Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft
File:                     cHDFVlzC_kVsMWBAi25_toDAjBk.mft (raw, json)
Hash identifier:          tNbsAlPc6O9p3lIgs+K/OKF0DWSz5bQ31BjNOdULXUI=
Subject key identifier:   56:C4:AC:2D:F6:A6:42:C5:66:F0:C7:19:DF:59:2D:D0:DF:79:47:88
Authority key identifier: 70:70:C5:56:5C:C2:FE:45:6C:31:60:40:8B:6E:7F:B6:80:C0:8C:19
Certificate issuer:       /CN=A915B77C/serialNumber=7070C5565CC2FE456C3160408B6E7FB680C08C19
Certificate serial:       0B19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cHDFVlzC_kVsMWBAi25_toDAjBk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft
Manifest number:          0B01
Signing time:             Tue 12 May 2026 19:25:49 +0000
Manifest this update:     Tue 12 May 2026 19:25:48 +0000
Manifest next update:     Tue 19 May 2026 19:25:48 +0000
Files and hashes:         1: cHDFVlzC_kVsMWBAi25_toDAjBk.crl (hash: N0cvNXWV9b+Dc796v5yvUj3yrGSC+JwR0w/lfJ3Ph+w=)
                          2: 6EA165728E8F11EEA8A9EE68C4F9AE02.roa (hash: 8RfREkb1TfRtm9mZNRjcCr0gSCyT+B9RHPPp4JceAOY=)
                          3: 96ACE9CE8E8F11EE8915FE78C4F9AE02.roa (hash: m6x4cKoG0z5IGxS+jgyTdR66s445veI9JdXQ3dKCikw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.crl
                          rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cHDFVlzC_kVsMWBAi25_toDAjBk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:25:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2841 (0xb19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B77C, serialNumber=7070C5565CC2FE456C3160408B6E7FB680C08C19
        Validity
            Not Before: May 12 19:25:48 2026 GMT
            Not After : May 19 19:25:48 2026 GMT
        Subject: CN=6a037ebd-652a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d5:fe:40:e3:de:f4:c5:77:71:ba:43:e8:49:
                    62:58:34:f3:df:82:42:c5:8e:40:c6:6f:55:69:73:
                    e6:d4:53:49:68:d6:ab:6a:fe:ee:cd:4a:fa:bb:84:
                    20:8a:df:60:43:40:9a:af:79:16:34:67:a6:68:9c:
                    94:6d:ef:6c:91:e6:74:82:77:94:0f:7a:dc:8c:3a:
                    ec:a3:a2:b4:a5:f0:99:d5:49:a4:e1:bf:0d:f5:8a:
                    cd:d5:05:5d:29:ce:4e:38:38:0c:37:bd:15:97:39:
                    9d:90:93:fe:09:67:78:7d:19:4c:1c:9c:75:e1:db:
                    f0:ec:61:ae:2f:b5:e8:62:de:9d:52:75:36:8b:ec:
                    7d:47:a4:e3:19:cb:1c:06:49:fe:78:6d:21:ba:55:
                    93:ac:d6:9f:00:02:b3:a4:58:7c:cf:cb:fc:a3:4c:
                    16:dc:a2:c2:87:5b:b3:ce:c6:d8:97:47:37:17:1e:
                    97:e8:35:6d:60:b5:54:e3:d4:9e:40:89:c3:82:02:
                    d4:5e:75:43:dc:b9:4f:75:b7:4e:40:35:25:97:91:
                    60:4a:7b:c1:4b:dc:c1:80:83:f5:ef:6a:b7:f9:d5:
                    72:b1:9a:b1:97:10:91:5c:53:4c:cf:3c:76:29:64:
                    ba:e0:3c:d5:ff:5a:3d:4b:b3:26:ff:6f:4e:18:bd:
                    d2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C4:AC:2D:F6:A6:42:C5:66:F0:C7:19:DF:59:2D:D0:DF:79:47:88
            X509v3 Authority Key Identifier:
                keyid:70:70:C5:56:5C:C2:FE:45:6C:31:60:40:8B:6E:7F:B6:80:C0:8C:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cHDFVlzC_kVsMWBAi25_toDAjBk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:0e:c7:8c:89:79:e0:f5:ab:34:9f:dd:9c:49:5a:55:fe:04:
         e7:79:a6:17:d8:5e:d3:51:d8:06:4b:0f:b2:71:a1:df:32:0f:
         2b:bd:33:88:1b:94:8d:60:af:1f:df:ad:af:97:02:3f:87:db:
         7b:b8:2f:f7:35:ea:56:80:27:17:a1:f9:e2:60:46:7f:6a:09:
         ff:26:7d:e0:f0:e9:c7:52:67:df:7c:97:e1:4d:59:3e:f7:65:
         6d:bc:b8:d9:e5:da:54:23:2e:13:b9:15:99:f3:4d:13:20:3c:
         05:2b:4c:4d:c1:22:b2:e8:0c:84:45:5d:7d:cf:fb:e9:4f:56:
         63:e0:ad:f5:81:d2:0d:ca:6c:09:59:26:97:09:4c:38:62:6f:
         74:62:6d:9a:c1:0c:8f:11:c2:52:e7:e4:83:fc:41:e1:de:60:
         10:a1:20:fc:66:99:ee:a1:d7:f3:00:b2:4d:83:80:61:9e:22:
         c0:5a:35:61:87:ac:e1:2d:01:51:69:b7:20:31:2f:f4:47:92:
         11:54:9f:97:53:2d:ab:93:4a:cb:14:81:cf:bb:c2:4a:bf:6b:
         27:6f:15:5b:17:07:62:1b:f7:8d:09:f2:3e:59:15:75:ec:d0:
         7f:ff:f7:d4:ce:25:15:9a:61:6f:49:6d:c3:6b:cc:e1:2c:bf:
         78:02:f4:73
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCxkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUI3N0MxMTAvBgNVBAUTKDcwNzBDNTU2NUNDMkZFNDU2QzMxNjA0MDhCNkU3RkI2
ODBDMDhDMTkwHhcNMjYwNTEyMTkyNTQ4WhcNMjYwNTE5MTkyNTQ4WjAYMRYwFAYD
VQQDEw02YTAzN2ViZC02NTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsdX+QOPe9MV3cbpD6EliWDTz34JCxY5Axm9VaXPm1FNJaNarav7uzUr6u4Qg
it9gQ0Car3kWNGemaJyUbe9skeZ0gneUD3rcjDrso6K0pfCZ1Umk4b8N9YrN1QVd
Kc5OODgMN70VlzmdkJP+CWd4fRlMHJx14dvw7GGuL7XoYt6dUnU2i+x9R6TjGcsc
Bkn+eG0hulWTrNafAAKzpFh8z8v8o0wW3KLCh1uzzsbYl0c3Fx6X6DVtYLVU49Se
QInDggLUXnVD3LlPdbdOQDUll5FgSnvBS9zBgIP172q3+dVysZqxlxCRXFNMzzx2
KWS64DzV/1o9S7Mm/29OGL3SdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFbErC32
pkLFZvDHGd9ZLdDfeUeIMB8GA1UdIwQYMBaAFHBwxVZcwv5FbDFgQItuf7aAwIwZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Qjc3Qy8yODE0Rjc3QTY5
QjUxMUVBQkE2MDE3NTJDNEY5QUUwMi9jSERGVmx6Q19rVnNNV0JBaTI1X3RvREFq
QmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NIREZWbHpDX2tWc01XQkFpMjVfdG9EQWpCay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
Qjc3Qy8yODE0Rjc3QTY5QjUxMUVBQkE2MDE3NTJDNEY5QUUwMi9jSERGVmx6Q19r
VnNNV0JBaTI1X3RvREFqQmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlg7HjIl54PWrNJ/dnElaVf4E53mmF9he01HYBksPsnGh3zIPK70ziBuUjWCv
H9+tr5cCP4fbe7gv9zXqVoAnF6H54mBGf2oJ/yZ94PDpx1Jn33yX4U1ZPvdlbby4
2eXaVCMuE7kVmfNNEyA8BStMTcEisugMhEVdfc/76U9WY+Ct9YHSDcpsCVkmlwlM
OGJvdGJtmsEMjxHCUufkg/xB4d5gEKEg/GaZ7qHX8wCyTYOAYZ4iwFo1YYes4S0B
UWm3IDEv9EeSEVSfl1Mtq5NKyxSBz7vCSr9rJ28VWxcHYhv3jQnyPlkVdezQf//3
1M4lFZphb0ltw2vM4Sy/eAL0cw==
-----END CERTIFICATE-----
Generated at Wed May 13 03:38:18 2026 by rpki-client