJDtsUUK+kb
X92ptNnIyc8kEnRo/kc7od8bVQ==
-----END CERTIFICATE-----
Generated at Wed May 13 15:20:28 2026 by rpki-client