Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.mft
File:                     pyf1mySxFKJR_fd_U7-g7GkeJaU.mft (raw, json)
Hash identifier:          JNxs0sFgzPmC/ioZGPEoU0wadDk8zbAMt04svPShngs=
Subject key identifier:   4B:A1:26:6B:E1:CB:42:F7:B3:B7:4F:28:B1:58:4B:00:6D:B9:44:77
Authority key identifier: A7:27:F5:9B:24:B1:14:A2:51:FD:F7:7F:53:BF:A0:EC:69:1E:25:A5
Certificate issuer:       /CN=A918232F/serialNumber=A727F59B24B114A251FDF77F53BFA0EC691E25A5
Certificate serial:       155F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pyf1mySxFKJR_fd_U7-g7GkeJaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.mft
Manifest number:          154A
Signing time:             Wed 20 May 2026 16:48:01 +0000
Manifest this update:     Wed 20 May 2026 16:48:00 +0000
Manifest next update:     Wed 27 May 2026 16:48:00 +0000
Files and hashes:         1: pyf1mySxFKJR_fd_U7-g7GkeJaU.crl (hash: QwbkLsOqCmXIFAFkQ0E7WKwU8/6bg2ozBQT1FMIVs/A=)
                          2: 530FB34C664D11E89967A549C4F9AE02.roa (hash: L35F7snTd+k2kkTxwJ/jTFRZ1ynip+q6MeQXF9faxdw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.crl
                          rsync://rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pyf1mySxFKJR_fd_U7-g7GkeJaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 16:48:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5471 (0x155f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918232F, serialNumber=A727F59B24B114A251FDF77F53BFA0EC691E25A5
        Validity
            Not Before: May 20 16:48:00 2026 GMT
            Not After : May 27 16:48:00 2026 GMT
        Subject: CN=6a0de5c1-5675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:af:fa:06:87:a8:47:ea:a0:a8:03:d3:7c:1e:
                    4c:6d:99:d0:02:75:85:98:9a:f7:9c:43:48:b2:8e:
                    ea:eb:a2:11:45:be:67:e3:26:79:07:8b:4c:75:29:
                    b1:28:c2:d3:e5:22:8d:75:fc:e6:70:4c:c4:54:c2:
                    ba:2d:08:73:b2:cc:bc:d7:24:7a:1c:fa:4f:c8:d3:
                    10:52:d8:f7:81:9c:7a:da:a4:51:2a:c5:32:a5:6f:
                    87:50:66:3a:60:d0:90:9f:54:58:b2:21:61:ff:92:
                    a2:02:18:a7:cc:22:a3:75:2d:18:7d:a3:66:b0:02:
                    b4:6c:e4:a2:5c:0d:5e:fb:a3:9c:bd:80:e9:2c:cf:
                    85:9e:4d:69:8c:da:16:0a:06:95:2b:2d:77:5c:3a:
                    09:c6:46:9c:cd:7a:a8:75:67:8e:18:df:b6:c6:12:
                    e3:0d:6a:e0:01:dc:9f:7c:47:f3:d4:66:09:a1:4d:
                    a1:5a:6c:9c:a2:ac:74:de:09:ac:19:d6:40:6d:dd:
                    36:25:28:2f:ed:a6:5a:81:8f:a7:5e:d1:f4:a7:21:
                    bc:b1:06:db:f9:3f:74:5e:12:13:44:0f:fd:35:de:
                    69:c9:41:b8:34:d9:04:7f:cc:24:30:e8:aa:7d:e0:
                    7a:16:f6:ec:a9:a0:45:24:97:5d:51:bd:0b:23:1a:
                    d8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:A1:26:6B:E1:CB:42:F7:B3:B7:4F:28:B1:58:4B:00:6D:B9:44:77
            X509v3 Authority Key Identifier:
                keyid:A7:27:F5:9B:24:B1:14:A2:51:FD:F7:7F:53:BF:A0:EC:69:1E:25:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pyf1mySxFKJR_fd_U7-g7GkeJaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:e0:67:c6:2f:df:f1:ec:38:e6:47:94:41:37:d0:8e:a8:07:
         a6:56:b3:6a:a9:e7:fa:2d:c3:f0:74:ee:94:92:c7:14:82:8c:
         9c:a8:49:b0:8e:1d:0b:6f:b3:5d:70:4b:6f:28:ae:a4:73:22:
         ab:14:ea:bd:05:a3:5d:54:56:bc:0a:ea:70:8e:f5:c0:df:04:
         53:c4:a7:c8:f2:bc:3d:c1:48:24:03:a3:1c:d4:81:28:06:b3:
         7b:27:d7:84:b1:80:03:8c:1a:a9:f0:cb:31:60:27:63:15:f1:
         57:69:3c:5f:80:be:db:ef:4b:75:4f:e8:2c:32:e9:4e:b6:33:
         96:ce:8d:12:b1:f9:58:d5:eb:4c:46:70:09:24:05:b5:f0:72:
         7a:b8:6c:6f:51:66:31:15:a8:59:81:34:2c:c4:15:12:06:94:
         6c:2a:3c:8f:0d:b3:78:dd:e5:92:79:05:95:f4:c8:c4:37:ef:
         0e:6a:da:89:ab:90:45:3b:cb:67:55:47:57:15:fa:91:c7:d1:
         0b:ab:2d:30:38:a1:5a:b6:cf:07:47:18:ca:77:43:93:8b:48:
         34:35:ac:48:cd:2f:a6:ab:bd:e5:21:b1:55:45:73:8a:45:1e:
         6d:7b:73:b8:ac:a7:ca:9b:1b:4b:02:fb:43:30:26:af:5f:97:
         1a:c7:3d:54
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODIzMkYxMTAvBgNVBAUTKEE3MjdGNTlCMjRCMTE0QTI1MUZERjc3RjUzQkZBMEVD
NjkxRTI1QTUwHhcNMjYwNTIwMTY0ODAwWhcNMjYwNTI3MTY0ODAwWjAYMRYwFAYD
VQQDEw02YTBkZTVjMS01Njc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1q/6BoeoR+qgqAPTfB5MbZnQAnWFmJr3nENIso7q66IRRb5n4yZ5B4tMdSmx
KMLT5SKNdfzmcEzEVMK6LQhzssy81yR6HPpPyNMQUtj3gZx62qRRKsUypW+HUGY6
YNCQn1RYsiFh/5KiAhinzCKjdS0YfaNmsAK0bOSiXA1e+6OcvYDpLM+Fnk1pjNoW
CgaVKy13XDoJxkaczXqodWeOGN+2xhLjDWrgAdyffEfz1GYJoU2hWmycoqx03gms
GdZAbd02JSgv7aZagY+nXtH0pyG8sQbb+T90XhITRA/9Nd5pyUG4NNkEf8wkMOiq
feB6FvbsqaBFJJddUb0LIxrY1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEuhJmvh
y0L3s7dPKLFYSwBtuUR3MB8GA1UdIwQYMBaAFKcn9ZsksRSiUf33f1O/oOxpHiWl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjMyRi8zMzQ1QzRDNjY2
NEMxMUU4QjcxQUZFNDZDNEY5QUUwMi9weWYxbXlTeEZLSlJfZmRfVTctZzdHa2VK
YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3B5ZjFteVN4RktKUl9mZF9VNy1nN0drZUphVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MjMyRi8zMzQ1QzRDNjY2NEMxMUU4QjcxQUZFNDZDNEY5QUUwMi9weWYxbXlTeEZL
SlJfZmRfVTctZzdHa2VKYVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZ+Bnxi/f8ew45keUQTfQjqgHplazaqnn+i3D8HTulJLHFIKMnKhJsI4dC2+z
XXBLbyiupHMiqxTqvQWjXVRWvArqcI71wN8EU8SnyPK8PcFIJAOjHNSBKAazeyfX
hLGAA4waqfDLMWAnYxXxV2k8X4C+2+9LdU/oLDLpTrYzls6NErH5WNXrTEZwCSQF
tfByerhsb1FmMRWoWYE0LMQVEgaUbCo8jw2zeN3lknkFlfTIxDfvDmraiauQRTvL
Z1VHVxX6kcfRC6stMDihWrbPB0cYyndDk4tINDWsSM0vpqu95SGxVUVzikUebXtz
uKynypsbSwL7QzAmr1+XGsc9VA==
-----END CERTIFICATE-----
Generated at Thu May 21 11:39:37 2026 by rpki-client