Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.mft
File:                     S5R0cysQASlff10ywBNpOhk3aBM.mft (raw, json)
Hash identifier:          2vZ3aLJlCMnJ2utUPVazGYz2thJFYpzo5Bo78QAA6AE=
Subject key identifier:   1B:41:D2:E4:96:ED:B9:59:07:72:3B:61:83:F0:F9:0B:27:70:52:80
Authority key identifier: 4B:94:74:73:2B:10:01:29:5F:7F:5D:32:C0:13:69:3A:19:37:68:13
Certificate issuer:       /CN=A915393C/serialNumber=4B9474732B1001295F7F5D32C013693A19376813
Certificate serial:       0159
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5R0cysQASlff10ywBNpOhk3aBM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.mft
Manifest number:          0151
Signing time:             Sat 13 Jun 2026 05:06:56 +0000
Manifest this update:     Sat 13 Jun 2026 05:06:55 +0000
Manifest next update:     Sat 20 Jun 2026 05:06:55 +0000
Files and hashes:         1: S5R0cysQASlff10ywBNpOhk3aBM.crl (hash: cAVT1hvdNnjxSDrL6p/1b6aEdJ73CgQ3UB7Fl8tgBFU=)
                          2: D970354A640E11EF93D18659C4F9AE02.roa (hash: 2/SeBbADHUqtbBcj33Jpc1cfurDRr3T2kajVOmVV524=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.crl
                          rsync://rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5R0cysQASlff10ywBNpOhk3aBM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 345 (0x159)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915393C, serialNumber=4B9474732B1001295F7F5D32C013693A19376813
        Validity
            Not Before: Jun 13 05:06:55 2026 GMT
            Not After : Jun 20 05:06:55 2026 GMT
        Subject: CN=6a2ce56f-1620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6e:8a:87:e5:c9:a1:ce:ff:82:04:6a:f7:41:
                    c8:0e:9b:b6:68:64:65:bb:57:fe:d7:93:3d:04:30:
                    f3:a4:a9:19:ab:08:6b:c8:10:f9:cb:e1:e3:6c:c2:
                    c3:99:6a:69:8e:88:43:85:22:d0:87:33:2c:20:7e:
                    d6:0f:9f:de:87:36:02:ac:11:e7:a6:7f:b5:11:40:
                    70:66:b5:bb:22:e9:36:83:3f:43:15:81:06:fd:3e:
                    6e:a1:60:b0:5d:b0:9f:39:ef:f9:37:ea:84:af:3e:
                    77:7c:fb:cd:28:59:f9:10:48:b8:6e:63:70:91:6f:
                    ad:30:25:f7:c4:1f:a2:5c:a8:17:09:f0:e5:14:c3:
                    a2:c9:e8:78:6f:1d:33:14:4e:b4:6d:0e:cb:fd:7b:
                    3b:65:b1:87:c1:e7:10:68:8d:01:cd:1b:d7:bd:ca:
                    32:1e:65:8e:a5:34:d9:61:43:d5:b6:67:d9:c3:d1:
                    b5:de:7c:55:ff:07:f6:fb:79:3a:95:2b:41:74:00:
                    ff:23:29:01:00:12:c1:8d:92:1a:65:6b:c8:26:35:
                    50:1c:bd:4e:34:24:50:0c:fd:a5:ab:67:a9:66:d1:
                    ac:60:9a:66:0b:ac:7f:82:cb:22:f8:59:43:c5:4f:
                    2b:f3:8f:77:a6:82:66:03:a1:d3:d8:b2:ce:d1:2c:
                    f4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:41:D2:E4:96:ED:B9:59:07:72:3B:61:83:F0:F9:0B:27:70:52:80
