Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft
File:                     Ty_T8AtY8TSpqOPn3ajY0grANSc.mft (raw, json)
Hash identifier:          eDJ4xYOEJ/QVwwxYINe0PP/WRj01mCmxjWkfsGakHV8=
Subject key identifier:   1F:4A:C5:D7:81:18:6D:13:2C:D0:B3:B2:78:C9:1C:8C:A9:1C:22:82
Authority key identifier: 4F:2F:D3:F0:0B:58:F1:34:A9:A8:E3:E7:DD:A8:D8:D2:0A:C0:35:27
Certificate issuer:       /CN=A9174880/serialNumber=4F2FD3F00B58F134A9A8E3E7DDA8D8D20AC03527
Certificate serial:       35ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft
Manifest number:          3580
Signing time:             Tue 12 May 2026 14:16:56 +0000
Manifest this update:     Tue 12 May 2026 14:16:56 +0000
Manifest next update:     Tue 19 May 2026 14:16:56 +0000
Files and hashes:         1: Ty_T8AtY8TSpqOPn3ajY0grANSc.crl (hash: sf3ir+urKXZtAzvO4Lwc/MtCdSNT05SDVmpDJ+spKOk=)
                          2: B5885EF852D411EC8C8CE26CC4F9AE02.roa (hash: K0D7rg55G2Vxgg4st1LsCOaUPeB0t55XfIkLwQZOLfU=)
                          3: 3869DF8A1C6011EEAF58FB61C4F9AE02.roa (hash: DmeP00Tglg1B2vHEmL9YYBPAmu6yzXlrGlk/VI9+C3Y=)
                          4: 5D81654A561E11E7A4FFF329C4F9AE02.roa (hash: /gJ9ZwtzzOTKqCZBrZuocfhT4XIIICVgFwfqJxZhD14=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.crl
                          rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13805 (0x35ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174880, serialNumber=4F2FD3F00B58F134A9A8E3E7DDA8D8D20AC03527
        Validity
            Not Before: May 12 14:16:56 2026 GMT
            Not After : May 19 14:16:56 2026 GMT
        Subject: CN=6a033658-10e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c8:0d:a5:70:fe:08:15:4b:64:34:d5:3d:ca:
                    08:8a:01:17:32:d9:03:9e:47:bd:7c:87:75:03:08:
                    27:8f:f1:d0:63:1b:bc:7e:02:bb:e1:cd:63:53:68:
                    4f:53:0e:94:4a:d0:7a:03:e0:17:e5:06:65:91:24:
                    ac:be:65:37:45:a0:2e:ef:31:fe:21:14:f4:a0:bb:
                    aa:4a:f2:dd:ea:41:c5:4f:6b:48:f6:e4:fc:1c:b7:
                    ca:c9:8f:95:95:7a:40:c2:e4:eb:9e:86:80:fd:e1:
                    5b:25:63:7c:2d:39:12:13:95:20:92:a4:d2:57:7d:
                    a5:85:d6:4a:e8:86:64:d8:c0:85:8b:8c:d3:11:89:
                    bd:e9:66:4c:98:ae:7d:d4:d9:21:4a:a6:c9:c7:f4:
                    2b:1f:d4:50:eb:ed:b8:69:f9:b5:d6:10:ef:ad:7d:
                    57:86:c9:5e:13:64:79:58:a0:62:76:2a:b1:83:71:
                    f4:fa:51:a6:8f:21:79:e7:3e:8e:4b:b9:57:59:69:
                    b4:b7:04:2c:d9:bc:3a:7c:13:42:8c:00:b1:b2:bf:
                    bc:4e:be:1b:73:91:e8:c8:94:99:f3:80:51:a4:3d:
                    b9:c2:1b:e9:1b:2d:72:df:4f:b1:e3:ff:0b:c4:7d:
                    d0:14:a1:ec:b1:2f:28:03:c4:e2:26:64:6a:23:63:
                    fd:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:4A:C5:D7:81:18:6D:13:2C:D0:B3:B2:78:C9:1C:8C:A9:1C:22:82
            X509v3 Authority Key Identifier:
                keyid:4F:2F:D3:F0:0B:58:F1:34:A9:A8:E3:E7:DD:A8:D8:D2:0A:C0:35:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:e6:73:d1:a6:30:bd:28:83:b7:be:3b:3d:bc:61:a0:d2:91:
         35:c1:47:5e:3c:58:92:bb:87:5b:9f:c7:db:65:b3:72:3b:28:
         a8:70:77:bf:9f:5c:57:20:86:02:d1:5d:d2:bb:63:37:13:11:
         29:fd:3e:26:c5:20:fb:0f:3b:be:26:3c:45:f9:81:f3:b1:5a:
         3c:8a:b4:9f:75:be:8a:36:63:79:a0:3d:41:db:de:b5:ce:d6:
         6e:e4:64:18:c8:31:86:e8:3a:ac:6e:1a:97:87:8a:03:db:97:
         c2:ae:45:7b:4a:e1:d4:cc:02:92:ff:86:dc:aa:53:bb:1d:e0:
         be:94:78:e2:d4:0b:2b:04:d5:8d:ad:5b:54:4f:cd:0a:38:ec:
         14:b6:20:0b:ac:39:ed:0a:74:c2:0c:bf:29:c0:f2:a8:dd:ae:
         8d:fd:9d:29:aa:91:f8:d5:be:38:98:39:8a:ce:0d:ad:cf:d1:
         32:90:9b:84:50:e3:fd:a5:69:e6:8c:5f:96:e6:f7:14:64:9b:
         0a:99:0c:27:64:21:6c:71:1f:a4:17:49:b9:31:86:aa:d6:e6:
         19:75:60:36:c1:8d:d5:25:cc:0c:ef:60:b5:a4:97:f5:38:b9:
         8d:b9:4e:81:ce:4b:72:b1:99:f4:af:e0:fc:66:9f:47:49:d8:
         2f:b4:35:f6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzQ4ODAxMTAvBgNVBAUTKDRGMkZEM0YwMEI1OEYxMzRBOUE4RTNFN0REQThEOEQy
MEFDMDM1MjcwHhcNMjYwNTEyMTQxNjU2WhcNMjYwNTE5MTQxNjU2WjAYMRYwFAYD
VQQDEw02YTAzMzY1OC0xMGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq8gNpXD+CBVLZDTVPcoIigEXMtkDnke9fId1Awgnj/HQYxu8fgK74c1jU2hP
Uw6UStB6A+AX5QZlkSSsvmU3RaAu7zH+IRT0oLuqSvLd6kHFT2tI9uT8HLfKyY+V
lXpAwuTrnoaA/eFbJWN8LTkSE5UgkqTSV32lhdZK6IZk2MCFi4zTEYm96WZMmK59
1NkhSqbJx/QrH9RQ6+24afm11hDvrX1XhsleE2R5WKBidiqxg3H0+lGmjyF55z6O
S7lXWWm0twQs2bw6fBNCjACxsr+8Tr4bc5HoyJSZ84BRpD25whvpGy1y30+x4/8L
xH3QFKHssS8oA8TiJmRqI2P9+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB9KxdeB
GG0TLNCzsnjJHIypHCKCMB8GA1UdIwQYMBaAFE8v0/ALWPE0qajj592o2NIKwDUn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDg4MC82OUYwNEJBODFE
NkExMUUyQkI3MDE0QTgwOEIwMkNEMi9UeV9UOEF0WThUU3BxT1BuM2FqWTBnckFO
U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1R5X1Q4QXRZOFRTcHFPUG4zYWpZMGdyQU5TYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NDg4MC82OUYwNEJBODFENkExMUUyQkI3MDE0QTgwOEIwMkNEMi9UeV9UOEF0WThU
U3BxT1BuM2FqWTBnckFOU2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASeZz0aYwvSiDt747PbxhoNKRNcFHXjxYkruHW5/H22WzcjsoqHB3v59cVyCG
AtFd0rtjNxMRKf0+JsUg+w87viY8RfmB87FaPIq0n3W+ijZjeaA9Qdvetc7WbuRk
GMgxhug6rG4al4eKA9uXwq5Fe0rh1MwCkv+G3KpTux3gvpR44tQLKwTVja1bVE/N
CjjsFLYgC6w57Qp0wgy/KcDyqN2ujf2dKaqR+NW+OJg5is4Nrc/RMpCbhFDj/aVp
5oxflub3FGSbCpkMJ2QhbHEfpBdJuTGGqtbmGXVgNsGN1SXMDO9gtaSX9Ti5jblO
gc5LcrGZ9K/g/GafR0nYL7Q19g==
-----END CERTIFICATE-----
Generated at Wed May 13 03:19:19 2026 by rpki-client