Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.mft
File:                     5cOmhsg97m0zv-xUHqy0pKCJknk.mft (raw, json)
Hash identifier:          fKTCGRWgcFZ7T99H/gNzszESml7MD5DoFH29VEXanLo=
Subject key identifier:   AC:01:4C:A0:FC:80:0B:2C:41:E3:A3:81:E6:EB:16:F1:22:3E:31:EE
Authority key identifier: E5:C3:A6:86:C8:3D:EE:6D:33:BF:EC:54:1E:AC:B4:A4:A0:89:92:79
Certificate issuer:       /CN=A9153AA6/serialNumber=E5C3A686C83DEE6D33BFEC541EACB4A4A0899279
Certificate serial:       1786
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5cOmhsg97m0zv-xUHqy0pKCJknk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.mft
Manifest number:          177A
Signing time:             Tue 12 May 2026 16:35:52 +0000
Manifest this update:     Tue 12 May 2026 16:35:52 +0000
Manifest next update:     Tue 19 May 2026 16:35:52 +0000
Files and hashes:         1: 5cOmhsg97m0zv-xUHqy0pKCJknk.crl (hash: mZgN05EtwuG11+Pjrfcy61Os620Aog2W2kY5PhE72pk=)
                          2: 99C6F94CF52511E7948D5A0BC4F9AE02.roa (hash: KzN0lf2tMPA9CR+MbmlmHKhd1CioUaWks43azeizhtM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.crl
                          rsync://rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5cOmhsg97m0zv-xUHqy0pKCJknk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 16:35:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6022 (0x1786)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153AA6, serialNumber=E5C3A686C83DEE6D33BFEC541EACB4A4A0899279
        Validity
            Not Before: May 12 16:35:52 2026 GMT
            Not After : May 19 16:35:52 2026 GMT
        Subject: CN=6a0356e8-5e71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:92:04:81:39:4c:26:03:e1:27:a7:09:d7:d9:
                    d1:3b:ce:23:03:1b:1c:f1:93:c2:a6:74:8d:ed:4f:
                    2c:1b:dc:b3:e7:da:1a:73:20:e5:84:24:ad:04:a4:
                    43:71:3e:fb:90:8f:56:02:65:d9:eb:c0:db:ae:6d:
                    bd:a5:1b:41:84:41:82:0d:8d:9f:06:4d:6a:a6:de:
                    f1:7e:2d:4c:47:e7:0f:fb:92:b8:56:2d:92:7a:cd:
                    f7:e6:88:70:26:8f:6f:8b:33:2c:3b:4a:db:c0:c4:
                    94:07:f1:e7:7d:da:98:fd:6e:d0:64:48:1d:68:ff:
                    ba:26:79:b2:97:cb:df:7a:93:1a:25:8a:70:be:60:
                    b6:9c:94:42:d2:73:b3:93:a4:8b:89:ab:b1:ad:a5:
                    37:d9:93:dd:76:86:b9:39:5f:24:69:48:52:35:76:
                    c1:f3:a3:36:27:e5:4b:7d:e9:96:79:e1:b5:d1:b5:
                    46:69:bd:db:69:9e:22:ac:9b:74:3e:de:d0:b1:99:
                    41:ba:47:8e:c3:16:d4:17:fd:78:ba:30:88:3e:4b:
                    29:f4:ca:09:9f:37:75:c3:77:3d:a4:19:60:63:8b:
                    ef:2b:ea:90:27:56:b2:6b:c4:1f:e4:5e:01:52:ca:
                    c7:82:1d:3f:a8:fe:97:e3:3e:55:55:0d:8a:6a:c0:
                    e4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:01:4C:A0:FC:80:0B:2C:41:E3:A3:81:E6:EB:16:F1:22:3E:31:EE
