Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft
File:                     xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft (raw, json)
Hash identifier:          xfJT0aMpixOwF2h35tqllWE6eUQNn31Vv78rqG6ek48=
Subject key identifier:   A4:21:E5:FF:90:68:DC:E8:F0:4C:1E:D7:0E:FC:EB:CC:68:44:5A:23
Authority key identifier: C7:15:31:D2:5F:80:54:8F:5B:65:1F:86:49:32:5F:3C:8F:D8:59:39
Certificate issuer:       /CN=A915786A/serialNumber=C71531D25F80548F5B651F8649325F3C8FD85939
Certificate serial:       0CA7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxUx0l-AVI9bZR-GSTJfPI_YWTk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft
Manifest number:          0C94
Signing time:             Tue 12 May 2026 18:35:13 +0000
Manifest this update:     Tue 12 May 2026 18:35:12 +0000
Manifest next update:     Tue 19 May 2026 18:35:12 +0000
Files and hashes:         1: xxUx0l-AVI9bZR-GSTJfPI_YWTk.crl (hash: igcqM9li3SMXCBMXjOH/tB4TY5+qEVFl10wKzvBNpuw=)
                          2: FBFF89FC3AC611EEB790D485C4F9AE02.roa (hash: 6+5b1CfcZTuiHBvdAxqJb6CWPbZsPji1n33pmOP0SN8=)
                          3: 7A7B776A1F0E11EA92AA6824C4F9AE02.roa (hash: jEP65BxvqOk8vKVC/3/YzXiqk8d1hNdREg1GZzlOXko=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.crl
                          rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxUx0l-AVI9bZR-GSTJfPI_YWTk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:35:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3239 (0xca7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915786A, serialNumber=C71531D25F80548F5B651F8649325F3C8FD85939
        Validity
            Not Before: May 12 18:35:12 2026 GMT
            Not After : May 19 18:35:12 2026 GMT
        Subject: CN=6a0372e1-0d1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cc:c3:54:21:87:95:47:9e:45:f5:fe:0b:ce:
                    e6:d9:01:c1:ab:e2:13:f7:6e:25:83:ed:08:d7:16:
                    73:95:76:3d:77:18:bd:d4:de:60:bf:88:e4:0d:00:
                    ed:5e:c4:8f:cc:34:b6:ca:0f:43:91:43:92:4d:a4:
                    91:85:be:bf:9b:78:96:4e:96:5e:ec:7b:e4:d8:15:
                    16:4d:75:df:35:f1:7b:6d:9e:b8:2c:d4:fe:d1:5f:
                    7a:f5:85:01:20:8e:c6:1c:61:1a:bc:92:ad:b4:b1:
                    4a:04:ae:e3:43:ed:d4:5c:b6:e9:ee:42:30:8e:09:
                    6c:e4:3b:1e:c0:46:77:b0:05:f7:29:84:40:e9:52:
                    99:39:da:c1:56:b1:8a:c0:a2:0f:f8:84:ae:22:ba:
                    a9:dd:1e:93:d6:c2:07:3b:86:71:d3:07:64:ee:80:
                    3a:d5:74:3e:2e:37:b9:65:80:a1:65:f7:48:2c:a4:
                    6d:44:b2:46:5b:dc:00:2a:f5:0c:76:d7:ca:e8:cf:
                    14:c3:2e:eb:1a:9c:e8:c0:02:05:82:db:12:6f:77:
                    43:65:95:ed:55:62:6e:e0:53:0a:86:8e:98:fa:28:
                    0a:60:98:df:14:ce:a4:0c:5f:95:5d:c0:9b:77:2d:
                    ea:bd:bc:ff:a6:cb:1c:b0:29:82:cd:2d:12:a9:5d:
