Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91390D1/FFA43F143E0411F1AD63DF8CA6833773/CFDUhlPa5QGZunr6XjP5gKNfk-U.mft
File:                     CFDUhlPa5QGZunr6XjP5gKNfk-U.mft (raw, json)
Hash identifier:          739h6Re74HKcwzX8y83w6MYi8Os/cGCtyfsjA+CN/Aw=
Subject key identifier:   B2:9E:0F:00:AB:75:91:CA:88:72:8C:52:5C:45:A6:F5:5B:E2:4E:F1
Authority key identifier: 08:50:D4:86:53:DA:E5:01:99:BA:7A:FA:5E:33:F9:80:A3:5F:93:E5
Certificate issuer:       /CN=A91390D1/serialNumber=0850D48653DAE50199BA7AFA5E33F980A35F93E5
Certificate serial:       0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CFDUhlPa5QGZunr6XjP5gKNfk-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91390D1/FFA43F143E0411F1AD63DF8CA6833773/CFDUhlPa5QGZunr6XjP5gKNfk-U.mft
Manifest number:          0C
Signing time:             Mon 11 May 2026 09:17:38 +0000
Manifest this update:     Mon 11 May 2026 09:17:38 +0000
Manifest next update:     Mon 18 May 2026 09:17:38 +0000
Files and hashes:         1: CFDUhlPa5QGZunr6XjP5gKNfk-U.crl (hash: hsw2YX8obMjFZb1lAoU/PYqd7VUkQufHIR7LJzMZsN0=)
                          2: 309048B83E1211F1A9349102AE833773.roa (hash: sqKxThroamkDhc6JSRBhISx43pCPlzadkHUPyjm96LY=)
                          3: 2FF9F3D63E1211F1A9349102AE833773.roa (hash: VWpcu8O6MRinpVbPmabr8oFyo8vRo6lsrBwyQBIngak=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91390D1/FFA43F143E0411F1AD63DF8CA6833773/CFDUhlPa5QGZunr6XjP5gKNfk-U.crl
                          rsync://rpki.apnic.net/member_repository/A91390D1/FFA43F143E0411F1AD63DF8CA6833773/CFDUhlPa5QGZunr6XjP5gKNfk-U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CFDUhlPa5QGZunr6XjP5gKNfk-U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 09:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91390D1, serialNumber=0850D48653DAE50199BA7AFA5E33F980A35F93E5
        Validity
            Not Before: May 11 09:17:38 2026 GMT
            Not After : May 18 09:17:38 2026 GMT
        Subject: CN=6a019eb2-32f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5e:cc:a3:59:36:1f:ee:e6:2b:77:28:5a:d1:
                    31:1e:e1:66:85:b2:44:0f:67:72:00:dc:c8:ce:9e:
                    1a:02:7e:eb:e0:3f:7d:00:23:18:b7:98:f6:d9:a1:
                    90:27:73:a9:43:fe:4b:b1:20:9f:76:14:c9:84:8f:
                    17:5d:30:e2:cb:71:5c:e9:e9:32:5c:c7:7f:4f:5d:
                    87:50:78:3d:e0:29:96:68:ea:42:fa:12:8a:89:33:
                    2b:f8:b6:03:18:1e:42:24:76:52:62:a3:b8:7b:dd:
                    5f:0a:36:9a:40:7e:32:c1:f3:c3:c4:a1:5b:2e:71:
                    c6:15:43:1b:a9:00:12:76:d2:aa:a4:28:12:58:a2:
                    1f:6f:47:51:9c:81:de:8a:07:d0:c0:ba:42:a0:7e:
                    a1:28:40:40:76:27:4a:55:b9:22:1e:dc:b7:20:a0:
                    ed:b0:3d:1e:95:17:c3:3d:80:25:6a:d0:34:c1:39:
                    6b:da:05:c6:08:47:24:05:1f:7a:d6:56:bc:4d:d3:
                    23:b6:81:95:00:c6:e1:57:74:4d:bd:0f:b8:9b:6a:
                    9f:6d:05:df:58:71:89:9c:58:2c:0b:d8:0e:b2:ca:
                    01:bf:45:f1:9c:97:7c:d3:2d:e9:71:b7:46:b8:26:
