Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft
File:                     4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft (raw, json)
Hash identifier:          FZhNIhfGM0Xt2+zl+UXZLWOQtb2jjvq5/1UnzmTAVD8=
Subject key identifier:   E1:EA:E6:F4:2F:70:50:B7:BC:77:09:A5:0A:AA:AF:FA:85:91:2D:40
Authority key identifier: E0:AB:6D:97:72:65:DB:0D:5C:58:D4:33:A2:8B:3C:C2:05:1A:0C:29
Certificate issuer:       /CN=A917A93E/serialNumber=E0AB6D977265DB0D5C58D433A28B3CC2051A0C29
Certificate serial:       0116
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Kttl3Jl2w1cWNQzoos8wgUaDCk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft
Manifest number:          0112
Signing time:             Mon 11 May 2026 06:09:20 +0000
Manifest this update:     Mon 11 May 2026 06:09:19 +0000
Manifest next update:     Mon 18 May 2026 06:09:19 +0000
Files and hashes:         1: 4Kttl3Jl2w1cWNQzoos8wgUaDCk.crl (hash: tqrERFKotIiJYgQsSwSIke2JTpK9l2eZ7pwSCwBnrqc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.crl
                          rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Kttl3Jl2w1cWNQzoos8wgUaDCk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:09:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 278 (0x116)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A93E, serialNumber=E0AB6D977265DB0D5C58D433A28B3CC2051A0C29
        Validity
            Not Before: May 11 06:09:19 2026 GMT
            Not After : May 18 06:09:19 2026 GMT
        Subject: CN=6a017290-edd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:57:dc:fe:f0:be:9d:47:c6:68:e8:26:49:74:
                    ca:2f:af:4f:b8:a3:b9:44:a7:f9:56:46:f8:70:31:
                    22:4e:ed:65:e7:5f:e3:71:71:a3:ee:b1:3e:ee:db:
                    4c:d0:75:8a:a7:15:3d:3f:ea:d9:02:87:59:61:0f:
                    6a:cb:ad:bf:77:87:0b:aa:8c:f7:46:60:04:07:1e:
                    8f:85:55:5f:93:f2:2b:c1:a0:6d:90:5e:7d:96:6b:
                    4a:7b:a5:d7:b0:e1:b8:51:eb:2f:ec:34:f8:a8:eb:
                    d2:8b:a1:f4:2a:e5:fe:09:af:c8:d5:e1:22:d0:60:
                    0e:22:4f:65:1e:b0:01:b2:5a:50:8f:52:b3:0c:6b:
                    29:32:7f:db:45:97:c5:8f:63:66:db:81:99:27:cf:
                    ea:a0:bd:21:8d:74:a2:e3:7f:5e:ec:c1:0a:9b:e6:
                    9f:d6:53:86:f4:86:04:d2:fd:9d:c7:dd:2b:f9:6a:
                    11:f2:3a:b1:99:fa:d7:96:c1:31:33:60:bb:c3:da:
                    b0:7f:a7:fc:3c:53:7a:ce:a3:ba:cc:41:98:f4:42:
                    df:3a:9e:b9:5a:03:3c:5a:54:ad:08:83:15:d4:c0:
                    d2:18:78:32:0d:e5:bf:25:47:04:f5:d9:a0:10:d2:
                    bd:9d:26:fb:b9:37:b1:dc:ae:ed:26:05:3e:94:25:
                    7c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:EA:E6:F4:2F:70:50:B7:BC:77:09:A5:0A:AA:AF:FA:85:91:2D:40
