Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft
File:                     PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft (raw, json)
Hash identifier:          eI7kPONJoGMyF6Z4O4U48TgzLwK+CE5k0Hs4FomJcts=
Subject key identifier:   0C:66:4E:33:A3:0E:2E:CC:14:D7:3E:8A:31:A6:99:EB:A8:36:EA:60
Authority key identifier: 3D:7A:4E:0A:99:AF:15:EF:0B:37:90:D0:E7:96:1E:88:75:28:19:83
Certificate issuer:       /CN=A915B880/serialNumber=3D7A4E0A99AF15EF0B3790D0E7961E8875281983
Certificate serial:       0EF8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft
Manifest number:          0EED
Signing time:             Wed 20 May 2026 17:38:49 +0000
Manifest this update:     Wed 20 May 2026 17:38:49 +0000
Manifest next update:     Wed 27 May 2026 17:38:49 +0000
Files and hashes:         1: PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl (hash: M0q812eYKu0APxFC25BukQsOz1QkM68jYIfbYw0yJJQ=)
                          2: 0853C13CA2F011E9B721795CC4F9AE02.roa (hash: YtMmvD8+t+Y0DWKnnIer/ep8HqJT/MOFDON0KvPSWok=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl
                          rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 17:38:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3832 (0xef8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B880, serialNumber=3D7A4E0A99AF15EF0B3790D0E7961E8875281983
        Validity
            Not Before: May 20 17:38:49 2026 GMT
            Not After : May 27 17:38:49 2026 GMT
        Subject: CN=6a0df1a9-740c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e9:05:54:20:12:04:47:48:ad:ad:77:4d:73:
                    ff:48:78:7a:c3:cb:28:d7:85:98:d7:42:17:ef:09:
                    11:3e:ac:07:23:6f:f1:5f:d4:06:38:e8:51:14:b7:
                    bc:48:1a:56:af:13:c0:85:fc:bd:22:e5:3e:ca:78:
                    c9:39:cf:19:12:db:ab:6a:5a:28:5d:a4:b1:23:d1:
                    f2:40:57:f8:7e:4f:4d:31:78:c5:d7:f4:e2:fe:66:
                    d2:72:ad:1b:ae:e9:b1:91:74:87:51:59:3a:65:95:
                    ae:e2:ca:21:e1:8d:a0:c0:09:0a:31:f8:c5:13:94:
                    a8:34:ec:43:a1:84:76:f3:6c:c9:b4:96:b5:3c:36:
                    d6:99:28:19:1a:b5:ce:cc:dc:77:a7:c8:30:df:8e:
                    4f:bb:77:99:71:9f:17:d5:d6:78:2a:b1:db:1e:f8:
                    06:7c:c8:ed:a0:fa:92:5a:cd:9d:d3:50:15:dd:8c:
                    a2:cd:d2:1e:28:3f:59:62:16:a8:4f:e7:41:36:27:
                    c3:e2:d6:23:cc:31:de:88:5e:bf:d2:db:d4:07:a9:
                    e2:3f:c5:2e:6f:44:a4:c4:b2:b5:28:37:bc:26:05:
                    bd:26:5b:ea:28:42:c6:3b:fe:9b:2b:3b:bc:ef:58:
                    ee:c7:fe:75:5b:08:5b:78:68:75:be:98:c3:dd:0a:
                    04:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:66:4E:33:A3:0E:2E:CC:14:D7:3E:8A:31:A6:99:EB:A8:36:EA:60
