Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.mft
File:                     up0lGkqfrMTkpmOHdQooZioxAFc.mft (raw, json)
Hash identifier:          CccLz6bBUNI1X7j4J/DqSszZRR2rFpk9xME89Wt5l7Y=
Subject key identifier:   A7:B0:69:07:A9:8A:74:76:38:13:2C:AE:4C:C6:E8:CA:2A:87:3A:0C
Authority key identifier: BA:9D:25:1A:4A:9F:AC:C4:E4:A6:63:87:75:0A:28:66:2A:31:00:57
Certificate issuer:       /CN=A915B581/serialNumber=BA9D251A4A9FACC4E4A66387750A28662A310057
Certificate serial:       3566
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0lGkqfrMTkpmOHdQooZioxAFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.mft
Manifest number:          3550
Signing time:             Tue 12 May 2026 14:47:18 +0000
Manifest this update:     Tue 12 May 2026 14:47:18 +0000
Manifest next update:     Tue 19 May 2026 14:47:18 +0000
Files and hashes:         1: up0lGkqfrMTkpmOHdQooZioxAFc.crl (hash: vbxP5qi7HhVZftt7vWAKgTleG7GP+aetvXWFuAiMUaI=)
                          2: 7A38D6B854F311E7AC64ED3AC4F9AE02.roa (hash: wpF9ptajaxcFCU5XYXYL7kAycTSdDrhOWM0Rnpw1Xnw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.crl
                          rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0lGkqfrMTkpmOHdQooZioxAFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:47:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13670 (0x3566)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B581, serialNumber=BA9D251A4A9FACC4E4A66387750A28662A310057
        Validity
            Not Before: May 12 14:47:18 2026 GMT
            Not After : May 19 14:47:18 2026 GMT
        Subject: CN=6a033d76-8b9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:72:12:8c:38:41:29:9b:e8:3d:a7:c9:20:33:
                    2a:66:16:74:97:33:37:2e:22:32:97:b7:58:07:e8:
                    9a:db:a9:cd:c5:da:b0:3c:5b:28:26:0e:2a:14:98:
                    c1:69:3a:bc:ff:2e:64:5c:64:8f:3b:5f:f7:4f:d2:
                    0b:bb:14:9b:25:12:1d:6f:2a:2b:9b:8d:e0:21:61:
                    59:61:15:db:1f:4d:af:f3:c5:e1:15:2d:c7:41:ca:
                    bd:ad:4f:a1:d0:c2:fa:0d:7e:96:78:11:d2:62:98:
                    65:c0:4b:e7:d8:07:18:fd:52:cc:ca:f1:2a:02:4b:
                    1d:7b:e7:a7:f0:25:9f:56:49:66:94:f7:9a:10:36:
                    de:c3:e9:43:38:43:d5:c0:10:24:c7:6d:ca:62:c1:
                    57:e0:b9:f3:ba:bc:b2:69:4f:19:0e:6f:74:1b:7a:
                    eb:64:82:bb:2f:8a:b5:0c:e2:99:2d:b1:f8:2f:2d:
                    14:68:58:08:30:be:6f:81:0f:20:17:b1:c4:84:2c:
                    d7:64:5a:5f:be:f0:59:9c:d0:46:7c:6b:4e:8f:7a:
                    dc:33:36:ee:98:26:95:21:88:e0:82:df:d8:db:08:
                    9e:0a:29:c3:2c:49:f1:d2:76:64:81:57:d0:fc:ea:
                    e0:35:dd:91:01:4c:f6:91:0e:30:d7:36:44:7a:8c:
                    ac:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:B0:69:07:A9:8A:74:76:38:13:2C:AE:4C:C6:E8:CA:2A:87:3A:0C
            X509v3 Authority Key Identifier:
                keyid:BA:9D:25:1A:4A:9F:AC:C4:E4:A6:63:87:75:0A:28:66:2A:31:00:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0lGkqfrMTkpmOHdQooZioxAFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:17:9b:30:ec:02:da:98:df:25:ee:b2:71:19:f9:fb:9d:ff:
         39:b3:e0:77:8e:02:f0:7f:2f:92:6e:b4:3d:b2:fe:9f:46:96:
         85:95:9d:9d:2e:66:5d:4f:82:ca:df:2c:3b:e3:85:d6:bf:6d:
         ad:5d:86:43:4d:54:19:bc:56:dc:51:01:61:e2:ba:e1:68:49:
         0e:22:18:33:d4:02:87:50:93:5a:bc:b8:4a:65:d6:d1:fe:6f:
         26:2b:d9:25:f2:85:f6:40:07:51:6a:a9:65:28:e8:c2:07:30:
         ae:d8:40:13:39:b8:50:c4:87:de:f3:d5:03:b6:24:4f:1b:78:
         e7:98:21:96:66:93:ba:0a:2f:90:7c:27:98:87:51:f0:c9:ef:
         64:bf:04:aa:97:d7:c5:5c:44:75:b4:68:56:4f:92:a2:a2:b2:
         ba:fd:35:42:84:e7:f4:7d:4f:cc:a4:5f:02:43:73:01:60:20:
         d3:dc:e6:43:6d:e0:43:d7:ae:51:eb:48:0d:e1:d3:4e:5f:40:
         3b:d3:0f:8d:3b:e2:65:7e:4a:7d:c2:19:a3:aa:1c:31:5f:6a:
         c8:5f:3f:2e:f2:52:76:a8:03:50:8f:32:7c:1a:c5:d4:e6:7d:
         18:52:e8:d3:99:c7:43:3a:b3:cb:08:08:56:4a:cc:04:d9:8b:
         59:2b:6a:e6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUI1ODExMTAvBgNVBAUTKEJBOUQyNTFBNEE5RkFDQzRFNEE2NjM4Nzc1MEEyODY2
MkEzMTAwNTcwHhcNMjYwNTEyMTQ0NzE4WhcNMjYwNTE5MTQ0NzE4WjAYMRYwFAYD
VQQDEw02YTAzM2Q3Ni04YjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqXISjDhBKZvoPafJIDMqZhZ0lzM3LiIyl7dYB+ia26nNxdqwPFsoJg4qFJjB
aTq8/y5kXGSPO1/3T9ILuxSbJRIdbyorm43gIWFZYRXbH02v88XhFS3HQcq9rU+h
0ML6DX6WeBHSYphlwEvn2AcY/VLMyvEqAksde+en8CWfVklmlPeaEDbew+lDOEPV
wBAkx23KYsFX4LnzuryyaU8ZDm90G3rrZIK7L4q1DOKZLbH4Ly0UaFgIML5vgQ8g
F7HEhCzXZFpfvvBZnNBGfGtOj3rcMzbumCaVIYjggt/Y2wieCinDLEnx0nZkgVfQ
/OrgNd2RAUz2kQ4w1zZEeoyszQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKewaQep
inR2OBMsrkzG6MoqhzoMMB8GA1UdIwQYMBaAFLqdJRpKn6zE5KZjh3UKKGYqMQBX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjU4MS9CQjhGREZGRTFE
OTMxMUUyQTk2MzhBRjcwOEIwMkNEMi91cDBsR2txZnJNVGtwbU9IZFFvb1ppb3hB
RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VwMGxHa3Fmck1Ua3BtT0hkUW9vWmlveEFGYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QjU4MS9CQjhGREZGRTFEOTMxMUUyQTk2MzhBRjcwOEIwMkNEMi91cDBsR2txZnJN
VGtwbU9IZFFvb1ppb3hBRmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtBebMOwC2pjfJe6ycRn5+53/ObPgd44C8H8vkm60PbL+n0aWhZWdnS5mXU+C
yt8sO+OF1r9trV2GQ01UGbxW3FEBYeK64WhJDiIYM9QCh1CTWry4SmXW0f5vJivZ
JfKF9kAHUWqpZSjowgcwrthAEzm4UMSH3vPVA7YkTxt455ghlmaTugovkHwnmIdR
8MnvZL8EqpfXxVxEdbRoVk+SoqKyuv01QoTn9H1PzKRfAkNzAWAg09zmQ23gQ9eu
UetIDeHTTl9AO9MPjTviZX5KfcIZo6ocMV9qyF8/LvJSdqgDUI8yfBrF1OZ9GFLo
05nHQzqzywgIVkrMBNmLWStq5g==
-----END CERTIFICATE-----
Generated at Wed May 13 01:29:48 2026 by rpki-client