            X509v3 Authority Key Identifier:
                keyid:E0:AB:6D:97:72:65:DB:0D:5C:58:D4:33:A2:8B:3C:C2:05:1A:0C:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Kttl3Jl2w1cWNQzoos8wgUaDCk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:47:65:f7:a9:e9:90:5d:96:50:fc:0b:ae:62:0b:ac:d5:09:
         89:26:d4:2d:3e:67:6a:47:b7:bc:b9:16:f6:96:82:ef:6e:7b:
         bd:8b:b2:79:8e:d0:da:07:74:77:81:16:4a:a8:0b:80:b7:83:
         47:d7:1e:cf:be:0b:64:eb:6e:b1:ad:82:07:57:ba:c8:51:61:
         74:58:80:dd:bb:cf:3a:69:09:34:bc:43:9d:db:3a:93:69:0c:
         d5:71:dd:12:b5:49:a3:36:e4:8c:e0:ac:d8:7f:ce:40:ae:7b:
         3e:c3:3d:69:ed:78:69:be:d2:ae:56:05:ca:26:de:d5:bb:d3:
         2e:da:fb:ff:8e:d3:8e:13:fe:5b:e8:3a:7d:3b:20:8b:c3:6b:
         68:4a:b4:9c:a2:00:d1:4e:ca:3f:ea:67:26:1a:97:2c:f6:b6:
         79:b8:2d:17:61:2b:a7:01:bb:6a:35:38:48:56:61:13:0b:e3:
         4d:13:47:80:a2:9e:b5:d7:44:b4:9d:f0:1f:da:c7:42:7c:6c:
         e5:a7:5f:97:d8:22:b8:d9:de:db:06:4d:34:c3:88:04:75:c3:
         63:9b:49:2b:83:ed:75:08:f5:d7:63:f0:ca:a0:77:9c:c7:dd:
         62:80:c2:96:19:43:75:5d:b7:79:8b:ea:a7:61:0f:79:76:6d:
         9b:ba:26:db
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0E5M0UxMTAvBgNVBAUTKEUwQUI2RDk3NzI2NURCMEQ1QzU4RDQzM0EyOEIzQ0My
MDUxQTBDMjkwHhcNMjYwNTExMDYwOTE5WhcNMjYwNTE4MDYwOTE5WjAYMRYwFAYD
VQQDEw02YTAxNzI5MC1lZGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs1fc/vC+nUfGaOgmSXTKL69PuKO5RKf5Vkb4cDEiTu1l51/jcXGj7rE+7ttM
0HWKpxU9P+rZAodZYQ9qy62/d4cLqoz3RmAEBx6PhVVfk/IrwaBtkF59lmtKe6XX
sOG4Uesv7DT4qOvSi6H0KuX+Ca/I1eEi0GAOIk9lHrABslpQj1KzDGspMn/bRZfF
j2Nm24GZJ8/qoL0hjXSi439e7MEKm+af1lOG9IYE0v2dx90r+WoR8jqxmfrXlsEx
M2C7w9qwf6f8PFN6zqO6zEGY9ELfOp65WgM8WlStCIMV1MDSGHgyDeW/JUcE9dmg
ENK9nSb7uTex3K7tJgU+lCV8XQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOHq5vQv
cFC3vHcJpQqqr/qFkS1AMB8GA1UdIwQYMBaAFOCrbZdyZdsNXFjUM6KLPMIFGgwp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTkzRS80NzFCMzcyOEI3
OUExMUVGOEVDNDk5NTFDNEY5QUUwMi80S3R0bDNKbDJ3MWNXTlF6b29zOHdnVWFE
Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRLdHRsM0psMncxY1dOUXpvb3M4d2dVYURDay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QTkzRS80NzFCMzcyOEI3OUExMUVGOEVDNDk5NTFDNEY5QUUwMi80S3R0bDNKbDJ3
MWNXTlF6b29zOHdnVWFEQ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZ0dl96npkF2WUPwLrmILrNUJiSbULT5nake3vLkW9paC7257vYuyeY7Q2gd0
d4EWSqgLgLeDR9cez74LZOtusa2CB1e6yFFhdFiA3bvPOmkJNLxDnds6k2kM1XHd
ErVJozbkjOCs2H/OQK57PsM9ae14ab7SrlYFyibe1bvTLtr7/47TjhP+W+g6fTsg
i8NraEq0nKIA0U7KP+pnJhqXLPa2ebgtF2ErpwG7ajU4SFZhEwvjTRNHgKKetddE
tJ3wH9rHQnxs5adfl9giuNne2wZNNMOIBHXDY5tJK4PtdQj112PwyqB3nMfdYoDC
lhlDdV23eYvqp2EPeXZtm7om2w==
-----END CERTIFICATE-----
Generated at Wed May 13 06:41:28 2026 by rpki-client