Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.mft
File:                     u-IzVg79QJs4zbgKAFdaN7qJZDU.mft (raw, json)
Hash identifier:          acpJOA8mIN5EZkLl7AupKsv4ly6iLvZ9kjgVMC/oar0=
Subject key identifier:   74:F7:63:DA:E9:D2:E9:97:95:A7:25:4F:B0:A6:0D:71:83:AC:8B:6F
Authority key identifier: BB:E2:33:56:0E:FD:40:9B:38:CD:B8:0A:00:57:5A:37:BA:89:64:35
Certificate issuer:       /CN=A911ABF4/serialNumber=BBE233560EFD409B38CDB80A00575A37BA896435
Certificate serial:       08D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-IzVg79QJs4zbgKAFdaN7qJZDU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.mft
Manifest number:          1A45
Signing time:             Wed 20 May 2026 17:29:36 +0000
Manifest this update:     Wed 20 May 2026 17:29:36 +0000
Manifest next update:     Wed 27 May 2026 17:29:36 +0000
Files and hashes:         1: u-IzVg79QJs4zbgKAFdaN7qJZDU.crl (hash: gFk/3xyWrrFVKGD6bSgsslQs7QlLrE5OQfbhAOLN7fM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.crl
                          rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-IzVg79QJs4zbgKAFdaN7qJZDU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 17:29:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2258 (0x8d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911ABF4, serialNumber=BBE233560EFD409B38CDB80A00575A37BA896435
        Validity
            Not Before: May 20 17:29:36 2026 GMT
            Not After : May 27 17:29:36 2026 GMT
        Subject: CN=6a0def80-7e54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:0a:ce:2a:5f:d2:4c:8d:4a:d0:9c:f4:aa:3d:
                    da:9d:62:9e:d8:94:56:1e:83:7f:58:b6:ea:59:37:
                    71:10:93:22:35:bd:04:6a:d2:3b:ad:09:42:25:a9:
                    e9:39:f2:e7:a6:16:47:ae:46:fb:82:ad:db:8e:34:
                    4e:5f:01:f1:56:3f:26:11:a4:e9:cd:91:3a:2c:2c:
                    f0:f9:87:d1:6c:b9:33:93:5f:c3:77:01:14:5f:a4:
                    25:6d:4e:e4:34:da:65:92:3f:01:4f:58:4a:b0:11:
                    4b:43:03:a9:51:9d:e3:a4:0d:98:5a:a8:5b:aa:d2:
                    7a:6c:93:43:9b:20:f4:c3:6c:89:88:06:77:64:7b:
                    de:05:c6:58:c5:5b:3f:0d:ac:da:f6:b1:13:44:ad:
                    6d:c5:f0:2c:32:70:ae:c6:66:60:93:3a:ab:81:ed:
                    3d:fd:c0:e0:23:99:d8:de:a7:f3:a8:df:18:2b:65:
                    78:9c:fa:73:d1:f3:31:a9:cb:a4:7d:c6:4b:0a:0a:
                    17:ab:36:b3:7d:b9:c6:56:a7:27:bf:6e:fd:4f:27:
                    89:51:2a:5c:54:5f:36:09:4e:5f:d3:f9:32:b5:33:
                    7a:1e:0f:5c:f6:9c:5f:6e:3d:c5:30:25:19:ae:8b:
                    5a:89:16:fb:c7:f5:a1:10:6e:77:72:79:b3:36:93:
                    36:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F7:63:DA:E9:D2:E9:97:95:A7:25:4F:B0:A6:0D:71:83:AC:8B:6F
