Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FAD2/834AC47859BF11E989B93B63C4F9AE02/Sp1OqbVF6hBQTTa2X6owSfmezUY.mft
File:                     Sp1OqbVF6hBQTTa2X6owSfmezUY.mft (raw, json)
Hash identifier:          22gFbDuUKOqMScAyhxjsGqm20JnjAgIUfDR8wEruBGM=
Subject key identifier:   93:05:F8:5E:FF:3A:6A:73:99:BE:09:CA:57:4F:C6:62:59:66:FC:2D
Authority key identifier: 4A:9D:4E:A9:B5:45:EA:10:50:4D:36:B6:5F:AA:30:49:F9:9E:CD:46
Certificate issuer:       /CN=A915FAD2/serialNumber=4A9D4EA9B545EA10504D36B65FAA3049F99ECD46
Certificate serial:       107C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sp1OqbVF6hBQTTa2X6owSfmezUY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FAD2/834AC47859BF11E989B93B63C4F9AE02/Sp1OqbVF6hBQTTa2X6owSfmezUY.mft
Manifest number:          106D
Signing time:             Wed 20 May 2026 17:23:59 +0000
Manifest this update:     Wed 20 May 2026 17:23:58 +0000
Manifest next update:     Wed 27 May 2026 17:23:58 +0000
Files and hashes:         1: Sp1OqbVF6hBQTTa2X6owSfmezUY.crl (hash: vHz2I6pMuPL+H9XkCaTMREHiA+lgwrSdoQyw4mRCTw8=)
                          2: D34588789F8A11ECB8E03812C4F9AE02.roa (hash: rasmIGbbkGyXUadctbc+VdY6lJu2lwrTgiDYqa6HQ3Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FAD2/834AC47859BF11E989B93B63C4F9AE02/Sp1OqbVF6hBQTTa2X6owSfmezUY.crl
                          rsync://rpki.apnic.net/member_repository/A915FAD2/834AC47859BF11E989B93B63C4F9AE02/Sp1OqbVF6hBQTTa2X6owSfmezUY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sp1OqbVF6hBQTTa2X6owSfmezUY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 17:23:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4220 (0x107c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FAD2, serialNumber=4A9D4EA9B545EA10504D36B65FAA3049F99ECD46
        Validity
            Not Before: May 20 17:23:58 2026 GMT
            Not After : May 27 17:23:58 2026 GMT
        Subject: CN=6a0dee2e-7879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:08:59:98:a2:bf:21:5c:0a:91:64:e2:06:e1:
                    ac:83:f1:12:68:a1:e9:c5:b5:d8:0b:6c:24:ac:7c:
                    5d:ff:9b:ef:c0:bc:76:d9:bf:74:a6:f3:4e:f7:e2:
                    ee:80:58:a0:c9:d1:e8:6d:7d:d9:d4:e7:40:e2:96:
                    e7:25:48:df:69:ec:c5:85:64:7e:3f:ac:34:19:3c:
                    18:5f:32:78:5f:37:68:f2:3b:5d:d1:89:4f:38:9e:
                    78:d4:29:38:1e:e8:03:30:5e:59:eb:1c:71:7c:ef:
                    f5:83:cc:8f:d4:6f:eb:a9:db:7f:8e:23:92:7a:b4:
                    5b:ef:f8:e8:23:32:88:2d:77:2b:e4:9e:8a:ce:fc:
                    b8:3d:56:5f:c7:b0:c1:d9:7d:e3:53:33:17:42:7a:
                    a9:7c:81:26:5a:ad:fa:d5:23:39:40:a3:dd:42:9a:
                    5a:27:d8:4b:27:1d:ed:55:2e:ce:34:a2:6e:1a:18:
                    05:ba:9d:e2:31:71:79:6f:5a:63:96:9f:e3:d8:ac:
                    d3:f0:10:03:d7:1f:f8:50:8d:30:56:93:32:79:56:
                    59:6b:19:6e:b5:4d:07:77:02:60:17:51:04:3c:9e:
                    99:87:25:93:82:14:1b:13:09:c1:18:82:e2:c3:a9:
                    8c:79:1b:00:35:b4:03:31:0c:c0:34:d4:8b:ba:02:
                    4f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:05:F8:5E:FF:3A:6A:73:99:BE:09:CA:57:4F:C6:62:59:66:FC:2D
            X509v3 Authority Key Identifier:
                keyid:4A:9D:4E:A9:B5:45:EA:10:50:4D:36:B6:5F:AA:30:49:F9:9E:CD:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FAD2/834AC47859BF11E989B93B63C4F9AE02/Sp1OqbVF6hBQTTa2X6owSfmezUY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sp1OqbVF6hBQTTa2X6owSfmezUY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FAD2/834AC47859BF11E989B93B63C4F9AE02/Sp1OqbVF6hBQTTa2X6owSfmezUY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:94:ae:0b:a6:2e:53:ba:17:49:79:87:5e:95:ee:b5:4d:11:
         f8:3e:51:ad:75:d2:2e:17:63:94:a6:33:39:53:38:ba:07:41:
         55:f8:85:2b:63:11:3e:1b:be:70:b3:1b:38:be:ca:03:da:3a:
         ac:f0:5f:91:ca:4e:f5:51:42:4a:c2:fa:b9:d9:51:85:07:ca:
         49:05:9a:1d:4a:cf:7c:ed:28:05:23:7a:3d:d1:6b:12:7c:b6:
         d8:6a:c7:0d:ec:6a:d0:b7:6d:26:e6:37:63:4e:fd:6f:17:61:
         a2:50:f5:1f:47:b3:bc:28:32:96:6d:d2:5f:12:b5:58:6a:b4:
         4c:55:e8:78:77:b4:63:6b:00:cf:91:c6:17:53:f1:56:d6:ef:
         74:4b:cf:0c:0c:b8:ba:49:4f:89:c1:97:33:38:35:fd:d4:2a:
         78:49:75:2f:f7:12:bc:72:00:94:0b:3a:77:de:25:aa:21:ba:
         62:55:74:e5:dc:c8:b2:dc:9c:20:64:9d:3d:26:77:39:86:f4:
         62:ff:3e:f7:c9:06:3d:79:5a:2b:55:1f:a5:5f:76:1f:15:da:
         e8:b7:9f:2e:02:e9:bc:b0:e5:38:a4:34:9c:b4:6e:fa:69:35:
         40:a9:5b:6f:d9:7f:b7:6f:65:7d:89:a3:81:6d:48:11:34:1a:
         30:1e:2d:3b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUZBRDIxMTAvBgNVBAUTKDRBOUQ0RUE5QjU0NUVBMTA1MDREMzZCNjVGQUEzMDQ5
Rjk5RUNENDYwHhcNMjYwNTIwMTcyMzU4WhcNMjYwNTI3MTcyMzU4WjAYMRYwFAYD
VQQDEw02YTBkZWUyZS03ODc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApghZmKK/IVwKkWTiBuGsg/ESaKHpxbXYC2wkrHxd/5vvwLx22b90pvNO9+Lu
gFigydHobX3Z1OdA4pbnJUjfaezFhWR+P6w0GTwYXzJ4Xzdo8jtd0YlPOJ541Ck4
HugDMF5Z6xxxfO/1g8yP1G/rqdt/jiOSerRb7/joIzKILXcr5J6Kzvy4PVZfx7DB
2X3jUzMXQnqpfIEmWq361SM5QKPdQppaJ9hLJx3tVS7ONKJuGhgFup3iMXF5b1pj
lp/j2KzT8BAD1x/4UI0wVpMyeVZZaxlutU0HdwJgF1EEPJ6ZhyWTghQbEwnBGILi
w6mMeRsANbQDMQzANNSLugJPXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJMF+F7/
Ompzmb4JyldPxmJZZvwtMB8GA1UdIwQYMBaAFEqdTqm1ReoQUE02tl+qMEn5ns1G
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkFEMi84MzRBQzQ3ODU5
QkYxMUU5ODlCOTNCNjNDNEY5QUUwMi9TcDFPcWJWRjZoQlFUVGEyWDZvd1NmbWV6
VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NwMU9xYlZGNmhCUVRUYTJYNm93U2ZtZXpVWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RkFEMi84MzRBQzQ3ODU5QkYxMUU5ODlCOTNCNjNDNEY5QUUwMi9TcDFPcWJWRjZo
QlFUVGEyWDZvd1NmbWV6VVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAipSuC6YuU7oXSXmHXpXutU0R+D5RrXXSLhdjlKYzOVM4ugdBVfiFK2MRPhu+
cLMbOL7KA9o6rPBfkcpO9VFCSsL6udlRhQfKSQWaHUrPfO0oBSN6PdFrEny22GrH
Dexq0LdtJuY3Y079bxdholD1H0ezvCgylm3SXxK1WGq0TFXoeHe0Y2sAz5HGF1Px
VtbvdEvPDAy4uklPicGXMzg1/dQqeEl1L/cSvHIAlAs6d94lqiG6YlV05dzIstyc
IGSdPSZ3OYb0Yv8+98kGPXlaK1UfpV92HxXa6LefLgLpvLDlOKQ0nLRu+mk1QKlb
b9l/t29lfYmjgW1IETQaMB4tOw==
-----END CERTIFICATE-----
Generated at Thu May 21 10:19:46 2026 by rpki-client