Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft
File:                     xUMJ3BErZYYnvTagMHLnXQYDZNM.mft (raw, json)
Hash identifier:          ftdMbWuzve2IosNMlhPzyQCtFD4HGxv6THKf8+0ZSGc=
Subject key identifier:   CE:64:56:74:84:6A:A4:60:88:2C:4B:65:23:53:26:AF:48:BD:CF:38
Authority key identifier: C5:43:09:DC:11:2B:65:86:27:BD:36:A0:30:72:E7:5D:06:03:64:D3
Certificate issuer:       /CN=A9199836/serialNumber=C54309DC112B658627BD36A03072E75D060364D3
Certificate serial:       055C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUMJ3BErZYYnvTagMHLnXQYDZNM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft
Manifest number:          0555
Signing time:             Wed 20 May 2026 23:28:13 +0000
Manifest this update:     Wed 20 May 2026 23:28:13 +0000
Manifest next update:     Wed 27 May 2026 23:28:13 +0000
Files and hashes:         1: xUMJ3BErZYYnvTagMHLnXQYDZNM.crl (hash: qcojTES9j3uW1T6vIHMR+q29ivcnudKFUL+gwpAixHw=)
                          2: 029F318A366F11ECA773E263C4F9AE02.roa (hash: Wk0rJSEhmI1m146JBYCWjAtB11PfAVxg4es4P8RFH/c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.crl
                          rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUMJ3BErZYYnvTagMHLnXQYDZNM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 23:28:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1372 (0x55c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199836, serialNumber=C54309DC112B658627BD36A03072E75D060364D3
        Validity
            Not Before: May 20 23:28:13 2026 GMT
            Not After : May 27 23:28:13 2026 GMT
        Subject: CN=6a0e438d-3096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:27:6e:b6:60:3d:34:b5:cf:76:1b:4d:04:3a:
                    f2:05:68:6f:8c:38:fc:2c:f3:4f:f0:41:94:ca:f7:
                    ad:9b:d8:4b:12:15:fb:8f:50:eb:a5:c9:f2:3b:6a:
                    7a:4a:87:23:b6:5d:5e:4a:66:38:c0:44:1a:7e:9b:
                    86:f5:6d:e0:6b:07:30:ee:1f:bd:e1:f4:4f:50:ea:
                    8c:c1:83:34:fe:43:94:74:18:d6:c5:b5:7d:f7:bd:
                    63:e9:26:3a:f9:10:82:ee:49:29:21:21:62:0e:05:
                    ea:ca:dc:84:14:6e:07:9f:7f:a2:71:93:71:34:be:
                    08:7d:71:e7:6b:7c:6e:52:ce:96:46:94:90:aa:76:
                    52:e5:34:8a:9b:dc:d8:35:f6:39:e8:9d:5a:9f:2a:
                    db:30:4c:ab:3e:51:8d:27:30:9d:da:19:4f:13:83:
                    98:a0:92:5c:59:28:ff:d4:7c:29:3c:43:c4:62:50:
                    7b:e9:77:12:d7:8e:17:8b:4d:ed:33:fd:d0:33:d8:
                    67:4b:85:1f:0d:c3:76:64:00:d9:e3:a2:33:9d:35:
                    49:fa:6e:80:3c:fd:06:4d:9a:dc:1a:de:80:ca:2f:
                    45:cb:cc:cc:90:5f:94:e0:46:12:21:35:30:4e:41:
                    82:8d:01:bb:4e:8b:3b:3b:93:c3:73:05:7c:00:ff:
                    95:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:64:56:74:84:6A:A4:60:88:2C:4B:65:23:53:26:AF:48:BD:CF:38
