Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.mft
File:                     pWEUadKee9PIXTGAtycy6qt6-5Y.mft (raw, json)
Hash identifier:          RGMxDuOG/VOJJJlzzpM15G5oiyVNZjcPOSWSBkbmDOk=
Subject key identifier:   81:1D:7D:85:02:DB:CA:94:2A:5A:7C:F4:83:9A:F2:33:70:E3:1B:BD
Authority key identifier: A5:61:14:69:D2:9E:7B:D3:C8:5D:31:80:B7:27:32:EA:AB:7A:FB:96
Certificate issuer:       /CN=A9146BA1/serialNumber=A5611469D29E7BD3C85D3180B72732EAAB7AFB96
Certificate serial:       047A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWEUadKee9PIXTGAtycy6qt6-5Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.mft
Manifest number:          0472
Signing time:             Thu 21 May 2026 00:11:53 +0000
Manifest this update:     Thu 21 May 2026 00:11:53 +0000
Manifest next update:     Thu 28 May 2026 00:11:53 +0000
Files and hashes:         1: pWEUadKee9PIXTGAtycy6qt6-5Y.crl (hash: n+N4oEXrM+AsQSBkO0ksr8fOjPZxPXAmXroINTFfxEA=)
                          2: F67BB6E890AB11ECAB81252FC4F9AE02.roa (hash: 8pQQGYfUUBzCIciN0c19QppTw2ZQOUtkh3E6ZoV8hjY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.crl
                          rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWEUadKee9PIXTGAtycy6qt6-5Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 00:11:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1146 (0x47a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146BA1, serialNumber=A5611469D29E7BD3C85D3180B72732EAAB7AFB96
        Validity
            Not Before: May 21 00:11:53 2026 GMT
            Not After : May 28 00:11:53 2026 GMT
        Subject: CN=6a0e4dc9-b5e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:eb:90:18:f4:6f:94:fc:19:53:48:87:e3:57:
                    cf:2a:40:90:7d:e6:40:f5:bb:e2:68:8d:c7:1f:69:
                    d1:c0:d1:c0:05:26:03:63:9e:f7:bb:ce:96:0a:c5:
                    36:61:f6:10:ab:a9:9f:5e:cd:ba:3e:60:b7:a3:32:
                    0b:c7:0a:eb:83:c4:f0:1b:9e:6b:b0:40:d1:f0:65:
                    27:94:76:18:f5:26:0b:59:31:7d:73:52:52:53:56:
                    e5:60:9b:86:10:44:73:03:f4:95:c4:14:1d:cc:ba:
                    13:8f:48:15:ea:b4:b2:6e:1f:a2:db:43:fd:13:59:
                    cf:bb:8e:cc:24:8f:6e:70:50:fa:0f:38:a8:d9:21:
                    e0:5c:ce:dd:aa:93:34:19:a5:51:fa:bd:9b:45:f5:
                    50:3d:96:84:21:69:7f:8d:4d:a6:52:14:31:86:46:
                    8b:3e:74:dc:6d:0d:5b:fd:9a:8f:0c:c1:fa:39:4a:
                    ea:46:8e:6e:fd:65:1a:68:7b:d2:cb:c2:ad:29:49:
                    9e:b6:a4:c2:49:c7:c7:09:c6:05:32:fd:02:d9:56:
                    35:9b:5f:e9:c6:45:a2:ee:26:6b:6f:c9:23:25:8e:
                    e0:0e:e1:42:5b:14:c4:3f:4a:ed:35:20:3b:71:3a:
                    e2:3c:53:1c:05:c4:cd:7b:8f:de:3e:15:a4:9c:41:
                    85:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:1D:7D:85:02:DB:CA:94:2A:5A:7C:F4:83:9A:F2:33:70:E3:1B:BD
