Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft
File:                     ApuM4ulfRYWEYukHCxtRU6yRP-g.mft (raw, json)
Hash identifier:          TgFke8jo9Yha938nuOxewdQS8ayobl11gFLGhNeplPw=
Subject key identifier:   CA:AC:0A:7A:E6:54:09:39:56:99:05:34:67:3C:4E:09:CB:55:5F:19
Authority key identifier: 02:9B:8C:E2:E9:5F:45:85:84:62:E9:07:0B:1B:51:53:AC:91:3F:E8
Certificate issuer:       /CN=A9157D67/serialNumber=029B8CE2E95F45858462E9070B1B5153AC913FE8
Certificate serial:       07E3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft
Manifest number:          07D4
Signing time:             Sun 31 May 2026 22:00:46 +0000
Manifest this update:     Sun 31 May 2026 22:00:45 +0000
Manifest next update:     Sun 07 Jun 2026 22:00:45 +0000
Files and hashes:         1: ApuM4ulfRYWEYukHCxtRU6yRP-g.crl (hash: LjPYFLhiZaqdtTOWn2LHUVH1utW6Oc5ZNFAbtjirP5g=)
                          2: AA3A944A27EA11ECB1EBEA82C4F9AE02.roa (hash: 9U65FM23v8O9dYjo5/Exe3XZ6tEjV3iATa5RpxrfVNA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.crl
                          rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Jun 2026 22:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2019 (0x7e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157D67, serialNumber=029B8CE2E95F45858462E9070B1B5153AC913FE8
        Validity
            Not Before: May 31 22:00:45 2026 GMT
            Not After : Jun  7 22:00:45 2026 GMT
        Subject: CN=6a1caf8e-6f45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:82:d1:cd:2b:78:33:7c:f3:e3:73:05:22:5e:
                    14:a4:0c:38:d0:ae:78:75:6b:be:46:64:ad:dc:95:
                    12:cc:03:90:bf:ff:98:ca:56:5b:6d:a2:31:4d:52:
                    07:39:7f:36:ac:0c:f8:23:40:51:bc:4c:2d:0e:78:
                    72:67:83:73:46:26:6f:f6:fe:8b:5e:fa:a9:a2:e8:
                    f8:96:4e:a2:aa:eb:5d:05:75:1f:7d:83:41:2e:bf:
                    22:45:27:c4:e4:e1:61:55:f9:54:3d:67:44:80:70:
                    f9:38:1a:24:18:18:c5:9f:2e:d9:a9:73:cb:42:de:
                    92:5f:7f:67:51:d0:88:7c:da:2d:31:90:4c:58:55:
                    f3:75:bd:34:1d:81:3d:4a:50:49:47:16:1b:d3:0c:
                    5b:99:b2:79:8b:d1:cc:c8:0f:4d:2c:c7:1d:2f:86:
                    a2:9f:ab:a3:0a:0a:c1:a0:84:27:b0:f5:22:ba:c1:
                    60:ff:90:ce:82:82:66:62:ac:b1:87:b3:c3:84:2b:
                    36:d3:ae:92:5a:94:4a:96:dc:87:52:8c:90:1b:76:
                    de:40:54:d8:29:b0:61:cb:7c:c5:26:ba:82:be:18:
                    d3:52:55:5a:de:70:eb:78:6b:5e:cf:d5:8c:d2:d8:
                    4d:1d:66:ea:8b:3a:c3:9d:60:98:b4:48:3f:f7:0b:
                    62:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:AC:0A:7A:E6:54:09:39:56:99:05:34:67:3C:4E:09:CB:55:5F:19
