Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.mft
File:                     s-lBocVdFIOrV5HZSYdQ492t7cw.mft (raw, json)
Hash identifier:          FHD39UKIH+XeNLdHe68m1GyOdDGRfil4YKDy9wx4Tik=
Subject key identifier:   5F:BE:5E:5C:F4:F0:6F:24:9B:E8:60:83:66:A9:A1:85:7D:F6:32:8F
Authority key identifier: B3:E9:41:A1:C5:5D:14:83:AB:57:91:D9:49:87:50:E3:DD:AD:ED:CC
Certificate issuer:       /CN=A913B018/serialNumber=B3E941A1C55D1483AB5791D9498750E3DDADEDCC
Certificate serial:       01B9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s-lBocVdFIOrV5HZSYdQ492t7cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.mft
Manifest number:          01B4
Signing time:             Mon 01 Jun 2026 04:45:00 +0000
Manifest this update:     Mon 01 Jun 2026 04:45:00 +0000
Manifest next update:     Mon 08 Jun 2026 04:45:00 +0000
Files and hashes:         1: s-lBocVdFIOrV5HZSYdQ492t7cw.crl (hash: Xb+uw1tbswAlM5N5epvVu6YJJFsolYvKF4QYqLnyz5E=)
                          2: 8B097276C5F911EE8D0FDF82C4F9AE02.roa (hash: 6FaC3RWt9d1k1q8QIDmkVggro95lutrtiUauXZX6w7k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.crl
                          rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s-lBocVdFIOrV5HZSYdQ492t7cw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 04:44:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 441 (0x1b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B018, serialNumber=B3E941A1C55D1483AB5791D9498750E3DDADEDCC
        Validity
            Not Before: Jun  1 04:45:00 2026 GMT
            Not After : Jun  8 04:45:00 2026 GMT
        Subject: CN=6a1d0e4c-416f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ec:41:cc:95:30:f3:fc:de:73:d8:3b:b9:85:
                    58:18:39:d7:8f:a2:b2:10:83:55:80:6f:0e:ad:ee:
                    5a:ec:91:ff:fc:d9:d7:dd:e0:dc:cb:ad:34:f5:fb:
                    84:9e:10:03:5f:38:39:4a:3e:7e:cf:4c:a6:45:a1:
                    21:b5:a5:cd:e9:53:22:2d:78:48:22:b5:4d:46:25:
                    b7:5f:4d:f1:25:6f:66:98:68:21:b5:ab:1c:ea:a7:
                    11:6a:df:b6:38:3c:eb:9a:7f:04:d2:35:ac:08:be:
                    14:ff:13:d1:a5:7a:e0:0e:d8:4a:9d:fd:c4:e8:af:
                    11:77:a6:06:57:26:58:71:bf:74:e4:8c:20:47:a2:
                    4b:94:18:68:74:6c:1e:67:87:d5:12:d4:80:79:c5:
                    53:16:08:e4:0e:a5:d8:b6:33:e8:dc:2c:a9:4f:0e:
                    58:59:1c:c8:fe:8d:1e:a9:cf:3d:67:b4:f7:5f:c4:
                    f7:d7:f8:cb:b3:ee:df:35:e7:f7:92:d0:53:7d:38:
                    c7:e5:09:92:ff:b4:48:e0:57:5b:05:27:1b:e7:aa:
                    7c:35:95:b6:5d:29:b6:0f:da:14:38:d7:ab:a6:f8:
                    b7:5c:40:21:59:d2:17:f1:c1:0b:a1:ab:db:41:b3:
                    b2:e2:9f:a2:16:50:ee:3a:68:43:ab:d4:af:48:cd:
                    b7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:BE:5E:5C:F4:F0:6F:24:9B:E8:60:83:66:A9:A1:85:7D:F6:32:8F
            X509v3 Authority Key Identifier:
                keyid:B3:E9:41:A1:C5:5D:14:83:AB:57:91:D9:49:87:50:E3:DD:AD:ED:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s-lBocVdFIOrV5HZSYdQ492t7cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:1b:bb:a0:5b:d5:53:92:99:a2:04:b7:c9:da:c9:30:81:38:
         ba:a7:68:37:93:85:0a:66:3d:68:6b:ee:f8:0d:48:1c:d6:e6:
         d9:bf:42:17:b3:df:fa:94:fa:ef:be:42:0f:7b:07:a1:5b:84:
         1c:5d:f0:7c:8c:3a:37:bf:af:14:b9:1a:76:a7:04:fe:0b:51:
         4d:cb:5a:fd:e1:6c:f5:10:8e:b4:80:25:a6:b0:05:72:b8:d0:
         ff:36:87:1d:d4:02:1f:2f:6d:4a:b1:92:17:15:79:27:31:a0:
         6b:ed:94:03:b4:e5:aa:c3:9d:43:ab:44:df:bd:e4:f5:b1:63:
         a4:f8:3a:4f:36:8a:ad:d2:b3:52:aa:e8:87:a5:26:3f:d1:1c:
         8d:14:b7:20:09:44:08:25:32:f4:f4:e3:28:04:42:07:0d:2c:
         c6:3e:8b:64:c1:f2:92:a5:52:2d:8b:a0:35:6d:2a:53:63:b7:
         6c:d8:56:ad:24:f6:f6:05:07:bb:ad:8c:b8:51:ae:2e:fb:8b:
         86:3a:db:dd:83:e8:fa:75:c5:d8:74:fe:f1:2f:df:f6:10:3d:
         8f:2a:67:0f:da:cc:7a:2f:d4:bd:c8:25:cc:2d:b7:5d:5d:dc:
         0b:f0:d3:36:07:ac:fe:3b:34:e8:7c:29:7a:6f:25:0c:ed:1e:
         30:8b:fc:8a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0IwMTgxMTAvBgNVBAUTKEIzRTk0MUExQzU1RDE0ODNBQjU3OTFEOTQ5ODc1MEUz
RERBREVEQ0MwHhcNMjYwNjAxMDQ0NTAwWhcNMjYwNjA4MDQ0NTAwWjAYMRYwFAYD
VQQDEw02YTFkMGU0Yy00MTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmOxBzJUw8/zec9g7uYVYGDnXj6KyEINVgG8Ore5a7JH//NnX3eDcy6009fuE
nhADXzg5Sj5+z0ymRaEhtaXN6VMiLXhIIrVNRiW3X03xJW9mmGghtasc6qcRat+2
ODzrmn8E0jWsCL4U/xPRpXrgDthKnf3E6K8Rd6YGVyZYcb905IwgR6JLlBhodGwe
Z4fVEtSAecVTFgjkDqXYtjPo3CypTw5YWRzI/o0eqc89Z7T3X8T31/jLs+7fNef3
ktBTfTjH5QmS/7RI4FdbBScb56p8NZW2XSm2D9oUONerpvi3XEAhWdIX8cELoavb
QbOy4p+iFlDuOmhDq9SvSM23GwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF++Xlz0
8G8km+hgg2apoYV99jKPMB8GA1UdIwQYMBaAFLPpQaHFXRSDq1eR2UmHUOPdre3M
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjAxOC8zMDc5RDgxMkM1
RjYxMUVFQkUwQjc5NjBDNEY5QUUwMi9zLWxCb2NWZEZJT3JWNUhaU1lkUTQ5MnQ3
Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3MtbEJvY1ZkRklPclY1SFpTWWRRNDkydDdjdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QjAxOC8zMDc5RDgxMkM1RjYxMUVFQkUwQjc5NjBDNEY5QUUwMi9zLWxCb2NWZEZJ
T3JWNUhaU1lkUTQ5MnQ3Y3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXhu7oFvVU5KZogS3ydrJMIE4uqdoN5OFCmY9aGvu+A1IHNbm2b9CF7Pf+pT6
775CD3sHoVuEHF3wfIw6N7+vFLkadqcE/gtRTcta/eFs9RCOtIAlprAFcrjQ/zaH
HdQCHy9tSrGSFxV5JzGga+2UA7TlqsOdQ6tE373k9bFjpPg6TzaKrdKzUqroh6Um
P9EcjRS3IAlECCUy9PTjKARCBw0sxj6LZMHykqVSLYugNW0qU2O3bNhWrST29gUH
u62MuFGuLvuLhjrb3YPo+nXF2HT+8S/f9hA9jypnD9rMei/UvcglzC23XV3cC/DT
Nges/js06Hwpem8lDO0eMIv8ig==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:43 2026 by rpki-client