Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft
File:                     5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft (raw, json)
Hash identifier:          Zbso5DXUu6y40VgDkhVLZoz+mVoljPQBjjrsFfA9TYE=
Subject key identifier:   24:79:59:8C:C7:47:4B:03:D8:56:1B:03:8D:3D:B0:D5:00:E4:45:F5
Authority key identifier: E6:1B:EC:13:92:86:32:83:DC:99:E2:FF:93:15:75:A3:18:1C:28:18
Certificate issuer:       /CN=A91367E0/serialNumber=E61BEC1392863283DC99E2FF931575A3181C2818
Certificate serial:       020A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft
Manifest number:          0200
Signing time:             Wed 13 May 2026 03:12:20 +0000
Manifest this update:     Wed 13 May 2026 03:12:20 +0000
Manifest next update:     Wed 20 May 2026 03:12:20 +0000
Files and hashes:         1: 5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl (hash: pc482fqYw0qMggqADBfpEN+36TN6eJhQ+2QDHCShAkg=)
                          2: 57F3935045A011EEA9A5215EC4F9AE02.roa (hash: 6zxbQD4gzRXvOfYhZXYB2uRI1fOm5dIZfKC/EQTi2Js=)
                          3: 444EB35A459D11EEA8758641C4F9AE02.roa (hash: bSvC5EUhsAfmDzVmgucGYFQBCurrkXi4UpC3IDQOZ70=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl
                          rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 03:12:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 522 (0x20a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91367E0, serialNumber=E61BEC1392863283DC99E2FF931575A3181C2818
        Validity
            Not Before: May 13 03:12:20 2026 GMT
            Not After : May 20 03:12:20 2026 GMT
        Subject: CN=6a03ec14-3739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2f:37:c8:1e:1c:7b:96:31:c4:67:56:a6:e3:
                    fc:1c:57:6f:92:76:bd:e6:51:db:47:c7:3c:34:9f:
                    40:08:aa:05:7d:a2:21:36:cc:a4:fb:fa:6b:08:25:
                    03:48:43:69:af:39:e2:41:21:81:03:b5:68:f1:a1:
                    9b:43:2e:e9:3f:75:3e:cb:10:41:69:2a:94:bd:e5:
                    e9:56:97:91:0c:36:75:dd:1a:99:20:64:df:2c:26:
                    c5:61:0c:42:6e:9b:1f:1d:41:9f:fa:b0:fc:7e:32:
                    09:83:5e:da:1d:ed:70:3b:45:e2:2c:90:5c:9b:83:
                    1c:e7:9e:5c:e7:1a:94:e5:c4:81:48:a7:0d:31:42:
                    50:4b:fe:0c:eb:ef:4d:d4:2e:e7:2d:01:c2:61:fd:
                    d7:a1:92:87:1e:33:2e:a5:06:29:2f:21:e2:92:dc:
                    4c:79:54:63:20:c6:98:27:69:ad:a3:02:e8:da:9b:
                    46:65:3a:0a:f0:7d:eb:bb:d8:29:45:9c:70:16:8d:
                    06:d8:f1:89:58:b9:83:84:c7:2e:61:e6:3d:b0:ca:
                    bc:08:60:7b:58:cd:ba:e6:4f:78:0a:a6:44:42:e9:
                    9e:99:60:41:2f:01:1c:d7:e8:f7:5f:13:c4:f2:b0:
                    29:0a:75:1c:5e:79:97:ed:dc:12:8c:df:2c:17:56:
                    f5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:79:59:8C:C7:47:4B:03:D8:56:1B:03:8D:3D:B0:D5:00:E4:45:F5
            X509v3 Authority Key Identifier:
                keyid:E6:1B:EC:13:92:86:32:83:DC:99:E2:FF:93:15:75:A3:18:1C:28:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:a5:94:90:6c:7e:f4:cf:a0:b6:a8:18:7f:0a:ee:43:c2:65:
         85:fc:c8:bd:fb:a1:0a:02:09:82:48:42:2f:8c:24:e8:50:86:
         29:bf:4d:df:ae:2d:42:ea:45:0d:f9:37:71:ef:de:05:f0:d1:
         05:00:76:92:33:c5:3f:1f:ae:95:af:15:c1:34:91:c4:34:9f:
         d8:28:63:32:fd:6e:77:1c:93:ae:9d:26:ed:75:d7:49:69:a4:
         c2:15:3a:66:a7:e9:45:dd:2c:40:69:99:01:6e:ad:67:95:d2:
         8a:df:71:85:e5:44:97:43:77:6c:39:05:c7:9b:55:42:44:27:
         c0:0e:18:c7:65:00:bb:38:28:11:05:93:35:ec:96:38:b7:c6:
         c4:42:0f:bb:dc:6f:47:ab:a4:be:30:2b:c0:0b:c5:ab:70:e4:
         24:57:7b:65:14:78:f9:13:2c:96:1d:80:d1:2c:27:c6:4f:3a:
         d7:a2:22:76:9d:b6:f1:b1:47:1a:61:07:ef:07:8f:e7:b5:2d:
         aa:32:5e:16:f5:82:c2:ff:c3:69:ec:db:c6:87:80:30:27:38:
         38:e2:28:db:09:2a:8d:de:ae:db:40:88:51:83:c5:1c:76:7b:
         a3:09:2d:2a:25:14:7f:4a:25:de:9d:9c:18:b4:fe:63:87:d2:
         96:80:34:2f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzY3RTAxMTAvBgNVBAUTKEU2MUJFQzEzOTI4NjMyODNEQzk5RTJGRjkzMTU3NUEz
MTgxQzI4MTgwHhcNMjYwNTEzMDMxMjIwWhcNMjYwNTIwMDMxMjIwWjAYMRYwFAYD
VQQDEw02YTAzZWMxNC0zNzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyS83yB4ce5YxxGdWpuP8HFdvkna95lHbR8c8NJ9ACKoFfaIhNsyk+/prCCUD
SENprzniQSGBA7Vo8aGbQy7pP3U+yxBBaSqUveXpVpeRDDZ13RqZIGTfLCbFYQxC
bpsfHUGf+rD8fjIJg17aHe1wO0XiLJBcm4Mc555c5xqU5cSBSKcNMUJQS/4M6+9N
1C7nLQHCYf3XoZKHHjMupQYpLyHiktxMeVRjIMaYJ2mtowLo2ptGZToK8H3ru9gp
RZxwFo0G2PGJWLmDhMcuYeY9sMq8CGB7WM265k94CqZEQumemWBBLwEc1+j3XxPE
8rApCnUcXnmX7dwSjN8sF1b17wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCR5WYzH
R0sD2FYbA409sNUA5EX1MB8GA1UdIwQYMBaAFOYb7BOShjKD3Jni/5MVdaMYHCgY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjdFMC9FNDE4OTkxMDQ1
OUMxMUVFQjY5RDY4MzFDNEY5QUUwMi81aHZzRTVLR01vUGNtZUxfa3hWMW94Z2NL
QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVodnNFNUtHTW9QY21lTF9reFYxb3hnY0tCZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NjdFMC9FNDE4OTkxMDQ1OUMxMUVFQjY5RDY4MzFDNEY5QUUwMi81aHZzRTVLR01v
UGNtZUxfa3hWMW94Z2NLQmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqKWUkGx+9M+gtqgYfwruQ8JlhfzIvfuhCgIJgkhCL4wk6FCGKb9N364tQupF
Dfk3ce/eBfDRBQB2kjPFPx+ula8VwTSRxDSf2ChjMv1udxyTrp0m7XXXSWmkwhU6
ZqfpRd0sQGmZAW6tZ5XSit9xheVEl0N3bDkFx5tVQkQnwA4Yx2UAuzgoEQWTNeyW
OLfGxEIPu9xvR6ukvjArwAvFq3DkJFd7ZRR4+RMslh2A0Swnxk8616Iidp228bFH
GmEH7weP57UtqjJeFvWCwv/DaezbxoeAMCc4OOIo2wkqjd6u20CIUYPFHHZ7owkt
KiUUf0ol3p2cGLT+Y4fSloA0Lw==
-----END CERTIFICATE-----
Generated at Wed May 13 11:07:25 2026 by rpki-client