Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/0Quveqjbc0uVLQNgh3g8ZDeEPI8.mft
File:                     0Quveqjbc0uVLQNgh3g8ZDeEPI8.mft (raw, json)
Hash identifier:          MZ8T+YwsztQxzL6snG63cD1euVp0uB4UMmd1LSRPe14=
Subject key identifier:   AC:07:D0:77:2A:F9:2C:45:93:5C:37:6C:47:93:25:0A:65:01:65:E5
Authority key identifier: D1:0B:AF:7A:A8:DB:73:4B:95:2D:03:60:87:78:3C:64:37:84:3C:8F
Certificate issuer:       /CN=A91139AB/serialNumber=D10BAF7AA8DB734B952D036087783C6437843C8F
Certificate serial:       01F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Quveqjbc0uVLQNgh3g8ZDeEPI8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/0Quveqjbc0uVLQNgh3g8ZDeEPI8.mft
Manifest number:          0A67
Signing time:             Wed 20 May 2026 21:12:12 +0000
Manifest this update:     Wed 20 May 2026 21:12:11 +0000
Manifest next update:     Wed 27 May 2026 21:12:11 +0000
Files and hashes:         1: 0Quveqjbc0uVLQNgh3g8ZDeEPI8.crl (hash: 29MQCNu4JJ2rmGzjjqi+kIgod12hlDpqXx7VhWpeWkM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/0Quveqjbc0uVLQNgh3g8ZDeEPI8.crl
                          rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/0Quveqjbc0uVLQNgh3g8ZDeEPI8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Quveqjbc0uVLQNgh3g8ZDeEPI8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 21:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 500 (0x1f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91139AB, serialNumber=D10BAF7AA8DB734B952D036087783C6437843C8F
        Validity
            Not Before: May 20 21:12:11 2026 GMT
            Not After : May 27 21:12:11 2026 GMT
        Subject: CN=6a0e23ac-5c36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:65:52:23:8d:32:43:30:cd:92:b4:9d:8d:1b:
                    b1:40:05:50:54:e0:bf:9b:42:7c:31:1c:0c:d1:cf:
                    5d:a6:8d:75:c4:e0:c9:55:0c:e9:4c:e3:2e:68:fc:
                    e9:28:07:20:99:ab:57:e0:8d:7c:ce:40:4a:e6:4a:
                    a6:c4:10:b7:ba:cf:e4:52:ca:47:41:35:fa:73:7e:
                    e0:8f:56:ea:c6:46:57:6c:c9:6e:9a:27:22:77:ee:
                    96:83:c2:aa:3f:bb:da:38:ac:94:92:31:62:9d:b7:
                    48:74:16:fa:f5:19:bf:54:cc:7b:f6:51:4d:22:1e:
                    44:cc:61:dc:c6:b2:9b:12:af:90:09:e1:5a:8f:15:
                    3e:1a:07:1e:4d:25:76:dd:03:ea:92:7c:66:ae:04:
                    8a:a9:38:d0:63:be:36:aa:05:62:66:9b:1c:60:63:
                    ab:be:82:76:dc:a0:41:2e:51:e5:ed:c8:22:51:fc:
                    18:69:f8:a6:94:27:11:58:22:78:3a:42:e6:11:7a:
                    b6:a9:92:af:8e:f5:ea:89:26:3a:4c:4d:f8:b6:58:
                    40:37:39:e2:bf:41:71:8e:4b:d9:29:13:eb:ed:8b:
                    36:02:39:27:0c:60:bf:70:03:a0:58:06:33:db:22:
                    a8:9f:d8:f4:ac:a6:be:40:be:ff:b3:78:85:f9:24:
                    a4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:07:D0:77:2A:F9:2C:45:93:5C:37:6C:47:93:25:0A:65:01:65:E5
