Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft
File:                     K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft (raw, json)
Hash identifier:          R+XWY40gxQuFnhRyERpCKFiDdzGIezqDJ31DRb/Kzgw=
Subject key identifier:   E0:F3:55:51:A0:C9:A9:8A:55:D5:AC:7A:3B:1D:92:7B:99:BD:A0:FA
Authority key identifier: 2B:CA:CF:61:65:B5:87:40:59:0E:59:71:84:33:D8:18:3F:F9:46:6D
Certificate issuer:       /CN=A9144DEA/serialNumber=2BCACF6165B58740590E59718433D8183FF9466D
Certificate serial:       0150
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8rPYWW1h0BZDllxhDPYGD_5Rm0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft
Manifest number:          014A
Signing time:             Mon 11 May 2026 05:16:43 +0000
Manifest this update:     Mon 11 May 2026 05:16:42 +0000
Manifest next update:     Mon 18 May 2026 05:16:42 +0000
Files and hashes:         1: K8rPYWW1h0BZDllxhDPYGD_5Rm0.crl (hash: heuDraNfSFuRbhncnyjSbNqYw9owszVe76Ov0TwsYwk=)
                          2: DC10E79AABF211F0AF7B0010C4F9AE02.roa (hash: zrqCL04jUGgsbKaYOZp7KQyNgp8nrR3Fm1zIFrxXnuE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.crl
                          rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8rPYWW1h0BZDllxhDPYGD_5Rm0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 05:16:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 336 (0x150)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144DEA, serialNumber=2BCACF6165B58740590E59718433D8183FF9466D
        Validity
            Not Before: May 11 05:16:42 2026 GMT
            Not After : May 18 05:16:42 2026 GMT
        Subject: CN=6a01663b-2819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:69:8d:36:b3:bb:20:f6:fa:27:6a:6b:32:d7:
                    ff:41:b3:f5:41:a6:d5:0c:30:19:b9:f2:6f:9c:82:
                    10:4d:3a:33:d1:f5:fd:a7:e8:9e:dd:14:17:f5:3c:
                    6b:f1:62:c4:99:df:bd:7c:5a:5d:58:c2:bc:38:73:
                    bf:b0:bc:e5:d1:0e:a2:ae:70:f2:c1:bf:b6:34:8b:
                    f5:02:53:89:b8:a0:87:87:d0:23:88:85:36:54:44:
                    0e:8d:98:7a:62:a0:ec:30:a4:79:f0:c7:ac:00:3c:
                    02:ba:41:d7:8c:ec:29:e9:5c:5c:04:57:99:83:a7:
                    c6:f3:2e:53:df:12:e5:45:9c:28:2b:ef:9d:77:6b:
                    06:28:c2:ec:90:b1:1e:5e:3a:bd:c6:55:34:49:85:
                    a9:48:62:7e:a0:21:e3:2c:9f:43:fb:bf:64:82:ac:
                    1e:51:13:dc:ee:75:ac:70:cc:19:2e:9c:07:b5:35:
                    43:51:f4:80:7f:fb:65:c4:5c:62:7f:21:56:4b:89:
                    5c:cf:31:b4:dc:b2:c6:b0:3a:95:e3:1d:c2:ef:06:
                    e9:9f:5f:19:fb:f0:18:1d:c3:56:8d:87:87:16:f6:
                    d0:a0:41:f5:6a:2e:34:cf:68:b2:08:b4:e2:22:55:
                    2e:06:53:3b:c2:f3:a8:f3:6d:e4:a3:fa:6c:fb:db:
                    24:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:F3:55:51:A0:C9:A9:8A:55:D5:AC:7A:3B:1D:92:7B:99:BD:A0:FA
            X509v3 Authority Key Identifier:
                keyid:2B:CA:CF:61:65:B5:87:40:59:0E:59:71:84:33:D8:18:3F:F9:46:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8rPYWW1h0BZDllxhDPYGD_5Rm0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:b2:80:67:d2:5e:66:45:80:36:f0:0f:cd:5e:17:59:3d:4e:
         84:8b:6a:d4:8e:50:0a:9c:e3:d3:68:c8:1d:23:89:df:40:be:
         04:44:05:be:51:df:39:46:73:bd:53:ac:11:f8:97:d0:e0:2d:
         a6:19:b7:3a:5d:59:26:1e:ac:bd:81:b5:70:4d:54:76:c9:16:
         1f:25:2f:f7:03:6b:3f:52:f4:86:c4:ab:1a:2c:e7:45:10:dc:
         2c:5e:2b:6e:31:19:2e:cd:75:13:5e:8a:e2:93:4e:3c:9d:d1:
         7e:32:4c:88:87:82:6c:f2:d4:15:d8:5c:5b:5f:78:02:bc:9e:
         5e:32:6c:61:75:57:e8:fa:f3:b1:51:97:e7:1b:70:6e:6d:b8:
         e6:f5:e6:65:c2:d4:c6:00:4a:ba:36:e4:20:68:ee:06:5f:fb:
         cf:b9:1c:4c:7e:87:81:9f:98:e5:12:ae:4b:15:9c:22:4d:31:
         a4:c4:bc:af:b3:20:c1:1c:07:b6:4f:5b:6d:76:63:55:4f:a0:
         c2:1f:ad:fd:99:b1:48:5f:9c:c6:cb:b9:af:63:67:fb:df:ce:
         e0:6b:ef:b8:ec:c9:0f:83:67:86:b1:8b:a7:14:03:6e:76:23:
         5c:26:02:b0:95:99:39:60:88:1d:43:5f:21:b5:73:5f:b6:94:
         05:af:f3:98
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDRERUExMTAvBgNVBAUTKDJCQ0FDRjYxNjVCNTg3NDA1OTBFNTk3MTg0MzNEODE4
M0ZGOTQ2NkQwHhcNMjYwNTExMDUxNjQyWhcNMjYwNTE4MDUxNjQyWjAYMRYwFAYD
VQQDEw02YTAxNjYzYi0yODE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyWmNNrO7IPb6J2prMtf/QbP1QabVDDAZufJvnIIQTToz0fX9p+ie3RQX9Txr
8WLEmd+9fFpdWMK8OHO/sLzl0Q6irnDywb+2NIv1AlOJuKCHh9AjiIU2VEQOjZh6
YqDsMKR58MesADwCukHXjOwp6VxcBFeZg6fG8y5T3xLlRZwoK++dd2sGKMLskLEe
Xjq9xlU0SYWpSGJ+oCHjLJ9D+79kgqweURPc7nWscMwZLpwHtTVDUfSAf/tlxFxi
fyFWS4lczzG03LLGsDqV4x3C7wbpn18Z+/AYHcNWjYeHFvbQoEH1ai40z2iyCLTi
IlUuBlM7wvOo823ko/ps+9skWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFODzVVGg
yamKVdWsejsdknuZvaD6MB8GA1UdIwQYMBaAFCvKz2FltYdAWQ5ZcYQz2Bg/+UZt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NERFQS8zQkY1RjJFMDVB
RTExMUVGQTc1NjNDMkNDNEY5QUUwMi9LOHJQWVdXMWgwQlpEbGx4aERQWUdEXzVS
bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0s4clBZV1cxaDBCWkRsbHhoRFBZR0RfNVJtMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NERFQS8zQkY1RjJFMDVBRTExMUVGQTc1NjNDMkNDNEY5QUUwMi9LOHJQWVdXMWgw
QlpEbGx4aERQWUdEXzVSbTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHLKAZ9JeZkWANvAPzV4XWT1OhItq1I5QCpzj02jIHSOJ30C+BEQFvlHfOUZz
vVOsEfiX0OAtphm3Ol1ZJh6svYG1cE1UdskWHyUv9wNrP1L0hsSrGiznRRDcLF4r
bjEZLs11E16K4pNOPJ3RfjJMiIeCbPLUFdhcW194AryeXjJsYXVX6PrzsVGX5xtw
bm245vXmZcLUxgBKujbkIGjuBl/7z7kcTH6HgZ+Y5RKuSxWcIk0xpMS8r7MgwRwH
tk9bbXZjVU+gwh+t/ZmxSF+cxsu5r2Nn+9/O4GvvuOzJD4NnhrGLpxQDbnYjXCYC
sJWZOWCIHUNfIbVzX7aUBa/zmA==
-----END CERTIFICATE-----
Generated at Wed May 13 03:07:46 2026 by rpki-client