Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.mft
File:                     W_AAFHNK0bVlsQhtEv_KtZDMuLs.mft (raw, json)
Hash identifier:          VtlmANG3oGJNCtAvjR84hD4wg+gl8JNW7s/76c8z4o4=
Subject key identifier:   9B:33:BC:38:F6:D0:EA:5E:E9:A2:43:19:7E:B2:92:3C:9B:DC:4A:59
Authority key identifier: 5B:F0:00:14:73:4A:D1:B5:65:B1:08:6D:12:FF:CA:B5:90:CC:B8:BB
Certificate issuer:       /CN=A9131C4B/serialNumber=5BF00014734AD1B565B1086D12FFCAB590CCB8BB
Certificate serial:       81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_AAFHNK0bVlsQhtEv_KtZDMuLs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.mft
Manifest number:          7F
Signing time:             Thu 21 May 2026 07:44:25 +0000
Manifest this update:     Thu 21 May 2026 07:44:24 +0000
Manifest next update:     Thu 28 May 2026 07:44:24 +0000
Files and hashes:         1: W_AAFHNK0bVlsQhtEv_KtZDMuLs.crl (hash: lgOOMp6di/w4snF0WTcUR1qKvRP5KjrRUhQRoy6tZxk=)
                          2: D65EFE0A91F711F087341C45C4F9AE02.roa (hash: bwshEspn5Rm/jzWxQl5mOhNxhC2TqkN15wojbaQFT3A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.crl
                          rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_AAFHNK0bVlsQhtEv_KtZDMuLs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 07:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129 (0x81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131C4B, serialNumber=5BF00014734AD1B565B1086D12FFCAB590CCB8BB
        Validity
            Not Before: May 21 07:44:24 2026 GMT
            Not After : May 28 07:44:24 2026 GMT
        Subject: CN=6a0eb7d8-b5d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:df:f5:91:40:4c:2d:10:f1:7a:94:da:0a:c9:
                    5b:30:20:84:bc:70:31:5a:41:aa:96:7d:22:f4:e0:
                    b4:34:e5:50:37:6d:54:21:07:87:a7:11:e5:d1:ee:
                    df:8d:02:65:12:9f:5e:6b:86:54:e9:38:c2:9f:38:
                    80:58:a9:85:b7:69:02:8c:37:5d:67:66:92:6a:e9:
                    6a:db:43:e6:2f:ed:95:eb:2f:b7:e4:0b:c4:8f:6c:
                    7b:9c:ff:34:b6:2b:65:6b:ef:78:85:3c:df:3b:9e:
                    a4:62:7e:e0:24:44:18:9e:0f:51:bc:41:13:37:fd:
                    74:37:38:f2:af:65:83:d9:cf:a7:eb:35:b2:6d:ec:
                    84:86:ac:e4:59:e9:9e:f6:a8:a9:3c:36:d0:90:81:
                    7d:c9:7f:a9:38:44:e6:9a:53:c6:87:4a:f5:ea:64:
                    8c:af:f5:c9:e8:28:e7:1f:f4:d7:09:d8:fb:60:a9:
                    6b:8e:5b:6f:7b:25:c1:81:ce:96:78:f4:40:de:90:
                    47:1d:82:d9:3a:90:55:33:46:53:71:c7:d9:4c:89:
                    86:49:5b:f2:bc:aa:3f:2b:b0:fd:f4:4e:72:2f:a9:
                    ed:46:8c:28:bf:83:11:6d:8c:55:08:e3:aa:8a:77:
                    cd:a7:6c:a4:0e:32:94:32:36:6e:53:42:1b:f3:ad:
                    44:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:33:BC:38:F6:D0:EA:5E:E9:A2:43:19:7E:B2:92:3C:9B:DC:4A:59
            X509v3 Authority Key Identifier:
                keyid:5B:F0:00:14:73:4A:D1:B5:65:B1:08:6D:12:FF:CA:B5:90:CC:B8:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_AAFHNK0bVlsQhtEv_KtZDMuLs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:e0:b6:89:12:4d:b8:16:fc:4a:80:8f:c0:dc:9c:45:bc:52:
         46:47:f0:40:ab:ce:00:af:12:36:8b:a1:0c:6a:99:bd:9b:a6:
         e6:6f:14:62:20:c1:bc:24:c4:89:c3:da:db:fa:66:ba:82:c0:
         18:ca:83:9d:42:c7:fb:07:c1:dd:cf:f4:ea:f5:10:5d:bf:e3:
         52:a0:35:1a:9b:b8:e8:e8:a1:66:28:1f:a0:8f:91:6a:83:96:
         4a:7d:f7:8d:5c:fa:8f:de:b6:87:35:51:fc:c7:da:a1:d4:f6:
         de:79:7a:0d:e2:cc:fa:fb:3f:40:6e:9d:9d:ae:1d:df:d9:09:
         a2:2f:7b:95:c6:ec:79:d3:5e:8a:53:93:14:6a:e1:6c:7c:76:
         d2:e2:d0:96:01:ae:1b:28:28:30:77:16:f7:ca:be:92:3e:1a:
         79:ab:6a:5c:06:4f:3b:65:f4:8f:0b:fd:d8:8f:cd:24:ae:3c:
         4a:97:fd:d3:7e:48:d0:6d:84:05:42:d4:68:ed:f0:cf:94:8b:
         87:e5:e7:75:7a:2f:49:1c:4d:ad:c2:23:8e:7c:fe:fd:73:a3:
         2f:89:97:3c:d7:c2:3d:7c:9c:ed:46:c8:36:c9:a0:91:c8:30:
         01:2c:87:a2:aa:bf:13:6d:c2:d5:c9:80:ed:7d:9e:fd:86:d8:
         3d:b7:a5:d1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzFDNEIxMTAvBgNVBAUTKDVCRjAwMDE0NzM0QUQxQjU2NUIxMDg2RDEyRkZDQUI1
OTBDQ0I4QkIwHhcNMjYwNTIxMDc0NDI0WhcNMjYwNTI4MDc0NDI0WjAYMRYwFAYD
VQQDEw02YTBlYjdkOC1iNWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAst/1kUBMLRDxepTaCslbMCCEvHAxWkGqln0i9OC0NOVQN21UIQeHpxHl0e7f
jQJlEp9ea4ZU6TjCnziAWKmFt2kCjDddZ2aSaulq20PmL+2V6y+35AvEj2x7nP80
titla+94hTzfO56kYn7gJEQYng9RvEETN/10Nzjyr2WD2c+n6zWybeyEhqzkWeme
9qipPDbQkIF9yX+pOETmmlPGh0r16mSMr/XJ6CjnH/TXCdj7YKlrjltveyXBgc6W
ePRA3pBHHYLZOpBVM0ZTccfZTImGSVvyvKo/K7D99E5yL6ntRowov4MRbYxVCOOq
infNp2ykDjKUMjZuU0Ib861EQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJszvDj2
0Ope6aJDGX6ykjyb3EpZMB8GA1UdIwQYMBaAFFvwABRzStG1ZbEIbRL/yrWQzLi7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUM0Qi8xNDAwNjYyQTkx
RjUxMUYwODgzNEVCMUFDNEY5QUUwMi9XX0FBRkhOSzBiVmxzUWh0RXZfS3RaRE11
THMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dfQUFGSE5LMGJWbHNRaHRFdl9LdFpETXVMcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MUM0Qi8xNDAwNjYyQTkxRjUxMUYwODgzNEVCMUFDNEY5QUUwMi9XX0FBRkhOSzBi
VmxzUWh0RXZfS3RaRE11THMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAxeC2iRJNuBb8SoCPwNycRbxSRkfwQKvOAK8SNouhDGqZvZum5m8UYiDBvCTE
icPa2/pmuoLAGMqDnULH+wfB3c/06vUQXb/jUqA1Gpu46OihZigfoI+RaoOWSn33
jVz6j962hzVR/MfaodT23nl6DeLM+vs/QG6dna4d39kJoi97lcbsedNeilOTFGrh
bHx20uLQlgGuGygoMHcW98q+kj4aeatqXAZPO2X0jwv92I/NJK48Spf9035I0G2E
BULUaO3wz5SLh+XndXovSRxNrcIjjnz+/XOjL4mXPNfCPXyc7UbINsmgkcgwASyH
oqq/E23C1cmA7X2e/YbYPbel0Q==
-----END CERTIFICATE-----
Generated at Thu May 21 09:36:29 2026 by rpki-client