Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft
File:                     h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft (raw, json)
Hash identifier:          4Y4oN6cm/rNiVer+R/rvsT6IEfZYfXWdM+xsAn7J6JQ=
Subject key identifier:   DD:36:B3:6D:20:72:EB:A6:49:A7:C7:F4:34:BB:13:4F:DA:68:0F:6D
Authority key identifier: 87:F3:1B:20:1B:DD:18:75:81:54:0C:5B:8B:86:44:38:C2:99:90:B9
Certificate issuer:       /CN=A916B02F/serialNumber=87F31B201BDD187581540C5B8B864438C29990B9
Certificate serial:       01DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft
Manifest number:          01D7
Signing time:             Mon 11 May 2026 03:36:43 +0000
Manifest this update:     Mon 11 May 2026 03:36:42 +0000
Manifest next update:     Mon 18 May 2026 03:36:42 +0000
Files and hashes:         1: h_MbIBvdGHWBVAxbi4ZEOMKZkLk.crl (hash: ju+Axtq92f+kBtvG3fViDQcmorY2HKbJUjRr0G7HWwk=)
                          2: 27178D9E7FBC11EEAF80B825C4F9AE02.roa (hash: sVfM9UcBSAxUn8++eCgurkk9Zg1ANJCcYtd5vbh1oJM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.crl
                          rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 03:36:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 477 (0x1dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B02F, serialNumber=87F31B201BDD187581540C5B8B864438C29990B9
        Validity
            Not Before: May 11 03:36:42 2026 GMT
            Not After : May 18 03:36:42 2026 GMT
        Subject: CN=6a014eca-e25b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:52:82:59:b3:83:d0:6b:53:b4:45:57:bc:92:
                    b3:c8:62:ee:e9:87:81:d9:d1:05:e8:6d:f8:90:97:
                    07:6b:c6:e0:24:bb:f9:21:9b:23:29:48:f9:4f:e7:
                    c6:82:67:b2:c5:4b:73:b0:e8:1f:5f:42:73:45:9f:
                    9a:a6:7e:e3:f1:75:61:58:42:19:80:56:f9:63:59:
                    2f:fb:93:ad:79:8c:7f:0a:4a:03:80:f8:e0:42:c5:
                    bc:ca:5d:a5:d4:ba:5a:69:0b:56:b9:7d:ad:f8:13:
                    24:63:dc:fa:1f:56:37:ab:b1:9a:7a:13:6c:ca:b4:
                    ba:d9:98:c6:92:bd:bc:02:8e:32:b8:23:c8:c6:f3:
                    b2:02:24:ce:be:ff:3b:c0:f8:ef:81:00:06:cb:c6:
                    92:20:0b:85:5a:39:88:f5:8f:41:38:9c:27:35:68:
                    f5:ca:13:33:69:d2:91:80:66:8e:ae:4e:b5:e1:fc:
                    2d:a7:b0:9f:5d:d2:50:05:77:1e:37:b4:8c:f8:0f:
                    cf:c7:10:45:e2:63:9c:29:b5:6c:8f:38:ec:8f:94:
                    0f:bd:31:8c:b2:52:4c:99:36:58:d4:8f:79:57:1b:
                    84:87:72:f0:74:9b:78:8d:e3:69:d5:ae:e7:60:83:
                    8a:8f:fd:d8:7b:75:67:32:ea:6c:ab:4f:40:69:6e:
                    5a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:36:B3:6D:20:72:EB:A6:49:A7:C7:F4:34:BB:13:4F:DA:68:0F:6D
