Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft
File:                     XCJQF8zJYrDnOQswzwpWIvfN-u0.mft (raw, json)
Hash identifier:          DBGXe2II0XGF32TeT/4EzydLLHb7GYlI3wtiBgsW5P0=
Subject key identifier:   3F:2D:48:73:51:F0:26:11:83:63:5B:3B:CF:7D:86:9E:FD:C4:97:64
Authority key identifier: 5C:22:50:17:CC:C9:62:B0:E7:39:0B:30:CF:0A:56:22:F7:CD:FA:ED
Certificate issuer:       /CN=A9154330/serialNumber=5C225017CCC962B0E7390B30CF0A5622F7CDFAED
Certificate serial:       136F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCJQF8zJYrDnOQswzwpWIvfN-u0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft
Manifest number:          136A
Signing time:             Tue 12 May 2026 16:59:25 +0000
Manifest this update:     Tue 12 May 2026 16:59:25 +0000
Manifest next update:     Tue 19 May 2026 16:59:25 +0000
Files and hashes:         1: XCJQF8zJYrDnOQswzwpWIvfN-u0.crl (hash: TXIdzHmgalf/CzixP73iaAUlWX6TweM5gppLP0mkf28=)
                          2: E2B16FF23C8911F1A9897A359C833773.roa (hash: i8XPRUIqEgeLZapEq2D3+tp+3ktjcE4ag35fN0jDU5c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.crl
                          rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCJQF8zJYrDnOQswzwpWIvfN-u0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 16:59:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4975 (0x136f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154330, serialNumber=5C225017CCC962B0E7390B30CF0A5622F7CDFAED
        Validity
            Not Before: May 12 16:59:25 2026 GMT
            Not After : May 19 16:59:25 2026 GMT
        Subject: CN=6a035c6d-8a89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:27:30:0a:d6:f5:a7:11:fc:ab:a6:8e:7b:d9:
                    21:da:6e:72:af:16:90:80:79:e5:6e:31:ac:ba:ef:
                    b2:03:2f:5b:b2:5e:e9:77:b7:ee:60:3a:38:d3:60:
                    8c:e7:9e:a9:fd:c0:f1:1d:d7:84:34:e6:6a:d4:d4:
                    a3:3b:e3:55:fe:97:bb:21:89:0b:8c:26:80:de:58:
                    13:0a:3d:9e:d7:1f:c6:d8:0e:f3:08:d1:25:97:55:
                    62:05:3b:26:d2:5a:ca:79:73:4a:cc:fa:a1:6a:6f:
                    ba:d9:2b:93:8c:d7:53:c6:44:e1:a6:d5:54:66:52:
                    6d:5f:cc:9e:95:df:d0:ca:6a:d2:50:4e:b3:63:d4:
                    bc:87:0f:20:88:36:eb:d2:59:bb:82:ef:80:50:06:
                    9c:7c:2e:e3:d7:8b:7d:f0:a7:1c:02:1a:34:4a:cc:
                    73:17:90:07:a3:96:29:9e:fd:7b:7f:68:c1:96:fd:
                    9d:67:ec:61:10:ba:d3:af:35:42:c4:06:3c:36:d5:
                    ee:3a:bb:5d:13:12:b8:74:18:ee:87:d9:f2:f2:d6:
                    9c:27:f5:e6:31:2f:19:3a:80:af:55:59:db:2a:9d:
                    c1:1c:34:ed:87:ee:16:97:88:06:16:ed:9f:8d:1c:
                    25:4b:7c:74:ec:1d:ab:77:09:12:d9:3f:f8:d7:d3:
                    07:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:2D:48:73:51:F0:26:11:83:63:5B:3B:CF:7D:86:9E:FD:C4:97:64
