Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/6zLfknQ0rG06hoR937o9LoEAETE.mft
File:                     6zLfknQ0rG06hoR937o9LoEAETE.mft (raw, json)
Hash identifier:          2mpfmX+n6DVBl/94t3aS+r1g2fPWTxDmuT7f9MShFe4=
Subject key identifier:   E0:8F:B2:68:3F:47:14:73:25:DD:2F:95:57:1C:D3:FB:E4:1C:E7:5F
Authority key identifier: EB:32:DF:92:74:34:AC:6D:3A:86:84:7D:DF:BA:3D:2E:81:00:11:31
Certificate issuer:       /CN=A911945B/serialNumber=EB32DF927434AC6D3A86847DDFBA3D2E81001131
Certificate serial:       0182
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zLfknQ0rG06hoR937o9LoEAETE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/6zLfknQ0rG06hoR937o9LoEAETE.mft
Manifest number:          017C
Signing time:             Thu 21 May 2026 04:42:12 +0000
Manifest this update:     Thu 21 May 2026 04:42:11 +0000
Manifest next update:     Thu 28 May 2026 04:42:11 +0000
Files and hashes:         1: 6zLfknQ0rG06hoR937o9LoEAETE.crl (hash: Jqc1SGWkNTDhuZlhgOJduP7FcXkhvNDVSbMc5w1E7kY=)
                          2: C562775017FD11EF9A320864C4F9AE02.roa (hash: t/VPDZPwjX46Y0N/pV8me1AYQj95BNCK+h88qNvXGWU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/6zLfknQ0rG06hoR937o9LoEAETE.crl
                          rsync://rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/6zLfknQ0rG06hoR937o9LoEAETE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zLfknQ0rG06hoR937o9LoEAETE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 04:42:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 386 (0x182)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911945B, serialNumber=EB32DF927434AC6D3A86847DDFBA3D2E81001131
        Validity
            Not Before: May 21 04:42:11 2026 GMT
            Not After : May 28 04:42:11 2026 GMT
        Subject: CN=6a0e8d23-286c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b0:7e:9c:e2:8a:6c:32:ca:7b:ff:ec:ad:a7:
                    f9:ff:11:50:62:75:22:5d:88:04:43:9d:ba:bd:1c:
                    e6:bb:32:72:e2:29:2c:84:48:1a:27:f2:ab:ea:c4:
                    85:df:36:37:b5:17:af:e7:1c:01:41:80:e6:d3:a7:
                    68:0f:ce:7b:d6:8b:d9:31:c6:e5:8d:dd:f2:b8:09:
                    09:6c:2f:eb:e7:61:82:a8:9d:c3:f6:23:60:1f:4c:
                    97:c0:99:07:26:eb:67:bb:4e:fc:92:52:53:26:5a:
                    4d:81:f8:ef:cf:1a:ef:f5:47:a1:d1:21:5b:75:65:
                    70:7f:64:92:65:62:a0:e7:1d:b3:53:b8:53:76:50:
                    50:08:1f:2d:01:36:e4:94:57:00:ad:9c:62:6b:af:
                    e9:28:fd:f9:03:d2:4a:51:f2:27:b7:ed:32:fc:f8:
                    c2:0f:0c:d2:3e:a1:9a:83:dc:a0:d3:5f:1c:3e:05:
                    87:1c:c0:c0:55:c9:66:91:16:1c:73:a0:43:36:b3:
                    b9:c5:16:d0:13:f6:2e:9b:32:3a:3f:51:db:8c:ae:
                    c3:f6:e1:45:c9:a1:21:50:d9:7b:e8:cd:88:f2:87:
                    0c:e3:f2:bb:6d:4b:49:75:b7:c5:69:8a:7d:d7:11:
                    b2:64:18:e6:c5:c5:ca:87:99:3a:c0:4b:b0:03:48:
                    dc:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:8F:B2:68:3F:47:14:73:25:DD:2F:95:57:1C:D3:FB:E4:1C:E7:5F
            X509v3 Authority Key Identifier:
                keyid:EB:32:DF:92:74:34:AC:6D:3A:86:84:7D:DF:BA:3D:2E:81:00:11:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/6zLfknQ0rG06hoR937o9LoEAETE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zLfknQ0rG06hoR937o9LoEAETE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/6zLfknQ0rG06hoR937o9LoEAETE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:de:d0:f0:a3:bb:fe:18:ad:0f:0e:38:e9:47:de:ba:4d:c7:
         96:6d:33:a9:0a:a5:e2:2d:ce:53:0d:46:b5:5e:ee:15:8c:9d:
         dc:24:fa:54:a7:29:1a:5b:ad:9c:b8:c1:57:82:64:5a:3c:af:
         df:8c:87:8a:d8:95:15:72:b9:12:63:26:06:bc:c2:2a:d7:26:
         9d:b6:e9:14:51:7a:d7:4a:fe:a0:55:45:8c:40:26:21:60:7b:
         f9:af:e5:1a:0e:e8:69:5c:ff:91:7d:de:58:31:70:07:96:49:
         fc:97:59:b9:34:0b:90:51:03:76:a2:8b:4c:19:1a:e9:81:30:
         d2:94:f0:ce:1e:f5:46:77:aa:c9:6e:bc:3c:bc:ee:ac:00:79:
         67:12:6c:55:0c:69:79:65:c4:90:4a:d0:d0:ce:0d:c1:32:ab:
         a0:8f:ef:3b:ad:6d:04:21:e6:e4:97:6a:04:e5:95:f5:36:f2:
         dd:c5:e6:f7:fc:a0:3d:71:bc:55:9e:83:2e:0e:c8:30:b3:f1:
         f0:df:21:e4:8a:86:2c:24:27:ce:99:4a:a2:99:6d:df:c5:3d:
         f0:94:ef:74:4a:6f:7d:83:ef:89:7d:79:e8:b1:68:72:df:be:
         04:0a:d5:80:fb:74:1d:6a:58:72:4e:ee:1a:31:e2:c8:7f:36:
         c8:2d:7e:c5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTk0NUIxMTAvBgNVBAUTKEVCMzJERjkyNzQzNEFDNkQzQTg2ODQ3RERGQkEzRDJF
ODEwMDExMzEwHhcNMjYwNTIxMDQ0MjExWhcNMjYwNTI4MDQ0MjExWjAYMRYwFAYD
VQQDEw02YTBlOGQyMy0yODZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAorB+nOKKbDLKe//sraf5/xFQYnUiXYgEQ526vRzmuzJy4ikshEgaJ/Kr6sSF
3zY3tRev5xwBQYDm06doD8571ovZMcbljd3yuAkJbC/r52GCqJ3D9iNgH0yXwJkH
Jutnu078klJTJlpNgfjvzxrv9Ueh0SFbdWVwf2SSZWKg5x2zU7hTdlBQCB8tATbk
lFcArZxia6/pKP35A9JKUfInt+0y/PjCDwzSPqGag9yg018cPgWHHMDAVclmkRYc
c6BDNrO5xRbQE/YumzI6P1HbjK7D9uFFyaEhUNl76M2I8ocM4/K7bUtJdbfFaYp9
1xGyZBjmxcXKh5k6wEuwA0jc5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOCPsmg/
RxRzJd0vlVcc0/vkHOdfMB8GA1UdIwQYMBaAFOsy35J0NKxtOoaEfd+6PS6BABEx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTQ1Qi8zQUNGNzBDMDE3
RkQxMUVGOEMwODMwNjNDNEY5QUUwMi82ekxma25RMHJHMDZob1I5MzdvOUxvRUFF
VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZ6TGZrblEwckcwNmhvUjkzN285TG9FQUVURS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OTQ1Qi8zQUNGNzBDMDE3RkQxMUVGOEMwODMwNjNDNEY5QUUwMi82ekxma25RMHJH
MDZob1I5MzdvOUxvRUFFVEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArt7Q8KO7/hitDw446Ufeuk3Hlm0zqQql4i3OUw1GtV7uFYyd3CT6VKcpGlut
nLjBV4JkWjyv34yHitiVFXK5EmMmBrzCKtcmnbbpFFF610r+oFVFjEAmIWB7+a/l
Gg7oaVz/kX3eWDFwB5ZJ/JdZuTQLkFEDdqKLTBka6YEw0pTwzh71RneqyW68PLzu
rAB5ZxJsVQxpeWXEkErQ0M4NwTKroI/vO61tBCHm5JdqBOWV9Tby3cXm9/ygPXG8
VZ6DLg7IMLPx8N8h5IqGLCQnzplKoplt38U98JTvdEpvfYPviX156LFoct++BArV
gPt0HWpYck7uGjHiyH82yC1+xQ==
-----END CERTIFICATE-----
Generated at Thu May 21 12:36:01 2026 by rpki-client