            X509v3 Authority Key Identifier:
                keyid:87:F3:1B:20:1B:DD:18:75:81:54:0C:5B:8B:86:44:38:C2:99:90:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:a7:0e:ec:08:38:db:6a:c1:27:1c:df:e1:e1:6d:81:fa:c4:
         34:fe:47:42:54:27:61:0a:db:b1:80:d1:31:6e:a9:b2:16:06:
         32:fd:66:cd:8d:b0:6d:ce:18:f7:e5:e3:84:e9:be:32:39:53:
         bd:a4:d6:7e:79:e2:9f:a4:aa:5c:2e:44:c0:90:49:2c:41:61:
         a8:70:0c:b7:52:f5:62:65:c8:8f:69:64:6c:e4:70:b1:3d:93:
         0e:94:db:a0:69:54:9f:6e:4b:68:e1:15:32:0b:5a:ab:ff:47:
         9d:a0:cd:4d:8f:73:ce:32:6c:8b:9f:26:b3:22:21:24:05:fa:
         3c:7c:0c:09:5b:a1:7c:7d:ba:74:a8:b7:82:de:fa:83:3e:4c:
         c8:97:44:d0:99:a4:13:aa:ef:52:96:2f:d2:75:f7:f4:c8:ad:
         ae:13:d3:8c:54:ec:62:e6:af:05:34:64:1e:0b:3f:3a:d4:bf:
         0f:27:f8:ad:8b:e8:8e:f5:42:dd:cb:45:2b:97:7b:b9:e4:96:
         5f:86:3e:79:50:e8:fc:a0:b9:aa:af:32:06:5c:9b:c1:3e:48:
         46:ae:2a:0d:00:78:ae:11:e4:e8:fc:d5:86:9a:07:b3:04:9e:
         ac:be:0b:c9:58:16:f9:68:d3:66:79:e1:be:a2:56:01:ec:52:
         3f:0f:48:a2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkIwMkYxMTAvBgNVBAUTKDg3RjMxQjIwMUJERDE4NzU4MTU0MEM1QjhCODY0NDM4
QzI5OTkwQjkwHhcNMjYwNTExMDMzNjQyWhcNMjYwNTE4MDMzNjQyWjAYMRYwFAYD
VQQDEw02YTAxNGVjYS1lMjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoFKCWbOD0GtTtEVXvJKzyGLu6YeB2dEF6G34kJcHa8bgJLv5IZsjKUj5T+fG
gmeyxUtzsOgfX0JzRZ+apn7j8XVhWEIZgFb5Y1kv+5OteYx/CkoDgPjgQsW8yl2l
1LpaaQtWuX2t+BMkY9z6H1Y3q7GaehNsyrS62ZjGkr28Ao4yuCPIxvOyAiTOvv87
wPjvgQAGy8aSIAuFWjmI9Y9BOJwnNWj1yhMzadKRgGaOrk614fwtp7CfXdJQBXce
N7SM+A/PxxBF4mOcKbVsjzjsj5QPvTGMslJMmTZY1I95VxuEh3LwdJt4jeNp1a7n
YIOKj/3Ye3VnMupsq09AaW5a3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN02s20g
cuumSafH9DS7E0/aaA9tMB8GA1UdIwQYMBaAFIfzGyAb3Rh1gVQMW4uGRDjCmZC5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjAyRi9EN0MzM0FCODdG
QkIxMUVFQTY5ODM5MjVDNEY5QUUwMi9oX01iSUJ2ZEdIV0JWQXhiaTRaRU9NS1pr
TGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hfTWJJQnZkR0hXQlZBeGJpNFpFT01LWmtMay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QjAyRi9EN0MzM0FCODdGQkIxMUVFQTY5ODM5MjVDNEY5QUUwMi9oX01iSUJ2ZEdI
V0JWQXhiaTRaRU9NS1prTGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjacO7Ag422rBJxzf4eFtgfrENP5HQlQnYQrbsYDRMW6pshYGMv1mzY2wbc4Y
9+XjhOm+MjlTvaTWfnnin6SqXC5EwJBJLEFhqHAMt1L1YmXIj2lkbORwsT2TDpTb
oGlUn25LaOEVMgtaq/9HnaDNTY9zzjJsi58msyIhJAX6PHwMCVuhfH26dKi3gt76
gz5MyJdE0JmkE6rvUpYv0nX39MitrhPTjFTsYuavBTRkHgs/OtS/Dyf4rYvojvVC
3ctFK5d7ueSWX4Y+eVDo/KC5qq8yBlybwT5IRq4qDQB4rhHk6PzVhpoHswSerL4L
yVgW+WjTZnnhvqJWAexSPw9Iog==
-----END CERTIFICATE-----
Generated at Wed May 13 05:32:25 2026 by rpki-client