Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DB66/806597ACE09A11EFB63A8130C4F9AE02/8p8VNXR1uHRvrXiTag_NhSbi1hM.mft
File:                     8p8VNXR1uHRvrXiTag_NhSbi1hM.mft (raw, json)
Hash identifier:          +wRzuT7nfLOYBUSYuil47pWztvBi81zE+GvQRTJDoLc=
Subject key identifier:   99:D4:DE:2E:E3:C5:B2:4B:F2:30:64:A1:1C:16:F4:37:42:D2:DD:BF
Authority key identifier: F2:9F:15:35:74:75:B8:74:6F:AD:78:93:6A:0F:CD:85:26:E2:D6:13
Certificate issuer:       /CN=A911DB66/serialNumber=F29F15357475B8746FAD78936A0FCD8526E2D613
Certificate serial:       F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8p8VNXR1uHRvrXiTag_NhSbi1hM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DB66/806597ACE09A11EFB63A8130C4F9AE02/8p8VNXR1uHRvrXiTag_NhSbi1hM.mft
Manifest number:          F3
Signing time:             Fri 15 May 2026 06:26:15 +0000
Manifest this update:     Fri 15 May 2026 06:26:15 +0000
Manifest next update:     Fri 22 May 2026 06:26:15 +0000
Files and hashes:         1: 8p8VNXR1uHRvrXiTag_NhSbi1hM.crl (hash: AWS5FcVF0tQsTVD3k2EL6qs6t8/i53FbquVNSFoyDPU=)
                          2: 879CFF8EE09E11EFAB364253C4F9AE02.roa (hash: 8I8Onw+//nlz52wlV7t5k0Pa05LgYX2FpILxARmTn8o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DB66/806597ACE09A11EFB63A8130C4F9AE02/8p8VNXR1uHRvrXiTag_NhSbi1hM.crl
                          rsync://rpki.apnic.net/member_repository/A911DB66/806597ACE09A11EFB63A8130C4F9AE02/8p8VNXR1uHRvrXiTag_NhSbi1hM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8p8VNXR1uHRvrXiTag_NhSbi1hM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 May 2026 06:26:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 247 (0xf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DB66, serialNumber=F29F15357475B8746FAD78936A0FCD8526E2D613
        Validity
            Not Before: May 15 06:26:15 2026 GMT
            Not After : May 22 06:26:15 2026 GMT
        Subject: CN=6a06bc87-1963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:10:7b:e5:56:33:95:0b:a3:28:37:39:bf:b3:
                    10:85:ed:1c:01:e9:d8:dd:a1:b3:cc:1b:d8:af:59:
                    bd:f9:c3:68:a1:4e:1b:c9:5f:f4:38:e4:fd:1b:ef:
                    7c:58:77:6a:95:bf:7b:98:e1:30:be:b3:de:01:1e:
                    a2:41:6c:02:c4:be:6e:fe:f4:0a:23:66:f9:c4:3b:
                    3b:d7:fa:33:66:da:50:6a:6c:60:5a:b7:bf:b2:7f:
                    a7:d9:4c:ac:07:27:43:26:20:3f:9d:3b:41:3a:18:
                    63:5b:1e:8c:8b:6f:2a:cc:38:61:56:12:b6:b7:c0:
                    8b:07:8d:48:17:a3:d7:df:74:54:0f:7b:cb:3b:3e:
                    f0:91:98:f5:98:48:94:57:e9:4a:af:76:2c:22:1f:
                    77:5e:6f:d8:8b:1d:67:3c:1c:d3:5b:0c:4b:83:c5:
                    1e:09:ae:a9:ef:54:39:27:83:0b:2f:4e:c9:1c:3d:
                    3b:b3:9a:d5:1b:3d:b8:cf:4e:62:77:8a:e3:7b:df:
                    cc:02:b9:00:da:43:98:1c:f6:97:b9:fa:21:87:43:
                    53:1c:34:c7:5a:5e:d8:2d:99:17:f2:1f:4a:4d:9c:
                    4f:ff:d7:c4:31:82:94:90:f1:a5:e5:66:91:0e:9d:
                    85:df:0e:64:c9:7a:31:c2:6d:a6:c1:61:ce:f3:09:
