Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.mft
File:                     1pesTITI0RmFX1oM3aY13R44Xuc.mft (raw, json)
Hash identifier:          AN+hn+Ylmrql9Smzj3FwqzeJc3YQY7IOVl8C6kCRLb4=
Subject key identifier:   CD:89:52:E7:BF:83:6D:EC:8A:F9:22:22:C6:06:0B:88:8A:29:F1:11
Authority key identifier: D6:97:AC:4C:84:C8:D1:19:85:5F:5A:0C:DD:A6:35:DD:1E:38:5E:E7
Certificate issuer:       /CN=A918A9FC/serialNumber=D697AC4C84C8D119855F5A0CDDA635DD1E385EE7
Certificate serial:       355D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pesTITI0RmFX1oM3aY13R44Xuc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.mft
Manifest number:          354C
Signing time:             Wed 20 May 2026 15:00:34 +0000
Manifest this update:     Wed 20 May 2026 15:00:34 +0000
Manifest next update:     Wed 27 May 2026 15:00:34 +0000
Files and hashes:         1: 1pesTITI0RmFX1oM3aY13R44Xuc.crl (hash: R/seAT8pVa5UVCpOaIB6tfEbC3oSzMgyhH6cDfukjhw=)
                          2: EADCDA1C8D9611EEBE392A3CC4F9AE02.roa (hash: +eQCtZaTH6GkPFoFVSiRb3PRvqAtjbgtEZLgyROZQic=)
                          3: 7859AE6A0B5511EABCBC343DC4F9AE02.roa (hash: OY0gqFhSrcsr3Ue2BAA7UCekieh8CcnhGOTNZC+wAEw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.crl
                          rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pesTITI0RmFX1oM3aY13R44Xuc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 15:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13661 (0x355d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A9FC, serialNumber=D697AC4C84C8D119855F5A0CDDA635DD1E385EE7
        Validity
            Not Before: May 20 15:00:34 2026 GMT
            Not After : May 27 15:00:34 2026 GMT
        Subject: CN=6a0dcc92-ddc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5e:37:5d:16:9a:8b:18:8e:44:18:97:fd:cb:
                    9b:7c:10:ad:94:75:51:e6:ef:48:b1:ef:85:16:28:
                    7a:b8:00:7e:3b:ff:16:f9:03:43:db:fd:1f:8f:39:
                    04:90:a2:20:d2:55:e5:a0:0c:74:7e:aa:3b:6e:05:
                    f3:2f:77:56:72:48:3b:9f:d3:af:c0:41:5d:b5:11:
                    c6:e4:56:8b:1c:a0:ad:a6:92:8b:fc:27:fe:ad:fa:
                    e0:55:16:8a:42:2b:23:c6:f8:35:8d:c4:45:55:86:
                    51:1d:be:ce:20:0c:5a:d4:d7:b2:77:ff:cd:bf:49:
                    8b:e7:70:d5:e5:d2:b6:77:5e:84:b1:d8:a5:8f:9b:
                    30:ee:78:ea:f6:b8:ed:86:46:f4:68:e4:7c:84:ee:
                    44:73:c8:aa:94:d7:70:9a:ac:18:3f:30:42:32:2d:
                    f0:73:d4:fd:89:9e:a5:a3:2f:57:48:dc:7c:9a:09:
                    f8:a8:1e:e2:37:19:cc:9f:41:8f:cc:d0:90:cd:09:
                    4a:0f:3b:fc:bf:fb:6a:67:52:29:5b:15:74:86:fd:
                    aa:ad:6f:58:4f:5f:ce:ec:f9:aa:bd:7c:b3:6d:eb:
                    24:4e:13:c2:22:0a:72:2d:e0:59:3f:c1:7a:6a:23:
                    f7:ea:31:39:09:01:29:00:70:2d:ee:94:70:60:79:
                    f5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:89:52:E7:BF:83:6D:EC:8A:F9:22:22:C6:06:0B:88:8A:29:F1:11
            X509v3 Authority Key Identifier:
                keyid:D6:97:AC:4C:84:C8:D1:19:85:5F:5A:0C:DD:A6:35:DD:1E:38:5E:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pesTITI0RmFX1oM3aY13R44Xuc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:12:5e:c6:2e:9a:97:55:35:5a:b3:35:c9:0e:6c:9e:d0:c5:
         c0:ab:3d:88:4e:70:2b:cd:06:bf:71:1b:35:51:4f:76:7b:04:
         38:8d:fa:b0:f7:da:7a:7b:80:dd:73:4f:3d:8b:06:d5:40:20:
         fe:47:53:45:c7:fd:0a:db:ad:4e:35:a3:6f:c3:8c:39:45:a3:
         96:56:54:8d:12:92:a8:0a:26:2a:99:d9:85:6a:9c:e3:7a:40:
         57:8a:39:94:9d:d5:3e:56:3b:e7:74:2a:79:dc:e0:68:7e:c1:
         59:80:4f:42:e3:f5:1c:4e:05:43:4d:b4:de:54:9e:58:dd:c4:
         73:8c:2b:43:29:0a:9f:c2:64:ef:0c:ca:7b:ed:ad:a1:9a:30:
         7d:d7:fd:a1:e5:75:cb:1b:f1:58:28:09:ce:18:f5:ed:29:86:
         58:e4:46:dd:82:e2:92:7c:a5:d9:13:25:87:d6:2b:44:e1:a3:
         1d:01:64:16:03:aa:a4:6a:e1:c4:6c:05:1a:d9:29:1a:9d:62:
         06:b0:7e:13:1b:0f:d2:2c:7d:46:ff:e3:b7:af:e2:71:e7:2e:
         a6:de:0f:46:eb:6e:5d:19:e9:34:d5:43:9b:58:d5:6f:10:71:
         8b:7a:7e:37:4d:d8:ee:3b:c1:de:42:8e:17:f3:55:53:9b:1e:
         a9:09:76:55
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEE5RkMxMTAvBgNVBAUTKEQ2OTdBQzRDODRDOEQxMTk4NTVGNUEwQ0REQTYzNURE
MUUzODVFRTcwHhcNMjYwNTIwMTUwMDM0WhcNMjYwNTI3MTUwMDM0WjAYMRYwFAYD
VQQDEw02YTBkY2M5Mi1kZGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzF43XRaaixiORBiX/cubfBCtlHVR5u9Ise+FFih6uAB+O/8W+QND2/0fjzkE
kKIg0lXloAx0fqo7bgXzL3dWckg7n9OvwEFdtRHG5FaLHKCtppKL/Cf+rfrgVRaK
Qisjxvg1jcRFVYZRHb7OIAxa1Neyd//Nv0mL53DV5dK2d16Esdilj5sw7njq9rjt
hkb0aOR8hO5Ec8iqlNdwmqwYPzBCMi3wc9T9iZ6loy9XSNx8mgn4qB7iNxnMn0GP
zNCQzQlKDzv8v/tqZ1IpWxV0hv2qrW9YT1/O7PmqvXyzbeskThPCIgpyLeBZP8F6
aiP36jE5CQEpAHAt7pRwYHn1NQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM2JUue/
g23sivkiIsYGC4iKKfERMB8GA1UdIwQYMBaAFNaXrEyEyNEZhV9aDN2mNd0eOF7n
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTlGQy8zMTkzMzdBQTFE
OUUxMUUyODZFOUQxOEQwOEIwMkNEMi8xcGVzVElUSTBSbUZYMW9NM2FZMTNSNDRY
dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFwZXNUSVRJMFJtRlgxb00zYVkxM1I0NFh1Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QTlGQy8zMTkzMzdBQTFEOUUxMUUyODZFOUQxOEQwOEIwMkNEMi8xcGVzVElUSTBS
bUZYMW9NM2FZMTNSNDRYdWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiRJexi6al1U1WrM1yQ5sntDFwKs9iE5wK80Gv3EbNVFPdnsEOI36sPfaenuA
3XNPPYsG1UAg/kdTRcf9CtutTjWjb8OMOUWjllZUjRKSqAomKpnZhWqc43pAV4o5
lJ3VPlY753QqedzgaH7BWYBPQuP1HE4FQ0203lSeWN3Ec4wrQykKn8Jk7wzKe+2t
oZowfdf9oeV1yxvxWCgJzhj17SmGWORG3YLiknyl2RMlh9YrROGjHQFkFgOqpGrh
xGwFGtkpGp1iBrB+ExsP0ix9Rv/jt6/icecupt4PRutuXRnpNNVDm1jVbxBxi3p+
N03Y7jvB3kKOF/NVU5seqQl2VQ==
-----END CERTIFICATE-----
Generated at Thu May 21 10:54:29 2026 by rpki-client