Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.mft
File:                     madm1M-kWp-eN3glBJixJ2jEHho.mft (raw, json)
Hash identifier:          xrIdh/yXwOuyHURM1gpBk2AaWosdXJH9/PGT+8JdgYk=
Subject key identifier:   89:71:05:59:40:B8:A4:59:BB:BF:54:02:EB:62:4B:CD:97:0D:63:56
Authority key identifier: 99:A7:66:D4:CF:A4:5A:9F:9E:37:78:25:04:98:B1:27:68:C4:1E:1A
Certificate issuer:       /CN=A9155501/serialNumber=99A766D4CFA45A9F9E3778250498B12768C41E1A
Certificate serial:       014B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/madm1M-kWp-eN3glBJixJ2jEHho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.mft
Manifest number:          0142
Signing time:             Wed 13 May 2026 05:25:26 +0000
Manifest this update:     Wed 13 May 2026 05:25:26 +0000
Manifest next update:     Wed 20 May 2026 05:25:26 +0000
Files and hashes:         1: madm1M-kWp-eN3glBJixJ2jEHho.crl (hash: I2jt3PhGuLFgds/N+PGyzowAPH/nk1gB0uNCLk9VbvU=)
                          2: 4DD8750E69A611EF84A27584C4F9AE02.roa (hash: VOUYAm4vUARPOBx8hzx51ITs/3U+Tn4nx1d9cHtgB/I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.crl
                          rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/madm1M-kWp-eN3glBJixJ2jEHho.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 05:22:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 331 (0x14b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155501, serialNumber=99A766D4CFA45A9F9E3778250498B12768C41E1A
        Validity
            Not Before: May 13 05:25:26 2026 GMT
            Not After : May 20 05:25:26 2026 GMT
        Subject: CN=6a040b46-89a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:49:65:e8:34:9b:14:a0:b2:6b:1a:07:3c:d4:
                    23:8d:e5:ac:53:9a:97:35:9d:7f:79:ff:5e:09:83:
                    a7:af:77:ec:9a:1b:a9:a6:48:ab:4f:82:4d:6f:8b:
                    e0:f3:18:27:79:06:b5:67:ad:37:19:d9:a9:d1:d9:
                    67:f9:3d:77:e3:40:f2:29:0e:4c:e0:47:89:05:9b:
                    a0:d0:92:b6:aa:26:de:5d:89:7c:d8:56:49:f1:67:
                    4a:2c:98:1e:6f:0d:67:7e:cf:4f:cc:bd:d4:3f:95:
                    3b:32:30:67:52:86:16:14:ab:46:44:f0:d2:6e:91:
                    94:a9:7d:21:a3:85:d9:ad:67:d1:83:34:12:a6:9b:
                    5b:e2:1d:91:25:d0:42:fc:74:cb:73:cf:45:e0:e4:
                    dc:69:8a:80:b9:b3:0d:1e:cb:ac:c7:fc:05:3d:9a:
                    ad:d6:5c:b7:1c:db:f9:ef:e0:d3:ee:38:49:d5:6b:
                    ad:39:60:58:1e:b4:61:f8:4b:86:d4:95:3e:f9:62:
                    93:e5:8a:21:fe:e4:d7:05:e3:45:79:6f:84:a5:00:
                    88:52:bc:77:c0:79:ed:c2:d8:d3:79:6f:58:1e:cf:
                    90:a7:f4:16:d7:e8:0f:62:2c:da:f3:b2:83:d7:00:
                    6b:15:4e:92:3f:74:a5:fb:12:24:dc:03:da:86:9d:
                    06:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:71:05:59:40:B8:A4:59:BB:BF:54:02:EB:62:4B:CD:97:0D:63:56