            X509v3 Authority Key Identifier:
                keyid:3D:7A:4E:0A:99:AF:15:EF:0B:37:90:D0:E7:96:1E:88:75:28:19:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:e9:50:f1:ad:1b:d7:93:22:02:da:96:4b:fd:14:e0:84:f1:
         4e:87:06:1d:16:39:87:57:87:a6:b8:56:25:e4:2a:c3:41:e0:
         7d:eb:de:b8:23:96:23:ae:dc:fb:86:ee:6f:30:cb:97:f9:c4:
         88:a7:f0:43:a8:66:f4:b4:e8:73:a7:14:dd:9b:3e:9e:20:24:
         5c:73:87:22:e1:80:71:7b:f7:cf:58:a5:5c:ce:7b:6b:fa:b9:
         06:72:96:a0:90:2c:76:ea:de:73:2a:f8:1c:7c:80:8b:d1:6e:
         91:80:d3:e8:2a:00:e4:af:0c:4c:eb:b7:74:bc:00:fc:d4:50:
         f5:e2:24:43:47:0f:8b:73:d2:b6:9c:55:c6:eb:f6:5a:1c:12:
         21:97:e0:39:3a:ed:04:60:83:94:d3:7f:0f:6e:4f:3a:ea:b5:
         b2:5c:7f:1f:73:c0:ff:18:e5:35:d9:32:cc:ad:73:f0:48:ca:
         b7:14:11:1f:b3:63:c4:42:31:c4:d7:fd:1d:cb:1d:d1:ab:0d:
         87:11:a6:4e:ff:ad:58:5d:20:9c:ee:fa:5c:1a:e6:12:80:a6:
         ca:ae:b9:92:eb:d0:b3:ea:3f:d6:d3:a7:50:d5:3f:66:84:df:
         7a:9e:6c:97:d9:ec:33:81:26:81:e8:eb:c0:dd:48:2c:ef:6f:
         50:be:5a:23
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDvgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUI4ODAxMTAvBgNVBAUTKDNEN0E0RTBBOTlBRjE1RUYwQjM3OTBEMEU3OTYxRTg4
NzUyODE5ODMwHhcNMjYwNTIwMTczODQ5WhcNMjYwNTI3MTczODQ5WjAYMRYwFAYD
VQQDEw02YTBkZjFhOS03NDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1ukFVCASBEdIra13TXP/SHh6w8so14WY10IX7wkRPqwHI2/xX9QGOOhRFLe8
SBpWrxPAhfy9IuU+ynjJOc8ZEturalooXaSxI9HyQFf4fk9NMXjF1/Ti/mbScq0b
rumxkXSHUVk6ZZWu4soh4Y2gwAkKMfjFE5SoNOxDoYR282zJtJa1PDbWmSgZGrXO
zNx3p8gw345Pu3eZcZ8X1dZ4KrHbHvgGfMjtoPqSWs2d01AV3YyizdIeKD9ZYhao
T+dBNifD4tYjzDHeiF6/0tvUB6niP8Uub0SkxLK1KDe8JgW9JlvqKELGO/6bKzu8
71jux/51WwhbeGh1vpjD3QoEEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAxmTjOj
Di7MFNc+ijGmmeuoNupgMB8GA1UdIwQYMBaAFD16TgqZrxXvCzeQ0OeWHoh1KBmD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Qjg4MC8xRjUxMThBNEEy
RUYxMUU5OUQ0RTBBNUJDNEY5QUUwMi9QWHBPQ3BtdkZlOExONURRNTVZZWlIVW9H
WU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BYcE9DcG12RmU4TE41RFE1NVllaUhVb0dZTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
Qjg4MC8xRjUxMThBNEEyRUYxMUU5OUQ0RTBBNUJDNEY5QUUwMi9QWHBPQ3BtdkZl
OExONURRNTVZZWlIVW9HWU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAx+lQ8a0b15MiAtqWS/0U4ITxTocGHRY5h1eHprhWJeQqw0HgfeveuCOWI67c
+4bubzDLl/nEiKfwQ6hm9LToc6cU3Zs+niAkXHOHIuGAcXv3z1ilXM57a/q5BnKW
oJAsdurecyr4HHyAi9FukYDT6CoA5K8MTOu3dLwA/NRQ9eIkQ0cPi3PStpxVxuv2
WhwSIZfgOTrtBGCDlNN/D25POuq1slx/H3PA/xjlNdkyzK1z8EjKtxQRH7NjxEIx
xNf9Hcsd0asNhxGmTv+tWF0gnO76XBrmEoCmyq65kuvQs+o/1tOnUNU/ZoTfep5s
l9nsM4EmgejrwN1ILO9vUL5aIw==
-----END CERTIFICATE-----
Generated at Thu May 21 10:16:14 2026 by rpki-client