Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911D951/3A00D54CEF6C11F089DD613F596F56BC/59Uo3uUQIKD-7ctcJqW5LFD4H6w.mft
File:                     59Uo3uUQIKD-7ctcJqW5LFD4H6w.mft (raw, json)
Hash identifier:          13VtJXJqRIETyjvv+THT0xjqO94RVtv/A4EPHA0Ik5I=
Subject key identifier:   E3:D9:93:95:CB:3C:65:36:0A:22:9C:89:FD:49:A7:C1:E5:A8:63:97
Authority key identifier: E7:D5:28:DE:E5:10:20:A0:FE:ED:CB:5C:26:A5:B9:2C:50:F8:1F:AC
Certificate issuer:       /CN=A911D951/serialNumber=E7D528DEE51020A0FEEDCB5C26A5B92C50F81FAC
Certificate serial:       4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/59Uo3uUQIKD-7ctcJqW5LFD4H6w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D951/3A00D54CEF6C11F089DD613F596F56BC/59Uo3uUQIKD-7ctcJqW5LFD4H6w.mft
Manifest number:          47
Signing time:             Tue 19 May 2026 08:16:34 +0000
Manifest this update:     Tue 19 May 2026 08:16:34 +0000
Manifest next update:     Tue 26 May 2026 08:16:34 +0000
Files and hashes:         1: 59Uo3uUQIKD-7ctcJqW5LFD4H6w.crl (hash: x4PkdwSyS/G/3HylPvgCUtu+mZHW1DZiFxE4C/jH4kQ=)
                          2: 8FFC4170EF6C11F0B51A35C1596F56BC.roa (hash: ripzMW6h7Gz3iYRNTEaVSGtOjcI1v54jEJjVqeKsNek=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911D951/3A00D54CEF6C11F089DD613F596F56BC/59Uo3uUQIKD-7ctcJqW5LFD4H6w.crl
                          rsync://rpki.apnic.net/member_repository/A911D951/3A00D54CEF6C11F089DD613F596F56BC/59Uo3uUQIKD-7ctcJqW5LFD4H6w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/59Uo3uUQIKD-7ctcJqW5LFD4H6w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 May 2026 08:16:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D951, serialNumber=E7D528DEE51020A0FEEDCB5C26A5B92C50F81FAC
        Validity
            Not Before: May 19 08:16:34 2026 GMT
            Not After : May 26 08:16:34 2026 GMT
        Subject: CN=6a0c1c62-913a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:07:e9:c2:21:49:08:06:21:b9:be:d1:c8:76:
                    78:cd:7d:84:ee:2f:31:00:a4:40:7c:96:f7:65:81:
                    02:59:cf:d5:a3:bf:c9:bb:17:35:9d:36:cd:3f:40:
                    3b:1e:34:6c:92:68:2d:fe:46:e8:d0:16:b5:3e:72:
                    6f:74:43:2d:6d:88:77:40:06:a7:37:fb:0b:f9:f5:
                    55:62:b2:6d:cf:77:46:ef:71:a8:fa:17:f6:8c:ee:
                    7e:a6:57:d7:95:c0:92:73:45:3e:39:f7:64:27:e6:
                    70:cc:62:14:57:51:5b:94:f1:c6:f3:69:07:95:8e:
                    3f:74:a7:c2:96:0c:d6:f8:0e:90:99:4d:dc:99:7c:
                    2f:4b:a0:8a:9d:51:ca:2e:9d:f2:be:7d:8f:64:05:
                    a5:3a:00:c3:3e:58:66:d7:e3:17:93:7f:e7:75:06:
                    d5:4b:7b:c0:e7:8b:4a:e0:d2:b5:58:f8:8b:dc:af:
                    86:8c:53:bc:90:25:63:d8:b7:50:a7:26:02:a9:3d:
                    cc:bb:d6:0d:d5:54:e7:22:b8:55:7f:ee:b6:99:4c:
                    d6:a6:7a:7e:52:42:a6:ef:b0:1b:48:9f:88:4f:5d:
                    1e:c7:e6:a7:33:73:a3:96:cc:45:44:8a:ce:34:e8:
                    63:09:ea:37:b8:93:a2:28:fa:80:b4:2d:65:b5:86:
                    42:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D9:93:95:CB:3C:65:36:0A:22:9C:89:FD:49:A7:C1:E5:A8:63:97
            X509v3 Authority Key Identifier:
                keyid:E7:D5:28:DE:E5:10:20:A0:FE:ED:CB:5C:26:A5:B9:2C:50:F8:1F:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D951/3A00D54CEF6C11F089DD613F596F56BC/59Uo3uUQIKD-7ctcJqW5LFD4H6w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/59Uo3uUQIKD-7ctcJqW5LFD4H6w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D951/3A00D54CEF6C11F089DD613F596F56BC/59Uo3uUQIKD-7ctcJqW5LFD4H6w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:e3:60:9a:94:54:12:cf:06:6f:97:af:5c:57:ac:d7:29:f1:
         f0:6b:c7:d6:67:33:fb:91:b5:ec:d3:a4:01:c8:48:6b:ab:c4:
         8a:67:14:5e:b4:90:8d:ff:80:ae:6b:db:e6:02:dd:c6:dc:c0:
         62:c2:23:a5:66:a2:d2:6c:56:f5:78:d0:ae:0e:92:7c:03:61:
         04:69:1c:24:2c:0a:13:22:f9:c6:cc:b0:58:11:31:7f:79:13:
         2c:17:a2:67:f6:87:d5:6f:47:2a:aa:f3:59:3a:46:16:05:a4:
         f2:92:1c:48:d0:8f:6c:26:6d:53:d9:9c:fb:80:31:b4:1c:8b:
         90:c9:5c:25:e9:3d:21:fa:88:68:ef:c1:e0:09:8b:ac:75:97:
         46:d5:0b:08:fa:cd:74:35:56:77:fd:36:aa:98:97:fe:e6:93:
         55:6f:ac:2f:28:f2:9f:ba:1f:6a:51:63:5c:29:6e:23:e4:90:
         24:9f:db:26:e2:c9:5c:a0:52:af:b7:b1:85:0d:24:3b:bc:6d:
         12:15:bf:bf:4d:e6:83:85:07:6e:ef:e2:84:b0:02:a8:20:86:
         bb:8d:dc:ea:63:99:d8:ad:ee:a0:5c:99:07:42:60:32:fe:49:
         26:b2:2b:57:f0:a5:e5:a7:7b:76:ab:2f:b0:88:2f:13:4f:88:
         06:61:ac:5a
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
RDk1MTExMC8GA1UEBRMoRTdENTI4REVFNTEwMjBBMEZFRURDQjVDMjZBNUI5MkM1
MEY4MUZBQzAeFw0yNjA1MTkwODE2MzRaFw0yNjA1MjYwODE2MzRaMBgxFjAUBgNV
BAMTDTZhMGMxYzYyLTkxM2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDAB+nCIUkIBiG5vtHIdnjNfYTuLzEApEB8lvdlgQJZz9Wjv8m7FzWdNs0/QDse
NGySaC3+RujQFrU+cm90Qy1tiHdABqc3+wv59VVism3Pd0bvcaj6F/aM7n6mV9eV
wJJzRT4592Qn5nDMYhRXUVuU8cbzaQeVjj90p8KWDNb4DpCZTdyZfC9LoIqdUcou
nfK+fY9kBaU6AMM+WGbX4xeTf+d1BtVLe8Dni0rg0rVY+Ivcr4aMU7yQJWPYt1Cn
JgKpPcy71g3VVOciuFV/7raZTNamen5SQqbvsBtIn4hPXR7H5qczc6OWzEVEis40
6GMJ6je4k6Io+oC0LWW1hkKnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU49mTlcs8
ZTYKIpyJ/UmnweWoY5cwHwYDVR0jBBgwFoAU59Uo3uUQIKD+7ctcJqW5LFD4H6ww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFEOTUxLzNBMDBENTRDRUY2
QzExRjA4OURENjEzRjU5NkY1NkJDLzU5VW8zdVVRSUtELTdjdGNKcVc1TEZENEg2
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvNTlVbzN1VVFJS0QtN2N0Y0pxVzVMRkQ0SDZ3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFE
OTUxLzNBMDBENTRDRUY2QzExRjA4OURENjEzRjU5NkY1NkJDLzU5VW8zdVVRSUtE
LTdjdGNKcVc1TEZENEg2dy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBL42CalFQSzwZvl69cV6zXKfHwa8fWZzP7kbXs06QByEhrq8SKZxRetJCN/4Cu
a9vmAt3G3MBiwiOlZqLSbFb1eNCuDpJ8A2EEaRwkLAoTIvnGzLBYETF/eRMsF6Jn
9ofVb0cqqvNZOkYWBaTykhxI0I9sJm1T2Zz7gDG0HIuQyVwl6T0h+oho78HgCYus
dZdG1QsI+s10NVZ3/TaqmJf+5pNVb6wvKPKfuh9qUWNcKW4j5JAkn9sm4slcoFKv
t7GFDSQ7vG0SFb+/TeaDhQdu7+KEsAKoIIa7jdzqY5nYre6gXJkHQmAy/kkmsitX
8KXlp3t2qy+wiC8TT4gGYaxa
-----END CERTIFICATE-----
Generated at Thu May 21 10:19:17 2026 by rpki-client