Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/AryISFcqsaDRBj5XuCIPK1LWvec.mft
File:                     AryISFcqsaDRBj5XuCIPK1LWvec.mft (raw, json)
Hash identifier:          4x5WBuRPgS8/2lQu9kKUmJ3dqQ0YwqroGpfGAyZTpW8=
Subject key identifier:   6A:B0:A1:95:DF:E8:7F:31:B6:F2:5F:23:ED:2D:8A:0E:63:A3:59:94
Authority key identifier: 02:BC:88:48:57:2A:B1:A0:D1:06:3E:57:B8:22:0F:2B:52:D6:BD:E7
Certificate issuer:       /CN=A9153B58/serialNumber=02BC8848572AB1A0D1063E57B8220F2B52D6BDE7
Certificate serial:       56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AryISFcqsaDRBj5XuCIPK1LWvec.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/AryISFcqsaDRBj5XuCIPK1LWvec.mft
Manifest number:          54
Signing time:             Tue 19 May 2026 08:05:57 +0000
Manifest this update:     Tue 19 May 2026 08:05:56 +0000
Manifest next update:     Tue 26 May 2026 08:05:56 +0000
Files and hashes:         1: AryISFcqsaDRBj5XuCIPK1LWvec.crl (hash: FclQYV179RGmdvpr9vgi0euJCSYUZz6uv3+tdSANV/Q=)
                          2: 36256C16D96011F0BB00DFAC96D3641D.roa (hash: BZhp55139TaDhIi/iXNGDBndZI5iisOCsjZn6WgMrG4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/AryISFcqsaDRBj5XuCIPK1LWvec.crl
                          rsync://rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/AryISFcqsaDRBj5XuCIPK1LWvec.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AryISFcqsaDRBj5XuCIPK1LWvec.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 May 2026 08:05:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153B58, serialNumber=02BC8848572AB1A0D1063E57B8220F2B52D6BDE7
        Validity
            Not Before: May 19 08:05:56 2026 GMT
            Not After : May 26 08:05:56 2026 GMT
        Subject: CN=6a0c19e5-e981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:47:34:bc:ba:dc:99:51:80:06:70:c6:dc:cf:
                    6d:b0:50:89:1f:05:48:6a:da:9d:6a:c1:ab:0e:bc:
                    d1:46:97:02:48:c5:c0:40:c4:7f:7b:a9:29:83:0c:
                    67:aa:1f:49:7c:7f:79:e8:8d:f5:73:14:b6:d0:dd:
                    17:ab:f3:20:5d:fb:ff:5a:34:c6:65:28:b8:0a:af:
                    75:68:8c:29:2e:5e:0f:ec:a3:5b:d6:d0:c3:61:79:
                    8a:95:54:0b:53:b8:81:e5:70:fd:18:3c:ab:3e:4f:
                    49:85:48:f0:e8:cc:e5:00:00:eb:39:be:6a:e7:c7:
                    ba:23:8c:47:cd:b0:58:44:08:65:e7:33:85:46:73:
                    01:18:d5:9c:aa:2e:25:d4:82:43:7c:d4:08:ee:d6:
                    6e:0b:fc:35:1c:4e:30:e0:94:6b:8a:49:46:77:e8:
                    f3:27:e0:82:06:a2:f8:39:6e:ac:ec:92:ce:4d:7f:
                    18:c5:d3:57:39:f0:b5:5d:72:f7:29:6f:ae:17:99:
                    a7:b9:b9:4a:e7:09:bd:9a:40:2a:ab:1f:b8:65:58:
                    3c:b8:8d:04:c9:cd:c0:42:87:83:13:80:99:cc:5d:
                    25:ba:c9:ff:fc:2f:f7:cc:77:74:3b:c5:d4:2f:e4:
                    dc:7e:47:ff:cd:82:d2:5a:e2:4a:f2:d4:f1:59:71:
                    88:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B0:A1:95:DF:E8:7F:31:B6:F2:5F:23:ED:2D:8A:0E:63:A3:59:94
