Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.mft
File:                     64P0iA8jV15XUXhcbgqyvgskm8M.mft (raw, json)
Hash identifier:          XeP/cGk0Vc3IdQlwl/NS/4OSCAmtQKoIXkgtbfVQTzM=
Subject key identifier:   AC:57:6C:79:3F:29:F3:C4:9C:63:C0:62:D2:47:36:7A:56:86:D9:66
Authority key identifier: EB:83:F4:88:0F:23:57:5E:57:51:78:5C:6E:0A:B2:BE:0B:24:9B:C3
Certificate issuer:       /CN=A917C0F3/serialNumber=EB83F4880F23575E5751785C6E0AB2BE0B249BC3
Certificate serial:       0100
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/64P0iA8jV15XUXhcbgqyvgskm8M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.mft
Manifest number:          FC
Signing time:             Mon 11 May 2026 06:19:47 +0000
Manifest this update:     Mon 11 May 2026 06:19:47 +0000
Manifest next update:     Mon 18 May 2026 06:19:47 +0000
Files and hashes:         1: 64P0iA8jV15XUXhcbgqyvgskm8M.crl (hash: c+td0hH/xJq2iAED2iXcawLpv2H9RPQjzw2N2W38zcE=)
                          2: 028452F0D0BA11EFA8B5A526C4F9AE02.roa (hash: VwphhGhSSxLYmxwzAbdpnMPMVv5nEltMnX3C48e6dF4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.crl
                          rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/64P0iA8jV15XUXhcbgqyvgskm8M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:19:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 256 (0x100)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C0F3, serialNumber=EB83F4880F23575E5751785C6E0AB2BE0B249BC3
        Validity
            Not Before: May 11 06:19:47 2026 GMT
            Not After : May 18 06:19:47 2026 GMT
        Subject: CN=6a017503-4d82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1c:d0:a6:d2:37:cc:8a:17:f8:8f:7b:41:44:
                    04:43:d8:94:b7:9a:2a:29:95:21:36:09:b9:43:4c:
                    5e:b5:64:7f:c9:7c:b9:6e:0e:0d:bf:41:92:ef:fc:
                    a8:eb:86:13:99:15:7e:12:01:f4:e8:a2:04:39:49:
                    d8:f1:aa:8f:92:f0:d9:34:e9:a1:86:ac:30:ef:01:
                    6b:45:d4:7f:61:e9:0a:d2:4e:59:4d:37:21:9c:4e:
                    ac:84:dd:9c:64:94:e6:8c:bb:c6:7e:1a:ca:a5:39:
                    f8:51:73:69:92:5c:32:5e:11:51:72:f8:56:72:ae:
                    c2:20:25:f8:d2:e6:f4:e6:08:03:41:20:c9:98:29:
                    91:15:f0:cf:5c:c8:b4:fa:03:42:5a:02:a0:21:7f:
                    a4:96:ae:49:f3:48:cf:9c:60:9c:a4:ff:c1:75:01:
                    24:92:1e:04:66:ef:ea:9a:70:38:bd:a3:77:70:90:
                    c7:87:0f:9e:39:39:cf:ee:fd:82:71:92:8b:88:60:
                    88:f6:5d:32:a8:40:23:d3:ee:38:43:24:a5:57:0e:
                    b1:ee:25:82:1e:f6:63:66:12:49:4e:8e:e5:4b:0c:
                    df:09:6e:c5:6a:80:ee:e3:43:ab:90:ed:89:09:19:
                    11:01:a0:33:2a:b4:1b:21:14:9f:69:42:44:41:64:
                    07:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:57:6C:79:3F:29:F3:C4:9C:63:C0:62:D2:47:36:7A:56:86:D9:66
            X509v3 Authority Key Identifier:
                keyid:EB:83:F4:88:0F:23:57:5E:57:51:78:5C:6E:0A:B2:BE:0B:24:9B:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/64P0iA8jV15XUXhcbgqyvgskm8M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:86:aa:8d:0a:d9:dd:4f:9d:f8:03:ce:0a:cc:15:c5:9f:eb:
         3d:de:85:b5:17:8a:f4:b1:34:3e:d0:20:4d:04:25:28:19:8b:
         0a:32:80:62:5b:df:09:db:86:07:20:7f:28:a4:7f:06:1b:9d:
         37:9c:86:24:ec:72:d1:1b:2c:77:01:52:7d:7a:a5:e1:40:5c:
         3a:ed:9f:34:0f:0f:4e:6f:9e:53:5e:5c:89:fd:99:af:1a:e2:
         93:1b:d8:ca:e3:69:d4:65:8a:46:f0:c4:07:87:6b:32:18:8d:
         8c:3c:ad:ee:5a:a1:03:03:49:df:a5:08:4d:bc:43:ec:4f:c2:
         b6:e0:32:e0:93:24:8b:d6:c0:f0:c0:d0:cd:30:e8:82:4a:ff:
         34:e3:f2:78:0e:69:38:dc:b6:21:14:4f:7d:d9:bf:ce:55:2c:
         6b:cf:60:c2:6e:40:b9:fb:8d:a0:be:32:51:cd:2a:7e:77:27:
         4c:b8:f0:9a:da:04:e7:78:52:c3:37:9b:01:77:85:e6:3d:49:
         ab:00:6f:4b:30:b6:cc:09:e1:21:72:37:cc:b5:28:5d:79:34:
         be:28:11:cc:8c:17:6a:f1:27:0a:aa:13:56:7f:1f:db:f9:e2:
         e2:d1:f2:34:e4:92:fe:71:a7:58:83:9d:db:cf:cd:f0:31:bb:
         ee:e4:32:b5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0MwRjMxMTAvBgNVBAUTKEVCODNGNDg4MEYyMzU3NUU1NzUxNzg1QzZFMEFCMkJF
MEIyNDlCQzMwHhcNMjYwNTExMDYxOTQ3WhcNMjYwNTE4MDYxOTQ3WjAYMRYwFAYD
VQQDEw02YTAxNzUwMy00ZDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoBzQptI3zIoX+I97QUQEQ9iUt5oqKZUhNgm5Q0xetWR/yXy5bg4Nv0GS7/yo
64YTmRV+EgH06KIEOUnY8aqPkvDZNOmhhqww7wFrRdR/YekK0k5ZTTchnE6shN2c
ZJTmjLvGfhrKpTn4UXNpklwyXhFRcvhWcq7CICX40ub05ggDQSDJmCmRFfDPXMi0
+gNCWgKgIX+klq5J80jPnGCcpP/BdQEkkh4EZu/qmnA4vaN3cJDHhw+eOTnP7v2C
cZKLiGCI9l0yqEAj0+44QySlVw6x7iWCHvZjZhJJTo7lSwzfCW7FaoDu40OrkO2J
CRkRAaAzKrQbIRSfaUJEQWQHVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKxXbHk/
KfPEnGPAYtJHNnpWhtlmMB8GA1UdIwQYMBaAFOuD9IgPI1deV1F4XG4Ksr4LJJvD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzBGMy81OEZFNzRBRUQw
QjkxMUVGQTA4NDg4MjVDNEY5QUUwMi82NFAwaUE4alYxNVhVWGhjYmdxeXZnc2tt
OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzY0UDBpQThqVjE1WFVYaGNiZ3F5dmdza204TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QzBGMy81OEZFNzRBRUQwQjkxMUVGQTA4NDg4MjVDNEY5QUUwMi82NFAwaUE4alYx
NVhVWGhjYmdxeXZnc2ttOE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANYaqjQrZ3U+d+APOCswVxZ/rPd6FtReK9LE0PtAgTQQlKBmLCjKAYlvfCduG
ByB/KKR/BhudN5yGJOxy0RssdwFSfXql4UBcOu2fNA8PTm+eU15cif2ZrxrikxvY
yuNp1GWKRvDEB4drMhiNjDyt7lqhAwNJ36UITbxD7E/CtuAy4JMki9bA8MDQzTDo
gkr/NOPyeA5pONy2IRRPfdm/zlUsa89gwm5AufuNoL4yUc0qfncnTLjwmtoE53hS
wzebAXeF5j1JqwBvSzC2zAnhIXI3zLUoXXk0vigRzIwXavEnCqoTVn8f2/ni4tHy
NOSS/nGnWIOd28/N8DG77uQytQ==
-----END CERTIFICATE-----
Generated at Wed May 13 06:21:25 2026 by rpki-client