Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft
File:                     ips7kjmTluj8a4YwntVzMMlOEX0.mft (raw, json)
Hash identifier:          sqp51601JeC59VAcN8iFRuxVixdFnBEXwijRlVOP57M=
Subject key identifier:   6D:91:80:59:88:4B:D3:02:B1:21:96:8A:D3:CE:89:23:05:5F:88:CF
Authority key identifier: 8A:9B:3B:92:39:93:96:E8:FC:6B:86:30:9E:D5:73:30:C9:4E:11:7D
Certificate issuer:       /CN=A919A3CA/serialNumber=8A9B3B92399396E8FC6B86309ED57330C94E117D
Certificate serial:       0A48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ips7kjmTluj8a4YwntVzMMlOEX0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft
Manifest number:          0A3C
Signing time:             Sat 16 May 2026 19:42:57 +0000
Manifest this update:     Sat 16 May 2026 19:42:56 +0000
Manifest next update:     Sat 23 May 2026 19:42:56 +0000
Files and hashes:         1: ips7kjmTluj8a4YwntVzMMlOEX0.crl (hash: RpIICl/fBTLAn67cbM0q2sfxwL5S94QnFzVYL22lFSM=)
                          2: B972C58C8FA611EAB095C928C4F9AE02.roa (hash: Lmz5u1XQZ5pr8gx+0xG0dq5xcsKIBrpCQ17vf78quGQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.crl
                          rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ips7kjmTluj8a4YwntVzMMlOEX0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 May 2026 14:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2632 (0xa48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A3CA, serialNumber=8A9B3B92399396E8FC6B86309ED57330C94E117D
        Validity
            Not Before: May 16 19:42:56 2026 GMT
            Not After : May 23 19:42:56 2026 GMT
        Subject: CN=6a08c8c0-3c8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f8:d8:2d:67:d6:ae:9f:c6:7f:0b:df:b5:40:
                    cb:04:cf:7f:e1:5c:de:05:16:53:0c:50:85:24:79:
                    40:09:50:b8:a8:bb:2b:af:59:b4:94:49:a8:c9:a0:
                    67:e3:ab:84:26:16:97:56:6b:95:b8:87:2f:83:3c:
                    0b:ff:81:49:9d:e6:3a:3e:02:3c:90:ba:77:93:62:
                    41:5c:0e:0b:db:11:35:dc:92:0c:86:50:75:b5:10:
                    45:96:05:7b:ce:59:9e:55:11:79:56:de:88:a4:a7:
                    e8:cb:56:3b:d9:5e:73:ad:87:02:f9:f8:72:bf:11:
                    6e:c1:11:5a:0c:27:6b:49:da:5c:f9:9a:60:9a:15:
                    4f:2a:e9:d6:75:51:2f:0a:97:23:4d:fc:da:df:3c:
                    6f:26:4f:d0:09:dc:ee:26:c9:e4:57:54:cd:79:99:
                    11:e2:d4:2a:bb:30:71:23:ae:87:30:9a:83:09:58:
                    3f:d4:5f:25:1c:01:dc:72:a2:fb:f4:1b:d8:1d:a8:
                    cd:d5:8a:57:f6:ea:7b:7a:e5:81:f8:e2:77:aa:14:
                    f5:63:84:1c:7a:00:ef:16:d4:e9:de:ec:e7:bd:b7:
                    0d:92:1f:72:64:93:e9:bf:13:21:35:67:0a:c5:ee:
                    53:a2:2a:d2:75:c3:13:85:dc:1f:59:b3:2d:52:5c:
                    88:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:91:80:59:88:4B:D3:02:B1:21:96:8A:D3:CE:89:23:05:5F:88:CF
            X509v3 Authority Key Identifier:
                keyid:8A:9B:3B:92:39:93:96:E8:FC:6B:86:30:9E:D5:73:30:C9:4E:11:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ips7kjmTluj8a4YwntVzMMlOEX0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:93:f2:00:be:b2:31:6b:9e:27:d0:aa:07:90:8b:1d:04:81:
         66:aa:51:2c:82:9c:1a:fd:76:db:9e:48:aa:35:0c:ab:09:63:
         db:f3:1a:e7:a3:28:9d:2c:b2:0d:61:da:92:17:8c:f4:a8:7b:
         ea:3e:a9:8a:70:3a:28:5e:18:bb:81:f0:21:8d:ae:43:2d:cd:
         d0:eb:28:b1:c6:ff:29:fc:ce:ae:e7:fb:c7:1d:cf:e9:07:b0:
         04:22:bf:b0:00:03:3c:14:19:35:46:f3:4f:d7:8f:a7:bf:a8:
         12:d8:bc:51:03:c4:dd:c3:ca:2f:8c:44:60:40:b7:d4:2d:57:
         db:ed:00:05:2d:e1:28:49:a3:11:6b:da:4e:86:12:12:21:1b:
         73:25:97:10:e4:6b:56:9c:f9:98:d5:4a:33:1b:79:12:43:86:
         4f:6e:94:fa:c0:00:4e:b3:b5:2e:1d:05:c3:53:ec:28:b8:cf:
         02:46:f7:00:51:71:c2:58:55:c6:0d:9b:56:b2:55:3b:d6:0a:
         a9:ad:4c:9e:27:c6:12:75:bf:99:35:bb:12:8d:56:3c:d0:f0:
         89:60:9b:7c:fc:9e:cf:b7:d8:2f:85:9f:d5:5c:7f:b7:d2:7e:
         c7:82:59:9f:2b:46:d7:c3:c0:2d:67:06:2c:69:0a:ab:41:9d:
         dd:d2:57:bb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUEzQ0ExMTAvBgNVBAUTKDhBOUIzQjkyMzk5Mzk2RThGQzZCODYzMDlFRDU3MzMw
Qzk0RTExN0QwHhcNMjYwNTE2MTk0MjU2WhcNMjYwNTIzMTk0MjU2WjAYMRYwFAYD
VQQDEw02YTA4YzhjMC0zYzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw/jYLWfWrp/GfwvftUDLBM9/4VzeBRZTDFCFJHlACVC4qLsrr1m0lEmoyaBn
46uEJhaXVmuVuIcvgzwL/4FJneY6PgI8kLp3k2JBXA4L2xE13JIMhlB1tRBFlgV7
zlmeVRF5Vt6IpKfoy1Y72V5zrYcC+fhyvxFuwRFaDCdrSdpc+ZpgmhVPKunWdVEv
CpcjTfza3zxvJk/QCdzuJsnkV1TNeZkR4tQquzBxI66HMJqDCVg/1F8lHAHccqL7
9BvYHajN1YpX9up7euWB+OJ3qhT1Y4QcegDvFtTp3uznvbcNkh9yZJPpvxMhNWcK
xe5ToirSdcMThdwfWbMtUlyI/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG2RgFmI
S9MCsSGWitPOiSMFX4jPMB8GA1UdIwQYMBaAFIqbO5I5k5bo/GuGMJ7VczDJThF9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTNDQS81N0QyMzgwMjhG
QTIxMUVBOEVDMDZFMUNDNEY5QUUwMi9pcHM3a2ptVGx1ajhhNFl3bnRWek1NbE9F
WDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lwczdram1UbHVqOGE0WXdudFZ6TU1sT0VYMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QTNDQS81N0QyMzgwMjhGQTIxMUVBOEVDMDZFMUNDNEY5QUUwMi9pcHM3a2ptVGx1
ajhhNFl3bnRWek1NbE9FWDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqpPyAL6yMWueJ9CqB5CLHQSBZqpRLIKcGv12255IqjUMqwlj2/Ma56MonSyy
DWHakheM9Kh76j6pinA6KF4Yu4HwIY2uQy3N0Ososcb/KfzOruf7xx3P6QewBCK/
sAADPBQZNUbzT9ePp7+oEti8UQPE3cPKL4xEYEC31C1X2+0ABS3hKEmjEWvaToYS
EiEbcyWXEORrVpz5mNVKMxt5EkOGT26U+sAATrO1Lh0Fw1PsKLjPAkb3AFFxwlhV
xg2bVrJVO9YKqa1MnifGEnW/mTW7Eo1WPNDwiWCbfPyez7fYL4Wf1Vx/t9J+x4JZ
nytG18PALWcGLGkKq0Gd3dJXuw==
-----END CERTIFICATE-----
Generated at Sat May 16 22:40:30 2026 by rpki-client