            X509v3 Authority Key Identifier:
                keyid:A5:61:14:69:D2:9E:7B:D3:C8:5D:31:80:B7:27:32:EA:AB:7A:FB:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWEUadKee9PIXTGAtycy6qt6-5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:25:3b:f9:93:37:60:8b:f6:76:6a:f8:43:82:32:23:09:31:
         bc:57:a5:a1:a9:db:a9:21:05:fb:6c:95:4d:47:45:55:a1:fe:
         72:48:ef:0d:53:6f:b0:75:c1:18:c5:fe:74:5a:47:56:af:c3:
         e3:28:3c:e5:c0:e6:74:41:ca:92:b4:08:47:ea:eb:ff:88:4d:
         ed:ba:9b:f2:33:b7:e9:dc:ba:44:c2:ab:1b:3a:c2:6a:7e:57:
         cb:a8:07:e5:ef:59:f3:e1:6d:dd:42:24:9e:80:03:08:ee:1d:
         b3:af:21:6e:84:3e:d3:53:ab:7f:4f:be:e6:47:6a:8e:83:f7:
         60:f7:1b:a9:c3:e1:c3:71:2e:60:6d:f7:2e:85:95:f4:53:ea:
         67:15:57:37:82:8d:70:e4:1c:7b:c8:15:75:ac:af:cf:a7:2c:
         c3:b5:f7:b2:31:6f:ce:6a:ec:3f:7c:d3:c4:c6:4c:7a:5d:54:
         33:4a:61:1c:ce:6c:9e:ff:3d:df:5f:a4:ba:a5:00:cf:fb:0f:
         9d:64:0c:71:83:87:18:7e:d8:b0:b7:3f:74:8c:0e:bf:16:34:
         d6:d1:b7:f0:ce:c7:08:bc:e0:b9:2e:6f:7a:09:8b:f7:1e:72:
         56:8b:3b:0f:21:5d:8a:1b:d5:ee:07:7d:8f:64:94:9f:34:a8:
         d3:41:eb:8e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBHowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDZCQTExMTAvBgNVBAUTKEE1NjExNDY5RDI5RTdCRDNDODVEMzE4MEI3MjczMkVB
QUI3QUZCOTYwHhcNMjYwNTIxMDAxMTUzWhcNMjYwNTI4MDAxMTUzWjAYMRYwFAYD
VQQDEw02YTBlNGRjOS1iNWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuuuQGPRvlPwZU0iH41fPKkCQfeZA9bviaI3HH2nRwNHABSYDY573u86WCsU2
YfYQq6mfXs26PmC3ozILxwrrg8TwG55rsEDR8GUnlHYY9SYLWTF9c1JSU1blYJuG
EERzA/SVxBQdzLoTj0gV6rSybh+i20P9E1nPu47MJI9ucFD6Dzio2SHgXM7dqpM0
GaVR+r2bRfVQPZaEIWl/jU2mUhQxhkaLPnTcbQ1b/ZqPDMH6OUrqRo5u/WUaaHvS
y8KtKUmetqTCScfHCcYFMv0C2VY1m1/pxkWi7iZrb8kjJY7gDuFCWxTEP0rtNSA7
cTriPFMcBcTNe4/ePhWknEGFyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIEdfYUC
28qUKlp89IOa8jNw4xu9MB8GA1UdIwQYMBaAFKVhFGnSnnvTyF0xgLcnMuqrevuW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkJBMS82M0I0RUE5ODkw
QTkxMUVDOTc2NUIyMkRDNEY5QUUwMi9wV0VVYWRLZWU5UElYVEdBdHljeTZxdDYt
NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BXRVVhZEtlZTlQSVhUR0F0eWN5NnF0Ni01WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NkJBMS82M0I0RUE5ODkwQTkxMUVDOTc2NUIyMkRDNEY5QUUwMi9wV0VVYWRLZWU5
UElYVEdBdHljeTZxdDYtNVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXyU7+ZM3YIv2dmr4Q4IyIwkxvFeloanbqSEF+2yVTUdFVaH+ckjvDVNvsHXB
GMX+dFpHVq/D4yg85cDmdEHKkrQIR+rr/4hN7bqb8jO36dy6RMKrGzrCan5Xy6gH
5e9Z8+Ft3UIknoADCO4ds68hboQ+01Orf0++5kdqjoP3YPcbqcPhw3EuYG33LoWV
9FPqZxVXN4KNcOQce8gVdayvz6csw7X3sjFvzmrsP3zTxMZMel1UM0phHM5snv89
31+kuqUAz/sPnWQMcYOHGH7YsLc/dIwOvxY01tG38M7HCLzguS5vegmL9x5yVos7
DyFdihvV7gd9j2SUnzSo00Hrjg==
-----END CERTIFICATE-----
Generated at Thu May 21 10:14:44 2026 by rpki-client