Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft
File:                     dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft (raw, json)
Hash identifier:          5fDZtkIOfvj6bVFEM9/rk5swyThK9Z2L87VrMkYsFw0=
Subject key identifier:   BA:D0:08:B2:EF:F5:B0:8F:01:0F:1A:47:6F:17:2C:F3:DC:14:DF:C5
Authority key identifier: 75:C0:71:77:40:E9:18:7D:D5:35:11:61:39:01:2F:0F:31:D8:40:97
Certificate issuer:       /CN=A915060F/serialNumber=75C0717740E9187DD535116139012F0F31D84097
Certificate serial:       3554
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft
Manifest number:          354A
Signing time:             Wed 20 May 2026 14:17:14 +0000
Manifest this update:     Wed 20 May 2026 14:17:13 +0000
Manifest next update:     Wed 27 May 2026 14:17:13 +0000
Files and hashes:         1: dcBxd0DpGH3VNRFhOQEvDzHYQJc.crl (hash: IVWlcSB6lC9cTmJlPYU6GGlGEgZEguebwy2C1UdOeGg=)
                          2: FAB5FE6E101811EA9A30176EC4F9AE02.roa (hash: UVjNs6Ee7f+G00eKucHkD5VRAwAYtWeaPm0YXsnnb+4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.crl
                          rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 14:17:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13652 (0x3554)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915060F, serialNumber=75C0717740E9187DD535116139012F0F31D84097
        Validity
            Not Before: May 20 14:17:13 2026 GMT
            Not After : May 27 14:17:13 2026 GMT
        Subject: CN=6a0dc26a-d1b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:90:6c:d0:ed:8d:9e:fc:5c:ed:f4:75:7a:aa:
                    f6:9e:41:c3:fa:ec:6e:a4:b8:d0:db:8d:0f:80:72:
                    df:be:1e:d0:4d:73:43:e2:c9:6d:55:6b:21:36:71:
                    89:37:76:02:16:cb:0d:fb:a6:7e:74:27:f5:48:fa:
                    96:ee:88:7d:b7:c4:de:31:77:f1:84:7b:12:06:60:
                    48:40:73:78:5a:25:40:47:85:94:24:c2:a8:89:d0:
                    f0:7a:40:e2:bd:e8:bf:db:8e:9e:38:b3:cf:0a:34:
                    3b:96:2a:73:04:34:e2:67:59:d7:f7:a0:6c:14:7b:
                    13:0c:ef:f1:a4:f6:eb:56:6e:42:e5:fa:b7:31:0c:
                    d6:a8:df:06:18:38:1b:db:5e:1c:f3:e0:0c:89:de:
                    ab:69:12:d2:58:18:66:f2:3b:86:97:ad:49:6e:7a:
                    bf:5f:a7:9a:fe:d9:b8:ca:ce:0a:eb:8d:cf:a7:da:
                    2d:e3:f3:ce:dc:b2:e9:d1:74:b6:0c:ad:04:64:2a:
                    ca:b4:40:e2:3c:4d:da:c1:0c:28:5a:48:04:64:f1:
                    81:88:6f:14:c0:67:1f:8c:45:46:1a:fd:e6:ce:b9:
                    d3:6c:5f:d8:58:e4:66:59:3e:04:b7:f9:51:89:d4:
                    e0:37:a4:bc:89:9c:2b:8f:3a:6a:84:e7:20:ac:22:
                    a8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D0:08:B2:EF:F5:B0:8F:01:0F:1A:47:6F:17:2C:F3:DC:14:DF:C5
