Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912946F/25D598DEAB2711F08CF79E13C4F9AE02/R-8IU6LX3qJJt8P694FpyPjbx-k.mft
File:                     R-8IU6LX3qJJt8P694FpyPjbx-k.mft (raw, json)
Hash identifier:          6f9ncDrCLuJdKTVe0StZ2ZgH0t0LW1AdIg5TYe+r0sw=
Subject key identifier:   C0:EB:1C:9E:1E:15:21:A4:57:8B:63:F6:40:BD:D4:68:C2:32:C5:D1
Authority key identifier: 47:EF:08:53:A2:D7:DE:A2:49:B7:C3:FA:F7:81:69:C8:F8:DB:C7:E9
Certificate issuer:       /CN=A912946F/serialNumber=47EF0853A2D7DEA249B7C3FAF78169C8F8DBC7E9
Certificate serial:       72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-8IU6LX3qJJt8P694FpyPjbx-k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912946F/25D598DEAB2711F08CF79E13C4F9AE02/R-8IU6LX3qJJt8P694FpyPjbx-k.mft
Manifest number:          70
Signing time:             Thu 21 May 2026 07:54:24 +0000
Manifest this update:     Thu 21 May 2026 07:54:23 +0000
Manifest next update:     Thu 28 May 2026 07:54:23 +0000
Files and hashes:         1: R-8IU6LX3qJJt8P694FpyPjbx-k.crl (hash: 4kMliMktgZM6CHRRQflOsogPglRNZquoeYf8Y1Mm+HY=)
                          2: 6F324D3CAB2811F08D96D563C4F9AE02.roa (hash: kD5lmzkNkNAiRMyL5raIyZmwcauj/GPpt1ud3VtpSR0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912946F/25D598DEAB2711F08CF79E13C4F9AE02/R-8IU6LX3qJJt8P694FpyPjbx-k.crl
                          rsync://rpki.apnic.net/member_repository/A912946F/25D598DEAB2711F08CF79E13C4F9AE02/R-8IU6LX3qJJt8P694FpyPjbx-k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-8IU6LX3qJJt8P694FpyPjbx-k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 07:54:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114 (0x72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912946F, serialNumber=47EF0853A2D7DEA249B7C3FAF78169C8F8DBC7E9
        Validity
            Not Before: May 21 07:54:23 2026 GMT
            Not After : May 28 07:54:23 2026 GMT
        Subject: CN=6a0eba30-43ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:95:b5:33:90:d7:84:fb:5d:71:7e:25:71:06:
                    c3:c2:17:c6:ca:a3:c2:19:7a:62:b3:78:51:ea:3a:
                    bc:93:2c:1e:a9:4c:9e:5b:88:f1:5d:40:5b:dd:60:
                    70:ee:19:53:83:92:56:8c:79:03:6d:48:56:02:12:
                    31:7b:57:ef:de:43:3d:05:62:15:db:af:b6:37:d1:
                    65:40:69:b7:79:83:4d:93:82:e6:d5:b4:f5:d3:f0:
                    26:1e:6a:99:81:c1:73:41:a6:5f:3a:66:e1:55:91:
                    d0:49:0c:cf:31:a1:33:e7:28:40:f9:0e:25:bb:c2:
                    b8:15:65:b8:67:b2:2c:ee:43:77:f2:13:47:1a:25:
                    e6:ed:eb:07:95:12:10:8b:8d:a9:26:46:7c:ad:4e:
                    a0:63:ca:bf:85:6f:f0:c4:f1:9b:cc:86:ee:b6:91:
                    36:73:ca:7b:cc:71:6d:02:e6:b1:7f:b9:b4:25:d0:
                    14:92:f7:53:7f:78:3d:b5:88:4d:fe:57:05:73:d1:
                    51:0e:63:c7:eb:53:19:7f:6c:7d:f4:1b:01:0a:f9:
                    ec:20:d4:e8:d9:26:e1:d6:48:ad:52:c4:0b:20:fd:
                    3e:12:b6:00:b3:92:fa:75:00:a0:80:87:af:8d:6f:
                    bb:3b:0e:57:36:c9:46:8f:7b:f9:98:f2:b5:71:3e:
                    47:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:EB:1C:9E:1E:15:21:A4:57:8B:63:F6:40:BD:D4:68:C2:32:C5:D1
            X509v3 Authority Key Identifier:
                keyid:47:EF:08:53:A2:D7:DE:A2:49:B7:C3:FA:F7:81:69:C8:F8:DB:C7:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912946F/25D598DEAB2711F08CF79E13C4F9AE02/R-8IU6LX3qJJt8P694FpyPjbx-k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-8IU6LX3qJJt8P694FpyPjbx-k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912946F/25D598DEAB2711F08CF79E13C4F9AE02/R-8IU6LX3qJJt8P694FpyPjbx-k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:7f:f0:67:26:3a:2c:60:97:d1:a5:4a:54:a7:a2:45:14:d0:
         0e:05:2f:d1:5f:88:14:79:56:d2:7e:fc:87:11:e0:3b:e7:07:
         3b:49:0e:9e:28:e9:80:d4:7b:d2:19:0f:bd:8f:b6:a6:de:b4:
         d4:79:8f:3c:02:3d:84:3d:df:2b:8d:4d:73:d7:27:ce:b2:04:
         ca:b7:73:86:3f:14:8f:b8:10:9a:bb:45:e8:c8:6f:a8:57:77:
         06:b2:80:60:69:a6:11:4f:7c:be:37:42:88:89:d1:49:d2:e4:
         91:62:5c:ac:a9:82:c1:63:0a:c5:e8:07:9d:96:5e:74:f7:58:
         0f:97:50:f1:bd:0d:c7:6d:c0:c6:8f:03:08:3a:59:ec:b8:58:
         ed:cc:c8:5f:91:6c:36:f2:5f:cf:ea:38:3c:8e:04:bd:15:58:
         ca:8d:47:7f:fc:a0:c2:cd:b2:7b:1c:60:2a:fc:60:5e:79:32:
         ca:18:20:97:07:f4:69:0d:09:43:37:02:a0:65:52:69:46:25:
         8d:28:07:2c:9e:e7:62:45:b0:c0:b5:2d:ee:e9:90:cf:19:61:
         26:9b:af:42:35:0e:b5:5c:91:9a:f4:71:04:c6:b3:b0:10:28:
         1b:c1:65:2b:da:ef:a0:0b:ff:26:76:66:bc:c0:fa:fc:be:4f:
         f5:4b:70:dc
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
OTQ2RjExMC8GA1UEBRMoNDdFRjA4NTNBMkQ3REVBMjQ5QjdDM0ZBRjc4MTY5QzhG
OERCQzdFOTAeFw0yNjA1MjEwNzU0MjNaFw0yNjA1MjgwNzU0MjNaMBgxFjAUBgNV
BAMTDTZhMGViYTMwLTQzZWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCllbUzkNeE+11xfiVxBsPCF8bKo8IZemKzeFHqOryTLB6pTJ5biPFdQFvdYHDu
GVODklaMeQNtSFYCEjF7V+/eQz0FYhXbr7Y30WVAabd5g02TgubVtPXT8CYeapmB
wXNBpl86ZuFVkdBJDM8xoTPnKED5DiW7wrgVZbhnsizuQ3fyE0caJebt6weVEhCL
jakmRnytTqBjyr+Fb/DE8ZvMhu62kTZzynvMcW0C5rF/ubQl0BSS91N/eD21iE3+
VwVz0VEOY8frUxl/bH30GwEK+ewg1OjZJuHWSK1SxAsg/T4StgCzkvp1AKCAh6+N
b7s7Dlc2yUaPe/mY8rVxPkelAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUwOscnh4V
IaRXi2P2QL3UaMIyxdEwHwYDVR0jBBgwFoAUR+8IU6LX3qJJt8P694FpyPjbx+kw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5NDZGLzI1RDU5OERFQUIy
NzExRjA4Q0Y3OUUxM0M0RjlBRTAyL1ItOElVNkxYM3FKSnQ4UDY5NEZweVBqYngt
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUi04SVU2TFgzcUpKdDhQNjk0RnB5UGpieC1rLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5
NDZGLzI1RDU5OERFQUIyNzExRjA4Q0Y3OUUxM0M0RjlBRTAyL1ItOElVNkxYM3FK
SnQ4UDY5NEZweVBqYngtay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQB6f/BnJjosYJfRpUpUp6JFFNAOBS/RX4gUeVbSfvyHEeA75wc7SQ6eKOmA1HvS
GQ+9j7am3rTUeY88Aj2EPd8rjU1z1yfOsgTKt3OGPxSPuBCau0XoyG+oV3cGsoBg
aaYRT3y+N0KIidFJ0uSRYlysqYLBYwrF6Aedll5091gPl1DxvQ3HbcDGjwMIOlns
uFjtzMhfkWw28l/P6jg8jgS9FVjKjUd//KDCzbJ7HGAq/GBeeTLKGCCXB/RpDQlD
NwKgZVJpRiWNKAcsnudiRbDAtS3u6ZDPGWEmm69CNQ61XJGa9HEExrOwECgbwWUr
2u+gC/8mdma8wPr8vk/1S3Dc
-----END CERTIFICATE-----
Generated at Thu May 21 10:54:03 2026 by rpki-client