Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft
File:                     rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft (raw, json)
Hash identifier:          bz48EUBlO0ScpMsjh0huXjZlnnAIUqcg9cbE0aQAfQc=
Subject key identifier:   6A:6F:1F:4B:0F:0C:53:21:9B:9E:A4:DD:65:EB:30:45:51:68:D8:C3
Authority key identifier: AE:59:C7:1F:D6:3B:D2:6B:46:30:26:E0:74:90:46:97:04:A8:FB:9B
Certificate issuer:       /CN=A914530B/serialNumber=AE59C71FD63BD26B463026E07490469704A8FB9B
Certificate serial:       0111
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rlnHH9Y70mtGMCbgdJBGlwSo-5s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft
Manifest number:          0111
Signing time:             Thu 21 May 2026 06:05:41 +0000
Manifest this update:     Thu 21 May 2026 06:05:40 +0000
Manifest next update:     Thu 28 May 2026 06:05:40 +0000
Files and hashes:         1: rlnHH9Y70mtGMCbgdJBGlwSo-5s.crl (hash: zIgbj5KyC6yv9zX7ZUkmMWBUBrgNc2qFcub4wA4eb8M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.crl
                          rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rlnHH9Y70mtGMCbgdJBGlwSo-5s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 06:05:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 273 (0x111)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914530B, serialNumber=AE59C71FD63BD26B463026E07490469704A8FB9B
        Validity
            Not Before: May 21 06:05:40 2026 GMT
            Not After : May 28 06:05:40 2026 GMT
        Subject: CN=6a0ea0b5-1396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c9:34:fc:96:06:fa:75:ee:cc:09:31:15:69:
                    2d:5f:30:85:d0:9c:3c:5c:e3:ed:48:f8:dd:12:25:
                    fb:88:55:3f:10:3e:3d:b1:f3:d8:57:40:be:27:0e:
                    d9:e0:a9:a5:00:b8:41:54:ae:ec:10:99:c0:02:d9:
                    3d:be:c6:db:29:4a:02:76:ab:9b:c1:ea:72:cd:b0:
                    8f:21:ff:3d:c8:6a:98:b6:16:6f:57:61:30:af:b6:
                    d0:1f:64:49:00:13:62:7c:62:05:b2:5f:d4:f9:37:
                    ca:1d:82:4e:3e:4b:be:9d:0e:f1:76:dd:5c:f8:19:
                    0d:44:42:fa:a4:4b:99:dd:4a:f1:a4:ed:33:09:36:
                    93:20:c0:a5:be:e2:0e:e6:6c:e4:67:e7:62:98:6f:
                    24:69:47:69:a2:2a:4c:bc:59:be:a4:bc:58:91:02:
                    1c:5e:48:13:7c:31:ab:21:9f:93:0b:da:33:c0:39:
                    95:89:a8:c6:a8:d7:9b:c8:d4:44:0a:bf:58:ac:82:
                    b0:35:14:12:61:d9:20:86:57:1e:91:f1:40:25:f1:
                    c9:c4:9c:c0:cc:4c:97:49:fd:80:5c:7e:49:b9:25:
                    33:36:4a:a8:73:0a:36:95:ac:07:b7:cb:23:e1:03:
                    6a:df:5a:f6:5a:58:1f:d4:2a:4e:ef:0b:82:5d:72:
                    2d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:6F:1F:4B:0F:0C:53:21:9B:9E:A4:DD:65:EB:30:45:51:68:D8:C3
