Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft
File:                     Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft (raw, json)
Hash identifier:          QoDhe8p1e6zlTuyOg2sL26CFAKIILzjxwdN4yzI7cv8=
Subject key identifier:   76:7A:1A:A2:E7:6C:6F:9D:C7:76:A3:00:D4:7F:90:64:7B:4C:57:D7
Authority key identifier: 16:0E:00:01:5D:2B:58:15:3F:34:82:E8:DE:94:7B:5F:4A:D7:87:18
Certificate issuer:       /CN=A91295B6/serialNumber=160E00015D2B58153F3482E8DE947B5F4AD78718
Certificate serial:       0224
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft
Manifest number:          021B
Signing time:             Wed 13 May 2026 02:58:20 +0000
Manifest this update:     Wed 13 May 2026 02:58:19 +0000
Manifest next update:     Wed 20 May 2026 02:58:19 +0000
Files and hashes:         1: Fg4AAV0rWBU_NILo3pR7X0rXhxg.crl (hash: ivugH5nMIWWaoRomPTA8LiVjx78S4bv8xjUTZk1Dslo=)
                          2: 35C8F50C218A11EE959B7037C4F9AE02.roa (hash: 1pvzyLV21JPKIBe4+vpM9SsFH5SGt6T5Irf10NoZGcc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.crl
                          rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:58:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 548 (0x224)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91295B6, serialNumber=160E00015D2B58153F3482E8DE947B5F4AD78718
        Validity
            Not Before: May 13 02:58:19 2026 GMT
            Not After : May 20 02:58:19 2026 GMT
        Subject: CN=6a03e8cc-9639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:bc:88:a8:06:65:83:df:90:47:6d:4c:f0:3a:
                    66:0f:76:d9:3e:26:7f:c1:80:1e:fe:ef:d5:ff:2c:
                    3f:9c:98:e4:e0:81:67:46:98:30:33:2d:05:c8:a4:
                    6d:be:f6:23:4b:de:00:f5:8a:e9:74:0f:37:f6:6d:
                    b3:e6:ad:1d:e3:64:d5:8c:8a:2a:17:b0:6a:18:12:
                    6a:c8:cd:a1:33:94:54:ea:b7:1c:56:6f:81:2f:07:
                    cb:75:b5:47:0b:38:8b:fe:a4:25:7f:5a:b4:3c:d5:
                    b9:ee:42:08:2f:d9:21:c9:26:07:8a:8a:18:ed:62:
                    c6:a6:14:2a:3b:cd:8a:42:dd:67:2b:3b:50:42:cf:
                    72:02:95:cc:ca:a5:ac:c7:62:0c:8e:ef:36:c4:1d:
                    30:04:ec:95:58:1f:b5:30:80:e4:20:5b:ac:9b:4b:
                    28:13:ea:c8:23:d1:28:53:dc:39:4d:71:c6:0e:7c:
                    01:75:1d:59:3f:88:05:41:5a:16:a0:2a:ff:ec:4e:
                    6f:9d:5c:15:54:35:01:08:fd:b8:45:76:f1:fd:30:
                    b2:c1:7e:d5:8b:0a:23:52:5c:f0:bf:06:5c:c4:e6:
                    37:ed:3c:45:32:11:96:b4:09:2a:1e:fe:e8:fe:42:
                    64:78:08:3e:3b:ac:89:9f:e9:ae:61:80:3c:58:4c:
                    ea:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:7A:1A:A2:E7:6C:6F:9D:C7:76:A3:00:D4:7F:90:64:7B:4C:57:D7
