Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft
File:                     fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft (raw, json)
Hash identifier:          gCo9pofgVTCeaCK468e2mRfcMFzVJ8bKJqW+Dr335wA=
Subject key identifier:   9D:28:C4:2B:57:A1:F0:20:E1:D6:91:C2:96:3D:13:D5:EC:3D:B4:67
Authority key identifier: 7C:5B:74:14:E3:CC:80:40:59:BC:A8:6C:C5:16:3A:07:43:E4:1C:85
Certificate issuer:       /CN=A9194D56/serialNumber=7C5B7414E3CC804059BCA86CC5163A0743E41C85
Certificate serial:       242A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft
Manifest number:          2405
Signing time:             Tue 12 May 2026 15:48:37 +0000
Manifest this update:     Tue 12 May 2026 15:48:37 +0000
Manifest next update:     Tue 19 May 2026 15:48:37 +0000
Files and hashes:         1: fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl (hash: aHWr/9PMzA4MESIHgZhWknIIIyPpsvzimqVTuRmDIMk=)
                          2: AD8187A41FF511ED8DD6D661C4F9AE02.roa (hash: qLDoFJBL4tjU3a5+OgqcUODZnGFeDhknY5OqvsDbWxk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl
                          rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:48:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9258 (0x242a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194D56, serialNumber=7C5B7414E3CC804059BCA86CC5163A0743E41C85
        Validity
            Not Before: May 12 15:48:37 2026 GMT
            Not After : May 19 15:48:37 2026 GMT
        Subject: CN=6a034bd5-69bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:90:84:bc:48:ad:7f:09:2d:db:e5:30:2b:ad:
                    7a:26:bb:74:17:f4:77:05:ff:7e:a9:48:59:5f:8e:
                    12:25:00:4c:42:dc:94:bb:d2:dd:ad:0f:34:0d:c2:
                    7c:de:d2:12:4a:08:b3:c4:2a:a1:04:72:5b:b5:89:
                    42:e2:a7:31:ba:0e:00:62:89:da:a0:5e:ad:dd:bd:
                    83:73:b3:48:1f:43:01:69:8c:b3:df:34:82:60:0e:
                    f8:dd:eb:6b:19:87:3a:8f:49:cc:68:f6:49:4a:1d:
                    5e:57:09:2d:39:3e:7e:9d:c4:67:31:e6:5c:2c:ff:
                    69:1a:ee:a2:2d:ad:a6:03:85:47:9d:37:7b:d5:4b:
                    91:2e:cb:7f:0b:9b:d1:8b:8b:a0:a6:ed:17:34:6f:
                    0b:de:ba:a0:92:1f:ac:7c:b2:3d:7e:ee:b8:46:a2:
                    18:9c:91:a4:74:cb:65:b3:c9:e1:a9:d7:17:55:8b:
                    e7:a6:28:b3:0b:11:4a:b9:4d:99:03:50:b2:84:9e:
                    b4:58:9b:60:73:87:5a:82:68:9d:ac:e7:0a:b2:df:
                    7c:f2:01:2b:af:5f:22:57:38:1d:ba:67:36:14:e2:
                    62:ea:c0:0a:29:df:0d:a3:e7:ea:25:1d:d5:86:76:
                    f2:13:da:d1:73:07:cc:0d:97:13:3e:a4:c1:a7:8f:
                    eb:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:28:C4:2B:57:A1:F0:20:E1:D6:91:C2:96:3D:13:D5:EC:3D:B4:67
