Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.mft
File:                     tUzE74aIutYKk1tS1BFWN4lOIzc.mft (raw, json)
Hash identifier:          Dc73tFbrsInnc1mO8xMxO8mQ95+c/HvGsri3MfRhKOQ=
Subject key identifier:   B9:F7:C7:B1:20:71:16:33:26:1D:13:39:44:E2:60:BC:A5:6F:78:FC
Authority key identifier: B5:4C:C4:EF:86:88:BA:D6:0A:93:5B:52:D4:11:56:37:89:4E:23:37
Certificate issuer:       /CN=A913AF6A/serialNumber=B54CC4EF8688BAD60A935B52D4115637894E2337
Certificate serial:       01C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUzE74aIutYKk1tS1BFWN4lOIzc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.mft
Manifest number:          01BC
Signing time:             Wed 13 May 2026 03:57:53 +0000
Manifest this update:     Wed 13 May 2026 03:57:53 +0000
Manifest next update:     Wed 20 May 2026 03:57:53 +0000
Files and hashes:         1: tUzE74aIutYKk1tS1BFWN4lOIzc.crl (hash: PwWCLCpLvvqNuPzjym0DEdFmcPge69dZGEs5ULaB4xI=)
                          2: 66287F98AE4711EE8C130419C4F9AE02.roa (hash: jidjPqjhwiib65keCcPhREH4tf4UiXEekkUxxTfAB2U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.crl
                          rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUzE74aIutYKk1tS1BFWN4lOIzc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 03:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 453 (0x1c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913AF6A, serialNumber=B54CC4EF8688BAD60A935B52D4115637894E2337
        Validity
            Not Before: May 13 03:57:53 2026 GMT
            Not After : May 20 03:57:53 2026 GMT
        Subject: CN=6a03f6c1-1366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:44:71:fa:1c:cb:2d:1a:85:a0:8a:67:37:c4:
                    bd:c3:f4:89:81:de:a9:9f:4a:02:0d:2c:b3:21:1d:
                    32:a9:33:ae:05:3d:df:6c:b3:4e:9a:54:7b:0a:a3:
                    42:16:f6:56:3d:67:3b:d5:b4:35:62:38:de:fd:3f:
                    fd:80:05:bd:ab:6e:5c:3d:68:e8:9b:ff:f4:69:11:
                    71:01:9e:83:d1:57:84:6a:7c:6d:63:a5:14:ac:b0:
                    7d:61:35:02:d5:f1:f2:c7:68:6e:b4:80:88:3b:77:
                    e1:7b:ea:85:94:67:b5:86:42:d5:c8:52:e5:77:62:
                    1c:34:75:d6:a4:7c:5a:63:7f:e6:40:11:17:43:70:
                    65:b1:8a:dd:8d:9f:09:c0:79:47:c8:2e:de:1b:70:
                    b7:29:8d:01:2e:8f:6b:ee:71:a1:34:6a:79:7e:61:
                    b8:56:00:74:1d:71:d1:76:31:53:ab:f5:99:a0:3c:
                    f8:5d:37:b0:0c:40:52:a2:29:7b:d0:57:9a:ed:d7:
                    57:70:62:60:ad:7c:58:f7:5c:b2:50:48:d1:d2:6d:
                    94:55:8c:f7:f3:7c:1b:35:61:c0:04:6d:0b:d5:27:
                    ad:a2:6b:98:e5:b1:e9:ec:d9:15:37:63:a4:54:b9:
                    62:35:c2:ed:6c:77:4d:8b:66:e6:c8:53:9f:3e:9d:
                    bd:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F7:C7:B1:20:71:16:33:26:1D:13:39:44:E2:60:BC:A5:6F:78:FC
            X509v3 Authority Key Identifier:
                keyid:B5:4C:C4:EF:86:88:BA:D6:0A:93:5B:52:D4:11:56:37:89:4E:23:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUzE74aIutYKk1tS1BFWN4lOIzc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:c8:cf:8f:8a:e5:07:15:26:82:d2:6b:00:36:5c:6f:90:1a:
         e9:6f:5d:6f:ce:ab:e4:bb:c9:7f:db:7a:96:ee:f2:e4:05:6a:
         f4:86:26:1b:84:79:81:8a:c0:35:68:e1:9e:b7:a7:50:aa:90:
         a8:69:00:f8:43:52:a0:98:63:b6:0b:fd:a4:58:92:10:69:ba:
         c9:5d:17:f2:b2:25:ed:a6:02:5a:16:aa:07:a4:3f:d6:60:10:
         a8:71:24:12:0e:17:df:c8:dd:c9:8f:f3:c6:4e:54:a1:32:ac:
         fe:b4:b5:2e:1a:a6:26:48:ed:bd:3f:ff:9f:15:ee:08:01:b5:
         ea:ce:ef:3c:b3:3e:9c:7f:9d:f7:8d:55:37:0d:32:8b:ab:99:
         3f:54:1b:4d:f6:61:cf:55:19:9e:02:70:44:e9:04:86:06:a4:
         be:30:28:78:bb:27:7b:9f:c0:fc:94:57:6c:84:f3:0a:f1:64:
         85:e3:bb:2c:c2:ea:23:63:1c:e3:dd:b0:63:24:af:84:d6:af:
         39:64:8e:06:06:8d:62:a9:03:1c:37:94:73:7c:d2:7b:9c:b7:
         6a:b8:b8:e7:1c:00:4f:91:6f:4c:be:f5:c6:d6:72:07:25:3d:
         4b:4a:9b:0c:02:17:57:60:83:23:5d:a6:84:90:8f:6a:1e:f7:
         73:d2:bb:5f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0FGNkExMTAvBgNVBAUTKEI1NENDNEVGODY4OEJBRDYwQTkzNUI1MkQ0MTE1NjM3
ODk0RTIzMzcwHhcNMjYwNTEzMDM1NzUzWhcNMjYwNTIwMDM1NzUzWjAYMRYwFAYD
VQQDEw02YTAzZjZjMS0xMzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyERx+hzLLRqFoIpnN8S9w/SJgd6pn0oCDSyzIR0yqTOuBT3fbLNOmlR7CqNC
FvZWPWc71bQ1Yjje/T/9gAW9q25cPWjom//0aRFxAZ6D0VeEanxtY6UUrLB9YTUC
1fHyx2hutICIO3fhe+qFlGe1hkLVyFLld2IcNHXWpHxaY3/mQBEXQ3BlsYrdjZ8J
wHlHyC7eG3C3KY0BLo9r7nGhNGp5fmG4VgB0HXHRdjFTq/WZoDz4XTewDEBSoil7
0Fea7ddXcGJgrXxY91yyUEjR0m2UVYz383wbNWHABG0L1SetomuY5bHp7NkVN2Ok
VLliNcLtbHdNi2bmyFOfPp29vwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLn3x7Eg
cRYzJh0TOUTiYLylb3j8MB8GA1UdIwQYMBaAFLVMxO+GiLrWCpNbUtQRVjeJTiM3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUY2QS84QzZEQUM3OEFF
NDIxMUVFQkY2NERBNjlDNEY5QUUwMi90VXpFNzRhSXV0WUtrMXRTMUJGV040bE9J
emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RVekU3NGFJdXRZS2sxdFMxQkZXTjRsT0l6Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QUY2QS84QzZEQUM3OEFFNDIxMUVFQkY2NERBNjlDNEY5QUUwMi90VXpFNzRhSXV0
WUtrMXRTMUJGV040bE9JemMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApcjPj4rlBxUmgtJrADZcb5Aa6W9db86r5LvJf9t6lu7y5AVq9IYmG4R5gYrA
NWjhnrenUKqQqGkA+ENSoJhjtgv9pFiSEGm6yV0X8rIl7aYCWhaqB6Q/1mAQqHEk
Eg4X38jdyY/zxk5UoTKs/rS1LhqmJkjtvT//nxXuCAG16s7vPLM+nH+d941VNw0y
i6uZP1QbTfZhz1UZngJwROkEhgakvjAoeLsne5/A/JRXbITzCvFkheO7LMLqI2Mc
492wYySvhNavOWSOBgaNYqkDHDeUc3zSe5y3ari45xwAT5FvTL71xtZyByU9S0qb
DAIXV2CDI12mhJCPah73c9K7Xw==
-----END CERTIFICATE-----
Generated at Wed May 13 12:14:09 2026 by rpki-client