Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131667/D7E992CC429A11F1AEFC9085B5833773/pCvBWA8L3pIR-4wIkUqlwsARIXs.mft
File:                     pCvBWA8L3pIR-4wIkUqlwsARIXs.mft (raw, json)
Hash identifier:          fbBYc0Y6Q/d0ezHyDDvfLN13UPzM+PFBxwLenYjsFhg=
Subject key identifier:   14:0D:E8:88:45:75:27:5C:67:7E:84:07:54:2D:A0:A7:6B:C5:AE:F8
Authority key identifier: A4:2B:C1:58:0F:0B:DE:92:11:FB:8C:08:91:4A:A5:C2:C0:11:21:7B
Certificate issuer:       /CN=A9131667/serialNumber=A42BC1580F0BDE9211FB8C08914AA5C2C011217B
Certificate serial:       0D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pCvBWA8L3pIR-4wIkUqlwsARIXs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131667/D7E992CC429A11F1AEFC9085B5833773/pCvBWA8L3pIR-4wIkUqlwsARIXs.mft
Manifest number:          0B
Signing time:             Mon 11 May 2026 09:21:14 +0000
Manifest this update:     Mon 11 May 2026 09:21:13 +0000
Manifest next update:     Mon 18 May 2026 09:21:13 +0000
Files and hashes:         1: pCvBWA8L3pIR-4wIkUqlwsARIXs.crl (hash: AK8t9QLwwu35hY3dg9H/M3ZLBXcUYpWv8qIh6yfokiw=)
                          2: AE0F1BEA42AC11F1AC02065EBB833773.roa (hash: 2exTM74mYh/WV9DBBb+PAXb3+N+2GeJ1vzkMiQM/+Ls=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131667/D7E992CC429A11F1AEFC9085B5833773/pCvBWA8L3pIR-4wIkUqlwsARIXs.crl
                          rsync://rpki.apnic.net/member_repository/A9131667/D7E992CC429A11F1AEFC9085B5833773/pCvBWA8L3pIR-4wIkUqlwsARIXs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pCvBWA8L3pIR-4wIkUqlwsARIXs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 09:21:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131667, serialNumber=A42BC1580F0BDE9211FB8C08914AA5C2C011217B
        Validity
            Not Before: May 11 09:21:13 2026 GMT
            Not After : May 18 09:21:13 2026 GMT
        Subject: CN=6a019f8a-4c55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6a:76:bf:df:30:14:70:fa:53:74:cb:29:23:
                    bf:33:2d:c1:11:9d:39:4c:92:36:62:2e:41:a3:15:
                    60:d4:f2:e1:ea:79:08:cb:fc:4d:ef:a0:41:28:b4:
                    c0:39:a9:c0:c5:d3:9c:39:06:f3:f5:59:2a:e1:59:
                    f7:6f:73:cf:f6:a0:d7:fc:fe:4a:7a:12:87:44:c9:
                    f2:b8:36:4f:41:ad:3a:bc:2a:7d:42:50:ab:54:73:
                    f3:5b:9e:1c:c5:73:af:c9:e3:89:e5:87:17:33:4b:
                    d8:05:aa:52:d3:13:76:81:85:fb:cb:95:75:c3:5a:
                    35:b7:0f:dd:f8:a2:60:12:e5:05:c2:95:b2:1a:6d:
                    c5:dc:df:a5:33:dc:14:0c:c9:5c:d1:e9:bf:7f:45:
                    f3:6f:11:1f:8f:b1:c2:90:b4:e4:7f:02:79:c6:63:
                    42:ef:11:98:6b:07:74:6a:65:e9:1a:48:3c:7a:8a:
                    8c:47:b1:df:5c:da:b5:f2:57:41:25:5b:3a:89:6d:
                    56:53:a4:07:b8:61:81:32:d7:c5:5a:60:dc:e1:c3:
                    36:96:1b:b2:46:f2:92:9f:84:6d:fd:f7:8a:9a:ce:
                    b0:ad:52:32:6e:56:a7:69:57:56:3d:9a:92:c7:87:
                    a4:3b:3a:d3:d1:e6:b9:30:c4:71:ba:3f:3b:11:29:
                    b9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:0D:E8:88:45:75:27:5C:67:7E:84:07:54:2D:A0:A7:6B:C5:AE:F8
            X509v3 Authority Key Identifier:
                keyid:A4:2B:C1:58:0F:0B:DE:92:11:FB:8C:08:91:4A:A5:C2:C0:11:21:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131667/D7E992CC429A11F1AEFC9085B5833773/pCvBWA8L3pIR-4wIkUqlwsARIXs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pCvBWA8L3pIR-4wIkUqlwsARIXs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131667/D7E992CC429A11F1AEFC9085B5833773/pCvBWA8L3pIR-4wIkUqlwsARIXs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:33:7d:d4:ff:a2:d4:6f:6d:bd:6b:b6:4e:7c:9d:56:ac:56:
         d3:4d:3d:23:aa:a8:c2:19:35:d7:4c:1f:4a:1a:86:5a:c4:22:
         01:e4:ea:98:c1:6d:c4:d1:06:85:7b:ef:4d:c6:30:85:6f:47:
         c3:1f:fb:fe:61:2b:92:53:5d:6d:92:27:46:c9:59:c2:85:49:
         76:85:ea:29:dd:e5:4c:d3:b0:dd:dd:57:35:9f:28:81:d4:50:
         3e:de:f7:4e:d1:63:cb:06:fa:fc:d1:53:86:8d:95:a0:dc:13:
         af:bd:48:10:bc:e8:c9:2a:ff:c9:30:a9:bf:b2:67:33:aa:de:
         22:b7:11:90:51:a6:02:c3:4a:06:a2:2b:fc:2f:ae:7e:cf:b5:
         24:ea:07:db:b6:a9:b7:6d:21:7b:47:f5:af:e8:df:31:f6:c0:
         7a:66:93:2e:a7:5f:5a:52:f9:cd:a8:65:12:cb:bf:4a:b5:90:
         33:f6:54:e1:b8:99:e9:68:39:68:2e:2f:4e:99:d6:b9:69:fd:
         59:97:d4:4b:82:78:3f:a9:d4:49:01:dc:45:7c:b7:64:fb:2b:
         5f:fb:cc:84:d9:59:33:cc:8a:f1:d6:92:44:88:cc:f8:d1:c7:
         21:33:80:6d:49:aa:b6:75:b3:1d:f2:a3:93:f0:30:30:66:7d:
         9d:d2:90:e1
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
MTY2NzExMC8GA1UEBRMoQTQyQkMxNTgwRjBCREU5MjExRkI4QzA4OTE0QUE1QzJD
MDExMjE3QjAeFw0yNjA1MTEwOTIxMTNaFw0yNjA1MTgwOTIxMTNaMBgxFjAUBgNV
BAMTDTZhMDE5ZjhhLTRjNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDNana/3zAUcPpTdMspI78zLcERnTlMkjZiLkGjFWDU8uHqeQjL/E3voEEotMA5
qcDF05w5BvP1WSrhWfdvc8/2oNf8/kp6EodEyfK4Nk9BrTq8Kn1CUKtUc/NbnhzF
c6/J44nlhxczS9gFqlLTE3aBhfvLlXXDWjW3D934omAS5QXClbIabcXc36Uz3BQM
yVzR6b9/RfNvER+PscKQtOR/AnnGY0LvEZhrB3RqZekaSDx6ioxHsd9c2rXyV0El
WzqJbVZTpAe4YYEy18VaYNzhwzaWG7JG8pKfhG3994qazrCtUjJuVqdpV1Y9mpLH
h6Q7OtPR5rkwxHG6PzsRKblDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUFA3oiEV1
J1xnfoQHVC2gp2vFrvgwHwYDVR0jBBgwFoAUpCvBWA8L3pIR+4wIkUqlwsARIXsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxNjY3L0Q3RTk5MkNDNDI5
QTExRjFBRUZDOTA4NUI1ODMzNzczL3BDdkJXQThMM3BJUi00d0lrVXFsd3NBUklY
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvcEN2QldBOEwzcElSLTR3SWtVcWx3c0FSSVhzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMx
NjY3L0Q3RTk5MkNDNDI5QTExRjFBRUZDOTA4NUI1ODMzNzczL3BDdkJXQThMM3BJ
Ui00d0lrVXFsd3NBUklYcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQASM33U/6LUb229a7ZOfJ1WrFbTTT0jqqjCGTXXTB9KGoZaxCIB5OqYwW3E0QaF
e+9NxjCFb0fDH/v+YSuSU11tkidGyVnChUl2heop3eVM07Dd3Vc1nyiB1FA+3vdO
0WPLBvr80VOGjZWg3BOvvUgQvOjJKv/JMKm/smczqt4itxGQUaYCw0oGoiv8L65+
z7Uk6gfbtqm3bSF7R/Wv6N8x9sB6ZpMup19aUvnNqGUSy79KtZAz9lThuJnpaDlo
Li9Omda5af1Zl9RLgng/qdRJAdxFfLdk+ytf+8yE2VkzzIrx1pJEiMz40cchM4Bt
Saq2dbMd8qOT8DAwZn2d0pDh
-----END CERTIFICATE-----
Generated at Wed May 13 04:47:22 2026 by rpki-client