Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft
File:                     3HxGdMlvt2fql8B49oDvV07eu78.mft (raw, json)
Hash identifier:          pP4PQI/6Qpjyoxw0cAwjqFTUAnX5T6xM5pvM9RuL7t8=
Subject key identifier:   25:97:0B:60:94:B6:65:99:88:37:FF:07:11:64:2A:5E:24:CE:4F:7E
Authority key identifier: DC:7C:46:74:C9:6F:B7:67:EA:97:C0:78:F6:80:EF:57:4E:DE:BB:BF
Certificate issuer:       /CN=A917CD31/serialNumber=DC7C4674C96FB767EA97C078F680EF574EDEBBBF
Certificate serial:       0726
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HxGdMlvt2fql8B49oDvV07eu78.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft
Manifest number:          071C
Signing time:             Wed 20 May 2026 21:58:21 +0000
Manifest this update:     Wed 20 May 2026 21:58:20 +0000
Manifest next update:     Wed 27 May 2026 21:58:20 +0000
Files and hashes:         1: 3HxGdMlvt2fql8B49oDvV07eu78.crl (hash: WOhLlcusj6Nt817orR/GfACqVoBjx2wZ1va9lYwX7wc=)
                          2: A88A17FA823C11EBB35EF50FC4F9AE02.roa (hash: 7b7X7lAmpe4VIztKAFHWhrlQ0MJNaUA4ExxoVQIfMEA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.crl
                          rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HxGdMlvt2fql8B49oDvV07eu78.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 21:58:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1830 (0x726)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917CD31, serialNumber=DC7C4674C96FB767EA97C078F680EF574EDEBBBF
        Validity
            Not Before: May 20 21:58:20 2026 GMT
            Not After : May 27 21:58:20 2026 GMT
        Subject: CN=6a0e2e7d-777d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d3:76:c9:2c:93:f9:02:e6:6c:12:60:01:c5:
                    7e:80:68:44:fb:78:ef:5d:f0:9b:14:fa:e9:5b:20:
                    12:89:5e:0d:28:b3:a9:88:13:1f:8a:46:44:d6:92:
                    30:fd:23:e4:53:3e:93:5d:4f:03:d9:69:be:da:00:
                    39:6a:21:f3:32:1b:c9:52:02:b8:0f:0a:12:36:e4:
                    42:6b:36:33:9e:66:f6:56:64:0a:8a:3f:bf:3c:ed:
                    54:2c:e4:aa:d6:44:cf:a4:0f:27:3b:39:79:12:ee:
                    d4:34:d3:1d:57:50:5d:60:bd:b4:25:da:8c:5e:72:
                    52:df:4b:f5:da:90:df:2d:24:3a:1d:1c:97:7f:6f:
                    a0:1d:c7:60:47:07:56:15:55:59:a5:31:ed:07:f0:
                    53:25:4c:bb:84:e5:b0:1f:e9:04:12:f3:c6:a3:2e:
                    54:d7:9d:22:be:74:f0:91:11:97:82:1a:7f:91:32:
                    20:7a:e7:24:3d:c3:dd:c2:82:98:86:c2:73:9f:b2:
                    c9:bd:ec:81:41:20:a8:d4:2c:38:ce:23:c2:24:fa:
                    cf:61:9e:d8:08:ab:9e:df:5f:6f:59:65:86:a8:cd:
                    d1:65:8d:1c:ca:e7:c6:4a:a7:ed:56:50:eb:d4:e6:
                    51:6e:40:c4:3c:bf:19:5a:86:c4:ad:91:f8:a2:b9:
                    a3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:97:0B:60:94:B6:65:99:88:37:FF:07:11:64:2A:5E:24:CE:4F:7E