            X509v3 Authority Key Identifier:
                keyid:7C:5B:74:14:E3:CC:80:40:59:BC:A8:6C:C5:16:3A:07:43:E4:1C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:fa:d3:95:df:fb:42:98:a1:1c:02:9a:f4:88:d0:5a:d7:9d:
         be:b9:98:3a:52:85:f3:9e:4d:38:56:4b:a1:d2:a2:36:03:43:
         ee:80:04:67:8f:5f:1f:09:ec:f0:0b:cd:39:16:16:18:c0:48:
         40:b6:a2:4f:38:5e:1b:3b:4d:c2:79:37:df:90:dd:de:dc:df:
         28:eb:2a:52:04:9a:99:17:93:e6:fe:a4:7f:9d:60:2b:bd:88:
         d1:54:e9:ca:5b:1e:b2:d2:53:9c:da:d0:40:2e:94:f3:31:6e:
         5c:9e:2c:ac:d1:d5:83:ac:d3:fb:78:dc:82:fa:a5:8d:92:81:
         b4:f7:31:00:88:70:68:0e:9a:d1:6d:78:88:99:d7:74:2b:13:
         c4:09:6c:ed:bb:87:e7:3b:b7:0c:61:24:bb:61:6a:23:f4:82:
         8b:61:22:67:a3:af:44:89:75:b3:33:a5:67:20:3f:50:74:62:
         d9:07:f9:f8:6e:e8:b9:2e:7c:7c:7f:0c:94:e5:4d:19:4b:7c:
         c8:16:3a:8a:b1:a5:2f:f9:f2:47:67:22:6b:12:0e:5a:94:a1:
         4d:e5:87:ea:27:45:ed:72:b2:d6:43:7a:33:2a:d0:10:b6:b8:
         91:f9:fd:fb:10:2a:5f:19:50:08:0c:e0:40:7e:1a:94:88:ef:
         e7:b6:a1:f0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTRENTYxMTAvBgNVBAUTKDdDNUI3NDE0RTNDQzgwNDA1OUJDQTg2Q0M1MTYzQTA3
NDNFNDFDODUwHhcNMjYwNTEyMTU0ODM3WhcNMjYwNTE5MTU0ODM3WjAYMRYwFAYD
VQQDEw02YTAzNGJkNS02OWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1ZCEvEitfwkt2+UwK616Jrt0F/R3Bf9+qUhZX44SJQBMQtyUu9LdrQ80DcJ8
3tISSgizxCqhBHJbtYlC4qcxug4AYonaoF6t3b2Dc7NIH0MBaYyz3zSCYA743etr
GYc6j0nMaPZJSh1eVwktOT5+ncRnMeZcLP9pGu6iLa2mA4VHnTd71UuRLst/C5vR
i4ugpu0XNG8L3rqgkh+sfLI9fu64RqIYnJGkdMtls8nhqdcXVYvnpiizCxFKuU2Z
A1CyhJ60WJtgc4dagmidrOcKst988gErr18iVzgdumc2FOJi6sAKKd8No+fqJR3V
hnbyE9rRcwfMDZcTPqTBp4/rFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ0oxCtX
ofAg4daRwpY9E9XsPbRnMB8GA1UdIwQYMBaAFHxbdBTjzIBAWbyobMUWOgdD5ByF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEQ1Ni9FNUQ0MDdGRTg2
QjMxMUU1OThGMzdGMUFDNEY5QUUwMi9mRnQwRk9QTWdFQlp2S2hzeFJZNkIwUGtI
SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZGdDBGT1BNZ0VCWnZLaHN4Ulk2QjBQa0hJVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NEQ1Ni9FNUQ0MDdGRTg2QjMxMUU1OThGMzdGMUFDNEY5QUUwMi9mRnQwRk9QTWdF
Qlp2S2hzeFJZNkIwUGtISVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgPrTld/7QpihHAKa9IjQWtedvrmYOlKF855NOFZLodKiNgND7oAEZ49fHwns
8AvNORYWGMBIQLaiTzheGztNwnk335Dd3tzfKOsqUgSamReT5v6kf51gK72I0VTp
ylsestJTnNrQQC6U8zFuXJ4srNHVg6zT+3jcgvqljZKBtPcxAIhwaA6a0W14iJnX
dCsTxAls7buH5zu3DGEku2FqI/SCi2EiZ6OvRIl1szOlZyA/UHRi2Qf5+G7ouS58
fH8MlOVNGUt8yBY6irGlL/nyR2ciaxIOWpShTeWH6idF7XKy1kN6MyrQELa4kfn9
+xAqXxlQCAzgQH4alIjv57ah8A==
-----END CERTIFICATE-----
Generated at Wed May 13 05:41:55 2026 by rpki-client