Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.mft
File:                     b_pdsVnUCjoXLbx09cMrVVF5ea8.mft (raw, json)
Hash identifier:          0AmMmeLwFX3cLMhZ37KcWzPJ4M/DYAQe34qq2SmQPIc=
Subject key identifier:   A5:F7:10:64:39:74:92:6E:DA:64:73:1E:D2:B3:9A:2B:01:9F:DB:89
Authority key identifier: 6F:FA:5D:B1:59:D4:0A:3A:17:2D:BC:74:F5:C3:2B:55:51:79:79:AF
Certificate issuer:       /CN=A913C627/serialNumber=6FFA5DB159D40A3A172DBC74F5C32B55517979AF
Certificate serial:       092C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_pdsVnUCjoXLbx09cMrVVF5ea8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.mft
Manifest number:          090B
Signing time:             Tue 12 May 2026 20:25:29 +0000
Manifest this update:     Tue 12 May 2026 20:25:29 +0000
Manifest next update:     Tue 19 May 2026 20:25:29 +0000
Files and hashes:         1: b_pdsVnUCjoXLbx09cMrVVF5ea8.crl (hash: Qa0Z/T5PTcumoD3mWx7kBLuzkUaifMNXMLs7m6c1aTs=)
                          2: FFB3EF94F53C11EEA5B4623BC4F9AE02.roa (hash: PoWHbD4GJtdImYAMon+IcO81vzMzM3tbtCeI0of3Fd8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.crl
                          rsync://rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_pdsVnUCjoXLbx09cMrVVF5ea8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:25:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2348 (0x92c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C627, serialNumber=6FFA5DB159D40A3A172DBC74F5C32B55517979AF
        Validity
            Not Before: May 12 20:25:29 2026 GMT
            Not After : May 19 20:25:29 2026 GMT
        Subject: CN=6a038cb9-41a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:78:0c:81:35:60:83:b7:01:5d:ea:55:bc:eb:
                    20:c9:b5:03:ee:7e:12:8e:c5:8f:2a:bc:5b:37:1d:
                    82:f6:cc:84:81:3e:1f:49:48:7b:1f:a6:cb:e9:24:
                    7e:07:1e:98:a7:58:a6:04:f8:55:6d:72:ae:c2:12:
                    f6:dd:b1:d1:0f:f4:a4:33:92:2f:5c:05:fb:aa:d7:
                    84:30:d1:23:86:92:40:1e:bf:1c:b1:73:0b:d8:2b:
                    10:98:b4:de:ef:ca:30:88:71:d3:a8:b8:68:79:41:
                    e6:96:5e:e5:7d:94:f2:2b:df:75:07:82:0d:d6:65:
                    f0:29:80:d2:e1:6b:7b:25:b8:22:17:45:b9:a2:ad:
                    64:e5:9f:23:3a:26:af:39:c2:fb:09:a5:a5:5c:d0:
                    1b:57:b7:8c:65:e4:98:67:e0:fa:5e:4d:85:65:38:
                    be:58:6b:5d:f0:d6:03:7d:4d:b7:8c:26:5c:11:a2:
                    cb:27:b6:00:47:6f:1c:43:8d:75:d1:24:e7:0a:c6:
                    bc:d0:5e:4c:cd:44:3b:ba:d4:fe:d7:cc:df:fd:68:
                    a4:74:ed:f1:4e:28:51:4d:26:f8:90:95:a5:2f:1d:
                    57:62:c4:a2:ca:75:7a:18:41:da:b0:cd:cb:af:40:
                    59:5c:d4:97:52:d7:30:ce:88:7a:28:61:7c:54:b7:
                    33:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:F7:10:64:39:74:92:6E:DA:64:73:1E:D2:B3:9A:2B:01:9F:DB:89
