Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft
File:                     cXLtDPRHBezrGWHROgV-z_MHyG8.mft (raw, json)
Hash identifier:          oYZDo8TmZ0+UHGUNSUWrdmOMesWuheiIOO7GJZMQhOk=
Subject key identifier:   A3:BB:28:F9:57:F6:BC:BF:28:BB:26:3F:F4:97:A2:B7:57:FB:4E:31
Authority key identifier: 71:72:ED:0C:F4:47:05:EC:EB:19:61:D1:3A:05:7E:CF:F3:07:C8:6F
Certificate issuer:       /CN=A913B7C7/serialNumber=7172ED0CF44705ECEB1961D13A057ECFF307C86F
Certificate serial:       012D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft
Manifest number:          011D
Signing time:             Mon 11 May 2026 05:54:14 +0000
Manifest this update:     Mon 11 May 2026 05:54:14 +0000
Manifest next update:     Mon 18 May 2026 05:54:14 +0000
Files and hashes:         1: cXLtDPRHBezrGWHROgV-z_MHyG8.crl (hash: 8qgcYWrmTTvmkkCyK2JM9wdEc+JGYAttSaHxUJf56hs=)
                          2: 1A1C5AF89D9C11EFAAA9FA6AC4F9AE02.roa (hash: A90aJCYjIr3J34Qclm1ssR9ehYnkyd4nyWXLA2mBndw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.crl
                          rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 05:54:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 301 (0x12d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B7C7, serialNumber=7172ED0CF44705ECEB1961D13A057ECFF307C86F
        Validity
            Not Before: May 11 05:54:14 2026 GMT
            Not After : May 18 05:54:14 2026 GMT
        Subject: CN=6a016f06-6e58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:65:47:6f:79:e0:07:6a:c8:b0:b8:9c:b1:f6:
                    cd:fe:80:6b:82:2e:7b:99:19:59:ac:bf:2a:fa:1d:
                    76:d7:8a:53:4c:8e:14:07:0a:2c:4c:28:0e:84:5b:
                    0f:1d:6a:a8:5c:0d:73:98:01:ee:95:da:f2:f5:79:
                    5d:b5:20:66:25:33:63:c0:f4:f4:10:12:35:5a:96:
                    76:93:7a:aa:12:9b:78:dc:d3:db:77:0e:af:ce:2e:
                    33:8f:e1:87:dd:38:ae:e5:03:6e:02:73:04:18:30:
                    fd:09:11:27:e7:6e:f9:37:7e:ed:30:66:7c:2a:c9:
                    65:01:c1:4a:5a:59:2e:03:b3:3a:8e:51:57:23:fe:
                    68:16:c2:8a:0c:c8:9c:94:d9:e5:10:98:0b:d1:44:
                    41:d3:36:2f:6a:79:d4:9b:bf:a2:5d:b3:71:09:16:
                    6f:58:da:e3:ea:b7:a6:32:82:28:12:9c:30:76:05:
                    d1:69:76:99:26:a2:45:97:b8:31:82:dd:9d:b5:2d:
                    37:0b:49:00:4c:f2:63:3a:46:f3:7a:60:bd:2a:9f:
                    26:ed:8a:1f:5a:0a:e5:6b:e5:10:6b:34:e2:da:bb:
                    63:d2:c9:e4:53:e8:76:11:d8:ba:6c:80:01:f9:66:
                    b7:4a:17:a2:99:a9:76:57:bf:18:d4:5f:c0:5d:ae:
                    07:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:BB:28:F9:57:F6:BC:BF:28:BB:26:3F:F4:97:A2:B7:57:FB:4E:31
