Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft
File:                     K1N18tBgdUbVH2UR9hvEoYl0_eI.mft (raw, json)
Hash identifier:          N3zj75vbLvpVFzDyeFtNsW8L2y/AuZ4+veeeOutkWvM=
Subject key identifier:   AF:41:F6:50:F0:C2:C4:40:52:5A:DB:7B:2E:46:31:F6:7C:E0:95:61
Authority key identifier: 2B:53:75:F2:D0:60:75:46:D5:1F:65:11:F6:1B:C4:A1:89:74:FD:E2
Certificate issuer:       /CN=A91EF19E/serialNumber=2B5375F2D0607546D51F6511F61BC4A18974FDE2
Certificate serial:       3575
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft
Manifest number:          3562
Signing time:             Tue 12 May 2026 14:24:07 +0000
Manifest this update:     Tue 12 May 2026 14:24:06 +0000
Manifest next update:     Tue 19 May 2026 14:24:06 +0000
Files and hashes:         1: K1N18tBgdUbVH2UR9hvEoYl0_eI.crl (hash: VqdXjrgjRi2ybBoLzhTGXgaE4G3/Rx8r9KloxfXfRjw=)
                          2: FACC58F855C411E9A0FEF781C4F9AE02.roa (hash: B+l8TJuzuBfxkWLiU727TKBvSyJyZhyj59n2Kpa5X6s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.crl
                          rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:24:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13685 (0x3575)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF19E, serialNumber=2B5375F2D0607546D51F6511F61BC4A18974FDE2
        Validity
            Not Before: May 12 14:24:06 2026 GMT
            Not After : May 19 14:24:06 2026 GMT
        Subject: CN=6a033807-bd33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9d:5f:5b:46:71:4e:0d:e3:0f:b0:98:6a:53:
                    11:13:b2:84:17:b7:7b:0d:69:30:12:7e:28:cd:e2:
                    ee:f3:c5:e3:cd:03:0a:0b:a7:89:9a:7a:e2:2f:81:
                    3a:8c:87:3b:77:6f:95:d0:a7:b5:a9:ad:1e:96:fd:
                    f9:a2:d8:41:45:e8:4d:af:35:04:16:60:91:6d:56:
                    6f:97:b9:30:d9:07:18:f8:c2:2a:f3:55:09:ab:b6:
                    06:17:6e:3b:be:78:8a:23:e6:07:07:00:62:26:da:
                    1f:21:de:6d:1f:18:94:b7:eb:18:5b:2e:54:25:cb:
                    f7:87:ec:94:1c:30:2f:ea:2f:71:4d:aa:ce:ec:8f:
                    57:84:4e:cb:c0:36:63:21:e0:11:fe:7f:2e:29:95:
                    b9:cc:52:26:f7:08:17:f5:f1:76:07:0a:44:1c:ab:
                    75:95:dc:77:05:55:1e:2e:a6:a6:84:fd:81:4d:9b:
                    5f:4f:c0:dc:71:1d:af:be:c1:12:4a:0f:d3:2d:62:
                    1a:ea:40:91:37:36:ff:b5:54:b7:53:60:ca:bf:cf:
                    3b:2e:df:d4:52:19:71:5c:4f:aa:af:95:20:5b:13:
                    a0:b4:2a:42:8d:89:b3:28:a4:dd:b0:4b:27:cd:4a:
                    c1:0e:3d:5b:4f:64:7d:eb:24:26:21:53:21:31:1a:
                    5a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:41:F6:50:F0:C2:C4:40:52:5A:DB:7B:2E:46:31:F6:7C:E0:95:61