            X509v3 Authority Key Identifier:
                keyid:AE:59:C7:1F:D6:3B:D2:6B:46:30:26:E0:74:90:46:97:04:A8:FB:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rlnHH9Y70mtGMCbgdJBGlwSo-5s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:26:b2:74:2b:0c:5b:b1:1e:09:48:f1:64:ed:ce:6b:04:3a:
         b2:0b:82:ce:25:80:14:78:0f:f9:be:76:3b:ff:1d:21:84:f3:
         c1:ab:09:65:81:61:39:c3:df:42:2a:95:19:f7:0f:84:d6:e3:
         40:5e:17:e3:88:5b:ad:06:a3:ec:69:1e:e4:f3:f8:2a:08:d1:
         da:ed:e4:a7:fd:bd:09:04:f7:59:92:4d:51:8e:de:b8:14:49:
         aa:29:9a:a5:18:64:4c:f8:5e:cf:f1:c9:b5:3d:9e:a6:ef:e8:
         37:35:f1:fd:6d:ce:08:40:aa:21:5c:3f:5f:74:b4:26:fe:04:
         c2:5a:6b:e4:0e:b7:0f:2d:25:20:fd:cf:45:b2:a9:6f:2f:4a:
         6f:3d:e8:08:a1:f7:5a:88:60:96:ec:48:7c:cb:9e:c5:cd:30:
         d2:a7:fc:ab:df:26:34:da:41:ef:a6:9d:5c:b8:48:a2:76:d3:
         92:7f:4d:40:ce:e8:64:8d:e0:c7:c5:d6:4b:a5:7e:b4:a5:5c:
         3f:3c:bb:42:65:03:ae:d5:8a:fc:d0:be:5a:b9:c1:21:d1:e7:
         ab:3b:1d:f2:bf:25:76:18:ce:76:8e:06:13:a3:49:c6:1a:bc:
         6d:53:ba:94:7a:be:cc:83:3b:6c:d0:2f:01:14:21:5d:da:c8:
         ac:7c:42:ef
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDUzMEIxMTAvBgNVBAUTKEFFNTlDNzFGRDYzQkQyNkI0NjMwMjZFMDc0OTA0Njk3
MDRBOEZCOUIwHhcNMjYwNTIxMDYwNTQwWhcNMjYwNTI4MDYwNTQwWjAYMRYwFAYD
VQQDEw02YTBlYTBiNS0xMzk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsck0/JYG+nXuzAkxFWktXzCF0Jw8XOPtSPjdEiX7iFU/ED49sfPYV0C+Jw7Z
4KmlALhBVK7sEJnAAtk9vsbbKUoCdqubwepyzbCPIf89yGqYthZvV2Ewr7bQH2RJ
ABNifGIFsl/U+TfKHYJOPku+nQ7xdt1c+BkNREL6pEuZ3UrxpO0zCTaTIMClvuIO
5mzkZ+dimG8kaUdpoipMvFm+pLxYkQIcXkgTfDGrIZ+TC9ozwDmViajGqNebyNRE
Cr9YrIKwNRQSYdkghlcekfFAJfHJxJzAzEyXSf2AXH5JuSUzNkqocwo2lawHt8sj
4QNq31r2Wlgf1CpO7wuCXXItkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGpvH0sP
DFMhm56k3WXrMEVRaNjDMB8GA1UdIwQYMBaAFK5Zxx/WO9JrRjAm4HSQRpcEqPub
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTMwQi9BNkE1NDRFMEI3
OUExMUVGQTBENjk3NURDNEY5QUUwMi9ybG5ISDlZNzBtdEdNQ2JnZEpCR2x3U28t
NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JsbkhIOVk3MG10R01DYmdkSkJHbHdTby01cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NTMwQi9BNkE1NDRFMEI3OUExMUVGQTBENjk3NURDNEY5QUUwMi9ybG5ISDlZNzBt
dEdNQ2JnZEpCR2x3U28tNXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlCaydCsMW7EeCUjxZO3OawQ6sguCziWAFHgP+b52O/8dIYTzwasJZYFhOcPf
QiqVGfcPhNbjQF4X44hbrQaj7Gke5PP4KgjR2u3kp/29CQT3WZJNUY7euBRJqima
pRhkTPhez/HJtT2epu/oNzXx/W3OCECqIVw/X3S0Jv4Ewlpr5A63Dy0lIP3PRbKp
by9Kbz3oCKH3WohgluxIfMuexc0w0qf8q98mNNpB76adXLhIonbTkn9NQM7oZI3g
x8XWS6V+tKVcPzy7QmUDrtWK/NC+WrnBIdHnqzsd8r8ldhjOdo4GE6NJxhq8bVO6
lHq+zIM7bNAvARQhXdrIrHxC7w==
-----END CERTIFICATE-----
Generated at Thu May 21 10:28:41 2026 by rpki-client