                    84:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D4:DE:2E:E3:C5:B2:4B:F2:30:64:A1:1C:16:F4:37:42:D2:DD:BF
            X509v3 Authority Key Identifier:
                keyid:F2:9F:15:35:74:75:B8:74:6F:AD:78:93:6A:0F:CD:85:26:E2:D6:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DB66/806597ACE09A11EFB63A8130C4F9AE02/8p8VNXR1uHRvrXiTag_NhSbi1hM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8p8VNXR1uHRvrXiTag_NhSbi1hM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DB66/806597ACE09A11EFB63A8130C4F9AE02/8p8VNXR1uHRvrXiTag_NhSbi1hM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:b8:e1:46:9e:db:cf:92:95:f7:04:d4:9a:f5:1b:9a:ff:0a:
         9b:25:e9:11:d4:6f:b1:78:39:b1:9f:dc:fb:cc:b4:a3:d4:cc:
         08:94:8c:95:e4:45:e9:c6:20:37:4d:de:7f:98:aa:75:a1:3d:
         e6:ee:e9:5d:08:48:b8:eb:f9:63:a3:db:0a:e2:5a:ce:c1:b6:
         60:bf:85:91:af:4d:c9:da:81:78:7f:19:51:e8:89:5b:63:9c:
         e5:81:f7:84:4f:98:23:9b:0b:40:77:a8:df:d5:32:ce:9b:ef:
         17:ec:21:5a:18:b1:49:c2:b8:05:ec:93:5d:92:e1:a9:c9:69:
         55:4d:9f:af:27:a9:5e:10:da:02:9a:f3:b1:bd:d7:36:ec:34:
         27:17:db:9a:5b:07:9a:d7:69:75:8a:8c:ed:09:42:f7:b9:46:
         97:e4:a1:fa:bd:5a:be:8b:c8:34:60:dc:6f:9d:b6:39:cb:15:
         a2:e2:4a:17:92:0c:bc:97:66:45:48:46:d6:ce:55:e3:08:21:
         b8:cf:ab:e6:02:7b:c7:46:c3:aa:4c:89:af:9a:54:a7:10:c9:
         53:5d:79:23:07:df:5b:76:8e:0a:8b:f5:18:1a:1b:3d:32:69:
         e7:da:45:0c:0c:57:67:75:b0:6b:04:ae:b1:b2:27:0c:94:33:
         6d:af:92:24
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MURCNjYxMTAvBgNVBAUTKEYyOUYxNTM1NzQ3NUI4NzQ2RkFENzg5MzZBMEZDRDg1
MjZFMkQ2MTMwHhcNMjYwNTE1MDYyNjE1WhcNMjYwNTIyMDYyNjE1WjAYMRYwFAYD
VQQDEw02YTA2YmM4Ny0xOTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmBB75VYzlQujKDc5v7MQhe0cAenY3aGzzBvYr1m9+cNooU4byV/0OOT9G+98
WHdqlb97mOEwvrPeAR6iQWwCxL5u/vQKI2b5xDs71/ozZtpQamxgWre/sn+n2Uys
BydDJiA/nTtBOhhjWx6Mi28qzDhhVhK2t8CLB41IF6PX33RUD3vLOz7wkZj1mEiU
V+lKr3YsIh93Xm/Yix1nPBzTWwxLg8UeCa6p71Q5J4MLL07JHD07s5rVGz24z05i
d4rje9/MArkA2kOYHPaXufohh0NTHDTHWl7YLZkX8h9KTZxP/9fEMYKUkPGl5WaR
Dp2F3w5kyXoxwm2mwWHO8wmE0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJnU3i7j
xbJL8jBkoRwW9DdC0t2/MB8GA1UdIwQYMBaAFPKfFTV0dbh0b614k2oPzYUm4tYT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREI2Ni84MDY1OTdBQ0Uw
OUExMUVGQjYzQTgxMzBDNEY5QUUwMi84cDhWTlhSMXVIUnZyWGlUYWdfTmhTYmkx
aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhwOFZOWFIxdUhSdnJYaVRhZ19OaFNiaTFoTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
REI2Ni84MDY1OTdBQ0UwOUExMUVGQjYzQTgxMzBDNEY5QUUwMi84cDhWTlhSMXVI
UnZyWGlUYWdfTmhTYmkxaE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsrjhRp7bz5KV9wTUmvUbmv8KmyXpEdRvsXg5sZ/c+8y0o9TMCJSMleRF6cYg
N03ef5iqdaE95u7pXQhIuOv5Y6PbCuJazsG2YL+Fka9NydqBeH8ZUeiJW2Oc5YH3
hE+YI5sLQHeo39UyzpvvF+whWhixScK4BeyTXZLhqclpVU2fryepXhDaAprzsb3X
Nuw0JxfbmlsHmtdpdYqM7QlC97lGl+Sh+r1avovINGDcb522OcsVouJKF5IMvJdm
RUhG1s5V4wghuM+r5gJ7x0bDqkyJr5pUpxDJU115IwffW3aOCov1GBobPTJp59pF
DAxXZ3WwawSusbInDJQzba+SJA==
-----END CERTIFICATE-----
Generated at Fri May 15 23:44:33 2026 by rpki-client