Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft
File:                     tRdNgmVknN0nQmySfRaHddeD1Tg.mft (raw, json)
Hash identifier:          8qF5os7aCZxhstC41gS1DArsB+tiUxPiCM2udZUtq0A=
Subject key identifier:   C3:50:1D:0A:D6:9E:8D:75:BA:E3:34:47:61:E1:27:D2:8A:44:B8:30
Authority key identifier: B5:17:4D:82:65:64:9C:DD:27:42:6C:92:7D:16:87:75:D7:83:D5:38
Certificate issuer:       /CN=A916D459/serialNumber=B5174D8265649CDD27426C927D168775D783D538
Certificate serial:       0BCC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRdNgmVknN0nQmySfRaHddeD1Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft
Manifest number:          0BC2
Signing time:             Tue 12 May 2026 19:02:30 +0000
Manifest this update:     Tue 12 May 2026 19:02:30 +0000
Manifest next update:     Tue 19 May 2026 19:02:30 +0000
Files and hashes:         1: tRdNgmVknN0nQmySfRaHddeD1Tg.crl (hash: lq1+MkC+ildZtRb3O2gw7COKpe61qmz4N1NbIFp0evk=)
                          2: 61E12BD0CA0611EEB05EB92CC4F9AE02.roa (hash: IuciT/jDYsEHuZMLoxbp4gzhohFWomxgcVWfQKh8vS8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.crl
                          rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRdNgmVknN0nQmySfRaHddeD1Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:02:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3020 (0xbcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D459, serialNumber=B5174D8265649CDD27426C927D168775D783D538
        Validity
            Not Before: May 12 19:02:30 2026 GMT
            Not After : May 19 19:02:30 2026 GMT
        Subject: CN=6a037946-0c20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4a:bc:c4:cb:a9:05:26:f5:4e:f2:8e:2e:1d:
                    45:9e:7f:1c:0a:be:44:8d:47:ea:16:ea:b6:5a:8c:
                    96:b8:87:f4:da:46:95:7c:a3:37:03:2e:01:48:65:
                    c9:29:34:f1:87:ee:40:1d:7f:3a:ef:4e:e3:c7:68:
                    6d:cf:6a:08:d7:13:a5:7d:a2:a0:7e:76:14:5a:24:
                    3b:c6:2b:bf:ae:5a:3a:45:7a:36:46:aa:28:79:a0:
                    27:63:35:da:9f:0f:fe:d4:94:18:fe:13:22:d7:0b:
                    76:7a:35:1d:32:9f:35:e8:d5:11:d0:d8:44:c4:96:
                    64:d9:03:17:c6:c6:7e:d7:ec:42:98:2f:fd:22:1f:
                    ef:2f:a4:5e:7f:8c:5f:b2:32:18:02:9f:4a:fb:a7:
                    b8:87:e2:32:70:ca:5a:02:53:79:56:36:b5:e3:13:
                    d0:26:81:97:47:3c:f9:91:c7:53:59:c9:6f:70:9a:
                    22:be:6e:7b:5e:fe:c5:2c:50:cc:14:f9:7f:7a:c8:
                    f9:a0:28:b4:ca:65:a5:b5:2d:b1:8a:87:c6:d6:0c:
                    9e:54:1f:fb:d7:3d:93:7d:c9:ac:78:4f:a3:f3:68:
                    a6:96:89:1c:62:df:b8:fb:d2:d3:ef:16:75:a2:78:
                    96:95:df:72:29:49:29:ed:a8:59:4a:c2:60:83:2f:
                    a4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:50:1D:0A:D6:9E:8D:75:BA:E3:34:47:61:E1:27:D2:8A:44:B8:30
            X509v3 Authority Key Identifier:
                keyid:B5:17:4D:82:65:64:9C:DD:27:42:6C:92:7D:16:87:75:D7:83:D5:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRdNgmVknN0nQmySfRaHddeD1Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:2b:cb:ad:dd:53:c9:72:8a:6f:a2:62:a0:04:9b:33:75:70:
         e8:de:09:1f:ce:f4:8d:92:26:0d:90:66:aa:77:a7:5d:76:b4:
         7c:d9:d6:75:37:f5:dc:18:05:ea:10:a8:ed:59:a8:ce:21:d5:
         e0:3f:10:b5:5f:79:43:9b:07:41:5c:a8:01:db:3c:bf:13:95:
         48:14:ec:1e:70:ea:8c:fd:d1:2f:26:3c:73:35:41:b2:14:74:
         09:3c:a6:b7:ae:2b:92:fe:30:a4:94:3b:02:36:1a:0e:5b:f4:
         02:1e:58:59:ff:fc:3b:68:cf:74:19:e7:14:74:25:c3:97:2d:
         25:11:84:4d:50:6c:35:84:0c:dd:93:8b:9d:2f:47:be:45:4c:
         9a:cc:75:7f:cb:b2:d8:3a:02:a7:6d:ff:7c:70:e8:a5:cc:f3:
         39:73:e2:36:51:58:2c:22:bd:90:07:01:ed:48:f1:a0:62:13:
         bb:38:85:8e:52:f7:80:ee:d3:e9:15:73:a1:a5:d5:13:ed:bb:
         fd:81:76:c7:39:d4:5f:58:e0:9d:cf:f3:e3:dd:3a:a4:25:37:
         6b:b0:24:74:d8:37:b2:22:ec:22:43:83:f2:65:5f:2c:01:16:
         32:d9:97:94:17:98:91:9a:88:25:4a:f0:ef:ab:d8:ef:a4:9b:
         e7:3b:da:61
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkQ0NTkxMTAvBgNVBAUTKEI1MTc0RDgyNjU2NDlDREQyNzQyNkM5MjdEMTY4Nzc1
RDc4M0Q1MzgwHhcNMjYwNTEyMTkwMjMwWhcNMjYwNTE5MTkwMjMwWjAYMRYwFAYD
VQQDEw02YTAzNzk0Ni0wYzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzkq8xMupBSb1TvKOLh1Fnn8cCr5EjUfqFuq2WoyWuIf02kaVfKM3Ay4BSGXJ
KTTxh+5AHX86707jx2htz2oI1xOlfaKgfnYUWiQ7xiu/rlo6RXo2RqooeaAnYzXa
nw/+1JQY/hMi1wt2ejUdMp816NUR0NhExJZk2QMXxsZ+1+xCmC/9Ih/vL6Ref4xf
sjIYAp9K+6e4h+IycMpaAlN5Vja14xPQJoGXRzz5kcdTWclvcJoivm57Xv7FLFDM
FPl/esj5oCi0ymWltS2xiofG1gyeVB/71z2TfcmseE+j82imlokcYt+4+9LT7xZ1
oniWld9yKUkp7ahZSsJggy+kjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMNQHQrW
no11uuM0R2HhJ9KKRLgwMB8GA1UdIwQYMBaAFLUXTYJlZJzdJ0Jskn0Wh3XXg9U4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDQ1OS85OUVDODlFQzQy
MjAxMUVBQjUzMDIwMTZDNEY5QUUwMi90UmROZ21Wa25OMG5RbXlTZlJhSGRkZUQx
VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RSZE5nbVZrbk4wblFteVNmUmFIZGRlRDFUZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RDQ1OS85OUVDODlFQzQyMjAxMUVBQjUzMDIwMTZDNEY5QUUwMi90UmROZ21Wa25O
MG5RbXlTZlJhSGRkZUQxVGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQCvLrd1TyXKKb6JioASbM3Vw6N4JH870jZImDZBmqnenXXa0fNnWdTf13BgF
6hCo7VmoziHV4D8QtV95Q5sHQVyoAds8vxOVSBTsHnDqjP3RLyY8czVBshR0CTym
t64rkv4wpJQ7AjYaDlv0Ah5YWf/8O2jPdBnnFHQlw5ctJRGETVBsNYQM3ZOLnS9H
vkVMmsx1f8uy2DoCp23/fHDopczzOXPiNlFYLCK9kAcB7UjxoGITuziFjlL3gO7T
6RVzoaXVE+27/YF2xznUX1jgnc/z4906pCU3a7AkdNg3siLsIkOD8mVfLAEWMtmX
lBeYkZqIJUrw76vY76Sb5zvaYQ==
-----END CERTIFICATE-----
Generated at Wed May 13 04:52:26 2026 by rpki-client