            X509v3 Authority Key Identifier:
                keyid:D1:0B:AF:7A:A8:DB:73:4B:95:2D:03:60:87:78:3C:64:37:84:3C:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/0Quveqjbc0uVLQNgh3g8ZDeEPI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Quveqjbc0uVLQNgh3g8ZDeEPI8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/0Quveqjbc0uVLQNgh3g8ZDeEPI8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:b6:61:4f:65:f4:b3:c1:8d:c2:0b:fa:37:1a:8a:5e:3f:49:
         5b:01:5e:ef:60:75:d3:ec:79:b8:4e:cc:c2:9a:e7:a9:c2:a5:
         b9:61:1d:21:e0:05:e0:5e:ce:c5:21:cd:9d:28:5c:f0:66:9d:
         ba:5f:85:dc:c1:ec:3c:3b:87:9c:14:f0:7e:d2:35:46:65:8d:
         b8:03:a1:e7:bd:c3:ed:78:a3:eb:d6:b9:cb:d0:13:39:db:b7:
         d2:e0:b7:59:d1:af:c6:b7:87:96:9e:c3:9a:c8:b8:0a:8e:81:
         f4:57:8a:10:82:34:66:9f:03:4f:c3:f3:7d:34:74:ab:3b:e0:
         b5:4c:fe:26:4f:86:00:aa:ee:39:ce:4e:8b:cc:8c:93:d3:eb:
         74:40:ae:b3:17:4c:68:43:08:75:35:fd:09:a0:1e:4d:cc:90:
         a6:4c:b2:80:37:c3:a8:9c:19:2c:3f:ab:ba:57:55:20:5c:1f:
         70:11:e6:6e:12:a5:90:aa:7d:b7:8a:93:9c:66:04:0f:69:d6:
         13:8f:36:22:34:de:df:bd:db:13:e9:f0:b0:8e:5e:22:6d:20:
         31:86:59:89:7f:b6:fc:77:d7:c5:77:25:3e:94:bd:c5:e4:68:
         71:c8:d8:58:bf:d5:be:50:cb:6a:e7:5d:5c:6e:22:42:28:5e:
         7d:f9:e4:c2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTM5QUIxMTAvBgNVBAUTKEQxMEJBRjdBQThEQjczNEI5NTJEMDM2MDg3NzgzQzY0
Mzc4NDNDOEYwHhcNMjYwNTIwMjExMjExWhcNMjYwNTI3MjExMjExWjAYMRYwFAYD
VQQDEw02YTBlMjNhYy01YzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAomVSI40yQzDNkrSdjRuxQAVQVOC/m0J8MRwM0c9dpo11xODJVQzpTOMuaPzp
KAcgmatX4I18zkBK5kqmxBC3us/kUspHQTX6c37gj1bqxkZXbMlumicid+6Wg8Kq
P7vaOKyUkjFinbdIdBb69Rm/VMx79lFNIh5EzGHcxrKbEq+QCeFajxU+GgceTSV2
3QPqknxmrgSKqTjQY742qgViZpscYGOrvoJ23KBBLlHl7cgiUfwYafimlCcRWCJ4
OkLmEXq2qZKvjvXqiSY6TE34tlhANzniv0FxjkvZKRPr7Ys2AjknDGC/cAOgWAYz
2yKon9j0rKa+QL7/s3iF+SSkvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKwH0Hcq
+SxFk1w3bEeTJQplAWXlMB8GA1UdIwQYMBaAFNELr3qo23NLlS0DYId4PGQ3hDyP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzlBQi8xNThENDkwNjI1
NUIxMUVCQTlGNTYwMUFDNEY5QUUwMi8wUXV2ZXFqYmMwdVZMUU5naDNnOFpEZUVQ
STguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBRdXZlcWpiYzB1VkxRTmdoM2c4WkRlRVBJOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MzlBQi8xNThENDkwNjI1NUIxMUVCQTlGNTYwMUFDNEY5QUUwMi8wUXV2ZXFqYmMw
dVZMUU5naDNnOFpEZUVQSTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOLZhT2X0s8GNwgv6NxqKXj9JWwFe72B10+x5uE7MwprnqcKluWEdIeAF4F7O
xSHNnShc8Gadul+F3MHsPDuHnBTwftI1RmWNuAOh573D7Xij69a5y9ATOdu30uC3
WdGvxreHlp7Dmsi4Co6B9FeKEII0Zp8DT8PzfTR0qzvgtUz+Jk+GAKruOc5Oi8yM
k9PrdECusxdMaEMIdTX9CaAeTcyQpkyygDfDqJwZLD+ruldVIFwfcBHmbhKlkKp9
t4qTnGYED2nWE482IjTe373bE+nwsI5eIm0gMYZZiX+2/HfXxXclPpS9xeRoccjY
WL/VvlDLauddXG4iQiheffnkwg==
-----END CERTIFICATE-----
Generated at Thu May 21 09:38:31 2026 by rpki-client