Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.mft
File:                     vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.mft (raw, json)
Hash identifier:          r9s/+Tw3PE9VMf/Ib1wsrUEMYgafWjv1vbUMmY5vgV8=
Subject key identifier:   0E:1C:E2:0A:B9:9F:C4:5F:07:58:F3:C7:4A:8E:FA:D5:08:EC:72:44
Authority key identifier: BD:89:78:16:56:D9:D1:58:34:7B:7B:14:C0:4A:D9:EA:44:1C:C9:97
Certificate issuer:       /CN=A918E1C4/serialNumber=BD89781656D9D158347B7B14C04AD9EA441CC997
Certificate serial:       5A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.mft
Manifest number:          57
Signing time:             Mon 11 May 2026 08:21:44 +0000
Manifest this update:     Mon 11 May 2026 08:21:43 +0000
Manifest next update:     Mon 18 May 2026 08:21:43 +0000
Files and hashes:         1: vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.crl (hash: dLsP5KVpbuGvjDMs1/UUBxamAkSg02foaYxaVTRNLvA=)
                          2: 722C58FACE9311F0A2C11D25C4F9AE02.roa (hash: ERXxcYaD/BipGW6AIZDMmzRHcboCoePXi+aLABZ/mKA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.crl
                          rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:21:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E1C4, serialNumber=BD89781656D9D158347B7B14C04AD9EA441CC997
        Validity
            Not Before: May 11 08:21:43 2026 GMT
            Not After : May 18 08:21:43 2026 GMT
        Subject: CN=6a019197-7e5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f6:91:ae:f0:46:5c:a3:8d:b7:2f:8c:68:8f:
                    94:e4:0e:d2:41:42:0a:f3:c8:ce:8f:a0:66:ad:c4:
                    c2:d9:95:db:42:92:7b:30:f9:98:66:23:c8:70:ae:
                    75:14:86:42:79:01:1d:39:90:40:cc:2f:1f:7b:ae:
                    86:c3:42:ae:b3:79:22:e2:65:16:d6:77:7d:00:4d:
                    12:ec:5a:5e:6c:68:05:8c:a3:87:57:27:cd:d1:8c:
                    bb:44:4d:d1:1c:b3:7b:b3:03:12:60:54:b8:4c:8c:
                    31:72:17:de:a5:12:7e:98:e9:7c:81:a9:46:5f:4f:
                    17:8e:06:60:94:dc:fd:37:98:b8:c5:36:91:e2:17:
                    9b:99:87:fb:5e:af:ee:7c:26:2b:0c:25:c0:87:05:
                    d3:1e:9a:e2:7e:a8:e2:fb:ae:e3:d9:20:0b:22:48:
                    0e:fc:31:57:3f:ed:18:32:3a:b8:12:a5:f8:1c:54:
                    2f:69:2c:86:38:c7:9f:af:cb:a7:2f:c2:3e:97:b7:
                    f5:26:b5:99:11:e7:1c:95:bc:25:b9:80:7e:8f:66:
                    44:d1:57:ca:60:50:20:c9:f9:cd:9f:fe:df:3c:51:
                    26:58:ac:e8:f9:04:eb:58:0b:0e:42:57:0a:28:fd:
                    33:26:9a:13:29:c0:ab:cc:83:db:ed:ee:75:97:12:
                    76:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:1C:E2:0A:B9:9F:C4:5F:07:58:F3:C7:4A:8E:FA:D5:08:EC:72:44
