Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft
File:                     t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft (raw, json)
Hash identifier:          vFXVkiW2KD0yPsQP5Vv7aip7b53hkTFY21+TxNzyOug=
Subject key identifier:   86:11:AC:29:78:54:92:55:45:90:80:AE:49:48:76:C8:6B:D4:7C:0B
Authority key identifier: B7:C6:11:F0:2F:5C:2D:8D:8C:66:C2:59:D2:3B:39:C7:89:AA:01:07
Certificate issuer:       /CN=A9147016/serialNumber=B7C611F02F5C2D8D8C66C259D23B39C789AA0107
Certificate serial:       04FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8YR8C9cLY2MZsJZ0js5x4mqAQc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft
Manifest number:          04FF
Signing time:             Wed 20 May 2026 23:43:55 +0000
Manifest this update:     Wed 20 May 2026 23:43:55 +0000
Manifest next update:     Wed 27 May 2026 23:43:55 +0000
Files and hashes:         1: t8YR8C9cLY2MZsJZ0js5x4mqAQc.crl (hash: taFyTczazjjsad/jCp6P2yx7xbvdNW2586sHcrEdiFM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.crl
                          rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8YR8C9cLY2MZsJZ0js5x4mqAQc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 23:43:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1279 (0x4ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147016, serialNumber=B7C611F02F5C2D8D8C66C259D23B39C789AA0107
        Validity
            Not Before: May 20 23:43:55 2026 GMT
            Not After : May 27 23:43:55 2026 GMT
        Subject: CN=6a0e473b-e1c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cb:c3:ee:40:f1:b9:66:97:10:3b:41:97:c4:
                    e0:cc:f1:f9:cf:03:d0:af:6c:5f:50:c0:3a:3f:2a:
                    59:98:49:fe:84:f8:83:80:dd:1a:f6:b8:e4:4e:9a:
                    ac:52:59:7d:e4:8a:23:4b:c4:06:bd:16:d4:09:c7:
                    26:ba:d9:11:41:db:ee:b3:c8:49:38:45:89:63:1d:
                    db:06:84:4d:a0:37:95:e2:50:99:79:10:43:87:e6:
                    61:bb:e2:d5:09:cc:0b:61:85:ea:90:0c:12:64:0b:
                    a8:77:47:9a:08:ef:1f:59:1d:d2:61:35:57:4e:22:
                    9b:9b:1f:c9:c3:2a:6f:40:26:85:ab:b3:3d:d6:0b:
                    75:9c:93:7c:9a:04:02:f0:2b:1f:a4:b1:9c:6f:dd:
                    19:37:fc:3d:e3:ad:8c:07:40:24:66:ce:c1:09:3d:
                    d4:40:50:84:c8:5e:5b:d1:95:a4:30:98:4b:99:7a:
                    18:87:3d:a8:c5:2c:db:52:99:80:b7:06:9c:b3:8f:
                    51:e2:78:bc:8c:c1:29:a1:7e:2b:dc:83:ab:3e:3e:
                    4a:f8:1a:18:9f:69:e4:d8:fa:96:83:bd:86:47:ca:
                    9b:c2:e7:04:56:a5:c1:94:26:9f:ba:44:73:7f:f3:
                    b7:1b:54:bf:8e:31:96:0b:de:17:05:24:11:06:d2:
                    db:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:11:AC:29:78:54:92:55:45:90:80:AE:49:48:76:C8:6B:D4:7C:0B