            X509v3 Authority Key Identifier:
                keyid:5C:22:50:17:CC:C9:62:B0:E7:39:0B:30:CF:0A:56:22:F7:CD:FA:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCJQF8zJYrDnOQswzwpWIvfN-u0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:a6:88:6d:ab:ba:87:d1:07:74:57:e2:b3:c0:b6:41:8f:10:
         c3:fd:56:e0:b5:31:b3:d7:67:03:d1:8f:87:84:30:51:8a:b9:
         58:41:c1:e9:b3:2e:8a:64:60:41:67:af:30:fc:37:e4:90:ce:
         f2:74:c3:2c:10:c4:f0:6b:94:d6:ea:ee:70:5d:c9:23:62:30:
         ac:23:17:07:55:9a:ba:c7:23:c0:60:46:48:ac:8d:07:bd:17:
         66:b3:b1:98:a7:c8:6f:12:61:60:2c:19:72:23:0e:b0:94:9a:
         6f:63:8d:ab:5b:7c:5b:5a:ce:44:45:87:aa:1d:1e:67:1b:69:
         3b:bd:f0:86:4f:8d:12:30:6a:b3:68:5d:a2:d2:ad:bb:7c:1e:
         eb:ea:23:e4:0b:0e:1f:95:2e:17:f7:dd:98:b9:0d:80:0c:4f:
         ad:cb:a9:92:68:bf:af:e9:3b:d3:2c:30:0f:22:da:2b:4c:5f:
         67:f3:4e:7b:c3:9d:cb:28:d1:6c:ae:9a:cb:19:c5:d7:9b:34:
         5b:e6:47:d9:80:cd:42:28:46:72:4c:4a:9d:62:d2:80:e4:82:
         b6:b4:9b:0b:00:94:4f:52:8a:d2:27:6a:50:b8:07:ac:3f:18:
         e8:5e:06:48:33:57:96:d6:c3:6c:c1:de:c2:02:ca:48:ae:ef:
         29:48:7d:d4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICE28wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTQzMzAxMTAvBgNVBAUTKDVDMjI1MDE3Q0NDOTYyQjBFNzM5MEIzMENGMEE1NjIy
RjdDREZBRUQwHhcNMjYwNTEyMTY1OTI1WhcNMjYwNTE5MTY1OTI1WjAYMRYwFAYD
VQQDEw02YTAzNWM2ZC04YTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8ScwCtb1pxH8q6aOe9kh2m5yrxaQgHnlbjGsuu+yAy9bsl7pd7fuYDo402CM
556p/cDxHdeENOZq1NSjO+NV/pe7IYkLjCaA3lgTCj2e1x/G2A7zCNEll1ViBTsm
0lrKeXNKzPqham+62SuTjNdTxkThptVUZlJtX8yeld/QymrSUE6zY9S8hw8giDbr
0lm7gu+AUAacfC7j14t98KccAho0SsxzF5AHo5Ypnv17f2jBlv2dZ+xhELrTrzVC
xAY8NtXuOrtdExK4dBjuh9ny8tacJ/XmMS8ZOoCvVVnbKp3BHDTth+4Wl4gGFu2f
jRwlS3x07B2rdwkS2T/419MHmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD8tSHNR
8CYRg2NbO899hp79xJdkMB8GA1UdIwQYMBaAFFwiUBfMyWKw5zkLMM8KViL3zfrt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDMzMC9FQUQ4NzYzQ0Mw
OTMxMUU4ODBFNTJEMjNDNEY5QUUwMi9YQ0pRRjh6SllyRG5PUXN3endwV0l2Zk4t
dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hDSlFGOHpKWXJEbk9Rc3d6d3BXSXZmTi11MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NDMzMC9FQUQ4NzYzQ0MwOTMxMUU4ODBFNTJEMjNDNEY5QUUwMi9YQ0pRRjh6Slly
RG5PUXN3endwV0l2Zk4tdTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJKaIbau6h9EHdFfis8C2QY8Qw/1W4LUxs9dnA9GPh4QwUYq5WEHB6bMuimRg
QWevMPw35JDO8nTDLBDE8GuU1urucF3JI2IwrCMXB1WauscjwGBGSKyNB70XZrOx
mKfIbxJhYCwZciMOsJSab2ONq1t8W1rOREWHqh0eZxtpO73whk+NEjBqs2hdotKt
u3we6+oj5AsOH5UuF/fdmLkNgAxPrcupkmi/r+k70ywwDyLaK0xfZ/NOe8OdyyjR
bK6ayxnF15s0W+ZH2YDNQihGckxKnWLSgOSCtrSbCwCUT1KK0idqULgHrD8Y6F4G
SDNXltbDbMHewgLKSK7vKUh91A==
-----END CERTIFICATE-----
Generated at Wed May 13 11:40:08 2026 by rpki-client