Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft
File:                     l1u5QYJWgUoFLa9U9woa3FNv35s.mft (raw, json)
Hash identifier:          EubkZAZBFyp040EvUt63tI48V1L5LT+3YouY706c1b0=
Subject key identifier:   05:6B:E1:FD:64:6D:5D:9A:43:AE:49:04:85:A2:9E:E9:47:48:0D:08
Authority key identifier: 97:5B:B9:41:82:56:81:4A:05:2D:AF:54:F7:0A:1A:DC:53:6F:DF:9B
Certificate issuer:       /CN=A91A7842/serialNumber=975BB9418256814A052DAF54F70A1ADC536FDF9B
Certificate serial:       0482
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft
Manifest number:          0475
Signing time:             Wed 13 May 2026 00:12:40 +0000
Manifest this update:     Wed 13 May 2026 00:12:40 +0000
Manifest next update:     Wed 20 May 2026 00:12:40 +0000
Files and hashes:         1: l1u5QYJWgUoFLa9U9woa3FNv35s.crl (hash: xTbIGmJkgsmPTUulPF2WZDrGzZXOS3A2y4PU84xOjd8=)
                          2: 615BA1B8D91411EF9940471AC4F9AE02.roa (hash: nbdgFqrvKPwj7OTKa8WeiCsPcy8PIB9YyhQhRJZGshM=)
                          3: 622B3AEAD91411EF9940471AC4F9AE02.roa (hash: cr8+DaXhHVaKphmcAd7tV537ArwtZQMiy53lf3sRJ+Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.crl
                          rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 00:12:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1154 (0x482)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7842, serialNumber=975BB9418256814A052DAF54F70A1ADC536FDF9B
        Validity
            Not Before: May 13 00:12:40 2026 GMT
            Not After : May 20 00:12:40 2026 GMT
        Subject: CN=6a03c1f8-93d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b4:77:45:a9:3e:4a:9a:0f:f2:d6:2d:50:0b:
                    76:53:4d:f5:84:08:72:2d:39:b7:46:a3:ca:05:1d:
                    b8:4c:9c:d6:d1:fb:05:36:6d:bd:f3:da:7d:1f:72:
                    19:a5:d9:fa:f3:5a:eb:20:c8:f4:40:1e:ae:04:b0:
                    80:2e:ca:42:87:69:1f:a6:00:7d:32:0b:08:56:44:
                    c6:6c:b3:b1:bb:c1:37:bf:ce:a1:60:4d:ff:3c:d7:
                    2b:7f:6f:fa:b5:ef:a4:22:df:41:c5:54:30:69:60:
                    79:21:80:2c:17:b7:8f:38:e8:46:03:ad:0b:5d:5f:
                    a2:71:ea:1b:45:de:92:96:43:c8:fb:e4:4a:33:98:
                    ca:43:a0:89:3c:98:b3:0f:a7:6c:57:33:0c:1c:aa:
                    cb:7b:d7:db:ec:dc:dc:fc:21:0a:f9:73:3b:c3:57:
                    9a:69:f3:c7:ab:4e:47:3e:c5:db:b9:df:3d:e1:d6:
                    3c:99:bb:8f:89:7a:c3:f8:0d:9a:df:b4:c4:e3:9b:
                    f2:73:43:a2:3c:d9:89:c6:d6:ec:02:43:d9:18:bc:
                    76:3b:3e:25:ec:22:27:65:f6:83:b0:5a:17:da:87:
                    33:8b:1b:7d:4e:b2:5a:dc:4b:80:ca:2e:3e:12:34:
                    60:e6:9d:57:44:ad:c9:a5:21:85:e1:4f:b1:d7:e4:
                    e6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:6B:E1:FD:64:6D:5D:9A:43:AE:49:04:85:A2:9E:E9:47:48:0D:08
            X509v3 Authority Key Identifier:
                keyid:97:5B:B9:41:82:56:81:4A:05:2D:AF:54:F7:0A:1A:DC:53:6F:DF:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:f2:20:98:f0:f2:03:b7:2b:47:28:66:c1:b4:a8:58:37:0c:
         ea:6d:6e:5f:30:45:a2:97:ad:8b:8e:53:ff:e7:b0:65:16:8e:
         ba:85:bd:a2:de:0c:05:fc:9e:cd:74:cc:e6:8f:1c:29:bb:d9:
         af:7a:92:05:e2:81:1b:af:ff:97:5d:76:20:2e:04:38:4f:1f:
         8e:70:2f:d9:78:d7:04:88:0b:02:20:c1:2b:d3:9f:22:65:fd:
         ac:f4:f7:76:3c:90:36:9f:03:6a:4d:2b:08:c5:de:05:d0:00:
         34:8c:49:1a:8d:b7:aa:62:c3:a5:03:9f:a1:22:9d:17:10:b6:
         2a:3f:11:6e:60:e6:92:cf:54:24:35:be:65:f5:67:ad:5e:13:
         3a:48:69:f4:0a:44:56:02:b7:c7:bb:8b:5f:9b:1e:5e:da:5e:
         75:fb:8f:53:72:45:4d:67:77:b0:a4:19:e8:41:5f:7a:0c:5c:
         3f:6d:1c:ed:00:7a:55:c7:27:39:62:3c:da:97:ab:23:d0:b3:
         44:0e:08:93:67:e9:47:16:6c:56:3c:27:3f:b1:bc:e7:3e:f7:
         9b:d0:bb:32:3e:43:da:a5:8f:d3:7a:fd:2a:20:18:76:a4:0d:
         93:75:13:95:2c:50:93:ec:98:9f:b1:b1:6f:36:38:da:f1:91:
         3a:9a:f0:18
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTc4NDIxMTAvBgNVBAUTKDk3NUJCOTQxODI1NjgxNEEwNTJEQUY1NEY3MEExQURD
NTM2RkRGOUIwHhcNMjYwNTEzMDAxMjQwWhcNMjYwNTIwMDAxMjQwWjAYMRYwFAYD
VQQDEw02YTAzYzFmOC05M2QzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAh7R3Rak+SpoP8tYtUAt2U031hAhyLTm3RqPKBR24TJzW0fsFNm2989p9H3IZ
pdn681rrIMj0QB6uBLCALspCh2kfpgB9MgsIVkTGbLOxu8E3v86hYE3/PNcrf2/6
te+kIt9BxVQwaWB5IYAsF7ePOOhGA60LXV+iceobRd6SlkPI++RKM5jKQ6CJPJiz
D6dsVzMMHKrLe9fb7Nzc/CEK+XM7w1eaafPHq05HPsXbud894dY8mbuPiXrD+A2a
37TE45vyc0OiPNmJxtbsAkPZGLx2Oz4l7CInZfaDsFoX2oczixt9TrJa3EuAyi4+
EjRg5p1XRK3JpSGF4U+x1+TmdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAVr4f1k
bV2aQ65JBIWinulHSA0IMB8GA1UdIwQYMBaAFJdbuUGCVoFKBS2vVPcKGtxTb9+b
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzg0Mi83NkE4QzZCQThF
NjUxMUVDQTZFRUVCNzBDNEY5QUUwMi9sMXU1UVlKV2dVb0ZMYTlVOXdvYTNGTnYz
NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2wxdTVRWUpXZ1VvRkxhOVU5d29hM0ZOdjM1cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
Nzg0Mi83NkE4QzZCQThFNjUxMUVDQTZFRUVCNzBDNEY5QUUwMi9sMXU1UVlKV2dV
b0ZMYTlVOXdvYTNGTnYzNXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGvIgmPDyA7crRyhmwbSoWDcM6m1uXzBFopeti45T/+ewZRaOuoW9ot4MBfye
zXTM5o8cKbvZr3qSBeKBG6//l112IC4EOE8fjnAv2XjXBIgLAiDBK9OfImX9rPT3
djyQNp8Dak0rCMXeBdAANIxJGo23qmLDpQOfoSKdFxC2Kj8RbmDmks9UJDW+ZfVn
rV4TOkhp9ApEVgK3x7uLX5seXtpedfuPU3JFTWd3sKQZ6EFfegxcP20c7QB6Vccn
OWI82perI9CzRA4Ik2fpRxZsVjwnP7G85z73m9C7Mj5D2qWP03r9KiAYdqQNk3UT
lSxQk+yYn7GxbzY42vGROprwGA==
-----END CERTIFICATE-----
Generated at Wed May 13 06:54:48 2026 by rpki-client