Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft
File:                     kl2pi04IXWgNFte6GD8OpUJqGgM.mft (raw, json)
Hash identifier:          YrK6UyBdf70UmzXuvCpkJgZucx+XHVhivcdRcNGg5e4=
Subject key identifier:   93:45:37:0C:CF:DA:1F:18:8C:01:BF:D4:FC:0B:1A:2D:C7:86:6B:F6
Authority key identifier: 92:5D:A9:8B:4E:08:5D:68:0D:16:D7:BA:18:3F:0E:A5:42:6A:1A:03
Certificate issuer:       /CN=A9112320/serialNumber=925DA98B4E085D680D16D7BA183F0EA5426A1A03
Certificate serial:       05FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft
Manifest number:          05EB
Signing time:             Wed 20 May 2026 23:02:58 +0000
Manifest this update:     Wed 20 May 2026 23:02:58 +0000
Manifest next update:     Wed 27 May 2026 23:02:58 +0000
Files and hashes:         1: kl2pi04IXWgNFte6GD8OpUJqGgM.crl (hash: F5l0RktEbHV9xMu84TPOm8niDpQTi+3rpfNAaRQiPP0=)
                          2: A87AE518D2E011EDA1EF340FC4F9AE02.roa (hash: v67a0OsiTe06J9eTFSqaQT8oZYZbT0ddwuIUu5oh/Gs=)
                          3: C7B754BEF85311ED8D59CA87C4F9AE02.roa (hash: 41+ujfJ1RW9rys2ZY4ePjd/lCrRu8nYhlaOK5xxYhSY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.crl
                          rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 23:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1535 (0x5ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112320, serialNumber=925DA98B4E085D680D16D7BA183F0EA5426A1A03
        Validity
            Not Before: May 20 23:02:58 2026 GMT
            Not After : May 27 23:02:58 2026 GMT
        Subject: CN=6a0e3da2-2e82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:75:90:39:7f:7a:c7:37:90:7b:90:07:93:ab:
                    c9:6b:df:76:d8:97:97:f6:cb:c4:99:03:e1:58:ab:
                    b1:86:98:e3:fa:06:35:fc:35:46:12:a8:80:85:fe:
                    a1:ea:b1:29:bb:f2:dd:32:c6:a0:b0:fd:1b:ff:10:
                    56:9e:73:be:17:c1:6e:d9:59:99:da:b5:35:3f:15:
                    2a:87:1f:99:14:99:1b:c4:eb:bf:fa:ae:53:83:58:
                    98:5b:b6:cc:cb:9b:52:2a:3f:3a:32:4c:61:72:1c:
                    12:97:6a:20:90:a5:9d:36:1e:71:77:aa:dc:ed:1c:
                    5f:33:5a:3c:ba:86:13:e1:21:a8:51:8f:2d:83:9f:
                    86:79:17:eb:ac:58:12:d5:24:21:27:52:21:a5:ab:
                    9d:57:b1:e9:a6:29:23:74:e7:b7:8e:73:86:9d:3b:
                    db:82:79:60:ad:6f:86:60:e8:7f:4f:8f:41:c9:68:
                    bb:d8:40:2d:b9:5c:d3:3d:a9:9b:fb:59:ca:94:0f:
                    f6:e7:01:0d:9c:8b:2b:47:08:1a:21:8e:63:63:c9:
                    5f:32:f4:ed:c9:f0:bc:d9:48:b4:31:94:3c:d5:ee:
                    d1:8a:3c:fe:59:6f:21:3f:f1:98:22:a4:25:a4:a1:
                    82:14:10:11:72:a9:15:f1:94:01:41:0b:57:f8:31:
                    2f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:45:37:0C:CF:DA:1F:18:8C:01:BF:D4:FC:0B:1A:2D:C7:86:6B:F6
            X509v3 Authority Key Identifier:
                keyid:92:5D:A9:8B:4E:08:5D:68:0D:16:D7:BA:18:3F:0E:A5:42:6A:1A:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:63:c5:c6:22:26:80:bb:23:27:3d:b5:95:46:32:41:40:7d:
         a2:8a:c2:7d:e8:b6:12:32:c1:e1:3a:71:e8:12:b5:f9:f9:d6:
         9e:c3:89:ff:75:0a:3d:d1:89:e7:ed:ec:29:f7:57:5c:cc:c7:
         d2:d7:fd:30:75:02:5c:a1:ee:06:ae:d1:c2:b4:61:7c:4c:34:
         e2:e9:e7:85:b1:be:0d:3d:bc:b2:7f:da:6b:e5:81:f9:5d:73:
         a0:c0:e3:6b:8c:34:d3:9e:d9:b2:c7:0e:c5:09:6d:22:b7:86:
         4b:91:1d:95:1f:b3:cc:40:be:55:0b:22:f5:92:03:b2:17:5a:
         0d:99:ae:86:6e:30:2d:33:12:d8:39:4e:68:f2:5e:b0:5f:0c:
         24:2c:fd:9a:c5:23:1e:76:4a:ce:21:25:2b:6a:2e:4e:43:41:
         f2:5c:bf:89:8a:e3:d5:77:d6:a6:39:45:de:0e:9f:28:a5:d0:
         03:93:e2:9a:f9:46:16:ba:5c:aa:0e:79:4e:4b:aa:aa:00:16:
         14:aa:b3:cf:6f:b9:d2:84:4d:a0:ef:ec:77:50:f8:90:3a:e8:
         53:4c:21:b1:5c:02:06:5e:57:5e:b2:46:05:d0:9e:dd:a3:e7:
         e9:60:84:69:eb:96:a1:9a:0b:e5:47:a8:30:ac:fb:97:c3:26:
         4c:e0:7d:cc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTIzMjAxMTAvBgNVBAUTKDkyNURBOThCNEUwODVENjgwRDE2RDdCQTE4M0YwRUE1
NDI2QTFBMDMwHhcNMjYwNTIwMjMwMjU4WhcNMjYwNTI3MjMwMjU4WjAYMRYwFAYD
VQQDEw02YTBlM2RhMi0yZTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqnWQOX96xzeQe5AHk6vJa9922JeX9svEmQPhWKuxhpjj+gY1/DVGEqiAhf6h
6rEpu/LdMsagsP0b/xBWnnO+F8Fu2VmZ2rU1PxUqhx+ZFJkbxOu/+q5Tg1iYW7bM
y5tSKj86MkxhchwSl2ogkKWdNh5xd6rc7RxfM1o8uoYT4SGoUY8tg5+GeRfrrFgS
1SQhJ1IhpaudV7HppikjdOe3jnOGnTvbgnlgrW+GYOh/T49ByWi72EAtuVzTPamb
+1nKlA/25wENnIsrRwgaIY5jY8lfMvTtyfC82Ui0MZQ81e7Rijz+WW8hP/GYIqQl
pKGCFBARcqkV8ZQBQQtX+DEvywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJNFNwzP
2h8YjAG/1PwLGi3Hhmv2MB8GA1UdIwQYMBaAFJJdqYtOCF1oDRbXuhg/DqVCahoD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjMyMC82RDcwNUJDRUZF
NzAxMUVCOUNGQjkwMjlDNEY5QUUwMi9rbDJwaTA0SVhXZ05GdGU2R0Q4T3BVSnFH
Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tsMnBpMDRJWFdnTkZ0ZTZHRDhPcFVKcUdnTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MjMyMC82RDcwNUJDRUZFNzAxMUVCOUNGQjkwMjlDNEY5QUUwMi9rbDJwaTA0SVhX
Z05GdGU2R0Q4T3BVSnFHZ00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIGPFxiImgLsjJz21lUYyQUB9oorCfei2EjLB4Tpx6BK1+fnWnsOJ/3UKPdGJ
5+3sKfdXXMzH0tf9MHUCXKHuBq7RwrRhfEw04unnhbG+DT28sn/aa+WB+V1zoMDj
a4w0057ZsscOxQltIreGS5EdlR+zzEC+VQsi9ZIDshdaDZmuhm4wLTMS2DlOaPJe
sF8MJCz9msUjHnZKziElK2ouTkNB8ly/iYrj1XfWpjlF3g6fKKXQA5PimvlGFrpc
qg55TkuqqgAWFKqzz2+50oRNoO/sd1D4kDroU0whsVwCBl5XXrJGBdCe3aPn6WCE
aeuWoZoL5UeoMKz7l8MmTOB9zA==
-----END CERTIFICATE-----
Generated at Thu May 21 10:14:30 2026 by rpki-client