Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139661/198EE53E58E411F08726A57AC4F9AE02/tVSfYYH_p68l2NI6ZnMFTcRWbAw.mft
File:                     tVSfYYH_p68l2NI6ZnMFTcRWbAw.mft (raw, json)
Hash identifier:          yYN0VCexRp03uP0M8loWg+EzzxB7o+g+CuMs49SMOck=
Subject key identifier:   7B:40:92:68:B1:C5:95:B5:47:CD:E6:E6:4F:5B:A9:EF:8B:F8:19:16
Authority key identifier: B5:54:9F:61:81:FF:A7:AF:25:D8:D2:3A:66:73:05:4D:C4:56:6C:0C
Certificate issuer:       /CN=A9139661/serialNumber=B5549F6181FFA7AF25D8D23A6673054DC4566C0C
Certificate serial:       A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVSfYYH_p68l2NI6ZnMFTcRWbAw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139661/198EE53E58E411F08726A57AC4F9AE02/tVSfYYH_p68l2NI6ZnMFTcRWbAw.mft
Manifest number:          A5
Signing time:             Wed 13 May 2026 07:24:43 +0000
Manifest this update:     Wed 13 May 2026 07:24:43 +0000
Manifest next update:     Wed 20 May 2026 07:24:43 +0000
Files and hashes:         1: tVSfYYH_p68l2NI6ZnMFTcRWbAw.crl (hash: q+jR1kph4DZCqTYe3ND+13oBfbmFqWDkQF2suQwSi2E=)
                          2: C6047A6481A111F08CBC9741C4F9AE02.roa (hash: rX2Mw/9JUdFRL4zqaL9IR0MhrXeQBXOKQxjpu9KcsqY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139661/198EE53E58E411F08726A57AC4F9AE02/tVSfYYH_p68l2NI6ZnMFTcRWbAw.crl
                          rsync://rpki.apnic.net/member_repository/A9139661/198EE53E58E411F08726A57AC4F9AE02/tVSfYYH_p68l2NI6ZnMFTcRWbAw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVSfYYH_p68l2NI6ZnMFTcRWbAw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 07:24:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167 (0xa7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139661, serialNumber=B5549F6181FFA7AF25D8D23A6673054DC4566C0C
        Validity
            Not Before: May 13 07:24:43 2026 GMT
            Not After : May 20 07:24:43 2026 GMT
        Subject: CN=6a04273b-df26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:50:8e:55:c9:bb:7b:01:95:32:de:95:67:ef:
                    2a:bc:df:cb:51:6d:6a:d2:db:99:36:4a:b5:a8:60:
                    44:a6:10:16:16:2c:da:d3:25:81:6f:ee:d9:8e:2c:
                    d4:59:fe:d0:c2:71:26:75:a1:9b:e5:d9:64:2a:a2:
                    83:10:45:3d:6d:24:be:87:c4:1a:5e:de:70:79:a0:
                    39:64:2b:d1:bb:79:fd:21:21:03:12:53:11:e1:f9:
                    e3:e1:2f:79:11:1b:3b:88:39:e1:fc:ee:d6:72:cc:
                    2f:08:20:8e:09:c0:15:e3:ff:f4:08:29:44:1d:12:
                    9c:5c:04:95:99:8d:26:b5:f3:a3:13:cf:5b:58:b2:
                    26:db:08:1e:ee:ed:6f:04:a8:b5:99:97:f5:23:2d:
                    76:19:72:72:13:cb:29:db:81:50:5b:ff:34:77:db:
                    a2:8a:2d:76:16:03:a7:a8:01:df:24:1b:f9:d6:fa:
                    2e:71:74:20:04:ae:0b:23:2e:37:88:28:7f:82:29:
                    92:3b:2d:9f:8a:16:e0:bd:ba:71:79:ed:ea:58:d4:
                    75:37:e7:05:50:58:94:c1:49:c9:8a:cc:15:36:ec:
                    60:89:9a:bb:1e:e4:30:97:77:aa:ac:93:ba:a8:78:
                    95:c0:f4:5a:8e:3f:d4:df:58:5c:69:18:b5:15:43:
                    6d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:40:92:68:B1:C5:95:B5:47:CD:E6:E6:4F:5B:A9:EF:8B:F8:19:16
            X509v3 Authority Key Identifier:
                keyid:B5:54:9F:61:81:FF:A7:AF:25:D8:D2:3A:66:73:05:4D:C4:56:6C:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139661/198EE53E58E411F08726A57AC4F9AE02/tVSfYYH_p68l2NI6ZnMFTcRWbAw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVSfYYH_p68l2NI6ZnMFTcRWbAw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139661/198EE53E58E411F08726A57AC4F9AE02/tVSfYYH_p68l2NI6ZnMFTcRWbAw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:6c:d5:ee:8c:cd:36:90:c4:c8:23:b6:e5:74:1f:e5:af:53:
         e0:1c:1d:75:f7:64:12:85:1c:0e:17:a7:02:00:c5:5f:62:55:
         05:6a:86:0c:25:58:0e:34:03:23:d8:c6:7c:9f:5d:ab:7d:2a:
         b2:67:c1:22:bf:cc:e0:2d:63:98:1a:a7:19:0a:90:79:59:56:
         47:84:a8:49:1c:75:07:ab:6f:12:72:72:fa:7b:a3:5c:95:9f:
         3b:37:31:22:9e:c4:07:c2:f3:9a:de:d2:fd:da:bc:5c:b6:1c:
         45:28:05:13:6b:07:fd:c4:36:9b:e5:84:c7:33:03:a4:cf:e2:
         27:bc:33:f2:2f:05:8e:59:0d:7d:06:e1:5f:60:1e:44:e9:3a:
         b5:a3:48:02:fd:a6:f9:39:ce:e1:b3:c1:28:63:f8:e3:5e:93:
         fc:be:c8:49:36:70:08:5b:04:f9:65:cf:bc:b6:63:e2:b3:cc:
         3a:ab:2f:fd:c4:5f:74:81:5b:f1:43:44:10:cf:42:cb:c7:57:
         57:9e:28:5f:78:86:a8:35:40:84:0e:f3:0e:57:66:06:87:ed:
         ec:5a:1c:81:1d:20:ac:d9:24:1a:bb:99:3c:8a:df:b6:9a:c6:
         58:77:02:c0:44:96:fb:75:17:08:12:e6:08:fa:86:34:db:9d:
         56:b7:f8:e1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mzk2NjExMTAvBgNVBAUTKEI1NTQ5RjYxODFGRkE3QUYyNUQ4RDIzQTY2NzMwNTRE
QzQ1NjZDMEMwHhcNMjYwNTEzMDcyNDQzWhcNMjYwNTIwMDcyNDQzWjAYMRYwFAYD
VQQDEw02YTA0MjczYi1kZjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzVCOVcm7ewGVMt6VZ+8qvN/LUW1q0tuZNkq1qGBEphAWFiza0yWBb+7ZjizU
Wf7QwnEmdaGb5dlkKqKDEEU9bSS+h8QaXt5weaA5ZCvRu3n9ISEDElMR4fnj4S95
ERs7iDnh/O7WcswvCCCOCcAV4//0CClEHRKcXASVmY0mtfOjE89bWLIm2wge7u1v
BKi1mZf1Iy12GXJyE8sp24FQW/80d9uiii12FgOnqAHfJBv51voucXQgBK4LIy43
iCh/gimSOy2fihbgvbpxee3qWNR1N+cFUFiUwUnJiswVNuxgiZq7HuQwl3eqrJO6
qHiVwPRajj/U31hcaRi1FUNt7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHtAkmix
xZW1R83m5k9bqe+L+BkWMB8GA1UdIwQYMBaAFLVUn2GB/6evJdjSOmZzBU3EVmwM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTY2MS8xOThFRTUzRTU4
RTQxMUYwODcyNkE1N0FDNEY5QUUwMi90VlNmWVlIX3A2OGwyTkk2Wm5NRlRjUldi
QXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RWU2ZZWUhfcDY4bDJOSTZabk1GVGNSV2JBdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
OTY2MS8xOThFRTUzRTU4RTQxMUYwODcyNkE1N0FDNEY5QUUwMi90VlNmWVlIX3A2
OGwyTkk2Wm5NRlRjUldiQXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAzWzV7ozNNpDEyCO25XQf5a9T4BwddfdkEoUcDhenAgDFX2JVBWqGDCVYDjQD
I9jGfJ9dq30qsmfBIr/M4C1jmBqnGQqQeVlWR4SoSRx1B6tvEnJy+nujXJWfOzcx
Ip7EB8Lzmt7S/dq8XLYcRSgFE2sH/cQ2m+WExzMDpM/iJ7wz8i8FjlkNfQbhX2Ae
ROk6taNIAv2m+TnO4bPBKGP4416T/L7ISTZwCFsE+WXPvLZj4rPMOqsv/cRfdIFb
8UNEEM9Cy8dXV54oX3iGqDVAhA7zDldmBoft7FocgR0grNkkGruZPIrftprGWHcC
wESW+3UXCBLmCPqGNNudVrf44Q==
-----END CERTIFICATE-----
Generated at Wed May 13 13:52:17 2026 by rpki-client