Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft
File:                     A2exVIJlFyUqY-y0w4aTXLe9NA4.mft (raw, json)
Hash identifier:          moQ6t01G2aRk2QGst8lrZ6zlLBW41vepVI3EqwuYav0=
Subject key identifier:   4F:1A:EA:1A:43:ED:18:45:B1:42:DE:43:4D:2F:BB:B0:24:14:67:D4
Authority key identifier: 03:67:B1:54:82:65:17:25:2A:63:EC:B4:C3:86:93:5C:B7:BD:34:0E
Certificate issuer:       /CN=A913CA90/serialNumber=0367B154826517252A63ECB4C386935CB7BD340E
Certificate serial:       0510
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft
Manifest number:          0509
Signing time:             Tue 12 May 2026 23:45:10 +0000
Manifest this update:     Tue 12 May 2026 23:45:10 +0000
Manifest next update:     Tue 19 May 2026 23:45:10 +0000
Files and hashes:         1: A2exVIJlFyUqY-y0w4aTXLe9NA4.crl (hash: 7FZ4cNc6CPgOiywYpzpfmpUTdAvgRDHU7f0hmzGSiHk=)
                          2: 683A9D3A52EF11EC83A5744EC4F9AE02.roa (hash: tzCOvyqYt7MFJ8SNbSmhb4aGjE+HioiUqoKryi7LaSA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.crl
                          rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 23:45:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1296 (0x510)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913CA90, serialNumber=0367B154826517252A63ECB4C386935CB7BD340E
        Validity
            Not Before: May 12 23:45:10 2026 GMT
            Not After : May 19 23:45:10 2026 GMT
        Subject: CN=6a03bb86-bb2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:27:37:3f:e0:e5:7f:f1:79:8c:c6:17:fe:84:
                    c9:aa:9b:87:a2:87:73:7e:e9:be:3f:6b:37:50:fd:
                    05:75:44:7e:7e:b7:6e:38:2e:21:70:00:bd:b8:72:
                    d3:2f:e8:e8:93:4a:98:52:ed:94:72:04:6e:3b:66:
                    83:1f:c1:92:ed:b1:98:1a:2b:44:9d:d4:a6:55:47:
                    61:48:5b:26:74:7e:9c:13:06:09:25:22:b9:8b:b5:
                    2a:fd:dc:0b:28:62:95:99:61:ec:be:55:e9:1a:2a:
                    9e:81:a0:bd:3e:3b:91:bd:84:68:99:0b:a2:68:38:
                    bf:0f:b0:70:82:79:fb:85:e1:38:8e:61:66:ee:e0:
                    2b:dd:75:16:83:60:0a:bb:2f:4a:08:bc:74:d8:cb:
                    e8:ab:31:2f:7e:2a:b2:1d:7e:00:5b:1e:80:6e:21:
                    ad:d5:33:44:03:67:84:59:ab:fd:4f:bc:b9:6f:44:
                    08:44:a1:62:6e:7f:4c:2e:ae:4f:68:e8:8e:7b:9f:
                    d3:84:36:fe:33:40:e9:82:14:4d:6d:9d:d9:07:b2:
                    8a:26:ac:f7:d0:06:28:e9:7c:0d:2b:a4:6f:af:11:
                    fa:d6:2c:af:5d:b5:35:39:c7:93:6a:18:8e:7d:b7:
                    b5:fe:56:ff:b3:21:7f:84:5a:94:be:4f:35:20:39:
                    0f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:1A:EA:1A:43:ED:18:45:B1:42:DE:43:4D:2F:BB:B0:24:14:67:D4