            X509v3 Authority Key Identifier:
                keyid:02:9B:8C:E2:E9:5F:45:85:84:62:E9:07:0B:1B:51:53:AC:91:3F:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:3a:16:40:df:5c:8d:c2:66:a0:91:b9:6d:f0:b5:4f:a1:4d:
         d2:17:98:02:99:3b:66:f7:7c:24:e9:fe:5c:66:e4:16:bd:0e:
         60:66:66:f3:46:2c:2f:7f:09:5b:0e:64:e0:d1:d3:93:79:0c:
         8d:87:e7:62:e9:e9:cb:0b:2e:af:8e:c7:46:76:9b:1e:9f:a5:
         0e:2e:2c:de:24:a5:81:01:7f:02:9c:14:ca:11:9c:f7:57:1f:
         69:77:3c:43:50:ce:40:3c:e9:b0:3a:05:19:19:ec:9e:06:3c:
         6f:ce:c2:d4:c7:2f:be:00:61:e6:00:eb:86:aa:ef:c9:ec:94:
         1a:1a:a6:39:5c:78:d0:62:b1:7c:55:78:87:63:d6:06:3a:d6:
         f2:9b:50:27:78:de:44:e8:b5:07:80:f6:80:b2:17:b3:d9:3a:
         06:4a:e3:3f:27:9d:d8:10:a3:7e:e0:93:8b:c2:a6:a7:11:e4:
         fe:a2:0e:d2:09:ba:62:74:d4:25:7e:bb:4a:fd:82:87:fa:95:
         e1:d0:6f:23:97:21:d9:d8:0f:26:c6:72:9b:dd:6c:19:c3:9d:
         8f:f3:62:b4:7b:c4:17:d7:06:b4:89:b1:d7:36:57:e0:99:2f:
         de:f4:88:f4:00:8e:72:34:10:e9:9c:56:61:d8:13:0f:b7:3e:
         ea:19:f5:17
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTdENjcxMTAvBgNVBAUTKDAyOUI4Q0UyRTk1RjQ1ODU4NDYyRTkwNzBCMUI1MTUz
QUM5MTNGRTgwHhcNMjYwNTMxMjIwMDQ1WhcNMjYwNjA3MjIwMDQ1WjAYMRYwFAYD
VQQDEw02YTFjYWY4ZS02ZjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuoLRzSt4M3zz43MFIl4UpAw40K54dWu+RmSt3JUSzAOQv/+YylZbbaIxTVIH
OX82rAz4I0BRvEwtDnhyZ4NzRiZv9v6LXvqpouj4lk6iqutdBXUffYNBLr8iRSfE
5OFhVflUPWdEgHD5OBokGBjFny7ZqXPLQt6SX39nUdCIfNotMZBMWFXzdb00HYE9
SlBJRxYb0wxbmbJ5i9HMyA9NLMcdL4ain6ujCgrBoIQnsPUiusFg/5DOgoJmYqyx
h7PDhCs2066SWpRKltyHUoyQG3beQFTYKbBhy3zFJrqCvhjTUlVa3nDreGtez9WM
0thNHWbqizrDnWCYtEg/9wti5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMqsCnrm
VAk5VpkFNGc8TgnLVV8ZMB8GA1UdIwQYMBaAFAKbjOLpX0WFhGLpBwsbUVOskT/o
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2Ny82MDI4NjYzODQ0
MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9BcHVNNHVsZlJZV0VZdWtIQ3h0UlU2eVJQ
LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0FwdU00dWxmUllXRVl1a0hDeHRSVTZ5UlAtZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
N0Q2Ny82MDI4NjYzODQ0MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9BcHVNNHVsZlJZ
V0VZdWtIQ3h0UlU2eVJQLWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAuDoWQN9cjcJmoJG5bfC1T6FN0heYApk7Zvd8JOn+XGbkFr0OYGZm80YsL38J
Ww5k4NHTk3kMjYfnYunpywsur47HRnabHp+lDi4s3iSlgQF/ApwUyhGc91cfaXc8
Q1DOQDzpsDoFGRnsngY8b87C1McvvgBh5gDrhqrvyeyUGhqmOVx40GKxfFV4h2PW
BjrW8ptQJ3jeROi1B4D2gLIXs9k6BkrjPyed2BCjfuCTi8KmpxHk/qIO0gm6YnTU
JX67Sv2Ch/qV4dBvI5ch2dgPJsZym91sGcOdj/NitHvEF9cGtImx1zZX4Jkv3vSI
9ACOcjQQ6ZxWYdgTD7c+6hn1Fw==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:34 2026 by rpki-client