Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.mft
File:                     NnO2jJT8If8_zeajk-7GOxbAFP4.mft (raw, json)
Hash identifier:          rMX8Ntrq72yCz8WPOWNqo9W9OILIG3IywmUyrEEP7lA=
Subject key identifier:   B1:CC:37:79:EB:C5:97:F9:4D:D3:1F:57:03:47:B6:F4:9C:C6:66:78
Authority key identifier: 36:73:B6:8C:94:FC:21:FF:3F:CD:E6:A3:93:EE:C6:3B:16:C0:14:FE
Certificate issuer:       /CN=A918D663/serialNumber=3673B68C94FC21FF3FCDE6A393EEC63B16C014FE
Certificate serial:       1E
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NnO2jJT8If8_zeajk-7GOxbAFP4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.mft
Manifest number:          1C
Signing time:             Mon 11 May 2026 06:56:48 +0000
Manifest this update:     Mon 11 May 2026 06:56:47 +0000
Manifest next update:     Mon 18 May 2026 06:56:47 +0000
Files and hashes:         1: NnO2jJT8If8_zeajk-7GOxbAFP4.crl (hash: M5uSF1OyraC1JT0GNpQmIWaJlCC8LDPspvfXPqSubuA=)
                          2: 80FBB9EE267611F1BE9D6DCBAE833773.roa (hash: bSERLhOY5GiHM0MRoVjj+c34VXkpFi4/JG1GVO16gFk=)
                          3: 80708DE2267611F1BE9D6DCBAE833773.roa (hash: jGySyCZGfLJ6Gub4dNKlt20vYdC2D9wIP1qqcY9QBu8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.crl
                          rsync://rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NnO2jJT8If8_zeajk-7GOxbAFP4.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:56:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D663, serialNumber=3673B68C94FC21FF3FCDE6A393EEC63B16C014FE
        Validity
            Not Before: May 11 06:56:47 2026 GMT
            Not After : May 18 06:56:47 2026 GMT
        Subject: CN=6a017daf-a149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b4:71:94:81:c0:bc:17:d3:35:7c:23:05:bf:
                    00:c5:24:c3:84:f0:b8:59:88:5b:92:76:24:88:7b:
                    10:27:cf:b0:52:e1:5a:2c:e1:ff:e5:8b:65:8b:54:
                    86:a1:a9:76:3d:74:d3:26:d9:46:87:8f:d3:52:66:
                    e1:fe:1f:51:e5:ff:71:cb:58:86:43:dc:ab:4c:ba:
                    56:07:97:47:65:ad:84:31:a1:e2:8e:bd:11:3d:99:
                    79:6e:d7:69:ed:83:57:27:9b:03:cd:fb:63:e5:0d:
                    cf:fa:bb:4d:cc:78:33:05:7f:28:a9:b6:2a:c7:40:
                    b6:c9:21:20:60:56:55:0b:81:ca:39:a2:b1:89:70:
                    0e:ad:03:98:10:52:93:1f:73:07:2e:02:94:e3:52:
                    e4:e3:67:d6:ed:6f:ef:9b:9a:a9:5d:df:85:4d:21:
                    0a:aa:cd:bf:59:6c:c8:d4:72:1a:7b:a6:9c:a4:22:
                    43:9f:a1:de:9b:25:0b:24:a8:e5:0a:50:c3:94:77:
                    20:d6:92:cd:a8:64:df:0f:fb:83:61:32:d2:3d:04:
                    92:da:49:45:8d:3b:18:32:49:d3:e0:f9:b1:32:ff:
                    4b:5b:77:d8:f5:af:d9:0d:b3:17:7a:0f:47:97:d7:
                    54:f8:19:06:39:49:7c:5e:40:83:cf:69:6b:ed:42:
                    2d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:CC:37:79:EB:C5:97:F9:4D:D3:1F:57:03:47:B6:F4:9C:C6:66:78
