Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft
File:                     4bseYl2967MiD_kjzWoRos4kUZY.mft (raw, json)
Hash identifier:          vYsyjjiC7HaUDlOR9Lo/4QDK72CXWKYf3icCFgCnNMY=
Subject key identifier:   70:D0:29:56:B0:79:B4:1C:9F:5F:23:AC:FA:AD:87:1E:06:14:16:B7
Authority key identifier: E1:BB:1E:62:5D:BD:EB:B3:22:0F:F9:23:CD:6A:11:A2:CE:24:51:96
Certificate issuer:       /CN=A916A31E/serialNumber=E1BB1E625DBDEBB3220FF923CD6A11A2CE245196
Certificate serial:       18C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft
Manifest number:          187E
Signing time:             Sat 16 May 2026 16:28:11 +0000
Manifest this update:     Sat 16 May 2026 16:28:11 +0000
Manifest next update:     Sat 23 May 2026 16:28:11 +0000
Files and hashes:         1: 4bseYl2967MiD_kjzWoRos4kUZY.crl (hash: SqC1qisx4Fg1TJH5LG/DmUNCRGd7MjeX8plU6IgRnV8=)
                          2: FA2CCDCCDE6111E88BFD7810C4F9AE02.roa (hash: 7ZAEA0r9lzg48+UEX+NDAtHxRbz47d+Yj5cRgz6OmvE=)
                          3: 2A3161763D9F11EEACFF646FC4F9AE02.roa (hash: dgLQAd17tzBsK66kQ0H0dwAp53SX6GdmC4ibG9feFVM=)
                          4: 2B04CC143D9F11EEACFF646FC4F9AE02.roa (hash: X9rsotZF7CeUjy+uRHBz/MOZBNYjTpkQ13IOleGdKEE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.crl
                          rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 May 2026 14:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6337 (0x18c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A31E, serialNumber=E1BB1E625DBDEBB3220FF923CD6A11A2CE245196
        Validity
            Not Before: May 16 16:28:11 2026 GMT
            Not After : May 23 16:28:11 2026 GMT
        Subject: CN=6a089b1b-ca52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:80:17:eb:f3:0a:44:af:34:70:c1:3d:c3:5c:
                    22:f9:30:ea:8d:1d:0e:9f:88:05:53:08:79:0f:2a:
                    1e:13:db:10:97:18:58:63:bd:9f:77:45:11:58:e4:
                    60:ec:d2:f4:31:7d:ac:1b:78:d6:da:7c:23:ff:d6:
                    5f:61:61:25:63:3c:51:e4:f4:a9:20:99:15:23:29:
                    9d:74:be:21:de:3f:76:a3:00:97:2e:b8:aa:8a:49:
                    d4:f8:ca:2a:8f:11:ca:f8:eb:f7:cc:1d:bf:a0:e0:
                    bd:ca:d3:54:0e:c5:13:47:6c:bf:6b:08:76:b4:37:
                    d9:da:b6:5d:13:58:af:2e:d0:16:c5:d7:cf:ef:2c:
                    96:0f:02:9d:0e:92:77:1f:33:0c:03:db:51:3d:86:
                    55:22:c1:2f:ed:30:91:ff:c9:cc:de:5c:dc:9b:6d:
                    a0:96:29:10:4e:5e:c5:e1:41:2b:b5:0e:d6:a0:62:
                    03:1c:e9:fe:07:51:d3:84:69:8d:be:c5:0d:1b:21:
                    7d:ba:0b:4b:00:dc:ba:d3:30:6f:63:40:a9:0d:d4:
                    13:dd:d4:8a:43:ef:54:81:a5:18:8a:fa:21:ac:46:
                    77:67:32:9c:a1:2e:0e:18:77:57:77:ef:01:2e:41:
                    70:58:39:54:4c:2b:ac:23:9c:e1:dd:a4:16:44:ae:
                    44:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:D0:29:56:B0:79:B4:1C:9F:5F:23:AC:FA:AD:87:1E:06:14:16:B7
            X509v3 Authority Key Identifier:
                keyid:E1:BB:1E:62:5D:BD:EB:B3:22:0F:F9:23:CD:6A:11:A2:CE:24:51:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:e4:d1:f8:33:8a:c7:13:39:b1:65:17:94:0e:b5:80:72:d5:
         9e:db:10:c9:5d:9a:12:d6:e3:af:1a:0b:44:1c:d2:05:58:1b:
         a2:04:f9:bd:ff:50:da:ff:c3:85:d5:a6:e4:86:4a:b2:86:af:
         c2:53:b9:49:4b:6f:0e:a0:34:c4:ac:e4:85:da:19:f9:c4:46:
         af:ec:6d:50:2b:24:c0:4d:59:28:c8:26:45:9a:7a:e0:86:c6:
         a6:57:16:63:4e:c5:fc:21:74:c7:9f:6b:bd:ce:53:c4:a9:98:
         2b:45:16:97:91:51:91:cc:95:cf:60:76:c6:4c:d3:d2:94:17:
         b4:11:89:d8:cb:6c:d6:2d:b7:61:7d:cf:d4:cc:26:69:d1:21:
         0a:7a:10:89:0f:29:fc:a9:ad:fb:c2:29:84:8d:78:5b:db:51:
         12:2c:b5:6a:40:b7:34:57:57:2a:4d:71:1a:2a:d5:24:75:a6:
         59:c3:f5:a2:d7:ee:80:a5:ef:23:ae:9c:07:66:1f:ac:e2:01:
         8f:f5:d7:22:15:48:ef:6e:01:ce:b0:9e:60:30:8d:b0:76:92:
         1c:1a:51:c0:7d:0a:ac:87:84:6e:17:3e:fb:fd:f5:2e:3f:53:
         88:ed:07:c4:7a:c4:53:30:5a:3a:92:1a:0f:a6:ae:7b:fd:f5:
         75:ee:f7:90
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkEzMUUxMTAvBgNVBAUTKEUxQkIxRTYyNURCREVCQjMyMjBGRjkyM0NENkExMUEy
Q0UyNDUxOTYwHhcNMjYwNTE2MTYyODExWhcNMjYwNTIzMTYyODExWjAYMRYwFAYD
VQQDEw02YTA4OWIxYi1jYTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9YAX6/MKRK80cME9w1wi+TDqjR0On4gFUwh5DyoeE9sQlxhYY72fd0URWORg
7NL0MX2sG3jW2nwj/9ZfYWElYzxR5PSpIJkVIymddL4h3j92owCXLriqiknU+Moq
jxHK+Ov3zB2/oOC9ytNUDsUTR2y/awh2tDfZ2rZdE1ivLtAWxdfP7yyWDwKdDpJ3
HzMMA9tRPYZVIsEv7TCR/8nM3lzcm22glikQTl7F4UErtQ7WoGIDHOn+B1HThGmN
vsUNGyF9ugtLANy60zBvY0CpDdQT3dSKQ+9UgaUYivohrEZ3ZzKcoS4OGHdXd+8B
LkFwWDlUTCusI5zh3aQWRK5EoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHDQKVaw
ebQcn18jrPqthx4GFBa3MB8GA1UdIwQYMBaAFOG7HmJdveuzIg/5I81qEaLOJFGW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTMxRS9DMUZBMDgyQ0M4
Q0IxMUU3OTBBODgxMzhDNEY5QUUwMi80YnNlWWwyOTY3TWlEX2tqeldvUm9zNGtV
WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRic2VZbDI5NjdNaURfa2p6V29Sb3M0a1VaWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QTMxRS9DMUZBMDgyQ0M4Q0IxMUU3OTBBODgxMzhDNEY5QUUwMi80YnNlWWwyOTY3
TWlEX2tqeldvUm9zNGtVWlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQOTR+DOKxxM5sWUXlA61gHLVntsQyV2aEtbjrxoLRBzSBVgbogT5vf9Q2v/D
hdWm5IZKsoavwlO5SUtvDqA0xKzkhdoZ+cRGr+xtUCskwE1ZKMgmRZp64IbGplcW
Y07F/CF0x59rvc5TxKmYK0UWl5FRkcyVz2B2xkzT0pQXtBGJ2Mts1i23YX3P1Mwm
adEhCnoQiQ8p/Kmt+8IphI14W9tREiy1akC3NFdXKk1xGirVJHWmWcP1otfugKXv
I66cB2YfrOIBj/XXIhVI724BzrCeYDCNsHaSHBpRwH0KrIeEbhc++/31Lj9TiO0H
xHrEUzBaOpIaD6aue/31de73kA==
-----END CERTIFICATE-----
Generated at Sat May 16 22:42:22 2026 by rpki-client