Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft
File:                     3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft (raw, json)
Hash identifier:          RZqdRjKhD+cd2WFwsHscHzK4oi4uswuLpM3WGhicLm4=
Subject key identifier:   DD:B6:85:CC:C6:7F:9B:3E:01:12:74:3F:16:19:84:89:DA:08:32:F9
Authority key identifier: DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9
Certificate issuer:       /CN=A9127EEB/serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9
Certificate serial:       0131
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft
Manifest number:          0119
Signing time:             Thu 21 May 2026 06:18:07 +0000
Manifest this update:     Thu 21 May 2026 06:18:06 +0000
Manifest next update:     Thu 28 May 2026 06:18:06 +0000
Files and hashes:         1: 3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl (hash: umR0MGcuACA6hzYFnj4Oky+4GmO7+4036jJeS0oQkbM=)
                          2: 7B4FD608BEEB11F0AEDDAC25C4F9AE02.roa (hash: 2okYUQLpXLjFASnkLnBoJ7EV0CsOknY2IZxTrGpUiiU=)
                          3: 6DDF503008E611F1A622C6722C3D8C67.roa (hash: rDAKA9Yax4eCoXJX6ldW5NMo2xVyobP0qNrUYPYQF3s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl
                          rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 06:18:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 305 (0x131)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127EEB, serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9
        Validity
            Not Before: May 21 06:18:06 2026 GMT
            Not After : May 28 06:18:06 2026 GMT
        Subject: CN=6a0ea39f-8d05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:80:ac:31:3d:01:96:be:51:d6:b2:61:ba:6a:
                    5a:13:6f:2f:fa:c8:9b:13:b4:e7:91:12:c1:69:e4:
                    a8:78:be:7b:a4:25:4d:af:cf:bb:28:ac:ea:2b:73:
                    5a:8e:ea:80:3a:8d:8e:59:cb:d1:37:e2:7a:42:ae:
                    b9:69:dd:ba:9e:da:d9:d5:d7:bb:4b:54:1e:50:fd:
                    90:7a:fd:20:cd:b3:70:c5:86:fa:22:74:6b:d9:db:
                    c0:53:71:16:49:5f:84:e9:43:ee:26:38:8a:17:45:
                    1a:64:8a:f0:97:6a:6a:a4:e5:b4:3c:37:0e:69:59:
                    86:21:5b:65:96:9f:9b:5b:a1:e0:ff:6b:f3:fb:57:
                    ed:44:62:7d:99:71:00:3f:1d:8e:b8:36:6f:e1:49:
                    06:ee:b3:41:f0:d8:98:4b:a9:22:79:48:4a:67:4d:
                    37:1b:e7:5e:c7:17:5e:6b:1f:63:ce:ae:c9:41:49:
                    ce:e1:da:d2:31:48:23:12:e9:08:bc:24:69:ee:08:
                    61:b6:80:df:2d:28:3c:87:db:b7:c5:0e:79:20:72:
                    da:2b:3f:e5:5e:09:79:46:40:24:3b:3d:f8:43:42:
                    fe:02:04:84:62:57:ec:f4:d9:a4:2b:9f:3e:f3:8c:
                    75:9f:a8:51:8f:f1:cb:aa:28:ff:ec:cd:34:05:a2:
                    45:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:B6:85:CC:C6:7F:9B:3E:01:12:74:3F:16:19:84:89:DA:08:32:F9
            X509v3 Authority Key Identifier:
                keyid:DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:17:1c:43:db:26:bd:72:3e:8c:32:b4:1e:80:2d:44:00:11:
         b1:37:62:61:ad:98:e3:1e:51:c3:d4:20:54:47:b3:bd:e4:b8:
         b9:d1:90:69:ba:72:e3:30:0a:36:45:02:4a:d9:c8:a6:35:59:
         c2:25:fc:cd:a5:4b:e4:8c:07:02:85:d2:90:2a:1d:a4:6a:bb:
         de:f3:19:74:67:5b:29:7d:38:74:3d:cc:8d:e2:19:56:5e:eb:
         13:85:1b:3d:db:74:7a:56:7e:92:ed:7c:6e:3a:d3:37:f3:94:
         33:94:c2:8e:2b:b7:fb:86:32:65:dd:45:56:bb:7f:13:19:4d:
         d7:28:57:bf:d1:3b:35:70:14:65:2c:2d:cb:33:0d:0e:57:f9:
         43:6d:80:e0:c7:1d:52:53:bc:25:8d:8e:5d:6f:c5:9c:05:68:
         f2:0b:b4:c1:bc:71:ed:61:e4:f5:40:21:f7:8d:54:fa:3c:61:
         99:1c:eb:d1:62:91:65:04:01:82:df:ca:b8:4f:f1:e6:07:36:
         43:68:a6:4d:ea:4e:c7:30:21:06:92:1e:5d:61:50:ea:75:ea:
         5c:77:7a:9a:48:9e:9d:e2:de:cc:03:88:62:14:b3:a2:a0:6d:
         5e:33:04:53:fc:80:e6:58:0b:20:94:85:1e:96:cc:2a:a4:07:
         4e:af:30:ad
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjdFRUIxMTAvBgNVBAUTKERFRjMzMTdDQkQxNEQ3REJBQTI3QkZGRTNGRTVBN0I4
QTZFRENGQjkwHhcNMjYwNTIxMDYxODA2WhcNMjYwNTI4MDYxODA2WjAYMRYwFAYD
VQQDEw02YTBlYTM5Zi04ZDA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsICsMT0Blr5R1rJhumpaE28v+sibE7TnkRLBaeSoeL57pCVNr8+7KKzqK3Na
juqAOo2OWcvRN+J6Qq65ad26ntrZ1de7S1QeUP2Qev0gzbNwxYb6InRr2dvAU3EW
SV+E6UPuJjiKF0UaZIrwl2pqpOW0PDcOaVmGIVtllp+bW6Hg/2vz+1ftRGJ9mXEA
Px2OuDZv4UkG7rNB8NiYS6kieUhKZ003G+dexxdeax9jzq7JQUnO4drSMUgjEukI
vCRp7ghhtoDfLSg8h9u3xQ55IHLaKz/lXgl5RkAkOz34Q0L+AgSEYlfs9NmkK58+
84x1n6hRj/HLqij/7M00BaJFqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN22hczG
f5s+ARJ0PxYZhInaCDL5MB8GA1UdIwQYMBaAFN7zMXy9FNfbqie//j/lp7im7c+5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0VFQi9GNTdDOTRCMEQz
QkExMUVGOTQ3QjA1ODBDNEY5QUUwMi8zdk14ZkwwVTE5dXFKN18tUC1XbnVLYnR6
N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzN2TXhmTDBVMTl1cUo3Xy1QLVdudUtidHo3ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
N0VFQi9GNTdDOTRCMEQzQkExMUVGOTQ3QjA1ODBDNEY5QUUwMi8zdk14ZkwwVTE5
dXFKN18tUC1XbnVLYnR6N2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANxccQ9smvXI+jDK0HoAtRAARsTdiYa2Y4x5Rw9QgVEezveS4udGQabpy4zAK
NkUCStnIpjVZwiX8zaVL5IwHAoXSkCodpGq73vMZdGdbKX04dD3MjeIZVl7rE4Ub
Pdt0elZ+ku18bjrTN/OUM5TCjiu3+4YyZd1FVrt/ExlN1yhXv9E7NXAUZSwtyzMN
Dlf5Q22A4McdUlO8JY2OXW/FnAVo8gu0wbxx7WHk9UAh941U+jxhmRzr0WKRZQQB
gt/KuE/x5gc2Q2imTepOxzAhBpIeXWFQ6nXqXHd6mkieneLezAOIYhSzoqBtXjME
U/yA5lgLIJSFHpbMKqQHTq8wrQ==
-----END CERTIFICATE-----
Generated at Thu May 21 09:39:14 2026 by rpki-client