Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.mft
File:                     19wEkNjuc-uWU-jiR2_8-4l0qt8.mft (raw, json)
Hash identifier:          9LkTU+TKcXJWbtywbyu6pCu3h9pqNX4IYgzF7tdhxQc=
Subject key identifier:   F5:BF:C5:15:8D:CD:7B:DC:2C:33:C4:BC:46:92:F2:2C:F3:41:E2:01
Authority key identifier: D7:DC:04:90:D8:EE:73:EB:96:53:E8:E2:47:6F:FC:FB:89:74:AA:DF
Certificate issuer:       /CN=A918A0B8/serialNumber=D7DC0490D8EE73EB9653E8E2476FFCFB8974AADF
Certificate serial:       056A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/19wEkNjuc-uWU-jiR2_8-4l0qt8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.mft
Manifest number:          0561
Signing time:             Tue 12 May 2026 23:27:50 +0000
Manifest this update:     Tue 12 May 2026 23:27:50 +0000
Manifest next update:     Tue 19 May 2026 23:27:50 +0000
Files and hashes:         1: 19wEkNjuc-uWU-jiR2_8-4l0qt8.crl (hash: 71Y3n308TEV4NIYycRoMdkgLK1XsY7xrnOuNOpZlyRw=)
                          2: 233E4D90309811ECAED04B4AC4F9AE02.roa (hash: weDFmKA+OeY6LyvEaG7tZKipvC9cPrmqdRCDJ7Yuam4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.crl
                          rsync://rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/19wEkNjuc-uWU-jiR2_8-4l0qt8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 23:27:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1386 (0x56a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A0B8, serialNumber=D7DC0490D8EE73EB9653E8E2476FFCFB8974AADF
        Validity
            Not Before: May 12 23:27:50 2026 GMT
            Not After : May 19 23:27:50 2026 GMT
        Subject: CN=6a03b776-6803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a9:14:55:54:ec:78:fa:f6:0a:15:e9:be:fc:
                    52:fe:d9:f2:44:2c:87:c0:26:fd:81:00:47:54:d8:
                    de:50:96:9f:de:c5:b3:eb:40:43:13:4d:be:97:62:
                    41:56:83:1d:c6:45:e5:78:80:8b:c3:19:a7:f2:52:
                    28:e6:c7:9b:fa:bc:ce:aa:63:f6:9e:4a:6e:cd:1d:
                    f1:51:3b:bb:fb:55:04:8c:3f:03:e7:67:ff:66:0a:
                    34:70:f9:80:06:ea:4f:ad:33:da:84:3e:24:2f:eb:
                    cf:67:fc:c0:32:81:e2:6f:46:24:7f:5c:92:3d:b7:
                    92:57:c4:2d:c1:b0:14:a6:67:7c:b5:79:76:5c:b7:
                    f6:8b:f9:2d:3a:3c:a6:cf:d2:e8:da:7d:b4:7f:b0:
                    ba:5b:5d:ad:32:f5:a9:86:6a:d3:96:ac:99:f4:4c:
                    50:65:a5:6d:97:56:4e:bb:f2:df:a6:e3:12:31:43:
                    89:ad:a6:98:a6:64:d0:be:82:9e:ef:19:62:95:fb:
                    22:7a:6b:c3:51:91:3a:0a:4e:51:c6:d8:2b:e8:81:
                    7f:92:23:7d:a9:75:e2:92:74:d2:f9:83:eb:54:21:
                    e2:c6:11:15:f5:15:fb:41:c4:34:fb:88:e6:f0:1c:
                    28:c9:6d:7c:90:fc:f1:b1:d5:dc:ee:c9:48:ba:89:
                    1b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:BF:C5:15:8D:CD:7B:DC:2C:33:C4:BC:46:92:F2:2C:F3:41:E2:01
            X509v3 Authority Key Identifier:
                keyid:D7:DC:04:90:D8:EE:73:EB:96:53:E8:E2:47:6F:FC:FB:89:74:AA:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/19wEkNjuc-uWU-jiR2_8-4l0qt8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:f6:e4:05:31:50:54:54:b5:ac:36:32:ba:12:d1:f6:fe:f3:
         aa:bb:19:ff:aa:86:0d:85:6e:4e:3c:e9:8e:af:10:a8:04:2b:
         c1:df:40:68:98:40:1c:53:b4:2f:8e:a7:c7:c9:a4:a8:82:b5:
         98:5d:cb:52:8a:0a:58:bc:68:24:95:00:75:9a:1c:c0:35:e5:
         c7:7b:5c:83:5c:e4:64:fe:4c:ee:9b:70:97:a1:ed:67:50:f6:
         7a:e1:9c:de:4f:6f:f7:6d:f7:76:c8:31:28:3b:78:85:d4:95:
         02:fb:8a:b4:5d:86:29:24:84:36:f4:2d:c5:7a:c7:be:26:f2:
         5b:7d:a0:52:25:97:2e:35:95:40:98:74:b4:ae:e0:ec:f2:70:
         d8:39:4e:82:69:39:22:3c:d1:7e:74:de:47:c9:e9:cc:35:5e:
         98:a8:c6:64:24:14:d3:b2:8f:0b:5e:7f:87:a2:81:17:ab:b5:
         ac:2f:88:d9:dc:ce:13:06:3a:c7:f5:24:f2:a0:2f:54:b0:ff:
         93:60:c6:0b:cf:5a:9a:4a:1c:e8:31:95:eb:b8:95:22:f0:61:
         b2:fd:91:e8:ca:f9:93:f8:22:b0:13:11:95:23:23:75:80:59:
         ad:08:b8:a8:8a:89:b0:d9:8d:a3:28:d2:d2:96:3e:65:c5:bb:
         6f:aa:c7:e0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEEwQjgxMTAvBgNVBAUTKEQ3REMwNDkwRDhFRTczRUI5NjUzRThFMjQ3NkZGQ0ZC
ODk3NEFBREYwHhcNMjYwNTEyMjMyNzUwWhcNMjYwNTE5MjMyNzUwWjAYMRYwFAYD
VQQDEw02YTAzYjc3Ni02ODAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1qkUVVTsePr2ChXpvvxS/tnyRCyHwCb9gQBHVNjeUJaf3sWz60BDE02+l2JB
VoMdxkXleICLwxmn8lIo5seb+rzOqmP2nkpuzR3xUTu7+1UEjD8D52f/Zgo0cPmA
BupPrTPahD4kL+vPZ/zAMoHib0Ykf1ySPbeSV8QtwbAUpmd8tXl2XLf2i/ktOjym
z9Lo2n20f7C6W12tMvWphmrTlqyZ9ExQZaVtl1ZOu/LfpuMSMUOJraaYpmTQvoKe
7xlilfsiemvDUZE6Ck5Rxtgr6IF/kiN9qXXiknTS+YPrVCHixhEV9RX7QcQ0+4jm
8BwoyW18kPzxsdXc7slIuokb2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPW/xRWN
zXvcLDPEvEaS8izzQeIBMB8GA1UdIwQYMBaAFNfcBJDY7nPrllPo4kdv/PuJdKrf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTBCOC8xN0RFRkYxNDJG
RjYxMUVDOTA0N0EyNDNDNEY5QUUwMi8xOXdFa05qdWMtdVdVLWppUjJfOC00bDBx
dDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzE5d0VrTmp1Yy11V1UtamlSMl84LTRsMHF0OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QTBCOC8xN0RFRkYxNDJGRjYxMUVDOTA0N0EyNDNDNEY5QUUwMi8xOXdFa05qdWMt
dVdVLWppUjJfOC00bDBxdDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAb/bkBTFQVFS1rDYyuhLR9v7zqrsZ/6qGDYVuTjzpjq8QqAQrwd9AaJhAHFO0
L46nx8mkqIK1mF3LUooKWLxoJJUAdZocwDXlx3tcg1zkZP5M7ptwl6HtZ1D2euGc
3k9v9233dsgxKDt4hdSVAvuKtF2GKSSENvQtxXrHvibyW32gUiWXLjWVQJh0tK7g
7PJw2DlOgmk5IjzRfnTeR8npzDVemKjGZCQU07KPC15/h6KBF6u1rC+I2dzOEwY6
x/Uk8qAvVLD/k2DGC89amkoc6DGV67iVIvBhsv2R6Mr5k/gisBMRlSMjdYBZrQi4
qIqJsNmNoyjS0pY+ZcW7b6rH4A==
-----END CERTIFICATE-----
Generated at Wed May 13 13:36:21 2026 by rpki-client