            X509v3 Authority Key Identifier:
                keyid:99:A7:66:D4:CF:A4:5A:9F:9E:37:78:25:04:98:B1:27:68:C4:1E:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/madm1M-kWp-eN3glBJixJ2jEHho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155501/2688E30268DF11EF83089E0BC4F9AE02/madm1M-kWp-eN3glBJixJ2jEHho.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:c0:1c:f7:4b:af:61:99:8d:4c:d7:3c:7a:54:59:f6:54:08:
         a3:48:da:b3:48:b6:e2:ef:65:09:9c:d6:c0:36:b4:63:3d:dd:
         4d:b1:78:f3:3b:58:64:6e:a0:09:e8:0f:06:a9:e2:6e:11:06:
         b2:c7:3e:28:db:2f:c6:a5:7c:2c:81:54:0a:c3:e3:a2:c8:07:
         f3:f6:bb:86:e6:3f:30:25:6d:2d:95:0f:9b:bf:7d:94:a9:84:
         24:48:f4:14:9e:be:93:75:33:50:31:2f:9a:0c:63:6e:4f:09:
         c0:94:c7:de:87:06:be:3b:b5:96:31:30:30:88:71:a4:15:4c:
         45:eb:9d:47:02:b9:12:f3:1f:b4:cb:36:48:76:a8:a1:e4:a9:
         16:21:bb:1f:0b:6b:e8:44:9a:e4:50:05:24:e6:8e:f4:25:fd:
         43:22:6c:62:5e:f9:18:39:c9:e7:9e:89:d3:1b:16:83:de:f1:
         7f:d6:db:f9:b2:cd:6a:42:ce:07:3a:ff:2d:3c:cb:81:e4:93:
         40:1e:76:ae:ce:86:d8:74:bd:2a:b8:69:bd:ba:e8:f3:51:e1:
         c9:a9:04:4f:d7:ed:ce:06:ec:08:7a:19:5e:aa:2b:57:35:fd:
         53:ee:92:d9:93:5c:f2:16:32:47:f5:0a:b9:ce:16:16:83:19:
         1c:93:3f:36
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTU1MDExMTAvBgNVBAUTKDk5QTc2NkQ0Q0ZBNDVBOUY5RTM3NzgyNTA0OThCMTI3
NjhDNDFFMUEwHhcNMjYwNTEzMDUyNTI2WhcNMjYwNTIwMDUyNTI2WjAYMRYwFAYD
VQQDEw02YTA0MGI0Ni04OWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjkll6DSbFKCyaxoHPNQjjeWsU5qXNZ1/ef9eCYOnr3fsmhuppkirT4JNb4vg
8xgneQa1Z603Gdmp0dln+T1340DyKQ5M4EeJBZug0JK2qibeXYl82FZJ8WdKLJge
bw1nfs9PzL3UP5U7MjBnUoYWFKtGRPDSbpGUqX0ho4XZrWfRgzQSpptb4h2RJdBC
/HTLc89F4OTcaYqAubMNHsusx/wFPZqt1ly3HNv57+DT7jhJ1WutOWBYHrRh+EuG
1JU++WKT5Yoh/uTXBeNFeW+EpQCIUrx3wHntwtjTeW9YHs+Qp/QW1+gPYiza87KD
1wBrFU6SP3Sl+xIk3APahp0G2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIlxBVlA
uKRZu79UAutiS82XDWNWMB8GA1UdIwQYMBaAFJmnZtTPpFqfnjd4JQSYsSdoxB4a
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTUwMS8yNjg4RTMwMjY4
REYxMUVGODMwODlFMEJDNEY5QUUwMi9tYWRtMU0ta1dwLWVOM2dsQkppeEoyakVI
aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21hZG0xTS1rV3AtZU4zZ2xCSml4SjJqRUhoby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NTUwMS8yNjg4RTMwMjY4REYxMUVGODMwODlFMEJDNEY5QUUwMi9tYWRtMU0ta1dw
LWVOM2dsQkppeEoyakVIaG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtcAc90uvYZmNTNc8elRZ9lQIo0jas0i24u9lCZzWwDa0Yz3dTbF48ztYZG6g
CegPBqnibhEGssc+KNsvxqV8LIFUCsPjosgH8/a7huY/MCVtLZUPm799lKmEJEj0
FJ6+k3UzUDEvmgxjbk8JwJTH3ocGvju1ljEwMIhxpBVMReudRwK5EvMftMs2SHao
oeSpFiG7Hwtr6ESa5FAFJOaO9CX9QyJsYl75GDnJ556J0xsWg97xf9bb+bLNakLO
Bzr/LTzLgeSTQB52rs6G2HS9Krhpvbro81HhyakET9ftzgbsCHoZXqorVzX9U+6S
2ZNc8hYyR/UKuc4WFoMZHJM/Ng==
-----END CERTIFICATE-----
Generated at Wed May 13 07:54:15 2026 by rpki-client