Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft
File:                     X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft (raw, json)
Hash identifier:          Hx/zi6HiZtid6oMybDOaV1xu8M0nTeHS95/sOmk74ac=
Subject key identifier:   4E:7E:AA:4D:9A:01:3B:EB:87:85:0D:D9:48:12:FB:5F:AA:36:49:0C
Authority key identifier: 5F:E0:4C:95:7A:6C:BC:54:0A:34:F4:53:D1:3E:3F:80:50:C8:F4:EE
Certificate issuer:       /CN=A918A51B/serialNumber=5FE04C957A6CBC540A34F453D13E3F8050C8F4EE
Certificate serial:       027E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft
Manifest number:          0270
Signing time:             Thu 21 May 2026 02:06:57 +0000
Manifest this update:     Thu 21 May 2026 02:06:57 +0000
Manifest next update:     Thu 28 May 2026 02:06:57 +0000
Files and hashes:         1: X-BMlXpsvFQKNPRT0T4_gFDI9O4.crl (hash: d+bpZo29sGj6fDINHN+fhhzalGNzAA0zViaovD8pp5s=)
                          2: 6B9615FCD6E311EE94842842C4F9AE02.roa (hash: u+QDJnt7Mnh/rwyXgRJ0Kw+8drLnsA9xJpkCviyiVSE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.crl
                          rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 02:06:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 638 (0x27e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A51B, serialNumber=5FE04C957A6CBC540A34F453D13E3F8050C8F4EE
        Validity
            Not Before: May 21 02:06:57 2026 GMT
            Not After : May 28 02:06:57 2026 GMT
        Subject: CN=6a0e68c1-a378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:95:ac:a2:24:7a:b2:e5:4f:0c:69:71:1a:d4:
                    0d:4e:9d:b6:7c:8c:a9:40:bb:1b:89:1f:14:14:7e:
                    67:44:8d:30:38:d4:2c:04:7c:15:62:07:fd:d6:61:
                    84:e0:77:1d:aa:d9:8a:8d:b9:64:bb:fb:40:e3:72:
                    1c:65:56:75:de:55:98:66:21:c3:cb:e6:d0:8b:5d:
                    54:ea:ab:55:e2:63:d3:e0:a6:f1:bf:61:79:ae:16:
                    21:ac:8a:9f:ee:40:7c:8c:dd:ce:b3:12:ae:53:98:
                    da:2c:2a:ca:b0:fe:39:58:c9:c2:84:79:4f:09:98:
                    9b:71:a4:9b:31:ce:3a:f9:dd:6c:19:5c:63:0b:02:
                    a3:d0:d8:ae:03:32:44:e8:1e:e9:bc:41:af:ec:02:
                    86:68:08:9e:2e:6e:96:92:f4:79:e6:d9:95:f1:cf:
                    7c:26:4b:bf:bd:b8:3b:9d:79:20:36:a8:fe:26:6d:
                    98:ed:1e:9d:bf:f1:81:c0:1c:fc:5d:24:49:17:35:
                    00:12:2b:fe:ff:fd:86:ab:6d:fa:8b:20:5c:bb:be:
                    8a:1c:ae:ae:f7:28:46:d0:d7:ec:cb:68:33:68:7c:
                    44:31:70:5c:a0:29:3f:e2:bf:52:40:c8:34:dc:4a:
                    ee:b2:53:38:8a:24:94:1a:33:0d:ae:f0:d6:ae:ee:
                    d9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:7E:AA:4D:9A:01:3B:EB:87:85:0D:D9:48:12:FB:5F:AA:36:49:0C