                    ed:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:21:E5:FF:90:68:DC:E8:F0:4C:1E:D7:0E:FC:EB:CC:68:44:5A:23
            X509v3 Authority Key Identifier:
                keyid:C7:15:31:D2:5F:80:54:8F:5B:65:1F:86:49:32:5F:3C:8F:D8:59:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxUx0l-AVI9bZR-GSTJfPI_YWTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:01:29:3b:f5:01:09:88:68:49:ea:0f:dc:11:bc:be:3d:d5:
         8b:c1:63:55:6e:ef:6b:6d:f7:3d:88:fd:37:6c:b1:4d:05:64:
         25:62:91:09:7d:43:19:75:06:93:47:d5:e6:59:15:d3:f7:67:
         44:b7:24:72:5a:bf:3f:14:28:c9:4b:d8:20:4f:f6:25:91:08:
         47:94:98:87:c5:4b:02:fb:09:29:ba:49:ab:d0:f6:dd:c8:43:
         6e:4b:c6:13:93:e4:2c:b0:a2:cc:f8:2b:79:59:c0:25:38:60:
         be:fb:aa:1c:5b:cf:5f:7a:8d:bf:f1:4c:94:ca:97:23:95:b0:
         7f:e6:d6:b5:89:06:a4:ce:2f:59:58:63:85:35:b1:fc:39:5d:
         18:67:14:eb:3d:cf:41:c4:af:55:a6:ee:df:47:a6:9d:4b:bb:
         f9:90:f5:26:7a:69:31:a1:2f:40:97:63:a0:64:09:a1:ec:12:
         5f:4d:f2:79:11:57:ab:51:6c:fa:19:a5:c6:8d:12:27:59:f0:
         90:34:7b:92:df:30:39:2d:27:39:70:1c:db:7c:0b:20:af:36:
         aa:4a:a3:a6:66:43:4d:01:4f:1f:d9:4e:05:6b:0e:32:47:3e:
         b5:e2:56:74:db:3d:77:70:ef:b3:22:2a:f2:ca:5d:f5:ce:66:
         c9:1f:fd:81
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTc4NkExMTAvBgNVBAUTKEM3MTUzMUQyNUY4MDU0OEY1QjY1MUY4NjQ5MzI1RjND
OEZEODU5MzkwHhcNMjYwNTEyMTgzNTEyWhcNMjYwNTE5MTgzNTEyWjAYMRYwFAYD
VQQDEw02YTAzNzJlMS0wZDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuszDVCGHlUeeRfX+C87m2QHBq+IT924lg+0I1xZzlXY9dxi91N5gv4jkDQDt
XsSPzDS2yg9DkUOSTaSRhb6/m3iWTpZe7Hvk2BUWTXXfNfF7bZ64LNT+0V969YUB
II7GHGEavJKttLFKBK7jQ+3UXLbp7kIwjgls5DsewEZ3sAX3KYRA6VKZOdrBVrGK
wKIP+ISuIrqp3R6T1sIHO4Zx0wdk7oA61XQ+Lje5ZYChZfdILKRtRLJGW9wAKvUM
dtfK6M8Uwy7rGpzowAIFgtsSb3dDZZXtVWJu4FMKho6Y+igKYJjfFM6kDF+VXcCb
dy3qvbz/psscsCmCzS0SqV3tIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKQh5f+Q
aNzo8Ewe1w7868xoRFojMB8GA1UdIwQYMBaAFMcVMdJfgFSPW2UfhkkyXzyP2Fk5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Nzg2QS8xMjZERkM5NjFB
NTUxMUVBODgwNDIyMTFDNEY5QUUwMi94eFV4MGwtQVZJOWJaUi1HU1RKZlBJX1lX
VGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3h4VXgwbC1BVkk5YlpSLUdTVEpmUElfWVdUay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
Nzg2QS8xMjZERkM5NjFBNTUxMUVBODgwNDIyMTFDNEY5QUUwMi94eFV4MGwtQVZJ
OWJaUi1HU1RKZlBJX1lXVGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWQEpO/UBCYhoSeoP3BG8vj3Vi8FjVW7va233PYj9N2yxTQVkJWKRCX1DGXUG
k0fV5lkV0/dnRLckclq/PxQoyUvYIE/2JZEIR5SYh8VLAvsJKbpJq9D23chDbkvG
E5PkLLCizPgreVnAJThgvvuqHFvPX3qNv/FMlMqXI5Wwf+bWtYkGpM4vWVhjhTWx
/DldGGcU6z3PQcSvVabu30emnUu7+ZD1JnppMaEvQJdjoGQJoewSX03yeRFXq1Fs
+hmlxo0SJ1nwkDR7kt8wOS0nOXAc23wLIK82qkqjpmZDTQFPH9lOBWsOMkc+teJW
dNs9d3DvsyIq8spd9c5myR/9gQ==
-----END CERTIFICATE-----
Generated at Wed May 13 10:17:22 2026 by rpki-client