            X509v3 Authority Key Identifier:
                keyid:E5:C3:A6:86:C8:3D:EE:6D:33:BF:EC:54:1E:AC:B4:A4:A0:89:92:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5cOmhsg97m0zv-xUHqy0pKCJknk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:da:6f:2b:32:57:f1:3c:41:85:ee:52:1f:fa:99:55:db:93:
         ee:81:6a:80:6d:9d:74:5e:39:62:62:9b:0e:81:e2:cf:22:96:
         93:31:dc:2a:8b:ac:ac:b0:78:fb:b7:f3:0d:5e:00:b5:09:c5:
         e2:89:e3:31:09:3d:ef:1d:eb:8b:df:5a:89:0b:12:b3:64:84:
         cc:b0:b2:64:39:52:98:9a:1c:87:ec:0a:3f:30:96:11:36:b6:
         4c:fe:7b:3c:f5:26:86:d9:ac:3d:1b:a0:e1:0c:9a:8e:44:f8:
         93:54:5b:00:7a:e1:9c:c9:0c:f3:45:5b:1f:c9:a4:23:9e:18:
         ba:ca:1f:9f:ca:14:f3:e3:cf:f0:64:cc:b7:45:04:38:17:a6:
         bf:1d:ab:3c:4b:3c:b6:aa:27:ce:51:a3:c3:b1:a6:bf:ea:8e:
         d3:4d:9e:8a:53:3c:e1:3e:0c:28:9f:71:ba:77:e1:35:8a:b9:
         9c:88:44:2c:a5:de:85:ec:50:c1:fc:71:5e:1b:4b:8a:32:68:
         07:be:20:22:b4:16:53:66:62:86:7a:ea:3a:b8:b3:e0:93:f7:
         4c:c9:67:d4:03:dc:bb:e3:e2:91:d4:e6:2c:c1:88:a9:8a:4b:
         c7:2b:68:69:9c:bb:cc:99:60:c9:c8:bf:f1:dc:e4:28:ef:cf:
         ab:71:0f:84
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICF4YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTNBQTYxMTAvBgNVBAUTKEU1QzNBNjg2QzgzREVFNkQzM0JGRUM1NDFFQUNCNEE0
QTA4OTkyNzkwHhcNMjYwNTEyMTYzNTUyWhcNMjYwNTE5MTYzNTUyWjAYMRYwFAYD
VQQDEw02YTAzNTZlOC01ZTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv5IEgTlMJgPhJ6cJ19nRO84jAxsc8ZPCpnSN7U8sG9yz59oacyDlhCStBKRD
cT77kI9WAmXZ68Dbrm29pRtBhEGCDY2fBk1qpt7xfi1MR+cP+5K4Vi2Ses335ohw
Jo9vizMsO0rbwMSUB/HnfdqY/W7QZEgdaP+6Jnmyl8vfepMaJYpwvmC2nJRC0nOz
k6SLiauxraU32ZPddoa5OV8kaUhSNXbB86M2J+VLfemWeeG10bVGab3baZ4irJt0
Pt7QsZlBukeOwxbUF/14ujCIPksp9MoJnzd1w3c9pBlgY4vvK+qQJ1aya8Qf5F4B
UsrHgh0/qP6X4z5VVQ2KasDk1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKwBTKD8
gAssQeOjgebrFvEiPjHuMB8GA1UdIwQYMBaAFOXDpobIPe5tM7/sVB6stKSgiZJ5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0FBNi85QzNEODdFNkY1
MjQxMUU3OTY0NEIwMDlDNEY5QUUwMi81Y09taHNnOTdtMHp2LXhVSHF5MHBLQ0pr
bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVjT21oc2c5N20wenYteFVIcXkwcEtDSmtuay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
M0FBNi85QzNEODdFNkY1MjQxMUU3OTY0NEIwMDlDNEY5QUUwMi81Y09taHNnOTdt
MHp2LXhVSHF5MHBLQ0prbmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYtpvKzJX8TxBhe5SH/qZVduT7oFqgG2ddF45YmKbDoHizyKWkzHcKousrLB4
+7fzDV4AtQnF4onjMQk97x3ri99aiQsSs2SEzLCyZDlSmJoch+wKPzCWETa2TP57
PPUmhtmsPRug4QyajkT4k1RbAHrhnMkM80VbH8mkI54Yusofn8oU8+PP8GTMt0UE
OBemvx2rPEs8tqonzlGjw7Gmv+qO002eilM84T4MKJ9xunfhNYq5nIhELKXehexQ
wfxxXhtLijJoB74gIrQWU2ZihnrqOriz4JP3TMln1APcu+PikdTmLMGIqYpLxyto
aZy7zJlgyci/8dzkKO/Pq3EPhA==
-----END CERTIFICATE-----
Generated at Wed May 13 11:26:31 2026 by rpki-client