            X509v3 Authority Key Identifier:
                keyid:36:73:B6:8C:94:FC:21:FF:3F:CD:E6:A3:93:EE:C6:3B:16:C0:14:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/NnO2jJT8If8_zeajk-7GOxbAFP4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D663/CD470CAE24EB11F19086902EB1EE528E/NnO2jJT8If8_zeajk-7GOxbAFP4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:b1:b7:3f:53:d2:be:b5:73:00:22:69:df:87:b5:71:ad:98:
         e2:7f:4a:10:b5:39:a8:3e:4e:1c:d1:9e:a9:7a:34:c7:60:a2:
         38:fe:5e:d4:64:3e:db:34:ff:ec:84:51:c7:e8:9e:37:37:c9:
         08:05:fb:34:34:f1:89:c6:a8:55:5c:ee:91:4e:44:02:77:9e:
         88:5c:f2:7c:c4:4c:ef:16:10:c3:0a:fc:36:9d:2d:2a:9a:03:
         22:12:8e:35:46:d4:cd:42:f1:00:dc:ff:2e:55:c8:e3:11:64:
         35:cd:68:7c:42:33:eb:cd:e2:14:dc:b2:8e:ee:6a:08:4c:96:
         3e:9f:e3:aa:bc:34:39:2b:0c:46:13:bd:f4:f6:cf:0c:77:72:
         81:c8:73:c8:ad:5f:af:9e:a2:f3:2c:46:39:5e:b2:fa:dc:68:
         62:ba:1b:b3:27:d4:03:e1:96:8d:aa:ac:7c:e3:6a:40:3b:8b:
         37:fc:9c:ce:fc:7a:43:85:83:a0:6d:32:fc:5b:a3:86:6a:ff:
         51:8d:b3:eb:9c:e6:20:44:c5:90:49:53:fd:17:61:f4:02:7e:
         c6:8e:bd:50:bb:d6:0a:ac:ae:eb:48:4b:b5:cb:d7:ec:81:93:
         48:aa:db:2e:06:2e:5e:c9:47:66:04:60:9d:4e:39:5d:be:85:
         a3:4a:48:82
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
RDY2MzExMC8GA1UEBRMoMzY3M0I2OEM5NEZDMjFGRjNGQ0RFNkEzOTNFRUM2M0Ix
NkMwMTRGRTAeFw0yNjA1MTEwNjU2NDdaFw0yNjA1MTgwNjU2NDdaMBgxFjAUBgNV
BAMTDTZhMDE3ZGFmLWExNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCvtHGUgcC8F9M1fCMFvwDFJMOE8LhZiFuSdiSIexAnz7BS4Vos4f/li2WLVIah
qXY9dNMm2UaHj9NSZuH+H1Hl/3HLWIZD3KtMulYHl0dlrYQxoeKOvRE9mXlu12nt
g1cnmwPN+2PlDc/6u03MeDMFfyiptirHQLbJISBgVlULgco5orGJcA6tA5gQUpMf
cwcuApTjUuTjZ9btb++bmqld34VNIQqqzb9ZbMjUchp7ppykIkOfod6bJQskqOUK
UMOUdyDWks2oZN8P+4NhMtI9BJLaSUWNOxgySdPg+bEy/0tbd9j1r9kNsxd6D0eX
11T4GQY5SXxeQIPPaWvtQi3jAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUscw3eevF
l/lN0x9XA0e29JzGZngwHwYDVR0jBBgwFoAUNnO2jJT8If8/zeajk+7GOxbAFP4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThENjYzL0NENDcwQ0FFMjRF
QjExRjE5MDg2OTAyRUIxRUU1MjhFL05uTzJqSlQ4SWY4X3plYWprLTdHT3hiQUZQ
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvTm5PMmpKVDhJZjhfemVhamstN0dPeGJBRlA0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThE
NjYzL0NENDcwQ0FFMjRFQjExRjE5MDg2OTAyRUIxRUU1MjhFL05uTzJqSlQ4SWY4
X3plYWprLTdHT3hiQUZQNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCAsbc/U9K+tXMAImnfh7VxrZjif0oQtTmoPk4c0Z6pejTHYKI4/l7UZD7bNP/s
hFHH6J43N8kIBfs0NPGJxqhVXO6RTkQCd56IXPJ8xEzvFhDDCvw2nS0qmgMiEo41
RtTNQvEA3P8uVcjjEWQ1zWh8QjPrzeIU3LKO7moITJY+n+OqvDQ5KwxGE7309s8M
d3KByHPIrV+vnqLzLEY5XrL63GhiuhuzJ9QD4ZaNqqx842pAO4s3/JzO/HpDhYOg
bTL8W6OGav9RjbPrnOYgRMWQSVP9F2H0An7Gjr1Qu9YKrK7rSEu1y9fsgZNIqtsu
Bi5eyUdmBGCdTjldvoWjSkiC
-----END CERTIFICATE-----
Generated at Wed May 13 01:06:08 2026 by rpki-client