            X509v3 Authority Key Identifier:
                keyid:5F:E0:4C:95:7A:6C:BC:54:0A:34:F4:53:D1:3E:3F:80:50:C8:F4:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:7d:da:50:04:39:9c:b2:79:ae:0a:22:88:4e:f5:91:45:7e:
         9b:a5:0a:9d:ec:a6:f1:78:2f:fb:81:4a:76:f9:a6:de:28:fc:
         fc:b6:60:bb:fb:cc:a7:91:90:86:3a:47:76:2b:83:7e:af:ee:
         33:30:51:1d:95:b2:aa:db:c2:d6:e7:d1:7d:1c:f2:21:b6:55:
         81:cf:73:d6:d0:1e:ca:36:f3:69:f2:48:ee:ac:13:21:0b:04:
         85:7b:7c:04:79:f5:a1:f1:df:78:b5:4d:44:48:65:2e:7f:fe:
         89:84:b0:3b:eb:a3:03:87:04:97:2d:d9:6f:35:68:b8:44:54:
         6b:f2:18:5d:9d:58:71:34:2f:2e:85:62:19:27:cf:40:20:7f:
         47:36:63:21:b8:db:8d:08:73:ec:34:26:08:b5:9b:dd:f5:ca:
         1b:71:3b:6f:84:1e:04:2e:4c:5b:55:f3:14:c9:1b:2e:6f:16:
         bc:29:b3:69:28:dc:f8:15:21:b9:f5:b0:3c:a5:98:58:df:a5:
         eb:a4:30:c3:93:c4:d9:da:bb:9c:3c:cf:e4:62:71:88:92:77:
         2f:24:39:20:c3:f2:4a:35:92:29:7f:f2:6f:48:71:88:c2:ab:
         94:9a:1d:4f:af:59:64:70:e0:47:9d:ba:8d:4e:64:95:7c:ab:
         5d:6c:ba:fe
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAn4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEE1MUIxMTAvBgNVBAUTKDVGRTA0Qzk1N0E2Q0JDNTQwQTM0RjQ1M0QxM0UzRjgw
NTBDOEY0RUUwHhcNMjYwNTIxMDIwNjU3WhcNMjYwNTI4MDIwNjU3WjAYMRYwFAYD
VQQDEw02YTBlNjhjMS1hMzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu5WsoiR6suVPDGlxGtQNTp22fIypQLsbiR8UFH5nRI0wONQsBHwVYgf91mGE
4HcdqtmKjblku/tA43IcZVZ13lWYZiHDy+bQi11U6qtV4mPT4Kbxv2F5rhYhrIqf
7kB8jN3OsxKuU5jaLCrKsP45WMnChHlPCZibcaSbMc46+d1sGVxjCwKj0NiuAzJE
6B7pvEGv7AKGaAieLm6WkvR55tmV8c98Jku/vbg7nXkgNqj+Jm2Y7R6dv/GBwBz8
XSRJFzUAEiv+//2Gq236iyBcu76KHK6u9yhG0Nfsy2gzaHxEMXBcoCk/4r9SQMg0
3EruslM4iiSUGjMNrvDWru7ZUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE5+qk2a
ATvrh4UN2UgS+1+qNkkMMB8GA1UdIwQYMBaAFF/gTJV6bLxUCjT0U9E+P4BQyPTu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTUxQi8wMENBOThGMkEx
QTUxMUVEOTEyMzIyNTRDNEY5QUUwMi9YLUJNbFhwc3ZGUUtOUFJUMFQ0X2dGREk5
TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1gtQk1sWHBzdkZRS05QUlQwVDRfZ0ZESTlPNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QTUxQi8wMENBOThGMkExQTUxMUVEOTEyMzIyNTRDNEY5QUUwMi9YLUJNbFhwc3ZG
UUtOUFJUMFQ0X2dGREk5TzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANX3aUAQ5nLJ5rgoiiE71kUV+m6UKneym8Xgv+4FKdvmm3ij8/LZgu/vMp5GQ
hjpHdiuDfq/uMzBRHZWyqtvC1ufRfRzyIbZVgc9z1tAeyjbzafJI7qwTIQsEhXt8
BHn1ofHfeLVNREhlLn/+iYSwO+ujA4cEly3ZbzVouERUa/IYXZ1YcTQvLoViGSfP
QCB/RzZjIbjbjQhz7DQmCLWb3fXKG3E7b4QeBC5MW1XzFMkbLm8WvCmzaSjc+BUh
ufWwPKWYWN+l66Qww5PE2dq7nDzP5GJxiJJ3LyQ5IMPySjWSKX/yb0hxiMKrlJod
T69ZZHDgR526jU5klXyrXWy6/g==
-----END CERTIFICATE-----
Generated at Thu May 21 09:30:47 2026 by rpki-client