            X509v3 Authority Key Identifier:
                keyid:4B:94:74:73:2B:10:01:29:5F:7F:5D:32:C0:13:69:3A:19:37:68:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5R0cysQASlff10ywBNpOhk3aBM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:3f:3c:a5:f6:f4:8e:70:0c:5b:05:1b:65:1c:fa:f8:ba:77:
         ac:3b:c7:26:ac:95:c9:84:42:8d:7c:36:28:ae:04:ff:d3:de:
         03:fe:ea:3f:6a:49:2a:95:91:5e:11:45:82:b6:23:af:f9:4d:
         c4:e4:dd:42:7a:bb:0e:df:e8:3d:1e:f7:c5:1a:86:3a:08:d7:
         63:23:22:2a:aa:90:ba:70:f7:09:49:cc:45:f1:bc:70:0e:2c:
         fe:3d:81:35:c0:c9:71:70:66:89:a2:17:bb:28:f7:5e:df:9f:
         cc:11:13:6c:e5:4f:b9:35:f6:cc:f9:ba:45:31:ac:28:f0:70:
         71:29:66:1a:b0:e5:f5:b6:0f:c4:be:c0:95:d2:3a:52:d5:4e:
         34:4a:86:84:93:18:45:18:e6:4d:7e:73:a4:c4:20:62:99:b7:
         a4:02:b4:07:48:77:4d:b2:10:93:dd:6f:9f:f8:3e:c7:9c:a1:
         1a:02:6f:18:58:a3:89:0f:02:25:3b:42:64:10:68:d4:73:83:
         ef:fd:d5:2a:7a:e5:ce:44:3f:7b:5a:7b:c1:a1:f6:97:b8:4d:
         2f:4f:64:fe:21:58:8d:dc:1c:a3:db:41:a9:4a:87:d9:3e:3d:
         d9:51:1f:4a:a4:16:7a:8d:bd:9a:40:a1:2e:04:31:bc:46:f7:
         da:06:4c:2c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTM5M0MxMTAvBgNVBAUTKDRCOTQ3NDczMkIxMDAxMjk1RjdGNUQzMkMwMTM2OTNB
MTkzNzY4MTMwHhcNMjYwNjEzMDUwNjU1WhcNMjYwNjIwMDUwNjU1WjAYMRYwFAYD
VQQDEw02YTJjZTU2Zi0xNjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArm6Kh+XJoc7/ggRq90HIDpu2aGRlu1f+15M9BDDzpKkZqwhryBD5y+HjbMLD
mWppjohDhSLQhzMsIH7WD5/ehzYCrBHnpn+1EUBwZrW7Iuk2gz9DFYEG/T5uoWCw
XbCfOe/5N+qErz53fPvNKFn5EEi4bmNwkW+tMCX3xB+iXKgXCfDlFMOiyeh4bx0z
FE60bQ7L/Xs7ZbGHwecQaI0BzRvXvcoyHmWOpTTZYUPVtmfZw9G13nxV/wf2+3k6
lStBdAD/IykBABLBjZIaZWvIJjVQHL1ONCRQDP2lq2epZtGsYJpmC6x/gssi+FlD
xU8r8493poJmA6HT2LLO0Sz0cQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBtB0uSW
7blZB3I7YYPw+QsncFKAMB8GA1UdIwQYMBaAFEuUdHMrEAEpX39dMsATaToZN2gT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzkzQy82RDA0MzE1RTY0
MEUxMUVGQjU0NDY0NThDNEY5QUUwMi9TNVIwY3lzUUFTbGZmMTB5d0JOcE9oazNh
Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1M1UjBjeXNRQVNsZmYxMHl3Qk5wT2hrM2FCTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MzkzQy82RDA0MzE1RTY0MEUxMUVGQjU0NDY0NThDNEY5QUUwMi9TNVIwY3lzUUFT
bGZmMTB5d0JOcE9oazNhQk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhj88pfb0jnAMWwUbZRz6+Lp3rDvHJqyVyYRCjXw2KK4E/9PeA/7qP2pJKpWR
XhFFgrYjr/lNxOTdQnq7Dt/oPR73xRqGOgjXYyMiKqqQunD3CUnMRfG8cA4s/j2B
NcDJcXBmiaIXuyj3Xt+fzBETbOVPuTX2zPm6RTGsKPBwcSlmGrDl9bYPxL7AldI6
UtVONEqGhJMYRRjmTX5zpMQgYpm3pAK0B0h3TbIQk91vn/g+x5yhGgJvGFijiQ8C
JTtCZBBo1HOD7/3VKnrlzkQ/e1p7waH2l7hNL09k/iFYjdwco9tBqUqH2T492VEf
SqQWeo29mkChLgQxvEb32gZMLA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:36:16 2026 by rpki-client