Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft
File:                     jZcXcn1ujusjgHsxPAWNA1b_4WI.mft (raw, json)
Hash identifier:          5WoLNMmt9hQ1pQbm1D+FFeuYrboH1+lTUXQMFslpL1k=
Subject key identifier:   CB:99:37:52:93:52:43:78:35:36:93:F2:54:BD:70:99:55:DF:71:D5
Authority key identifier: 8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62
Certificate issuer:       /CN=A916B53B/serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162
Certificate serial:       0155
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft
Manifest number:          014E
Signing time:             Wed 13 May 2026 05:13:39 +0000
Manifest this update:     Wed 13 May 2026 05:13:38 +0000
Manifest next update:     Wed 20 May 2026 05:13:38 +0000
Files and hashes:         1: jZcXcn1ujusjgHsxPAWNA1b_4WI.crl (hash: A33P8F9BuGPE5sHTXwE6TyjqaVuNix3almXPRUUHMtE=)
                          2: A7E24C00ABF411F0A0B37937C4F9AE02.roa (hash: LbBS+EYlpmA67fkMLKgg4SD3EO+91MGCCTOWRrb0obs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl
                          rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 05:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 341 (0x155)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B53B, serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162
        Validity
            Not Before: May 13 05:13:38 2026 GMT
            Not After : May 20 05:13:38 2026 GMT
        Subject: CN=6a040882-9ad5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:c7:f7:d4:67:1d:a4:6d:69:8a:96:4c:6c:0f:
                    8a:39:e8:0b:2c:04:7f:b1:21:ac:6c:4e:e1:48:f3:
                    0d:92:e6:78:cf:4c:40:09:a0:ea:e9:d7:35:28:48:
                    e8:85:01:13:de:6d:56:ef:f2:6f:2d:4f:03:7e:2a:
                    9e:43:6c:ce:2b:79:03:a9:9c:2e:55:02:64:cb:74:
                    61:2e:e2:8a:31:7e:22:9a:0d:e2:7b:e1:fe:32:78:
                    87:9f:7a:ea:a4:e2:c8:02:80:0f:26:0b:a9:a2:7f:
                    f8:5d:c0:a9:55:87:4f:36:62:e9:f1:51:31:4e:51:
                    8c:d0:26:f3:8d:d2:8e:4c:c7:6d:c9:74:49:82:51:
                    f3:34:70:66:83:11:94:18:fb:d2:bf:92:41:f7:32:
                    32:c3:6c:64:f9:56:db:4a:80:a1:0c:c8:d7:89:d9:
                    28:20:d1:58:fd:16:b9:0b:cd:af:7d:0f:4f:58:c0:
                    02:88:c8:0f:09:d8:82:16:dc:c8:b4:ca:2e:34:98:
                    2b:eb:84:49:b8:7b:8b:fe:b1:f9:c4:c5:bd:fc:cb:
                    5c:c8:2f:de:a1:04:8d:4e:cb:1a:99:a5:94:35:bc:
                    b6:34:2a:d7:12:4d:65:9d:49:13:5f:eb:ea:bb:42:
                    68:a1:6b:b2:5c:95:7e:ae:31:b9:dc:de:8e:5b:0b:
                    93:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:99:37:52:93:52:43:78:35:36:93:F2:54:BD:70:99:55:DF:71:D5
            X509v3 Authority Key Identifier:
                keyid:8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:09:c9:41:28:45:3f:1e:60:23:54:38:19:a6:4c:c5:2c:ab:
         7b:13:a9:21:b9:7d:3a:1e:05:a9:44:8e:31:c8:8e:a0:ca:e4:
         72:c7:ef:33:18:35:cb:dc:38:49:a0:4d:06:f5:01:f0:dd:58:
         ac:a6:9f:55:fe:80:bf:cb:b3:a5:46:9e:6e:6d:f7:70:32:f5:
         a6:62:72:77:2d:c1:2a:81:0c:15:8b:10:72:71:80:86:66:21:
         0c:48:41:13:77:02:17:c3:47:de:81:6a:fb:ca:b9:b6:87:e0:
         bb:48:fc:5d:1a:a3:10:ab:46:76:fc:24:c6:b6:90:cf:de:ee:
         8b:f9:95:3b:62:10:44:36:b5:a4:46:09:b2:7b:fa:ff:6d:ee:
         18:be:1d:66:68:fe:21:49:ad:c2:96:57:ea:c7:49:21:56:7f:
         ae:9e:3b:ad:0e:71:b6:7f:58:94:ce:5b:2e:59:cd:22:3f:35:
         7b:01:9c:25:6a:23:ed:c4:6e:0e:73:55:96:f7:93:3f:df:e5:
         0c:16:41:27:3e:ed:6a:f8:01:2f:c1:b5:5f:36:43:4a:5b:77:
         fe:21:4e:2f:4b:2a:1e:42:89:b8:4b:ba:5e:15:2b:f8:68:92:
         76:ad:11:8a:2c:0d:6c:a5:92:ea:7e:47:11:79:2d:42:33:61:
         7f:c0:b6:9d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkI1M0IxMTAvBgNVBAUTKDhEOTcxNzcyN0Q2RThFRUIyMzgwN0IzMTNDMDU4RDAz
NTZGRkUxNjIwHhcNMjYwNTEzMDUxMzM4WhcNMjYwNTIwMDUxMzM4WjAYMRYwFAYD
VQQDEw02YTA0MDg4Mi05YWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9cf31GcdpG1pipZMbA+KOegLLAR/sSGsbE7hSPMNkuZ4z0xACaDq6dc1KEjo
hQET3m1W7/JvLU8DfiqeQ2zOK3kDqZwuVQJky3RhLuKKMX4img3ie+H+MniHn3rq
pOLIAoAPJgupon/4XcCpVYdPNmLp8VExTlGM0CbzjdKOTMdtyXRJglHzNHBmgxGU
GPvSv5JB9zIyw2xk+VbbSoChDMjXidkoINFY/Ra5C82vfQ9PWMACiMgPCdiCFtzI
tMouNJgr64RJuHuL/rH5xMW9/MtcyC/eoQSNTssamaWUNby2NCrXEk1lnUkTX+vq
u0JooWuyXJV+rjG53N6OWwuT7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMuZN1KT
UkN4NTaT8lS9cJlV33HVMB8GA1UdIwQYMBaAFI2XF3J9bo7rI4B7MTwFjQNW/+Fi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjUzQi8yMDMyM0E4MjU5
REQxMUVGQkFENEMyODZDNEY5QUUwMi9qWmNYY24xdWp1c2pnSHN4UEFXTkExYl80
V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2paY1hjbjF1anVzamdIc3hQQVdOQTFiXzRXSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QjUzQi8yMDMyM0E4MjU5REQxMUVGQkFENEMyODZDNEY5QUUwMi9qWmNYY24xdWp1
c2pnSHN4UEFXTkExYl80V0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADgnJQShFPx5gI1Q4GaZMxSyrexOpIbl9Oh4FqUSOMciOoMrkcsfvMxg1y9w4
SaBNBvUB8N1YrKafVf6Av8uzpUaebm33cDL1pmJydy3BKoEMFYsQcnGAhmYhDEhB
E3cCF8NH3oFq+8q5tofgu0j8XRqjEKtGdvwkxraQz97ui/mVO2IQRDa1pEYJsnv6
/23uGL4dZmj+IUmtwpZX6sdJIVZ/rp47rQ5xtn9YlM5bLlnNIj81ewGcJWoj7cRu
DnNVlveTP9/lDBZBJz7tavgBL8G1XzZDSlt3/iFOL0sqHkKJuEu6XhUr+GiSdq0R
iiwNbKWS6n5HEXktQjNhf8C2nQ==
-----END CERTIFICATE-----
Generated at Wed May 13 09:25:24 2026 by rpki-client