            X509v3 Authority Key Identifier:
                keyid:02:BC:88:48:57:2A:B1:A0:D1:06:3E:57:B8:22:0F:2B:52:D6:BD:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/AryISFcqsaDRBj5XuCIPK1LWvec.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AryISFcqsaDRBj5XuCIPK1LWvec.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153B58/42A52644D95F11F0AA1586A196D3641D/AryISFcqsaDRBj5XuCIPK1LWvec.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:af:54:14:f8:d5:f4:0c:69:7d:f0:76:42:a2:db:ab:10:58:
         52:fc:63:02:d5:5a:39:8c:e4:69:aa:44:ac:e3:bf:2b:af:01:
         33:65:d4:b2:23:31:05:44:81:e9:b8:aa:c3:c1:20:d0:76:d9:
         9c:96:aa:c3:c0:e3:df:f4:17:65:bf:bc:ba:48:66:0f:54:6d:
         da:f2:34:f8:2f:00:d7:64:a4:57:0e:28:b3:dc:f4:8c:e4:86:
         41:b4:81:af:92:3b:a1:56:bc:55:8a:e0:dd:b8:55:d2:15:31:
         a1:1d:34:f5:f8:68:ec:b4:18:f7:26:d0:0b:00:87:3b:fb:5e:
         2f:f4:a7:72:38:0f:0b:ea:e0:86:15:36:34:8f:e7:a1:1c:de:
         b5:ce:95:e8:fa:c4:75:1f:75:c5:76:d3:c6:90:00:39:98:8a:
         52:da:a8:a3:ca:4d:5f:77:34:0d:3e:b2:e6:db:aa:b9:17:4d:
         99:64:fc:de:95:ac:82:1f:e8:ec:45:89:92:be:86:96:9e:4b:
         37:86:f0:c1:b1:3b:52:91:ad:da:00:e8:58:2f:21:3b:9a:18:
         97:82:27:d8:80:4c:64:92:a7:82:a6:50:f8:8f:70:f7:82:12:
         50:bb:10:04:10:3a:c9:27:14:1f:17:9f:47:24:85:2c:ae:7e:
         69:15:c2:3a
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
M0I1ODExMC8GA1UEBRMoMDJCQzg4NDg1NzJBQjFBMEQxMDYzRTU3QjgyMjBGMkI1
MkQ2QkRFNzAeFw0yNjA1MTkwODA1NTZaFw0yNjA1MjYwODA1NTZaMBgxFjAUBgNV
BAMTDTZhMGMxOWU1LWU5ODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCpRzS8utyZUYAGcMbcz22wUIkfBUhq2p1qwasOvNFGlwJIxcBAxH97qSmDDGeq
H0l8f3nojfVzFLbQ3Rer8yBd+/9aNMZlKLgKr3VojCkuXg/so1vW0MNheYqVVAtT
uIHlcP0YPKs+T0mFSPDozOUAAOs5vmrnx7ojjEfNsFhECGXnM4VGcwEY1ZyqLiXU
gkN81Aju1m4L/DUcTjDglGuKSUZ36PMn4IIGovg5bqzsks5NfxjF01c58LVdcvcp
b64Xmae5uUrnCb2aQCqrH7hlWDy4jQTJzcBCh4MTgJnMXSW6yf/8L/fMd3Q7xdQv
5Nx+R//NgtJa4kry1PFZcYgdAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUarChld/o
fzG28l8j7S2KDmOjWZQwHwYDVR0jBBgwFoAUAryISFcqsaDRBj5XuCIPK1LWvecw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzQjU4LzQyQTUyNjQ0RDk1
RjExRjBBQTE1ODZBMTk2RDM2NDFEL0FyeUlTRmNxc2FEUkJqNVh1Q0lQSzFMV3Zl
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvQXJ5SVNGY3FzYURSQmo1WHVDSVBLMUxXdmVjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUz
QjU4LzQyQTUyNjQ0RDk1RjExRjBBQTE1ODZBMTk2RDM2NDFEL0FyeUlTRmNxc2FE
UkJqNVh1Q0lQSzFMV3ZlYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAkr1QU+NX0DGl98HZCoturEFhS/GMC1Vo5jORpqkSs478rrwEzZdSyIzEFRIHp
uKrDwSDQdtmclqrDwOPf9Bdlv7y6SGYPVG3a8jT4LwDXZKRXDiiz3PSM5IZBtIGv
kjuhVrxViuDduFXSFTGhHTT1+GjstBj3JtALAIc7+14v9KdyOA8L6uCGFTY0j+eh
HN61zpXo+sR1H3XFdtPGkAA5mIpS2qijyk1fdzQNPrLm26q5F02ZZPzelayCH+js
RYmSvoaWnks3hvDBsTtSka3aAOhYLyE7mhiXgifYgExkkqeCplD4j3D3ghJQuxAE
EDrJJxQfF59HJIUsrn5pFcI6
-----END CERTIFICATE-----
Generated at Thu May 21 10:17:21 2026 by rpki-client