            X509v3 Authority Key Identifier:
                keyid:C5:43:09:DC:11:2B:65:86:27:BD:36:A0:30:72:E7:5D:06:03:64:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUMJ3BErZYYnvTagMHLnXQYDZNM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199836/2936FFB2362E11EC8909E86FC4F9AE02/xUMJ3BErZYYnvTagMHLnXQYDZNM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:6b:cd:e1:7c:2a:50:fc:12:81:c9:38:70:ed:d5:bf:e0:cb:
         b7:45:25:a1:8a:22:34:26:75:c9:2e:ea:cd:44:11:46:ee:23:
         5b:83:6d:8d:08:8c:6b:da:43:00:fa:f7:90:61:24:46:bc:da:
         59:c3:74:4f:71:68:fc:a3:b8:dd:24:8b:25:9e:b5:c0:9e:a3:
         8e:b3:f5:97:f4:bb:7f:33:73:17:b3:dd:82:16:bb:68:f9:91:
         67:bc:b1:15:b1:24:85:32:a1:55:f7:ea:ba:fd:7d:fb:8c:cc:
         7d:3c:57:91:64:15:60:93:d9:fe:f6:a4:21:36:2d:e7:f6:60:
         f8:9e:dd:95:2a:1a:9f:7d:1b:dc:9d:49:69:58:8a:fe:85:ee:
         f3:9f:db:dc:9b:13:5e:85:1b:69:ca:66:ba:71:53:16:83:1c:
         a9:b8:d7:68:e2:4a:55:6e:d2:83:8e:56:43:2d:6f:cb:82:18:
         b9:86:02:79:5f:af:fb:33:4f:ab:b6:57:43:09:af:ab:75:a6:
         44:7d:5d:8d:8a:a1:65:ac:40:e1:75:84:18:08:70:7c:a5:3d:
         38:e6:ac:c9:ca:97:61:06:bd:af:17:f3:95:ae:64:7d:0a:6f:
         be:e5:6e:ea:67:dc:4a:23:e1:57:ed:28:46:39:a0:80:72:75:
         f1:8e:53:98
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTk4MzYxMTAvBgNVBAUTKEM1NDMwOURDMTEyQjY1ODYyN0JEMzZBMDMwNzJFNzVE
MDYwMzY0RDMwHhcNMjYwNTIwMjMyODEzWhcNMjYwNTI3MjMyODEzWjAYMRYwFAYD
VQQDEw02YTBlNDM4ZC0zMDk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuidutmA9NLXPdhtNBDryBWhvjDj8LPNP8EGUyvetm9hLEhX7j1DrpcnyO2p6
Socjtl1eSmY4wEQafpuG9W3gawcw7h+94fRPUOqMwYM0/kOUdBjWxbV9971j6SY6
+RCC7kkpISFiDgXqytyEFG4Hn3+icZNxNL4IfXHna3xuUs6WRpSQqnZS5TSKm9zY
NfY56J1anyrbMEyrPlGNJzCd2hlPE4OYoJJcWSj/1HwpPEPEYlB76XcS144Xi03t
M/3QM9hnS4UfDcN2ZADZ46IznTVJ+m6APP0GTZrcGt6Ayi9Fy8zMkF+U4EYSITUw
TkGCjQG7Tos7O5PDcwV8AP+VZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM5kVnSE
aqRgiCxLZSNTJq9Ivc84MB8GA1UdIwQYMBaAFMVDCdwRK2WGJ702oDBy510GA2TT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTgzNi8yOTM2RkZCMjM2
MkUxMUVDODkwOUU4NkZDNEY5QUUwMi94VU1KM0JFclpZWW52VGFnTUhMblhRWURa
Tk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hVTUozQkVyWllZbnZUYWdNSExuWFFZRFpOTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OTgzNi8yOTM2RkZCMjM2MkUxMUVDODkwOUU4NkZDNEY5QUUwMi94VU1KM0JFclpZ
WW52VGFnTUhMblhRWURaTk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcmvN4XwqUPwSgck4cO3Vv+DLt0UloYoiNCZ1yS7qzUQRRu4jW4NtjQiMa9pD
APr3kGEkRrzaWcN0T3Fo/KO43SSLJZ61wJ6jjrP1l/S7fzNzF7Pdgha7aPmRZ7yx
FbEkhTKhVffquv19+4zMfTxXkWQVYJPZ/vakITYt5/Zg+J7dlSoan30b3J1JaViK
/oXu85/b3JsTXoUbacpmunFTFoMcqbjXaOJKVW7Sg45WQy1vy4IYuYYCeV+v+zNP
q7ZXQwmvq3WmRH1djYqhZaxA4XWEGAhwfKU9OOasycqXYQa9rxfzla5kfQpvvuVu
6mfcSiPhV+0oRjmggHJ18Y5TmA==
-----END CERTIFICATE-----
Generated at Thu May 21 09:37:36 2026 by rpki-client