Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.mft
File:                     R-xTv901EyDomyxUG6zdTY1SoLM.mft (raw, json)
Hash identifier:          6K8gECJYA4p3cKeKh2KXtP+AT1Rs4UDRTRG4OZempiY=
Subject key identifier:   1A:32:71:C4:50:CC:72:9D:30:9F:51:18:D6:45:5B:DE:5E:10:D4:C8
Authority key identifier: 47:EC:53:BF:DD:35:13:20:E8:9B:2C:54:1B:AC:DD:4D:8D:52:A0:B3
Certificate issuer:       /CN=A9173DB5/serialNumber=47EC53BFDD351320E89B2C541BACDD4D8D52A0B3
Certificate serial:       072C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-xTv901EyDomyxUG6zdTY1SoLM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.mft
Manifest number:          070A
Signing time:             Tue 12 May 2026 22:11:22 +0000
Manifest this update:     Tue 12 May 2026 22:11:22 +0000
Manifest next update:     Tue 19 May 2026 22:11:22 +0000
Files and hashes:         1: R-xTv901EyDomyxUG6zdTY1SoLM.crl (hash: ri3W3T48BriRCjPtKcFX8UHWDiI71rkCgoidKDb6KHg=)
                          2: 0A6D07FC913D11F092E92E65C4F9AE02.roa (hash: N+hh0IsbREkCIUI5w/ClySR4LrvvV4rJ4CFoF8qj+kg=)
                          3: DC130EBC913A11F08A1B3D3DC4F9AE02.roa (hash: bNYRWc+xdCHr6Dqm6E4JXdO5OdveJW1Evylh8xk+joU=)
                          4: 24D8D69CADAE11EBB6E7565AC4F9AE02.roa (hash: 0FJPWWCgs74V2qR0+srXlHP3r9bzqp0VjgYjnq505c8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.crl
                          rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-xTv901EyDomyxUG6zdTY1SoLM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:11:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1836 (0x72c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173DB5, serialNumber=47EC53BFDD351320E89B2C541BACDD4D8D52A0B3
        Validity
            Not Before: May 12 22:11:22 2026 GMT
            Not After : May 19 22:11:22 2026 GMT
        Subject: CN=6a03a58a-6fc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d7:b3:ea:dd:49:99:3a:c4:fd:db:f4:c1:2f:
                    42:41:e7:80:3c:03:78:27:db:9e:d4:8c:43:97:48:
                    0f:79:35:07:d1:2f:92:1a:80:b3:f3:92:a8:53:94:
                    75:4c:ee:e9:7d:cf:0c:30:61:64:01:25:01:26:d4:
                    58:a4:18:ab:33:a4:da:85:2a:a0:08:c7:21:8d:b7:
                    38:7c:98:8b:3d:40:ca:a0:88:8d:e1:b4:15:a4:ab:
                    03:ee:59:59:3a:39:19:1e:4d:d0:37:06:b9:44:7b:
                    fd:4e:6a:2d:74:df:81:20:84:4b:74:e4:fe:60:0f:
                    dc:f7:9e:0c:4b:86:90:94:db:4a:d9:f1:af:49:7f:
                    b0:56:cf:77:28:07:53:1a:de:51:f1:13:ca:87:46:
                    b8:2d:0f:cd:5e:bf:b9:9e:e7:e1:32:c2:a0:39:65:
                    df:76:0c:78:40:a0:0e:8a:eb:e2:ba:a7:72:39:50:
                    cf:e7:a1:98:cb:f8:c0:b3:20:14:a2:e7:41:cf:99:
                    a3:9d:0a:59:a4:f1:2e:83:3e:0a:22:98:33:44:42:
                    f4:2c:84:b7:ea:d5:06:e1:14:36:a1:04:83:9b:0a:
                    7b:aa:63:ba:b3:cd:85:33:d7:68:0e:80:49:01:35:
                    70:b3:98:93:6d:2f:9d:a7:33:4a:0b:e4:a8:02:5e:
                    36:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:32:71:C4:50:CC:72:9D:30:9F:51:18:D6:45:5B:DE:5E:10:D4:C8
            X509v3 Authority Key Identifier:
                keyid:47:EC:53:BF:DD:35:13:20:E8:9B:2C:54:1B:AC:DD:4D:8D:52:A0:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-xTv901EyDomyxUG6zdTY1SoLM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:cb:5e:e9:3a:7e:fb:30:8b:91:97:36:5e:92:c1:ba:5d:4c:
         a0:a4:57:e6:53:92:e7:55:39:e9:62:ba:67:39:67:a5:d2:c1:
         2a:eb:6b:89:88:93:f4:c3:f7:ee:55:12:9f:de:a1:64:39:cb:
         cf:d6:f9:53:c4:f6:e4:28:b7:8b:07:3a:51:b2:f4:2d:83:1a:
         4f:d5:1e:0d:fc:17:5e:77:42:67:e0:b3:24:c1:67:d4:54:9d:
         eb:cc:f2:8b:ae:4a:7c:d8:91:28:d9:ab:37:aa:aa:80:35:24:
         4e:06:76:b5:29:be:47:a5:4c:c3:8e:e4:f8:b0:89:ed:4d:56:
         44:85:df:8c:26:e0:c0:ab:f3:82:fe:ad:5c:c1:a0:9e:1e:c7:
         65:53:8e:ad:8b:0f:11:73:f5:71:11:88:fc:1d:d9:46:f8:fe:
         a1:ed:d0:2a:18:7a:20:65:b6:4e:c2:18:45:3f:81:bd:8d:6b:
         37:95:ce:0b:60:3e:3a:c6:1d:8c:cb:a1:1e:3b:ca:93:4e:73:
         6b:8d:9e:52:1a:e7:b0:a5:91:8b:97:b5:51:c7:e7:12:fb:36:
         50:b7:84:56:8b:a6:9d:9f:c7:b8:52:dc:3a:55:c5:c8:b5:27:
         0b:37:23:7d:28:d6:7f:e7:5c:e7:49:64:f7:cf:8d:2f:be:ed:
         27:dc:98:d9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBywwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzNEQjUxMTAvBgNVBAUTKDQ3RUM1M0JGREQzNTEzMjBFODlCMkM1NDFCQUNERDRE
OEQ1MkEwQjMwHhcNMjYwNTEyMjIxMTIyWhcNMjYwNTE5MjIxMTIyWjAYMRYwFAYD
VQQDEw02YTAzYTU4YS02ZmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwdez6t1JmTrE/dv0wS9CQeeAPAN4J9ue1IxDl0gPeTUH0S+SGoCz85KoU5R1
TO7pfc8MMGFkASUBJtRYpBirM6TahSqgCMchjbc4fJiLPUDKoIiN4bQVpKsD7llZ
OjkZHk3QNwa5RHv9TmotdN+BIIRLdOT+YA/c954MS4aQlNtK2fGvSX+wVs93KAdT
Gt5R8RPKh0a4LQ/NXr+5nufhMsKgOWXfdgx4QKAOiuviuqdyOVDP56GYy/jAsyAU
oudBz5mjnQpZpPEugz4KIpgzREL0LIS36tUG4RQ2oQSDmwp7qmO6s82FM9doDoBJ
ATVws5iTbS+dpzNKC+SoAl42AQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBoyccRQ
zHKdMJ9RGNZFW95eENTIMB8GA1UdIwQYMBaAFEfsU7/dNRMg6JssVBus3U2NUqCz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0RCNS8wQzk5OUVDMDhG
QTExMUVCQTIyMDY2MUVDNEY5QUUwMi9SLXhUdjkwMUV5RG9teXhVRzZ6ZFRZMVNv
TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1IteFR2OTAxRXlEb215eFVHNnpkVFkxU29MTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
M0RCNS8wQzk5OUVDMDhGQTExMUVCQTIyMDY2MUVDNEY5QUUwMi9SLXhUdjkwMUV5
RG9teXhVRzZ6ZFRZMVNvTE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHMte6Tp++zCLkZc2XpLBul1MoKRX5lOS51U56WK6ZzlnpdLBKutriYiT9MP3
7lUSn96hZDnLz9b5U8T25Ci3iwc6UbL0LYMaT9UeDfwXXndCZ+CzJMFn1FSd68zy
i65KfNiRKNmrN6qqgDUkTgZ2tSm+R6VMw47k+LCJ7U1WRIXfjCbgwKvzgv6tXMGg
nh7HZVOOrYsPEXP1cRGI/B3ZRvj+oe3QKhh6IGW2TsIYRT+BvY1rN5XOC2A+OsYd
jMuhHjvKk05za42eUhrnsKWRi5e1UcfnEvs2ULeEVoumnZ/HuFLcOlXFyLUnCzcj
fSjWf+dc50lk98+NL77tJ9yY2Q==
-----END CERTIFICATE-----
Generated at Wed May 13 09:32:27 2026 by rpki-client