Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft
File:                     lUpwG6oMkx0BduSFt6KHwTFlJg4.mft (raw, json)
Hash identifier:          sAJTq4ZysVFx+AUxQzWNHb3Wz+G+50AcAmWeflMFcF8=
Subject key identifier:   1C:7A:0A:DC:93:E1:B3:65:B0:88:28:78:E7:56:7B:B9:89:3C:29:92
Authority key identifier: 95:4A:70:1B:AA:0C:93:1D:01:76:E4:85:B7:A2:87:C1:31:65:26:0E
Certificate issuer:       /CN=A9185CED/serialNumber=954A701BAA0C931D0176E485B7A287C13165260E
Certificate serial:       06F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUpwG6oMkx0BduSFt6KHwTFlJg4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft
Manifest number:          06EB
Signing time:             Tue 12 May 2026 22:14:25 +0000
Manifest this update:     Tue 12 May 2026 22:14:24 +0000
Manifest next update:     Tue 19 May 2026 22:14:24 +0000
Files and hashes:         1: lUpwG6oMkx0BduSFt6KHwTFlJg4.crl (hash: hiI4mNZiTNAIs/xJ9EMkQ1cIhrW9t01uqxNuT5Vwxw8=)
                          2: 3A84DC2C44E411EFB0C1A135C4F9AE02.roa (hash: ANO9ATvmrYILQmlhem8z7fcbouBAL7kvJgnxQnAu8ss=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.crl
                          rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUpwG6oMkx0BduSFt6KHwTFlJg4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:14:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1776 (0x6f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185CED, serialNumber=954A701BAA0C931D0176E485B7A287C13165260E
        Validity
            Not Before: May 12 22:14:24 2026 GMT
            Not After : May 19 22:14:24 2026 GMT
        Subject: CN=6a03a641-4e11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fd:f2:43:0a:70:e4:e2:2e:9e:7c:7e:b8:53:
                    2d:b1:a0:75:2d:6e:2e:b1:af:6f:6d:71:67:f3:3c:
                    51:bc:4e:60:fb:ca:20:43:11:2f:4f:05:70:35:be:
                    36:c6:72:97:d4:e0:da:c3:f8:56:3a:b8:84:18:52:
                    fc:b8:d3:69:f0:48:1c:7e:63:6a:bf:e3:d0:8d:67:
                    24:4f:64:8a:8f:d4:d4:66:51:dc:47:cb:fd:34:e2:
                    4e:73:39:d0:a6:9f:f0:e1:51:dc:6e:cc:cb:a2:e0:
                    b1:7c:e8:1d:43:d5:69:29:01:a6:d4:39:16:9d:01:
                    f7:4d:74:dc:62:41:94:9a:44:27:dc:64:95:35:1e:
                    8a:0e:67:3a:31:8d:ac:fd:cd:6e:4f:f9:32:5d:f7:
                    08:3c:62:2a:f7:2d:55:76:8c:94:e4:6a:b4:86:28:
                    8f:45:84:14:6b:42:05:b7:82:9c:5c:29:ef:aa:e6:
                    3b:4c:7a:49:3a:20:69:e1:b1:81:00:1f:dc:07:20:
                    e6:82:2a:3a:21:5b:97:94:4f:02:2c:3b:ea:0e:a0:
                    8a:a0:84:9e:a9:a4:43:98:62:9a:33:3d:62:f3:3c:
                    6d:b2:1a:a1:c3:30:da:74:e4:06:b9:9b:96:5d:ce:
                    e4:9c:50:92:75:1e:16:18:d3:8c:37:cf:39:14:2b:
                    8a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:7A:0A:DC:93:E1:B3:65:B0:88:28:78:E7:56:7B:B9:89:3C:29:92