            X509v3 Authority Key Identifier:
                keyid:03:67:B1:54:82:65:17:25:2A:63:EC:B4:C3:86:93:5C:B7:BD:34:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:07:7f:ee:9f:ce:5a:62:92:21:45:79:66:72:07:4b:ad:73:
         5a:8e:78:a3:a8:ce:bc:ca:96:44:49:95:c7:c0:b2:f0:12:b4:
         d4:ab:57:68:99:bf:3b:a5:91:93:48:a3:ab:2d:89:14:76:97:
         fa:1c:99:d5:1e:59:9b:dd:f2:b0:fb:20:71:e1:1e:f3:36:c8:
         44:e7:92:0e:8f:53:07:85:25:d6:16:ab:a2:38:a4:78:35:56:
         ef:56:55:1e:0a:eb:e2:3f:32:53:79:50:f7:b6:72:a1:86:60:
         6c:3a:78:2d:84:cf:e9:3e:6f:35:6c:b9:12:e6:aa:6a:21:07:
         03:a5:57:92:85:6d:6d:01:aa:72:1a:eb:da:e9:77:76:e3:65:
         ac:e4:51:03:b0:55:28:9a:0f:4f:51:14:90:12:8a:6e:39:55:
         f3:d4:d1:87:93:5a:c0:3b:55:5a:8d:e7:76:18:a2:fe:1e:7f:
         fd:7d:33:33:43:d5:2d:1d:41:41:65:48:d4:2b:a6:8a:ba:43:
         17:39:46:1d:66:99:23:b8:88:a2:2f:86:fb:98:1f:96:f5:a2:
         36:2d:8b:45:a3:9c:3e:38:8e:5f:59:26:cd:ec:7b:10:8e:30:
         3e:c4:67:a6:46:d9:33:6a:ef:85:8a:3d:34:ac:0c:13:e8:fd:
         42:67:64:37
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBRAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0NBOTAxMTAvBgNVBAUTKDAzNjdCMTU0ODI2NTE3MjUyQTYzRUNCNEMzODY5MzVD
QjdCRDM0MEUwHhcNMjYwNTEyMjM0NTEwWhcNMjYwNTE5MjM0NTEwWjAYMRYwFAYD
VQQDEw02YTAzYmI4Ni1iYjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0yc3P+Dlf/F5jMYX/oTJqpuHoodzfum+P2s3UP0FdUR+frduOC4hcAC9uHLT
L+jok0qYUu2UcgRuO2aDH8GS7bGYGitEndSmVUdhSFsmdH6cEwYJJSK5i7Uq/dwL
KGKVmWHsvlXpGiqegaC9PjuRvYRomQuiaDi/D7Bwgnn7heE4jmFm7uAr3XUWg2AK
uy9KCLx02MvoqzEvfiqyHX4AWx6AbiGt1TNEA2eEWav9T7y5b0QIRKFibn9MLq5P
aOiOe5/ThDb+M0DpghRNbZ3ZB7KKJqz30AYo6XwNK6RvrxH61iyvXbU1OceTahiO
fbe1/lb/syF/hFqUvk81IDkPZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE8a6hpD
7RhFsULeQ00vu7AkFGfUMB8GA1UdIwQYMBaAFANnsVSCZRclKmPstMOGk1y3vTQO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0E5MC8yNUUzQkJCNDUy
RUIxMUVDODk2OUU3NDRDNEY5QUUwMi9BMmV4VklKbEZ5VXFZLXkwdzRhVFhMZTlO
QTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0EyZXhWSUpsRnlVcVkteTB3NGFUWExlOU5BNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
Q0E5MC8yNUUzQkJCNDUyRUIxMUVDODk2OUU3NDRDNEY5QUUwMi9BMmV4VklKbEZ5
VXFZLXkwdzRhVFhMZTlOQTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApQd/7p/OWmKSIUV5ZnIHS61zWo54o6jOvMqWREmVx8Cy8BK01KtXaJm/O6WR
k0ijqy2JFHaX+hyZ1R5Zm93ysPsgceEe8zbIROeSDo9TB4Ul1harojikeDVW71ZV
Hgrr4j8yU3lQ97ZyoYZgbDp4LYTP6T5vNWy5EuaqaiEHA6VXkoVtbQGqchrr2ul3
duNlrORRA7BVKJoPT1EUkBKKbjlV89TRh5NawDtVWo3ndhii/h5//X0zM0PVLR1B
QWVI1CumirpDFzlGHWaZI7iIoi+G+5gflvWiNi2LRaOcPjiOX1kmzex7EI4wPsRn
pkbZM2rvhYo9NKwME+j9QmdkNw==
-----END CERTIFICATE-----
Generated at Wed May 13 14:02:22 2026 by rpki-client