            X509v3 Authority Key Identifier:
                keyid:BD:89:78:16:56:D9:D1:58:34:7B:7B:14:C0:4A:D9:EA:44:1C:C9:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:48:46:24:e9:8d:97:29:e9:e8:98:33:2b:61:a0:f1:fa:18:
         ee:8c:e6:1c:c5:fe:bf:be:97:52:17:fd:00:ab:0b:eb:1c:60:
         be:4d:7e:90:64:32:45:2f:9d:aa:df:08:b6:c5:6e:2c:1e:4b:
         3e:44:26:b2:db:7b:eb:c0:80:24:bb:97:66:55:90:98:27:cd:
         2f:10:44:bb:f4:54:2e:85:23:d9:c2:4b:0d:79:bd:11:9d:3c:
         60:f0:50:8f:15:0c:a6:df:58:56:6b:ff:7b:77:36:a4:7e:33:
         49:b5:e6:59:43:34:6a:38:93:74:86:e0:94:d9:eb:5c:a7:67:
         c7:68:b0:0a:45:7f:0c:91:b3:db:16:94:e1:cd:5a:3c:ed:84:
         51:c4:99:5a:42:63:6a:c3:5f:e0:30:55:a9:f1:15:db:de:ab:
         5c:4d:5d:62:8c:3a:f4:35:0f:3b:1a:95:e4:81:79:69:ad:b8:
         ec:8a:ce:ca:56:8b:ab:12:1b:29:24:57:c7:3c:66:88:9c:2d:
         e4:ee:0d:23:c7:fd:7f:bf:0b:cf:00:1d:3f:cb:77:04:64:1b:
         c9:aa:06:5c:b8:62:b9:2b:5d:82:08:7d:19:74:4a:b9:6b:12:
         80:ed:60:e8:c7:14:bd:d7:4b:1c:3a:26:19:1c:c0:3f:ed:4f:
         5c:b1:6d:7d
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
RTFDNDExMC8GA1UEBRMoQkQ4OTc4MTY1NkQ5RDE1ODM0N0I3QjE0QzA0QUQ5RUE0
NDFDQzk5NzAeFw0yNjA1MTEwODIxNDNaFw0yNjA1MTgwODIxNDNaMBgxFjAUBgNV
BAMTDTZhMDE5MTk3LTdlNWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDe9pGu8EZco423L4xoj5TkDtJBQgrzyM6PoGatxMLZldtCknsw+ZhmI8hwrnUU
hkJ5AR05kEDMLx97robDQq6zeSLiZRbWd30ATRLsWl5saAWMo4dXJ83RjLtETdEc
s3uzAxJgVLhMjDFyF96lEn6Y6XyBqUZfTxeOBmCU3P03mLjFNpHiF5uZh/ter+58
JisMJcCHBdMemuJ+qOL7ruPZIAsiSA78MVc/7RgyOrgSpfgcVC9pLIY4x5+vy6cv
wj6Xt/UmtZkR5xyVvCW5gH6PZkTRV8pgUCDJ+c2f/t88USZYrOj5BOtYCw5CVwoo
/TMmmhMpwKvMg9vt7nWXEnbdAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUDhziCrmf
xF8HWPPHSo761QjsckQwHwYDVR0jBBgwFoAUvYl4FlbZ0Vg0e3sUwErZ6kQcyZcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFMUM0LzBDNzFFN0ZBQ0U5
MzExRjA4OEFCMTUyNEM0RjlBRTAyL3ZZbDRGbGJaMFZnMGUzc1V3RXJaNmtRY3la
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvdllsNEZsYlowVmcwZTNzVXdFclo2a1FjeVpjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThF
MUM0LzBDNzFFN0ZBQ0U5MzExRjA4OEFCMTUyNEM0RjlBRTAyL3ZZbDRGbGJaMFZn
MGUzc1V3RXJaNmtRY3laYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAOSEYk6Y2XKenomDMrYaDx+hjujOYcxf6/vpdSF/0AqwvrHGC+TX6QZDJFL52q
3wi2xW4sHks+RCay23vrwIAku5dmVZCYJ80vEES79FQuhSPZwksNeb0RnTxg8FCP
FQym31hWa/97dzakfjNJteZZQzRqOJN0huCU2etcp2fHaLAKRX8MkbPbFpThzVo8
7YRRxJlaQmNqw1/gMFWp8RXb3qtcTV1ijDr0NQ87GpXkgXlprbjsis7KVourEhsp
JFfHPGaInC3k7g0jx/1/vwvPAB0/y3cEZBvJqgZcuGK5K12CCH0ZdEq5axKA7WDo
xxS910scOiYZHMA/7U9csW19
-----END CERTIFICATE-----
Generated at Wed May 13 07:08:16 2026 by rpki-client