Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft
File:                     Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft (raw, json)
Hash identifier:          4IGZpdAGbwszkwNHqE542+3aUH3ZzyXPBgj6gV8c/VQ=
Subject key identifier:   D6:23:60:E5:03:F3:07:76:D8:C4:D5:2F:8D:AB:6D:30:1B:4D:00:69
Authority key identifier: 0D:CA:FA:C1:45:B2:2F:15:60:78:01:66:CD:1F:15:15:04:EE:F8:A1
Certificate issuer:       /CN=A917C0CC/serialNumber=0DCAFAC145B22F1560780166CD1F151504EEF8A1
Certificate serial:       93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft
Manifest number:          85
Signing time:             Tue 19 May 2026 07:29:08 +0000
Manifest this update:     Tue 19 May 2026 07:29:08 +0000
Manifest next update:     Tue 26 May 2026 07:29:08 +0000
Files and hashes:         1: Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl (hash: avx8u3lhdn9t1Z4+9c7WbJBuJS0Lm+r9cLhd6eZVvuE=)
                          2: B339551A8F5911F0AFB88342C4F9AE02.roa (hash: 0idLIxOamxpOhUGhRED9KgyjbGEjlf8TTsjVHp7uchk=)
                          3: 6579B1188F5811F0BE083D3DC4F9AE02.roa (hash: obQ1muZzlSAR/yzoM3A2VB9QL7USa5r6753HXKfwqfg=)
                          4: D84A5FAC8F5911F081D9D142C4F9AE02.roa (hash: Xqj+ZL/qDvuXT5tU1wBoIGdlE5RCVHT+rKP7QOQndAs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl
                          rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 May 2026 07:29:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147 (0x93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C0CC, serialNumber=0DCAFAC145B22F1560780166CD1F151504EEF8A1
        Validity
            Not Before: May 19 07:29:08 2026 GMT
            Not After : May 26 07:29:08 2026 GMT
        Subject: CN=6a0c1144-7eca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c1:46:d2:4d:5d:bb:7b:8d:14:1c:6c:29:e4:
                    56:68:34:09:f7:0a:10:60:d1:18:f3:1a:61:05:1b:
                    6a:e8:fb:69:b6:12:46:ac:e9:da:35:79:cb:fe:2f:
                    05:14:91:94:95:69:9e:a3:1e:cd:4c:2e:54:c5:b7:
                    2f:09:d7:74:c6:dc:f9:fe:8c:f1:91:b7:58:38:89:
                    ec:c5:f1:7a:08:33:70:57:65:ab:13:11:e4:30:69:
                    6b:f6:11:63:1d:2d:bb:d5:bc:5b:9c:12:2f:d6:d1:
                    cb:c8:38:d6:35:3a:88:63:a3:0a:b1:b9:88:21:09:
                    97:32:90:16:06:3a:f8:f4:54:b8:dc:1b:14:2f:d1:
                    6f:c3:47:50:e7:e4:24:dd:89:aa:5d:93:f9:66:e1:
                    b8:f4:0a:03:ce:46:64:63:e0:ba:8e:e5:c6:e9:21:
                    17:c6:ff:01:17:71:f8:4b:59:6d:56:19:90:4e:85:
                    ec:32:ce:92:c9:3e:77:f3:8a:63:13:b3:59:2b:5e:
                    a7:04:44:7d:12:1f:84:4e:49:7a:96:ba:79:ba:fa:
                    8b:dd:60:d3:b5:2c:d9:56:d8:2d:44:66:7c:22:ed:
                    b7:b9:52:cd:a1:4b:20:75:46:cd:ad:9a:70:14:32:
                    09:9c:91:18:23:7a:d6:b8:05:86:2b:2d:4f:d3:4f:
                    60:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:23:60:E5:03:F3:07:76:D8:C4:D5:2F:8D:AB:6D:30:1B:4D:00:69
            X509v3 Authority Key Identifier:
                keyid:0D:CA:FA:C1:45:B2:2F:15:60:78:01:66:CD:1F:15:15:04:EE:F8:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:7c:85:a5:57:0a:d5:dd:59:77:7b:c7:82:c6:f2:73:da:1b:
         04:4a:c9:e0:78:69:f4:6f:df:f8:8a:e9:a7:9a:c2:e5:31:4c:
         dc:10:7c:bf:5b:d0:0e:83:42:f4:c5:d1:de:c7:f5:16:66:36:
         dc:28:c5:7a:9a:88:d4:76:1e:2f:b2:20:66:bf:a2:20:98:03:
         26:5b:dc:38:53:22:ed:6b:50:f2:03:23:7e:c1:3a:32:fb:ee:
         c8:8a:eb:6d:e3:0e:85:4e:c1:12:64:cb:2a:14:a1:16:9d:a4:
         8c:ff:36:48:22:f0:a1:b3:f4:4d:08:dd:cc:95:92:4d:89:89:
         4a:47:1a:6c:40:77:da:a4:26:33:92:f9:90:62:2e:44:26:1f:
         31:80:ce:9e:26:88:68:f5:ac:b9:32:9d:9c:29:e1:e5:e9:be:
         45:13:0d:f0:f7:68:a9:df:3f:ff:53:15:2f:d9:d1:b1:1b:c8:
         37:15:75:75:9a:ca:ca:31:fb:53:d5:d3:c1:96:35:38:bf:db:
         4f:73:41:3d:38:a2:25:d6:b7:ae:40:72:5e:c5:42:7a:32:81:
         b3:fa:29:33:cf:37:78:40:76:30:ed:8e:50:f1:0f:ff:f4:52:
         5d:d9:d8:5a:f3:5d:e7:5f:c0:7b:e0:44:d9:38:54:a0:94:2e:
         67:d7:95:36
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0MwQ0MxMTAvBgNVBAUTKDBEQ0FGQUMxNDVCMjJGMTU2MDc4MDE2NkNEMUYxNTE1
MDRFRUY4QTEwHhcNMjYwNTE5MDcyOTA4WhcNMjYwNTI2MDcyOTA4WjAYMRYwFAYD
VQQDEw02YTBjMTE0NC03ZWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvcFG0k1du3uNFBxsKeRWaDQJ9woQYNEY8xphBRtq6PtpthJGrOnaNXnL/i8F
FJGUlWmeox7NTC5UxbcvCdd0xtz5/ozxkbdYOInsxfF6CDNwV2WrExHkMGlr9hFj
HS271bxbnBIv1tHLyDjWNTqIY6MKsbmIIQmXMpAWBjr49FS43BsUL9Fvw0dQ5+Qk
3YmqXZP5ZuG49AoDzkZkY+C6juXG6SEXxv8BF3H4S1ltVhmQToXsMs6SyT5384pj
E7NZK16nBER9Eh+ETkl6lrp5uvqL3WDTtSzZVtgtRGZ8Iu23uVLNoUsgdUbNrZpw
FDIJnJEYI3rWuAWGKy1P009gaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNYjYOUD
8wd22MTVL42rbTAbTQBpMB8GA1UdIwQYMBaAFA3K+sFFsi8VYHgBZs0fFRUE7vih
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzBDQy84RkNDQzdGODhG
NTcxMUYwOUM1MUVDM0JDNEY5QUUwMi9EY3I2d1VXeUx4VmdlQUZtelI4VkZRVHUt
S0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RjcjZ3VVd5THhWZ2VBRm16UjhWRlFUdS1LRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QzBDQy84RkNDQzdGODhGNTcxMUYwOUM1MUVDM0JDNEY5QUUwMi9EY3I2d1VXeUx4
VmdlQUZtelI4VkZRVHUtS0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADnyFpVcK1d1Zd3vHgsbyc9obBErJ4Hhp9G/f+Irpp5rC5TFM3BB8v1vQDoNC
9MXR3sf1FmY23CjFepqI1HYeL7IgZr+iIJgDJlvcOFMi7WtQ8gMjfsE6MvvuyIrr
beMOhU7BEmTLKhShFp2kjP82SCLwobP0TQjdzJWSTYmJSkcabEB32qQmM5L5kGIu
RCYfMYDOniaIaPWsuTKdnCnh5em+RRMN8Pdoqd8//1MVL9nRsRvINxV1dZrKyjH7
U9XTwZY1OL/bT3NBPTiiJda3rkByXsVCejKBs/opM883eEB2MO2OUPEP//RSXdnY
WvNd51/Ae+BE2ThUoJQuZ9eVNg==
-----END CERTIFICATE-----
Generated at Thu May 21 09:37:12 2026 by rpki-client