            X509v3 Authority Key Identifier:
                keyid:71:72:ED:0C:F4:47:05:EC:EB:19:61:D1:3A:05:7E:CF:F3:07:C8:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:77:3e:fa:1b:fb:c9:0e:04:97:b6:bf:af:d3:15:b1:70:69:
         23:63:60:fb:ab:63:3a:ea:24:1c:a1:9b:cd:02:3c:01:a2:e6:
         f5:5a:a1:43:0f:15:46:25:d2:92:98:67:ad:2a:1f:3c:a1:f0:
         7c:e7:2b:d5:fd:e6:4a:a1:64:01:d8:b5:d7:4c:fa:b5:48:98:
         83:15:e5:e4:33:29:cb:b7:28:3a:17:bc:b7:81:84:57:b2:7c:
         e3:89:5e:cc:6b:9a:79:c2:a4:50:0f:cd:cc:a7:45:dd:51:66:
         53:3e:a0:ae:e3:47:e7:fa:fb:bd:da:ae:08:3c:38:5b:73:42:
         f8:d1:ef:b7:36:25:eb:cd:8c:f4:c9:34:0e:ce:67:7e:15:2a:
         6b:65:01:f3:af:c8:e6:05:76:d7:27:ec:72:20:a7:db:29:b4:
         9a:cf:08:d0:72:0e:6c:53:7c:c2:ac:95:c9:61:81:37:17:dd:
         52:5b:a2:6b:dd:bf:ae:71:9e:aa:80:cb:7a:73:0e:4d:c5:32:
         60:8e:17:30:9b:93:a4:8b:4d:98:1b:95:f4:7b:08:f1:8a:05:
         8c:38:a6:3c:ed:f8:02:8f:e3:36:07:61:f7:a4:e5:23:c3:ea:
         e4:6d:b5:9f:88:a7:de:37:9b:2e:b5:76:6c:af:2f:4e:43:7f:
         13:12:e5:98
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0I3QzcxMTAvBgNVBAUTKDcxNzJFRDBDRjQ0NzA1RUNFQjE5NjFEMTNBMDU3RUNG
RjMwN0M4NkYwHhcNMjYwNTExMDU1NDE0WhcNMjYwNTE4MDU1NDE0WjAYMRYwFAYD
VQQDEw02YTAxNmYwNi02ZTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArmVHb3ngB2rIsLicsfbN/oBrgi57mRlZrL8q+h1214pTTI4UBwosTCgOhFsP
HWqoXA1zmAHuldry9XldtSBmJTNjwPT0EBI1WpZ2k3qqEpt43NPbdw6vzi4zj+GH
3Tiu5QNuAnMEGDD9CREn5275N37tMGZ8KsllAcFKWlkuA7M6jlFXI/5oFsKKDMic
lNnlEJgL0URB0zYvannUm7+iXbNxCRZvWNrj6remMoIoEpwwdgXRaXaZJqJFl7gx
gt2dtS03C0kATPJjOkbzemC9Kp8m7YofWgrla+UQazTi2rtj0snkU+h2Edi6bIAB
+Wa3Sheimal2V78Y1F/AXa4HbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKO7KPlX
9ry/KLsmP/SXordX+04xMB8GA1UdIwQYMBaAFHFy7Qz0RwXs6xlh0ToFfs/zB8hv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjdDNy9BQTJBNzg0QzlE
OUIxMUVGODYwNTA0NjlDNEY5QUUwMi9jWEx0RFBSSEJlenJHV0hST2dWLXpfTUh5
RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NYTHREUFJIQmV6ckdXSFJPZ1Ytel9NSHlHOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QjdDNy9BQTJBNzg0QzlEOUIxMUVGODYwNTA0NjlDNEY5QUUwMi9jWEx0RFBSSEJl
enJHV0hST2dWLXpfTUh5RzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiXc++hv7yQ4El7a/r9MVsXBpI2Ng+6tjOuokHKGbzQI8AaLm9VqhQw8VRiXS
kphnrSofPKHwfOcr1f3mSqFkAdi110z6tUiYgxXl5DMpy7coOhe8t4GEV7J844le
zGuaecKkUA/NzKdF3VFmUz6gruNH5/r7vdquCDw4W3NC+NHvtzYl682M9Mk0Ds5n
fhUqa2UB86/I5gV21yfsciCn2ym0ms8I0HIObFN8wqyVyWGBNxfdUluia92/rnGe
qoDLenMOTcUyYI4XMJuTpItNmBuV9HsI8YoFjDimPO34Ao/jNgdh96TlI8Pq5G21
n4in3jebLrV2bK8vTkN/ExLlmA==
-----END CERTIFICATE-----
Generated at Wed May 13 09:21:25 2026 by rpki-client