            X509v3 Authority Key Identifier:
                keyid:6F:FA:5D:B1:59:D4:0A:3A:17:2D:BC:74:F5:C3:2B:55:51:79:79:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_pdsVnUCjoXLbx09cMrVVF5ea8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:3c:bb:55:40:96:cd:6b:55:08:45:1e:18:c1:e8:0b:09:81:
         b6:21:90:8f:d1:34:83:69:d4:da:1e:5a:ba:34:cb:f1:85:4c:
         f2:0f:4c:5a:ab:ee:5c:73:c8:7d:4d:e5:68:c6:f9:9b:5f:43:
         34:e8:6a:63:ba:d2:a0:06:cd:ed:bd:fc:72:6d:91:1b:3f:9e:
         f4:67:e3:e2:bd:d7:00:85:d6:95:3f:cc:fe:8c:0d:32:18:20:
         ee:ae:db:0f:50:3b:1e:c7:bc:fa:f3:f7:a2:a7:ed:6d:47:80:
         9c:61:0e:0d:48:d8:6e:6f:b2:c4:b1:46:9e:0b:57:e9:6d:d9:
         bf:55:97:7c:ca:2d:81:1c:c5:f1:95:f0:97:46:03:b5:c8:34:
         27:f4:46:3a:ac:50:f9:d4:32:5d:4b:74:d4:09:fa:56:00:08:
         a3:79:46:ac:e7:e5:a2:1a:0b:81:03:4d:51:85:40:68:52:10:
         fb:a7:cf:68:00:0b:20:ef:ec:8e:98:fe:55:3e:95:ba:e2:e7:
         3c:22:78:bf:ae:0e:b3:8d:83:77:74:1c:02:f1:c6:4e:16:cd:
         50:6b:46:e8:44:49:11:de:46:78:9e:a8:94:32:6c:55:73:1e:
         91:00:d9:e6:39:cb:8d:3e:3c:ff:c0:5e:a1:4e:26:6f:5c:20:
         27:13:95:61
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCSwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0M2MjcxMTAvBgNVBAUTKDZGRkE1REIxNTlENDBBM0ExNzJEQkM3NEY1QzMyQjU1
NTE3OTc5QUYwHhcNMjYwNTEyMjAyNTI5WhcNMjYwNTE5MjAyNTI5WjAYMRYwFAYD
VQQDEw02YTAzOGNiOS00MWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtXgMgTVgg7cBXepVvOsgybUD7n4SjsWPKrxbNx2C9syEgT4fSUh7H6bL6SR+
Bx6Yp1imBPhVbXKuwhL23bHRD/SkM5IvXAX7qteEMNEjhpJAHr8csXML2CsQmLTe
78owiHHTqLhoeUHmll7lfZTyK991B4IN1mXwKYDS4Wt7JbgiF0W5oq1k5Z8jOiav
OcL7CaWlXNAbV7eMZeSYZ+D6Xk2FZTi+WGtd8NYDfU23jCZcEaLLJ7YAR28cQ411
0STnCsa80F5MzUQ7utT+18zf/WikdO3xTihRTSb4kJWlLx1XYsSiynV6GEHasM3L
r0BZXNSXUtcwzoh6KGF8VLczZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKX3EGQ5
dJJu2mRzHtKzmisBn9uJMB8GA1UdIwQYMBaAFG/6XbFZ1Ao6Fy28dPXDK1VReXmv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzYyNy9DMjY1QzFBNEQw
N0QxMUVBODYwMDk4NkRDNEY5QUUwMi9iX3Bkc1ZuVUNqb1hMYngwOWNNclZWRjVl
YTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JfcGRzVm5VQ2pvWExieDA5Y01yVlZGNWVhOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QzYyNy9DMjY1QzFBNEQwN0QxMUVBODYwMDk4NkRDNEY5QUUwMi9iX3Bkc1ZuVUNq
b1hMYngwOWNNclZWRjVlYTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIDy7VUCWzWtVCEUeGMHoCwmBtiGQj9E0g2nU2h5aujTL8YVM8g9MWqvuXHPI
fU3laMb5m19DNOhqY7rSoAbN7b38cm2RGz+e9Gfj4r3XAIXWlT/M/owNMhgg7q7b
D1A7Hse8+vP3oqftbUeAnGEODUjYbm+yxLFGngtX6W3Zv1WXfMotgRzF8ZXwl0YD
tcg0J/RGOqxQ+dQyXUt01An6VgAIo3lGrOflohoLgQNNUYVAaFIQ+6fPaAALIO/s
jpj+VT6VuuLnPCJ4v64Os42Dd3QcAvHGThbNUGtG6ERJEd5GeJ6olDJsVXMekQDZ
5jnLjT48/8BeoU4mb1wgJxOVYQ==
-----END CERTIFICATE-----
Generated at Wed May 13 06:55:08 2026 by rpki-client