Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft
File:                     FSUB4tXSvcrhiMNKZT5A9Amittc.mft (raw, json)
Hash identifier:          XOQRxNOdEIl6k/h3eOtAakWkbjTswjrh3QCfRCsxstM=
Subject key identifier:   6C:6F:48:1E:1E:7B:B0:D7:CA:38:49:07:91:B5:98:90:AD:6C:AF:85
Authority key identifier: 15:25:01:E2:D5:D2:BD:CA:E1:88:C3:4A:65:3E:40:F4:09:A2:B6:D7
Certificate issuer:       /CN=A913D3CE/serialNumber=152501E2D5D2BDCAE188C34A653E40F409A2B6D7
Certificate serial:       015A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FSUB4tXSvcrhiMNKZT5A9Amittc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft
Manifest number:          0152
Signing time:             Mon 11 May 2026 05:11:21 +0000
Manifest this update:     Mon 11 May 2026 05:11:20 +0000
Manifest next update:     Mon 18 May 2026 05:11:20 +0000
Files and hashes:         1: FSUB4tXSvcrhiMNKZT5A9Amittc.crl (hash: Zy3ZN4B4QepuzSbQeK0F6oJU1H7+1WCrwjPYAuF8iAE=)
                          2: E0E7D5E6495E11EF8EE0647AC4F9AE02.roa (hash: m6TLV7iD9IeQ6WBPJFXbh64dbeehHhnGyQFezGwNIYc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.crl
                          rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FSUB4tXSvcrhiMNKZT5A9Amittc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 05:11:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 346 (0x15a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D3CE, serialNumber=152501E2D5D2BDCAE188C34A653E40F409A2B6D7
        Validity
            Not Before: May 11 05:11:20 2026 GMT
            Not After : May 18 05:11:20 2026 GMT
        Subject: CN=6a0164f8-2a7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e1:8c:a0:f1:a6:6c:b1:d2:4b:6d:85:19:f5:
                    8f:01:83:d8:c7:90:ec:46:0f:a9:74:2a:73:05:aa:
                    9e:7b:60:e5:e3:dd:a4:6d:19:64:2c:14:3a:c5:34:
                    02:10:7a:86:f0:df:f0:17:6b:24:02:18:55:45:e6:
                    be:98:d9:48:2b:a4:91:d4:a8:a0:6d:72:55:2e:85:
                    99:28:fb:68:27:ca:8a:53:ab:08:01:a2:6f:0f:00:
                    63:ba:10:da:d5:88:7b:a0:69:37:af:71:02:63:de:
                    3b:99:91:d7:40:df:93:23:4b:67:29:0d:a1:7b:2e:
                    bd:40:05:f3:39:3c:09:4e:f4:8e:42:f5:e7:97:14:
                    29:2a:42:cf:91:8f:0d:f6:c1:14:d6:6c:e8:f3:74:
                    de:51:d7:77:2b:15:b6:d0:52:d4:4b:29:1b:70:7a:
                    29:07:f4:df:c5:2f:0d:72:e3:0c:35:44:b3:2a:f9:
                    2b:80:dd:08:04:a1:51:00:ea:52:0c:48:80:47:9e:
                    98:3f:85:02:75:5e:0f:a8:b8:8c:8e:cc:4e:3a:1e:
                    22:c6:c5:bc:36:31:c5:1d:4e:f9:1f:e7:dc:b5:75:
                    ea:47:37:ca:50:07:50:c8:92:0c:ae:0f:87:88:68:
                    1f:f7:32:25:eb:ac:58:50:ec:a7:b8:6d:1b:91:45:
                    ef:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:6F:48:1E:1E:7B:B0:D7:CA:38:49:07:91:B5:98:90:AD:6C:AF:85
            X509v3 Authority Key Identifier:
                keyid:15:25:01:E2:D5:D2:BD:CA:E1:88:C3:4A:65:3E:40:F4:09:A2:B6:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FSUB4tXSvcrhiMNKZT5A9Amittc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:13:4f:42:ec:39:ac:5d:3f:99:82:e7:f5:2b:6c:33:93:7b:
         41:2e:2f:3f:bc:eb:29:56:b9:c3:3f:50:18:fc:e0:6b:53:f7:
         1c:59:0f:c3:0e:8e:65:4c:e8:e4:e4:93:a3:fc:c9:d0:f6:04:
         7b:89:a4:46:a3:e5:f9:d8:1a:63:28:57:bb:15:f3:fa:73:66:
         55:7a:97:51:1f:e7:83:e4:27:6c:b1:6a:92:9d:ef:cb:e7:2b:
         16:03:58:78:16:11:18:73:27:c7:f2:11:8c:a1:d7:2f:97:18:
         60:b2:b2:f4:99:d6:a9:da:4c:35:b6:c8:0e:e2:8f:6e:12:f0:
         7c:f4:36:4c:3a:b8:cf:2c:b9:58:68:5b:67:8a:ea:d6:98:62:
         28:54:c3:c3:6d:95:87:ae:14:96:db:89:82:4e:5f:bb:aa:16:
         53:34:9b:a7:55:8b:97:0a:44:7e:2f:44:ae:75:31:bc:ca:e3:
         0a:43:9e:0a:e1:d0:de:66:b7:d8:82:3b:eb:f6:ab:e7:0f:98:
         fa:ca:3a:4e:54:51:f0:5f:e1:7f:6a:72:9e:44:3f:f1:dd:9d:
         7a:3b:5d:96:6a:3b:27:68:97:13:f3:3f:69:65:fa:8a:d2:a7:
         db:07:9f:54:4c:f8:6e:96:ee:06:13:bc:53:be:d7:02:4a:7b:
         9a:5c:d5:c9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0QzQ0UxMTAvBgNVBAUTKDE1MjUwMUUyRDVEMkJEQ0FFMTg4QzM0QTY1M0U0MEY0
MDlBMkI2RDcwHhcNMjYwNTExMDUxMTIwWhcNMjYwNTE4MDUxMTIwWjAYMRYwFAYD
VQQDEw02YTAxNjRmOC0yYTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApeGMoPGmbLHSS22FGfWPAYPYx5DsRg+pdCpzBaqee2Dl492kbRlkLBQ6xTQC
EHqG8N/wF2skAhhVRea+mNlIK6SR1KigbXJVLoWZKPtoJ8qKU6sIAaJvDwBjuhDa
1Yh7oGk3r3ECY947mZHXQN+TI0tnKQ2hey69QAXzOTwJTvSOQvXnlxQpKkLPkY8N
9sEU1mzo83TeUdd3KxW20FLUSykbcHopB/TfxS8NcuMMNUSzKvkrgN0IBKFRAOpS
DEiAR56YP4UCdV4PqLiMjsxOOh4ixsW8NjHFHU75H+fctXXqRzfKUAdQyJIMrg+H
iGgf9zIl66xYUOynuG0bkUXvrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGxvSB4e
e7DXyjhJB5G1mJCtbK+FMB8GA1UdIwQYMBaAFBUlAeLV0r3K4YjDSmU+QPQJorbX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDNDRS8xNDJBMkIwODQ5
NUUxMUVGQkU4RjIwNzlDNEY5QUUwMi9GU1VCNHRYU3ZjcmhpTU5LWlQ1QTlBbWl0
dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0ZTVUI0dFhTdmNyaGlNTktaVDVBOUFtaXR0Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RDNDRS8xNDJBMkIwODQ5NUUxMUVGQkU4RjIwNzlDNEY5QUUwMi9GU1VCNHRYU3Zj
cmhpTU5LWlQ1QTlBbWl0dGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlxNPQuw5rF0/mYLn9StsM5N7QS4vP7zrKVa5wz9QGPzga1P3HFkPww6OZUzo
5OSTo/zJ0PYEe4mkRqPl+dgaYyhXuxXz+nNmVXqXUR/ng+QnbLFqkp3vy+crFgNY
eBYRGHMnx/IRjKHXL5cYYLKy9JnWqdpMNbbIDuKPbhLwfPQ2TDq4zyy5WGhbZ4rq
1phiKFTDw22Vh64UltuJgk5fu6oWUzSbp1WLlwpEfi9ErnUxvMrjCkOeCuHQ3ma3
2II76/ar5w+Y+so6TlRR8F/hf2pynkQ/8d2dejtdlmo7J2iXE/M/aWX6itKn2wef
VEz4bpbuBhO8U77XAkp7mlzVyQ==
-----END CERTIFICATE-----
Generated at Wed May 13 04:38:21 2026 by rpki-client