            X509v3 Authority Key Identifier:
                keyid:DC:7C:46:74:C9:6F:B7:67:EA:97:C0:78:F6:80:EF:57:4E:DE:BB:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HxGdMlvt2fql8B49oDvV07eu78.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:4f:b5:2c:b4:b4:59:56:41:0b:c8:ef:89:36:ca:72:58:78:
         eb:e8:ca:37:28:03:ab:6c:88:64:75:3e:53:aa:e5:52:a5:fe:
         ed:da:48:f8:da:7f:19:94:1e:ca:20:06:c9:bc:ed:5e:37:60:
         4b:d8:4a:eb:76:75:db:0b:42:cf:fa:83:09:8a:0b:47:1e:fb:
         05:68:bc:03:9b:ad:80:9a:9a:98:85:ad:df:10:22:87:7a:b1:
         65:bb:e6:70:d1:a7:b9:33:3d:ac:6a:dc:e3:36:8f:46:e8:a1:
         04:9b:fc:b0:af:52:fc:19:ea:8a:51:4e:10:6e:d4:07:6e:16:
         52:92:70:8b:77:36:f1:30:a9:70:ba:df:9c:fe:1e:c8:ea:c1:
         b5:a0:50:5e:70:b0:5f:0b:a7:3d:62:58:69:0c:1d:13:0a:91:
         f3:97:78:fc:ff:28:46:89:47:4e:89:14:fb:b7:76:27:c6:ac:
         2b:a9:5b:38:2c:ec:28:87:a9:81:98:20:f9:ea:68:fc:7a:56:
         ab:6a:cc:a3:da:e4:ef:8e:83:28:cf:96:a6:c5:60:14:4a:14:
         36:1f:4a:d9:38:61:ad:a6:2d:66:90:90:a5:50:c8:f3:12:15:
         31:22:a5:66:02:b8:5d:3c:9e:c6:16:cb:9a:b4:19:c9:2f:23:
         fc:e8:b8:e7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICByYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0NEMzExMTAvBgNVBAUTKERDN0M0Njc0Qzk2RkI3NjdFQTk3QzA3OEY2ODBFRjU3
NEVERUJCQkYwHhcNMjYwNTIwMjE1ODIwWhcNMjYwNTI3MjE1ODIwWjAYMRYwFAYD
VQQDEw02YTBlMmU3ZC03NzdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu9N2ySyT+QLmbBJgAcV+gGhE+3jvXfCbFPrpWyASiV4NKLOpiBMfikZE1pIw
/SPkUz6TXU8D2Wm+2gA5aiHzMhvJUgK4DwoSNuRCazYznmb2VmQKij+/PO1ULOSq
1kTPpA8nOzl5Eu7UNNMdV1BdYL20JdqMXnJS30v12pDfLSQ6HRyXf2+gHcdgRwdW
FVVZpTHtB/BTJUy7hOWwH+kEEvPGoy5U150ivnTwkRGXghp/kTIgeuckPcPdwoKY
hsJzn7LJveyBQSCo1Cw4ziPCJPrPYZ7YCKue319vWWWGqM3RZY0cyufGSqftVlDr
1OZRbkDEPL8ZWobErZH4ormjgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCWXC2CU
tmWZiDf/BxFkKl4kzk9+MB8GA1UdIwQYMBaAFNx8RnTJb7dn6pfAePaA71dO3ru/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0QzMS83NUY1N0IxMDgy
M0ExMUVCOEFFMjM2MEFDNEY5QUUwMi8zSHhHZE1sdnQyZnFsOEI0OW9EdlYwN2V1
NzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNIeEdkTWx2dDJmcWw4QjQ5b0R2VjA3ZXU3OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
Q0QzMS83NUY1N0IxMDgyM0ExMUVCOEFFMjM2MEFDNEY5QUUwMi8zSHhHZE1sdnQy
ZnFsOEI0OW9EdlYwN2V1NzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWk+1LLS0WVZBC8jviTbKclh46+jKNygDq2yIZHU+U6rlUqX+7dpI+Np/GZQe
yiAGybztXjdgS9hK63Z12wtCz/qDCYoLRx77BWi8A5utgJqamIWt3xAih3qxZbvm
cNGnuTM9rGrc4zaPRuihBJv8sK9S/BnqilFOEG7UB24WUpJwi3c28TCpcLrfnP4e
yOrBtaBQXnCwXwunPWJYaQwdEwqR85d4/P8oRolHTokU+7d2J8asK6lbOCzsKIep
gZgg+epo/HpWq2rMo9rk746DKM+WpsVgFEoUNh9K2ThhraYtZpCQpVDI8xIVMSKl
ZgK4XTyexhbLmrQZyS8j/Oi45w==
-----END CERTIFICATE-----
Generated at Thu May 21 10:16:00 2026 by rpki-client