            X509v3 Authority Key Identifier:
                keyid:95:4A:70:1B:AA:0C:93:1D:01:76:E4:85:B7:A2:87:C1:31:65:26:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUpwG6oMkx0BduSFt6KHwTFlJg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:1b:56:d4:63:d4:8c:81:d7:d4:4f:2b:58:00:3c:f7:75:9f:
         dd:46:ca:08:63:65:2b:ec:3d:4b:16:aa:e3:f6:2b:e5:a6:07:
         55:dc:e5:b1:2a:3e:5c:5a:31:02:24:78:4a:84:d2:7d:cf:0f:
         b5:27:5d:2f:21:2a:aa:47:d7:54:3e:74:eb:fa:65:69:2d:d1:
         67:ff:23:b3:42:2e:90:93:ad:6d:18:80:28:b6:d4:13:ea:3a:
         d3:be:98:74:e6:69:8d:a5:cf:00:7a:d2:96:68:38:15:10:75:
         29:b0:14:c7:32:e7:3d:58:ff:77:1d:00:4a:82:a1:8d:0f:a4:
         1f:b2:25:40:40:3b:6f:56:1f:cc:2c:a9:00:d5:f3:91:4f:9f:
         5b:79:d2:98:77:b4:72:c4:6d:95:0b:9f:53:4a:7c:f5:55:74:
         bb:5a:4f:df:b8:12:01:53:47:50:ec:6d:5c:78:c0:bc:69:ad:
         70:5e:db:61:f1:33:63:d3:d2:8c:97:0f:10:86:5c:59:fe:f4:
         71:41:1b:b2:61:ec:4c:c3:15:15:bf:29:46:09:d0:ef:58:70:
         a9:22:59:d7:60:3f:9b:b5:66:8f:4b:c5:9e:a1:28:a6:9f:5f:
         36:6b:e4:84:9e:06:20:a1:e6:ee:0f:63:60:30:8d:81:c3:2f:
         68:b1:3b:8e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBvAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODVDRUQxMTAvBgNVBAUTKDk1NEE3MDFCQUEwQzkzMUQwMTc2RTQ4NUI3QTI4N0Mx
MzE2NTI2MEUwHhcNMjYwNTEyMjIxNDI0WhcNMjYwNTE5MjIxNDI0WjAYMRYwFAYD
VQQDEw02YTAzYTY0MS00ZTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1f3yQwpw5OIunnx+uFMtsaB1LW4usa9vbXFn8zxRvE5g+8ogQxEvTwVwNb42
xnKX1ODaw/hWOriEGFL8uNNp8EgcfmNqv+PQjWckT2SKj9TUZlHcR8v9NOJOcznQ
pp/w4VHcbszLouCxfOgdQ9VpKQGm1DkWnQH3TXTcYkGUmkQn3GSVNR6KDmc6MY2s
/c1uT/kyXfcIPGIq9y1VdoyU5Gq0hiiPRYQUa0IFt4KcXCnvquY7THpJOiBp4bGB
AB/cByDmgio6IVuXlE8CLDvqDqCKoISeqaRDmGKaMz1i8zxtshqhwzDadOQGuZuW
Xc7knFCSdR4WGNOMN885FCuK/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBx6CtyT
4bNlsIgoeOdWe7mJPCmSMB8GA1UdIwQYMBaAFJVKcBuqDJMdAXbkhbeih8ExZSYO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUNFRC8xQUFGN0Q5NDky
MjcxMUVCQkU3MzRGNDBDNEY5QUUwMi9sVXB3RzZvTWt4MEJkdVNGdDZLSHdURmxK
ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xVcHdHNm9Na3gwQmR1U0Z0NktId1RGbEpnNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NUNFRC8xQUFGN0Q5NDkyMjcxMUVCQkU3MzRGNDBDNEY5QUUwMi9sVXB3RzZvTWt4
MEJkdVNGdDZLSHdURmxKZzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAohtW1GPUjIHX1E8rWAA893Wf3UbKCGNlK+w9Sxaq4/Yr5aYHVdzlsSo+XFox
AiR4SoTSfc8PtSddLyEqqkfXVD506/plaS3RZ/8js0IukJOtbRiAKLbUE+o6076Y
dOZpjaXPAHrSlmg4FRB1KbAUxzLnPVj/dx0ASoKhjQ+kH7IlQEA7b1YfzCypANXz
kU+fW3nSmHe0csRtlQufU0p89VV0u1pP37gSAVNHUOxtXHjAvGmtcF7bYfEzY9PS
jJcPEIZcWf70cUEbsmHsTMMVFb8pRgnQ71hwqSJZ12A/m7Vmj0vFnqEopp9fNmvk
hJ4GIKHm7g9jYDCNgcMvaLE7jg==
-----END CERTIFICATE-----
Generated at Wed May 13 07:29:10 2026 by rpki-client