Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A81E/91C9559C34FA11EB98941E7BC4F9AE02/bcDHAorrOzsmYx9pJXBQC2DtJxk.mft
File:                     bcDHAorrOzsmYx9pJXBQC2DtJxk.mft (raw, json)
Hash identifier:          J/CBOFxEw63eomrIwbIRpIQhczukI2yMEBWIAlifQhA=
Subject key identifier:   17:47:D4:BD:59:9E:47:77:A2:85:0B:09:D6:16:2A:08:A3:31:BA:04
Authority key identifier: 6D:C0:C7:02:8A:EB:3B:3B:26:63:1F:69:25:70:50:0B:60:ED:27:19
Certificate issuer:       /CN=A913A81E/serialNumber=6DC0C7028AEB3B3B26631F692570500B60ED2719
Certificate serial:       07E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcDHAorrOzsmYx9pJXBQC2DtJxk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A81E/91C9559C34FA11EB98941E7BC4F9AE02/bcDHAorrOzsmYx9pJXBQC2DtJxk.mft
Manifest number:          07DE
Signing time:             Tue 12 May 2026 21:24:22 +0000
Manifest this update:     Tue 12 May 2026 21:24:22 +0000
Manifest next update:     Tue 19 May 2026 21:24:22 +0000
Files and hashes:         1: bcDHAorrOzsmYx9pJXBQC2DtJxk.crl (hash: wRSYd+Bp9WVQskeooo1+s4qVV4BMnduhrK7xX/Oo+jc=)
                          2: C562A08C34FC11EB9AA0EE7DC4F9AE02.roa (hash: qtrScKJeemzjIsu0EPYK7qa46I/IyYNJeryX2VPnVrg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A81E/91C9559C34FA11EB98941E7BC4F9AE02/bcDHAorrOzsmYx9pJXBQC2DtJxk.crl
                          rsync://rpki.apnic.net/member_repository/A913A81E/91C9559C34FA11EB98941E7BC4F9AE02/bcDHAorrOzsmYx9pJXBQC2DtJxk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcDHAorrOzsmYx9pJXBQC2DtJxk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 21:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2023 (0x7e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A81E, serialNumber=6DC0C7028AEB3B3B26631F692570500B60ED2719
        Validity
            Not Before: May 12 21:24:22 2026 GMT
            Not After : May 19 21:24:22 2026 GMT
        Subject: CN=6a039a86-525b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:01:a6:bf:05:05:33:30:45:04:79:3c:bb:99:
                    44:fc:0d:e5:9e:2e:53:f4:36:fb:43:cb:d7:6c:b4:
                    bb:d3:89:29:ba:42:94:8b:d9:e7:96:15:e4:fb:2d:
                    40:da:f2:88:28:e2:4c:92:af:02:15:6c:31:96:3f:
                    20:61:12:20:5c:73:16:71:90:58:5c:40:f7:af:67:
                    0c:08:ed:77:ea:ff:f8:6c:8b:ed:91:5c:bf:a3:d3:
                    b2:e0:0a:cc:e9:34:d5:9e:0e:9d:7c:7d:a8:81:53:
                    b2:72:c6:1e:9f:58:c7:19:0d:b3:39:66:09:f2:32:
                    90:d5:b5:cd:9d:04:56:b4:09:14:dc:29:94:ac:d7:
                    17:0b:c2:50:9e:8f:5d:1c:47:21:c7:19:b9:06:7e:
                    b8:11:31:7b:be:92:af:99:e3:c1:10:2e:c1:b6:06:
                    cd:20:eb:7f:59:15:7c:f3:65:2c:3f:47:74:9d:c8:
                    97:03:5b:54:c2:3c:a4:58:74:c5:50:d5:f7:27:3e:
                    ce:46:93:78:8e:83:4f:aa:dd:d7:7b:34:01:c3:ab:
                    a5:5b:2a:65:05:a3:94:b6:da:b5:b2:d7:9c:21:96:
                    05:28:77:13:b5:14:8b:9d:b0:93:ae:41:2b:f8:b7:
                    13:46:a9:3a:d3:87:d2:e7:8e:f5:41:82:7b:cf:e2:
                    c8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:47:D4:BD:59:9E:47:77:A2:85:0B:09:D6:16:2A:08:A3:31:BA:04
            X509v3 Authority Key Identifier:
                keyid:6D:C0:C7:02:8A:EB:3B:3B:26:63:1F:69:25:70:50:0B:60:ED:27:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A81E/91C9559C34FA11EB98941E7BC4F9AE02/bcDHAorrOzsmYx9pJXBQC2DtJxk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bcDHAorrOzsmYx9pJXBQC2DtJxk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A81E/91C9559C34FA11EB98941E7BC4F9AE02/bcDHAorrOzsmYx9pJXBQC2DtJxk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:8c:6b:6a:69:5b:ba:e3:f1:cf:ae:f9:14:40:f5:8d:c8:3f:
         c6:39:4a:dd:6f:43:0e:62:3e:5a:30:f1:8b:9c:c3:64:0f:29:
         87:ff:d8:e7:96:83:c0:c0:05:15:5d:92:98:74:fa:68:d0:c4:
         fb:7e:1c:49:7c:d8:e0:d1:29:82:c1:de:d8:6a:79:82:75:1b:
         3b:47:a5:05:a2:64:63:4e:c8:d2:c2:29:cc:5f:db:d9:af:85:
         a4:44:0e:e0:f7:b5:a7:c6:f8:46:1a:7a:9b:10:a6:5d:9c:f7:
         db:d3:18:13:35:a8:2f:f8:b2:a2:30:c8:7c:c9:d3:00:70:26:
         9a:f8:03:05:13:1e:31:46:32:c4:b2:42:9d:38:5e:f5:3e:ab:
         08:fa:69:04:32:8d:8c:f5:a1:62:f4:91:70:99:a4:df:3c:92:
         60:1e:4c:74:88:68:2b:66:8a:57:f3:90:36:ab:bf:aa:ee:e3:
         be:e3:52:54:c8:82:b1:0e:ac:7b:fd:d9:3e:ff:39:64:16:a4:
         50:02:8e:28:c1:5e:64:ac:26:54:4d:5c:24:01:b1:d3:b1:67:
         e5:95:1e:95:7b:3f:0b:ed:42:68:ad:16:a1:ae:3f:ab:7e:7b:
         72:15:1a:20:e9:70:3e:e2:38:cd:e2:e8:ed:df:50:fe:49:e4:
         9f:36:f7:3b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB+cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0E4MUUxMTAvBgNVBAUTKDZEQzBDNzAyOEFFQjNCM0IyNjYzMUY2OTI1NzA1MDBC
NjBFRDI3MTkwHhcNMjYwNTEyMjEyNDIyWhcNMjYwNTE5MjEyNDIyWjAYMRYwFAYD
VQQDEw02YTAzOWE4Ni01MjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2gGmvwUFMzBFBHk8u5lE/A3lni5T9Db7Q8vXbLS704kpukKUi9nnlhXk+y1A
2vKIKOJMkq8CFWwxlj8gYRIgXHMWcZBYXED3r2cMCO136v/4bIvtkVy/o9Oy4ArM
6TTVng6dfH2ogVOycsYen1jHGQ2zOWYJ8jKQ1bXNnQRWtAkU3CmUrNcXC8JQno9d
HEchxxm5Bn64ETF7vpKvmePBEC7BtgbNIOt/WRV882UsP0d0nciXA1tUwjykWHTF
UNX3Jz7ORpN4joNPqt3XezQBw6ulWyplBaOUttq1stecIZYFKHcTtRSLnbCTrkEr
+LcTRqk604fS5471QYJ7z+LI+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBdH1L1Z
nkd3ooULCdYWKgijMboEMB8GA1UdIwQYMBaAFG3AxwKK6zs7JmMfaSVwUAtg7ScZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTgxRS85MUM5NTU5QzM0
RkExMUVCOTg5NDFFN0JDNEY5QUUwMi9iY0RIQW9yck96c21ZeDlwSlhCUUMyRHRK
eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JjREhBb3JyT3pzbVl4OXBKWEJRQzJEdEp4ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QTgxRS85MUM5NTU5QzM0RkExMUVCOTg5NDFFN0JDNEY5QUUwMi9iY0RIQW9yck96
c21ZeDlwSlhCUUMyRHRKeGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAX4xramlbuuPxz675FED1jcg/xjlK3W9DDmI+WjDxi5zDZA8ph//Y55aDwMAF
FV2SmHT6aNDE+34cSXzY4NEpgsHe2Gp5gnUbO0elBaJkY07I0sIpzF/b2a+FpEQO
4Pe1p8b4Rhp6mxCmXZz329MYEzWoL/iyojDIfMnTAHAmmvgDBRMeMUYyxLJCnThe
9T6rCPppBDKNjPWhYvSRcJmk3zySYB5MdIhoK2aKV/OQNqu/qu7jvuNSVMiCsQ6s
e/3ZPv85ZBakUAKOKMFeZKwmVE1cJAGx07Fn5ZUelXs/C+1CaK0Woa4/q357chUa
IOlwPuI4zeLo7d9Q/knknzb3Ow==
-----END CERTIFICATE-----
Generated at Wed May 13 12:22:10 2026 by rpki-client