Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/g5Veubsl3DOnjslssIEXQZxkulw.mft
File:                     g5Veubsl3DOnjslssIEXQZxkulw.mft (raw, json)
Hash identifier:          WhflztqDzbwGqzZoYCWKtxszEkXesebCR+297YgZmNg=
Subject key identifier:   72:BA:D6:7A:18:F0:68:8B:8D:4D:81:4C:B5:FD:6C:C8:9B:47:C1:E2
Authority key identifier: 83:95:5E:B9:BB:25:DC:33:A7:8E:C9:6C:B0:81:17:41:9C:64:BA:5C
Certificate issuer:       /CN=A9155810/serialNumber=83955EB9BB25DC33A78EC96CB08117419C64BA5C
Certificate serial:       FA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g5Veubsl3DOnjslssIEXQZxkulw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/g5Veubsl3DOnjslssIEXQZxkulw.mft
Manifest number:          F5
Signing time:             Sun 05 Apr 2026 05:45:08 +0000
Manifest this update:     Sun 05 Apr 2026 05:45:07 +0000
Manifest next update:     Sun 12 Apr 2026 05:45:07 +0000
Files and hashes:         1: g5Veubsl3DOnjslssIEXQZxkulw.crl (hash: lj9lkasH5RdApsoCuHtf/9bj0h2wxrg4am7fR8EjfMQ=)
                          2: A9D891D4C82B11EF8409A474C4F9AE02.roa (hash: 85VnbBesAuFtmnoaNDKNK175y8YDoN8WdUlNmCsSoTg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/g5Veubsl3DOnjslssIEXQZxkulw.crl
                          rsync://rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/g5Veubsl3DOnjslssIEXQZxkulw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g5Veubsl3DOnjslssIEXQZxkulw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:45:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 250 (0xfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155810, serialNumber=83955EB9BB25DC33A78EC96CB08117419C64BA5C
        Validity
            Not Before: Apr  5 05:45:07 2026 GMT
            Not After : Apr 12 05:45:07 2026 GMT
        Subject: CN=69d1f6e3-571e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:35:12:cc:f1:c9:79:d4:83:12:f2:4f:60:f0:
                    7d:84:10:10:70:3b:0b:38:1d:ba:15:13:ec:80:27:
                    be:05:37:39:40:88:84:3b:7a:80:89:8e:dd:4e:58:
                    39:a8:9b:00:f2:76:64:f5:9e:a8:a9:ca:91:af:78:
                    34:7b:f7:d5:cc:c2:23:80:b1:05:a0:19:43:c7:95:
                    80:0f:85:36:0e:05:52:0a:d1:16:c6:16:a6:0c:de:
                    61:2d:84:f6:16:ea:53:b6:c8:94:5c:35:da:44:2f:
                    99:5b:1f:45:70:74:9a:66:19:c9:a5:9b:c3:e6:b4:
                    17:5e:ce:67:7a:d5:ee:bf:33:3b:09:b1:ae:e4:73:
                    9a:56:83:9f:e8:ae:d7:17:36:4e:c8:85:2b:a3:39:
                    06:c0:9f:d9:c8:61:bf:91:e7:8a:8b:86:56:3f:3d:
                    a2:e0:21:20:a4:4b:fc:c9:ad:a4:28:ff:3e:4d:bd:
                    2e:fc:96:f4:ed:4c:98:f4:88:23:5e:53:5d:ef:87:
                    f1:0f:db:6d:87:69:a0:9d:20:36:ed:94:22:d0:0c:
                    4f:78:e9:09:81:3f:16:2e:70:0e:a1:8c:09:64:98:
                    e3:41:7b:15:f5:1d:4e:50:54:19:df:b6:8c:1b:75:
                    6d:03:72:a0:fc:46:78:21:32:64:cb:7b:a0:51:3a:
                    9b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:BA:D6:7A:18:F0:68:8B:8D:4D:81:4C:B5:FD:6C:C8:9B:47:C1:E2
            X509v3 Authority Key Identifier:
                keyid:83:95:5E:B9:BB:25:DC:33:A7:8E:C9:6C:B0:81:17:41:9C:64:BA:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/g5Veubsl3DOnjslssIEXQZxkulw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g5Veubsl3DOnjslssIEXQZxkulw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/g5Veubsl3DOnjslssIEXQZxkulw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:72:52:d7:e2:5b:f5:3e:14:cc:13:8c:b3:03:66:e3:0f:c6:
         8c:8f:27:4d:66:b3:6b:9d:38:85:8a:82:43:ae:2f:61:10:85:
         a1:a0:ea:6c:83:cd:fa:f6:32:c8:6a:26:c4:e3:8c:45:bf:51:
         51:82:03:62:50:0e:a8:8d:3d:9a:f6:e2:2d:d3:57:7f:b7:57:
         39:f1:a6:2d:3a:fd:8b:95:8a:b4:c7:f0:51:d0:d7:5e:c5:11:
         3c:36:25:94:eb:43:8a:c6:82:eb:4e:ca:de:7e:6f:2d:9f:58:
         24:94:0f:c3:e7:b6:58:55:03:ea:ec:ce:76:92:33:5d:77:c2:
         f8:11:ba:50:0b:35:8b:f0:cc:e9:c7:d1:3b:ee:a8:b5:42:bc:
         c4:c0:b0:64:08:2f:f5:a4:4e:ac:d2:88:34:10:4d:2d:b8:e0:
         7c:54:88:81:24:90:c2:a5:c9:4b:db:54:65:d0:78:5f:f9:95:
         c9:0c:f7:d1:34:4f:4c:d7:3d:72:1d:71:35:b8:cc:94:d1:32:
         9a:3a:12:dc:42:0f:47:9d:d2:9f:c6:20:50:1d:2e:89:7e:9f:
         41:4f:db:12:c0:61:ee:f5:86:4b:2f:c5:05:22:b4:66:87:f4:
         d1:92:8a:8f:2d:81:13:96:21:32:3d:57:91:56:4f:17:65:76:
         f6:3f:9e:f2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTU4MTAxMTAvBgNVBAUTKDgzOTU1RUI5QkIyNURDMzNBNzhFQzk2Q0IwODExNzQx
OUM2NEJBNUMwHhcNMjYwNDA1MDU0NTA3WhcNMjYwNDEyMDU0NTA3WjAYMRYwFAYD
VQQDEw02OWQxZjZlMy01NzFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuzUSzPHJedSDEvJPYPB9hBAQcDsLOB26FRPsgCe+BTc5QIiEO3qAiY7dTlg5
qJsA8nZk9Z6oqcqRr3g0e/fVzMIjgLEFoBlDx5WAD4U2DgVSCtEWxhamDN5hLYT2
FupTtsiUXDXaRC+ZWx9FcHSaZhnJpZvD5rQXXs5netXuvzM7CbGu5HOaVoOf6K7X
FzZOyIUrozkGwJ/ZyGG/keeKi4ZWPz2i4CEgpEv8ya2kKP8+Tb0u/Jb07UyY9Igj
XlNd74fxD9tth2mgnSA27ZQi0AxPeOkJgT8WLnAOoYwJZJjjQXsV9R1OUFQZ37aM
G3VtA3Kg/EZ4ITJky3ugUTqbKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHK61noY
8GiLjU2BTLX9bMibR8HiMB8GA1UdIwQYMBaAFIOVXrm7Jdwzp47JbLCBF0GcZLpc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTgxMC83Mzk3ODhFMkM3
MDgxMUVGQTg5QjBDNUZDNEY5QUUwMi9nNVZldWJzbDNET25qc2xzc0lFWFFaeGt1
bHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2c1VmV1YnNsM0RPbmpzbHNzSUVYUVp4a3Vsdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NTgxMC83Mzk3ODhFMkM3MDgxMUVGQTg5QjBDNUZDNEY5QUUwMi9nNVZldWJzbDNE
T25qc2xzc0lFWFFaeGt1bHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOHJS1+Jb9T4UzBOMswNm4w/GjI8nTWaza504hYqCQ64vYRCFoaDqbIPN+vYy
yGomxOOMRb9RUYIDYlAOqI09mvbiLdNXf7dXOfGmLTr9i5WKtMfwUdDXXsURPDYl
lOtDisaC607K3n5vLZ9YJJQPw+e2WFUD6uzOdpIzXXfC+BG6UAs1i/DM6cfRO+6o
tUK8xMCwZAgv9aROrNKINBBNLbjgfFSIgSSQwqXJS9tUZdB4X/mVyQz30TRPTNc9
ch1xNbjMlNEymjoS3EIPR53Sn8YgUB0uiX6fQU/bEsBh7vWGSy/FBSK0Zof00ZKK
jy2BE5YhMj1XkVZPF2V29j+e8g==
-----END CERTIFICATE-----
Generated at Mon Apr 6 13:58:45 2026 by rpki-client