            X509v3 Authority Key Identifier:
                keyid:75:C0:71:77:40:E9:18:7D:D5:35:11:61:39:01:2F:0F:31:D8:40:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:2b:ff:75:1b:fc:c6:a4:1d:47:0d:24:62:6b:8b:f5:ce:e3:
         38:34:9c:82:df:08:26:bb:fb:83:2d:98:3d:cf:70:48:a2:ff:
         a2:d4:4a:6d:b4:6c:b1:1e:d7:06:2e:fd:41:6d:f6:8d:e6:5b:
         f7:20:03:4e:ab:93:3a:50:25:9d:1f:00:f0:a1:22:72:35:c2:
         06:df:46:d5:f6:66:a8:dc:cd:6a:4a:47:8e:d2:31:c1:74:d6:
         25:5a:41:10:03:83:42:60:5f:cd:1d:db:fc:27:57:40:5c:7b:
         ed:60:5b:64:a7:7c:69:48:79:8c:b1:6a:e7:bd:e8:48:d0:ef:
         da:c7:91:e6:3c:f1:f3:db:14:91:6a:1d:9b:ee:58:ac:f9:0c:
         10:1b:37:61:a5:95:2d:20:21:54:9c:94:c0:6c:55:85:f9:53:
         c4:ba:d7:d0:db:a7:5c:69:46:38:a3:bd:d5:33:78:ca:f8:89:
         94:ab:61:fb:dc:04:da:ee:8d:e3:46:40:d8:c4:0e:ec:d0:bb:
         a4:aa:e7:72:a7:3a:ad:ed:5f:9b:ea:f2:22:97:b8:8d:79:1f:
         ab:32:a3:ff:e4:3e:aa:c5:86:17:79:a3:49:ec:af:cf:1d:39:
         7c:36:11:5c:9c:59:9b:86:a4:da:38:37:51:a9:30:03:ba:bc:
         49:cc:a1:b6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTA2MEYxMTAvBgNVBAUTKDc1QzA3MTc3NDBFOTE4N0RENTM1MTE2MTM5MDEyRjBG
MzFEODQwOTcwHhcNMjYwNTIwMTQxNzEzWhcNMjYwNTI3MTQxNzEzWjAYMRYwFAYD
VQQDEw02YTBkYzI2YS1kMWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn5Bs0O2Nnvxc7fR1eqr2nkHD+uxupLjQ240PgHLfvh7QTXND4sltVWshNnGJ
N3YCFssN+6Z+dCf1SPqW7oh9t8TeMXfxhHsSBmBIQHN4WiVAR4WUJMKoidDwekDi
vei/246eOLPPCjQ7lipzBDTiZ1nX96BsFHsTDO/xpPbrVm5C5fq3MQzWqN8GGDgb
214c8+AMid6raRLSWBhm8juGl61Jbnq/X6ea/tm4ys4K643Pp9ot4/PO3LLp0XS2
DK0EZCrKtEDiPE3awQwoWkgEZPGBiG8UwGcfjEVGGv3mzrnTbF/YWORmWT4Et/lR
idTgN6S8iZwrjzpqhOcgrCKoYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLrQCLLv
9bCPAQ8aR28XLPPcFN/FMB8GA1UdIwQYMBaAFHXAcXdA6Rh91TURYTkBLw8x2ECX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDYwRi81RTdFRDVFNDFE
NkMxMUUyOEFDQkQwQUMwOEIwMkNEMi9kY0J4ZDBEcEdIM1ZOUkZoT1FFdkR6SFlR
SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RjQnhkMERwR0gzVk5SRmhPUUV2RHpIWVFKYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MDYwRi81RTdFRDVFNDFENkMxMUUyOEFDQkQwQUMwOEIwMkNEMi9kY0J4ZDBEcEdI
M1ZOUkZoT1FFdkR6SFlRSmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARyv/dRv8xqQdRw0kYmuL9c7jODScgt8IJrv7gy2YPc9wSKL/otRKbbRssR7X
Bi79QW32jeZb9yADTquTOlAlnR8A8KEicjXCBt9G1fZmqNzNakpHjtIxwXTWJVpB
EAODQmBfzR3b/CdXQFx77WBbZKd8aUh5jLFq573oSNDv2seR5jzx89sUkWodm+5Y
rPkMEBs3YaWVLSAhVJyUwGxVhflTxLrX0NunXGlGOKO91TN4yviJlKth+9wE2u6N
40ZA2MQO7NC7pKrncqc6re1fm+ryIpe4jXkfqzKj/+Q+qsWGF3mjSeyvzx05fDYR
XJxZm4ak2jg3UakwA7q8Scyhtg==
-----END CERTIFICATE-----
Generated at Thu May 21 09:38:11 2026 by rpki-client