            X509v3 Authority Key Identifier:
                keyid:2B:53:75:F2:D0:60:75:46:D5:1F:65:11:F6:1B:C4:A1:89:74:FD:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:d9:d6:9f:9c:e5:66:41:5f:2c:44:ce:b4:66:67:ed:45:7b:
         29:11:56:e3:2d:a5:f0:d8:c7:a1:ea:c4:64:ac:cd:84:c7:b1:
         01:c7:a7:f0:85:96:b0:d6:7e:f1:eb:96:30:d5:3d:bc:8a:3f:
         e4:cf:46:ef:42:7f:16:0f:a0:c3:d0:90:85:08:95:57:dc:da:
         ca:5d:94:c6:63:3c:e1:3e:aa:7f:57:f1:f9:2a:8a:d2:95:31:
         ed:35:ad:99:4e:7a:36:84:83:20:ab:52:f4:17:d9:eb:c6:fd:
         5e:7d:db:f0:24:db:c3:d8:1a:d8:85:f7:fe:8a:89:14:f9:b7:
         86:60:10:4e:b5:83:bc:34:6a:b1:a3:8f:31:31:79:3e:c4:c5:
         08:0e:1c:93:8c:62:12:98:fd:b7:a0:04:f9:fd:91:ad:5d:f8:
         71:94:0e:ab:48:a3:15:93:50:de:1d:9c:ec:93:e2:2a:e3:cb:
         9c:2f:b4:25:d8:e0:1a:37:61:95:4a:d8:bc:94:42:8c:7a:90:
         c6:d7:3f:6d:0f:3b:76:b1:11:0a:22:ac:f1:f0:c5:b8:cc:79:
         e8:7d:5e:88:be:9b:e6:36:32:a1:1f:7f:b3:83:8a:e5:62:4c:
         bd:27:14:18:52:85:0b:6b:71:68:9b:93:e1:4b:86:99:53:9e:
         26:96:21:cd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUYxOUUxMTAvBgNVBAUTKDJCNTM3NUYyRDA2MDc1NDZENTFGNjUxMUY2MUJDNEEx
ODk3NEZERTIwHhcNMjYwNTEyMTQyNDA2WhcNMjYwNTE5MTQyNDA2WjAYMRYwFAYD
VQQDEw02YTAzMzgwNy1iZDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwZ1fW0ZxTg3jD7CYalMRE7KEF7d7DWkwEn4ozeLu88XjzQMKC6eJmnriL4E6
jIc7d2+V0Ke1qa0elv35othBRehNrzUEFmCRbVZvl7kw2QcY+MIq81UJq7YGF247
vniKI+YHBwBiJtofId5tHxiUt+sYWy5UJcv3h+yUHDAv6i9xTarO7I9XhE7LwDZj
IeAR/n8uKZW5zFIm9wgX9fF2BwpEHKt1ldx3BVUeLqamhP2BTZtfT8DccR2vvsES
Sg/TLWIa6kCRNzb/tVS3U2DKv887Lt/UUhlxXE+qr5UgWxOgtCpCjYmzKKTdsEsn
zUrBDj1bT2R96yQmIVMhMRpaYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK9B9lDw
wsRAUlrbey5GMfZ84JVhMB8GA1UdIwQYMBaAFCtTdfLQYHVG1R9lEfYbxKGJdP3i
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE5RS8wNUM0QzBBNDFE
ODQxMUUyQjBDNUEzRDkwOEIwMkNEMi9LMU4xOHRCZ2RVYlZIMlVSOWh2RW9ZbDBf
ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0sxTjE4dEJnZFViVkgyVVI5aHZFb1lsMF9lSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RjE5RS8wNUM0QzBBNDFEODQxMUUyQjBDNUEzRDkwOEIwMkNEMi9LMU4xOHRCZ2RV
YlZIMlVSOWh2RW9ZbDBfZUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAENnWn5zlZkFfLETOtGZn7UV7KRFW4y2l8NjHoerEZKzNhMexAcen8IWWsNZ+
8euWMNU9vIo/5M9G70J/Fg+gw9CQhQiVV9zayl2UxmM84T6qf1fx+SqK0pUx7TWt
mU56NoSDIKtS9BfZ68b9Xn3b8CTbw9ga2IX3/oqJFPm3hmAQTrWDvDRqsaOPMTF5
PsTFCA4ck4xiEpj9t6AE+f2RrV34cZQOq0ijFZNQ3h2c7JPiKuPLnC+0JdjgGjdh
lUrYvJRCjHqQxtc/bQ87drERCiKs8fDFuMx56H1eiL6b5jYyoR9/s4OK5WJMvScU
GFKFC2txaJuT4UuGmVOeJpYhzQ==
-----END CERTIFICATE-----
Generated at Wed May 13 11:36:27 2026 by rpki-client