            X509v3 Authority Key Identifier:
                keyid:BB:E2:33:56:0E:FD:40:9B:38:CD:B8:0A:00:57:5A:37:BA:89:64:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-IzVg79QJs4zbgKAFdaN7qJZDU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:74:79:63:66:b8:51:f1:20:24:23:6e:bf:4d:4f:ae:e1:c3:
         58:05:67:1e:8f:73:1e:4d:c2:90:01:85:34:67:31:a9:f1:37:
         53:44:34:90:69:7d:fb:df:ae:9e:6f:87:26:ff:69:c9:f8:51:
         e0:51:15:dc:21:8d:aa:a9:3c:64:6a:83:b4:7d:3e:c0:75:25:
         78:b4:08:43:2d:2b:b3:07:ee:3d:5d:0e:e2:83:33:2f:7c:a7:
         70:dc:85:a0:3a:4b:d7:87:85:be:6a:7d:c8:ca:3e:25:e2:2c:
         0d:88:a5:40:8b:55:f9:3d:ab:74:6e:07:45:b4:ad:53:b1:22:
         2b:eb:ab:04:b1:60:69:63:06:8a:a6:76:e9:d3:46:b1:51:aa:
         f0:e6:26:cd:ee:a2:52:db:ab:98:0c:cd:bf:04:2b:d1:03:ac:
         28:4c:c3:1b:87:d6:76:33:2b:7b:37:da:0f:25:f3:49:1e:bd:
         3e:93:35:26:06:94:5a:aa:5e:f5:e3:00:b3:e2:97:e0:2f:b4:
         fe:0f:d6:f9:da:ca:fc:05:e0:61:22:46:e5:05:6e:a0:0e:b8:
         2f:1e:8c:c6:86:2c:27:0c:ab:17:09:79:a4:6d:0c:69:95:39:
         0b:18:e1:64:51:cc:e9:3b:e6:64:34:55:17:f5:24:25:cc:4c:
         57:fb:09:ef
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUFCRjQxMTAvBgNVBAUTKEJCRTIzMzU2MEVGRDQwOUIzOENEQjgwQTAwNTc1QTM3
QkE4OTY0MzUwHhcNMjYwNTIwMTcyOTM2WhcNMjYwNTI3MTcyOTM2WjAYMRYwFAYD
VQQDEw02YTBkZWY4MC03ZTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6ArOKl/STI1K0Jz0qj3anWKe2JRWHoN/WLbqWTdxEJMiNb0EatI7rQlCJanp
OfLnphZHrkb7gq3bjjROXwHxVj8mEaTpzZE6LCzw+YfRbLkzk1/DdwEUX6QlbU7k
NNplkj8BT1hKsBFLQwOpUZ3jpA2YWqhbqtJ6bJNDmyD0w2yJiAZ3ZHveBcZYxVs/
Daza9rETRK1txfAsMnCuxmZgkzqrge09/cDgI5nY3qfzqN8YK2V4nPpz0fMxqcuk
fcZLCgoXqzazfbnGVqcnv279TyeJUSpcVF82CU5f0/kytTN6Hg9c9pxfbj3FMCUZ
rotaiRb7x/WhEG53cnmzNpM25wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHT3Y9rp
0umXlaclT7CmDXGDrItvMB8GA1UdIwQYMBaAFLviM1YO/UCbOM24CgBXWje6iWQ1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUJGNC9FQTg3MTg1Qzcy
MUIxMUU5QkI3NDgxNTBDNEY5QUUwMi91LUl6Vmc3OVFKczR6YmdLQUZkYU43cUpa
RFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3UtSXpWZzc5UUpzNHpiZ0tBRmRhTjdxSlpEVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QUJGNC9FQTg3MTg1QzcyMUIxMUU5QkI3NDgxNTBDNEY5QUUwMi91LUl6Vmc3OVFK
czR6YmdLQUZkYU43cUpaRFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXXR5Y2a4UfEgJCNuv01PruHDWAVnHo9zHk3CkAGFNGcxqfE3U0Q0kGl9+9+u
nm+HJv9pyfhR4FEV3CGNqqk8ZGqDtH0+wHUleLQIQy0rswfuPV0O4oMzL3yncNyF
oDpL14eFvmp9yMo+JeIsDYilQItV+T2rdG4HRbStU7EiK+urBLFgaWMGiqZ26dNG
sVGq8OYmze6iUturmAzNvwQr0QOsKEzDG4fWdjMrezfaDyXzSR69PpM1JgaUWqpe
9eMAs+KX4C+0/g/W+drK/AXgYSJG5QVuoA64Lx6MxoYsJwyrFwl5pG0MaZU5Cxjh
ZFHM6TvmZDRVF/UkJcxMV/sJ7w==
-----END CERTIFICATE-----
Generated at Thu May 21 11:40:48 2026 by rpki-client