            X509v3 Authority Key Identifier:
                keyid:16:0E:00:01:5D:2B:58:15:3F:34:82:E8:DE:94:7B:5F:4A:D7:87:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:fb:43:65:e3:a5:d7:14:b8:74:d9:c0:07:c9:86:3d:11:81:
         74:41:e6:1a:30:2d:30:ca:77:87:6a:18:c4:be:d3:49:60:13:
         02:5e:fc:8a:26:7d:db:e5:67:74:16:c3:e4:c3:25:aa:a0:fe:
         d6:cf:85:e4:1a:45:b1:bb:dc:b6:d4:4f:74:73:2a:6a:df:cc:
         02:ea:75:7e:41:83:9f:30:d4:0b:76:58:b9:2d:59:90:d9:73:
         6a:b5:43:74:96:af:ce:11:2c:9f:62:71:c4:cc:71:00:aa:6e:
         f6:db:11:d6:c4:cb:f3:49:29:62:83:d7:7b:8a:e6:62:3a:49:
         4c:2e:b5:58:60:cd:3f:8e:c0:5e:9f:82:66:2b:1f:8b:ec:5f:
         39:47:97:85:cb:4c:5d:53:48:5e:54:85:c1:1f:2d:41:2c:74:
         c6:c8:9d:92:57:fb:26:18:90:a3:0c:e3:05:28:27:da:60:4f:
         fb:b4:72:6b:d8:84:e2:6a:80:ec:bc:85:e4:97:72:6b:b4:85:
         ff:7a:ff:70:5f:ad:c3:cc:c1:d2:e4:33:23:32:90:ac:d0:77:
         05:f9:8c:8e:13:71:38:51:4f:fe:51:9d:5d:02:2b:ca:c6:cc:
         1d:4d:de:fb:7d:33:f4:36:4c:2c:b2:e5:b1:c6:2b:1b:ca:91:
         22:ae:ea:28
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjk1QjYxMTAvBgNVBAUTKDE2MEUwMDAxNUQyQjU4MTUzRjM0ODJFOERFOTQ3QjVG
NEFENzg3MTgwHhcNMjYwNTEzMDI1ODE5WhcNMjYwNTIwMDI1ODE5WjAYMRYwFAYD
VQQDEw02YTAzZThjYy05NjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlbyIqAZlg9+QR21M8DpmD3bZPiZ/wYAe/u/V/yw/nJjk4IFnRpgwMy0FyKRt
vvYjS94A9YrpdA839m2z5q0d42TVjIoqF7BqGBJqyM2hM5RU6rccVm+BLwfLdbVH
CziL/qQlf1q0PNW57kIIL9khySYHiooY7WLGphQqO82KQt1nKztQQs9yApXMyqWs
x2IMju82xB0wBOyVWB+1MIDkIFusm0soE+rII9EoU9w5TXHGDnwBdR1ZP4gFQVoW
oCr/7E5vnVwVVDUBCP24RXbx/TCywX7ViwojUlzwvwZcxOY37TxFMhGWtAkqHv7o
/kJkeAg+O6yJn+muYYA8WEzqbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHZ6GqLn
bG+dx3ajANR/kGR7TFfXMB8GA1UdIwQYMBaAFBYOAAFdK1gVPzSC6N6Ue19K14cY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTVCNi9GMDczMEM4ODIx
NjkxMUVFQjU2RjIyNDlDNEY5QUUwMi9GZzRBQVYwcldCVV9OSUxvM3BSN1gwclho
eGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZnNEFBVjByV0JVX05JTG8zcFI3WDByWGh4Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
OTVCNi9GMDczMEM4ODIxNjkxMUVFQjU2RjIyNDlDNEY5QUUwMi9GZzRBQVYwcldC
VV9OSUxvM3BSN1gwclhoeGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAD/tDZeOl1xS4dNnAB8mGPRGBdEHmGjAtMMp3h2oYxL7TSWATAl78iiZ92+Vn
dBbD5MMlqqD+1s+F5BpFsbvcttRPdHMqat/MAup1fkGDnzDUC3ZYuS1ZkNlzarVD
dJavzhEsn2JxxMxxAKpu9tsR1sTL80kpYoPXe4rmYjpJTC61WGDNP47AXp+CZisf
i+xfOUeXhctMXVNIXlSFwR8tQSx0xsidklf7JhiQowzjBSgn2mBP+7Rya9iE4mqA
7LyF5Jdya7SF/3r/cF+tw8zB0uQzIzKQrNB3BfmMjhNxOFFP/lGdXQIrysbMHU3e
+30z9DZMLLLlscYrG8qRIq7qKA==
-----END CERTIFICATE-----
Generated at Wed May 13 09:21:56 2026 by rpki-client