Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft
File:                     g8xy3n1cH-U_wUH4vBrCex3zA7E.mft (raw, json)
Hash identifier:          qde1aJUG6eGpyRq1BudytitbrsGjQhaKD1wAKNLPdl8=
Subject key identifier:   CD:0C:76:2A:80:C8:E8:A7:65:5B:30:35:54:4E:DB:BF:44:C0:3B:36
Authority key identifier: 83:CC:72:DE:7D:5C:1F:E5:3F:C1:41:F8:BC:1A:C2:7B:1D:F3:03:B1
Certificate issuer:       /CN=A914A594/serialNumber=83CC72DE7D5C1FE53FC141F8BC1AC27B1DF303B1
Certificate serial:       0A3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8xy3n1cH-U_wUH4vBrCex3zA7E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft
Manifest number:          0A36
Signing time:             Tue 12 May 2026 19:46:21 +0000
Manifest this update:     Tue 12 May 2026 19:46:21 +0000
Manifest next update:     Tue 19 May 2026 19:46:21 +0000
Files and hashes:         1: g8xy3n1cH-U_wUH4vBrCex3zA7E.crl (hash: XHjXUS2JhtRcMGLbgPIFfmfixWiI83bYgkjs7OJ7OiI=)
                          2: 88F058948E7E11EA955D1E64C4F9AE02.roa (hash: 12BxNNG4r0fp+ny7K/GCAHiE9UmqCnqwlOwyKQlw0O8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.crl
                          rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8xy3n1cH-U_wUH4vBrCex3zA7E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:46:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2623 (0xa3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A594, serialNumber=83CC72DE7D5C1FE53FC141F8BC1AC27B1DF303B1
        Validity
            Not Before: May 12 19:46:21 2026 GMT
            Not After : May 19 19:46:21 2026 GMT
        Subject: CN=6a03838d-4e05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b0:d6:94:d5:b5:ea:df:52:b4:e1:75:71:ac:
                    4d:27:e7:50:03:98:fa:04:e1:5b:1d:d2:e5:be:6f:
                    f7:72:67:8a:ab:45:5c:22:f0:bf:8e:16:7e:ad:99:
                    cf:63:2c:79:0c:e9:a4:6e:74:3b:e3:1a:b8:fb:e2:
                    d4:b6:20:ea:05:ad:29:af:37:b2:52:20:5b:e9:d3:
                    a3:7e:73:ed:0b:3d:94:35:f1:fc:ae:e5:b0:00:7b:
                    67:d8:4c:50:4b:6b:ef:9f:cb:f2:fc:94:80:ca:a9:
                    4d:23:f2:8d:9f:fc:56:ad:4b:6b:77:e6:6d:57:94:
                    8e:fa:30:71:24:b8:7b:6d:11:00:36:c6:99:ef:6c:
                    1f:64:7e:c2:a3:23:27:a9:d7:b3:7f:7f:a2:35:7c:
                    4a:a6:f6:70:6c:e5:a2:bd:fc:a1:5b:3e:da:92:ab:
                    a9:4a:19:7c:8e:44:ba:0b:f7:fb:de:92:b8:ba:7a:
                    2a:5a:1d:2e:86:48:2a:21:f1:65:a5:a3:b8:c9:31:
                    3d:fe:6a:fc:43:ff:ab:a4:78:66:8c:45:4b:95:b5:
                    e6:de:53:b3:b8:d0:9c:1b:44:bb:7e:c3:98:5b:61:
                    53:f6:d8:64:67:25:fb:b4:b0:65:6e:e5:74:7f:0e:
                    59:3d:26:ff:46:21:77:d9:13:03:ab:08:1c:b0:4c:
                    45:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:0C:76:2A:80:C8:E8:A7:65:5B:30:35:54:4E:DB:BF:44:C0:3B:36
            X509v3 Authority Key Identifier:
                keyid:83:CC:72:DE:7D:5C:1F:E5:3F:C1:41:F8:BC:1A:C2:7B:1D:F3:03:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8xy3n1cH-U_wUH4vBrCex3zA7E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:f2:f1:8f:82:1a:d7:d8:ed:3f:df:34:9f:6c:95:3c:1e:d9:
         9f:0f:1c:94:42:0d:b8:7c:a4:b3:ae:f6:c9:a3:af:0f:84:e6:
         e8:35:92:93:f5:d3:c0:e5:55:d7:c7:ff:8b:f0:62:3d:b0:19:
         8b:11:4a:89:8d:d1:bd:c6:63:71:b5:70:05:36:46:a6:10:c9:
         91:8e:53:ce:47:1a:75:76:b9:b6:f4:61:11:f9:f4:d5:c4:7b:
         8d:90:4c:33:76:48:7f:9b:24:00:75:bf:36:90:55:40:9f:f9:
         60:cc:02:c7:94:57:dd:46:c3:b9:8d:72:05:49:bd:6e:e8:72:
         9d:2f:62:c5:83:e4:46:da:2d:e1:2d:3d:c8:9b:22:2f:5e:0c:
         a4:b9:d5:26:71:34:24:21:fa:35:4d:df:63:27:cc:08:04:77:
         ed:77:00:b2:83:43:89:e2:78:7b:95:ea:0a:10:e2:c6:0a:45:
         4f:a0:24:bf:ac:65:30:b4:35:1e:94:c6:6e:e8:67:9c:42:d2:
         66:f6:be:c0:3e:8f:db:60:93:19:29:ae:fb:59:4a:17:a8:b6:
         d7:4e:05:bb:4b:b9:32:83:d1:89:86:cc:55:ff:e1:4f:2a:e1:
         b4:43:67:04:08:94:45:70:3c:44:73:1b:6a:5f:52:03:ab:3d:
         55:13:ce:ae
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEE1OTQxMTAvBgNVBAUTKDgzQ0M3MkRFN0Q1QzFGRTUzRkMxNDFGOEJDMUFDMjdC
MURGMzAzQjEwHhcNMjYwNTEyMTk0NjIxWhcNMjYwNTE5MTk0NjIxWjAYMRYwFAYD
VQQDEw02YTAzODM4ZC00ZTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoLDWlNW16t9StOF1caxNJ+dQA5j6BOFbHdLlvm/3cmeKq0VcIvC/jhZ+rZnP
Yyx5DOmkbnQ74xq4++LUtiDqBa0przeyUiBb6dOjfnPtCz2UNfH8ruWwAHtn2ExQ
S2vvn8vy/JSAyqlNI/KNn/xWrUtrd+ZtV5SO+jBxJLh7bREANsaZ72wfZH7CoyMn
qdezf3+iNXxKpvZwbOWivfyhWz7akqupShl8jkS6C/f73pK4unoqWh0uhkgqIfFl
paO4yTE9/mr8Q/+rpHhmjEVLlbXm3lOzuNCcG0S7fsOYW2FT9thkZyX7tLBlbuV0
fw5ZPSb/RiF32RMDqwgcsExFUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM0MdiqA
yOinZVswNVRO279EwDs2MB8GA1UdIwQYMBaAFIPMct59XB/lP8FB+Lwawnsd8wOx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTU5NC81MzE3OUZGODhF
N0QxMUVBQjVGMzMyNjFDNEY5QUUwMi9nOHh5M24xY0gtVV93VUg0dkJyQ2V4M3pB
N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2c4eHkzbjFjSC1VX3dVSDR2QnJDZXgzekE3RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QTU5NC81MzE3OUZGODhFN0QxMUVBQjVGMzMyNjFDNEY5QUUwMi9nOHh5M24xY0gt
VV93VUg0dkJyQ2V4M3pBN0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhvLxj4Ia19jtP980n2yVPB7Znw8clEINuHyks672yaOvD4Tm6DWSk/XTwOVV
18f/i/BiPbAZixFKiY3RvcZjcbVwBTZGphDJkY5TzkcadXa5tvRhEfn01cR7jZBM
M3ZIf5skAHW/NpBVQJ/5YMwCx5RX3UbDuY1yBUm9buhynS9ixYPkRtot4S09yJsi
L14MpLnVJnE0JCH6NU3fYyfMCAR37XcAsoNDieJ4e5XqChDixgpFT6Akv6xlMLQ1
HpTGbuhnnELSZva+wD6P22CTGSmu+1lKF6i2104Fu0u5MoPRiYbMVf/hTyrhtENn
BAiURXA8RHMbal9SA6s9VRPOrg==
-----END CERTIFICATE-----
Generated at Wed May 13 15:43:03 2026 by rpki-client