            X509v3 Authority Key Identifier:
                keyid:B7:C6:11:F0:2F:5C:2D:8D:8C:66:C2:59:D2:3B:39:C7:89:AA:01:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8YR8C9cLY2MZsJZ0js5x4mqAQc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:2e:1c:cb:6d:29:05:4b:8c:85:38:20:ed:3e:27:ef:73:8b:
         66:87:16:77:86:fc:ae:61:1d:12:56:07:8c:ae:1f:f8:4a:2a:
         d7:b1:5c:1b:b8:8a:1c:98:b6:ad:e6:33:1e:ed:a7:bb:cb:30:
         e3:ae:58:0e:6d:2e:f3:e0:3e:5c:76:63:ae:bc:03:2f:13:6c:
         ec:0e:2f:bf:fa:3b:fe:23:3b:18:bf:b6:b6:78:7b:24:61:9a:
         40:e8:eb:86:4d:65:a1:f0:00:bb:7c:c0:be:4e:81:4f:66:3e:
         b2:02:73:ac:d4:a8:db:c2:9f:9c:80:81:d8:df:ba:43:19:a0:
         56:4b:b1:5b:2d:44:44:44:02:e3:4c:41:f6:06:1e:c8:0d:84:
         4e:40:31:69:91:2f:d0:6a:a7:5e:37:2f:fd:5e:d3:22:f6:88:
         9f:b0:a9:d0:d3:7a:6f:90:c5:e3:01:60:e4:e0:7b:2e:16:65:
         33:3a:58:5b:8e:7e:15:de:9c:fa:f1:b6:f3:75:9c:d9:f1:b3:
         5a:ac:27:be:b7:0c:02:d1:53:09:5c:d9:3e:d4:3e:67:e9:74:
         3c:93:59:86:56:2c:c0:50:cb:a4:75:ab:f1:17:ad:2e:5e:6d:
         d6:72:3d:ee:5a:ae:af:60:c3:01:6c:f8:81:be:74:8a:02:10:
         94:fe:8e:19
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDcwMTYxMTAvBgNVBAUTKEI3QzYxMUYwMkY1QzJEOEQ4QzY2QzI1OUQyM0IzOUM3
ODlBQTAxMDcwHhcNMjYwNTIwMjM0MzU1WhcNMjYwNTI3MjM0MzU1WjAYMRYwFAYD
VQQDEw02YTBlNDczYi1lMWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt8vD7kDxuWaXEDtBl8TgzPH5zwPQr2xfUMA6PypZmEn+hPiDgN0a9rjkTpqs
Ull95IojS8QGvRbUCccmutkRQdvus8hJOEWJYx3bBoRNoDeV4lCZeRBDh+Zhu+LV
CcwLYYXqkAwSZAuod0eaCO8fWR3SYTVXTiKbmx/JwypvQCaFq7M91gt1nJN8mgQC
8CsfpLGcb90ZN/w9462MB0AkZs7BCT3UQFCEyF5b0ZWkMJhLmXoYhz2oxSzbUpmA
twacs49R4ni8jMEpoX4r3IOrPj5K+BoYn2nk2PqWg72GR8qbwucEVqXBlCafukRz
f/O3G1S/jjGWC94XBSQRBtLbBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIYRrCl4
VJJVRZCArklIdshr1HwLMB8GA1UdIwQYMBaAFLfGEfAvXC2NjGbCWdI7OceJqgEH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzAxNi8zNzg4MzZFMjU2
M0QxMUVDOTVGM0RDMTZDNEY5QUUwMi90OFlSOEM5Y0xZMk1ac0paMGpzNXg0bXFB
UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Q4WVI4QzljTFkyTVpzSlowanM1eDRtcUFRYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NzAxNi8zNzg4MzZFMjU2M0QxMUVDOTVGM0RDMTZDNEY5QUUwMi90OFlSOEM5Y0xZ
Mk1ac0paMGpzNXg0bXFBUWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAry4cy20pBUuMhTgg7T4n73OLZocWd4b8rmEdElYHjK4f+Eoq17FcG7iKHJi2
reYzHu2nu8sw465YDm0u8+A+XHZjrrwDLxNs7A4vv/o7/iM7GL+2tnh7JGGaQOjr
hk1lofAAu3zAvk6BT2Y+sgJzrNSo28KfnICB2N+6QxmgVkuxWy1EREQC40xB9gYe
yA2ETkAxaZEv0GqnXjcv/V7TIvaIn7Cp0NN6b5DF4wFg5OB7LhZlMzpYW45+Fd6c
+vG283Wc2fGzWqwnvrcMAtFTCVzZPtQ+Z+l0PJNZhlYswFDLpHWr8RetLl5t1nI9
7lqur2DDAWz4gb50igIQlP6OGQ==
-----END CERTIFICATE-----
Generated at Thu May 21 10:54:37 2026 by rpki-client