                    75:29:d0:fd:19:bd:28:94:80:e8:05:d2:17:fc:1d:
                    24:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:9E:0F:00:AB:75:91:CA:88:72:8C:52:5C:45:A6:F5:5B:E2:4E:F1
            X509v3 Authority Key Identifier:
                keyid:08:50:D4:86:53:DA:E5:01:99:BA:7A:FA:5E:33:F9:80:A3:5F:93:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91390D1/FFA43F143E0411F1AD63DF8CA6833773/CFDUhlPa5QGZunr6XjP5gKNfk-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CFDUhlPa5QGZunr6XjP5gKNfk-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91390D1/FFA43F143E0411F1AD63DF8CA6833773/CFDUhlPa5QGZunr6XjP5gKNfk-U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:31:58:c0:f9:ec:a6:fa:fd:fd:99:dd:12:29:14:4d:54:d2:
         27:0e:d6:67:68:71:ce:3e:05:f4:8f:98:be:3a:25:f5:aa:9c:
         e1:8d:cf:17:80:c7:30:61:6b:0b:68:20:4e:86:56:3f:f6:88:
         4a:6c:c8:c7:f0:8f:70:3e:0e:f9:01:20:33:36:c9:22:b3:25:
         df:ef:5e:f0:31:38:8d:b1:c3:7f:82:61:aa:1f:e7:47:10:cd:
         b1:78:9c:ce:22:76:44:ac:82:43:84:f7:c3:46:f3:65:eb:db:
         bb:38:f7:c7:7a:70:80:15:95:88:e3:f3:57:ec:23:58:7b:35:
         59:de:ba:45:d3:c9:9f:62:82:10:93:bd:74:4a:7a:82:35:70:
         1f:51:1d:59:81:71:07:c6:9a:f9:bf:8c:02:8e:fc:87:49:1e:
         44:b5:0e:fc:6d:4a:e9:6a:ce:de:bb:8c:83:a5:6c:ba:85:39:
         e4:e2:65:86:b3:b3:8d:8c:1d:2c:21:8f:9f:ff:59:1c:0d:06:
         89:2a:ec:84:bf:d1:64:76:da:14:f5:1c:21:f8:43:5e:c0:2a:
         df:65:0d:2c:85:45:1e:41:81:73:1c:82:8c:0f:73:eb:3a:aa:
         de:0e:dd:f4:3b:f4:84:7a:3c:cb:65:81:9b:e1:10:56:4c:0e:
         9c:b9:f7:6c
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
OTBEMTExMC8GA1UEBRMoMDg1MEQ0ODY1M0RBRTUwMTk5QkE3QUZBNUUzM0Y5ODBB
MzVGOTNFNTAeFw0yNjA1MTEwOTE3MzhaFw0yNjA1MTgwOTE3MzhaMBgxFjAUBgNV
BAMTDTZhMDE5ZWIyLTMyZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDDXsyjWTYf7uYrdyha0TEe4WaFskQPZ3IA3MjOnhoCfuvgP30AIxi3mPbZoZAn
c6lD/kuxIJ92FMmEjxddMOLLcVzp6TJcx39PXYdQeD3gKZZo6kL6EoqJMyv4tgMY
HkIkdlJio7h73V8KNppAfjLB88PEoVsuccYVQxupABJ20qqkKBJYoh9vR1Gcgd6K
B9DAukKgfqEoQEB2J0pVuSIe3LcgoO2wPR6VF8M9gCVq0DTBOWvaBcYIRyQFH3rW
VrxN0yO2gZUAxuFXdE29D7ibap9tBd9YcYmcWCwL2A6yygG/RfGcl3zTLelxt0a4
JnUp0P0ZvSiUgOgF0hf8HSQVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUsp4PAKt1
kcqIcoxSXEWm9VviTvEwHwYDVR0jBBgwFoAUCFDUhlPa5QGZunr6XjP5gKNfk+Uw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5MEQxL0ZGQTQzRjE0M0Uw
NDExRjFBRDYzREY4Q0E2ODMzNzczL0NGRFVobFBhNVFHWnVucjZYalA1Z0tOZmst
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvQ0ZEVWhsUGE1UUdadW5yNlhqUDVnS05may1VLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5
MEQxL0ZGQTQzRjE0M0UwNDExRjFBRDYzREY4Q0E2ODMzNzczL0NGRFVobFBhNVFH
WnVucjZYalA1Z0tOZmstVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCUMVjA+eym+v39md0SKRRNVNInDtZnaHHOPgX0j5i+OiX1qpzhjc8XgMcwYWsL
aCBOhlY/9ohKbMjH8I9wPg75ASAzNskisyXf717wMTiNscN/gmGqH+dHEM2xeJzO
InZErIJDhPfDRvNl69u7OPfHenCAFZWI4/NX7CNYezVZ3rpF08mfYoIQk710SnqC
NXAfUR1ZgXEHxpr5v4wCjvyHSR5EtQ78bUrpas7eu4yDpWy6hTnk4mWGs7ONjB0s
IY+f/1kcDQaJKuyEv9FkdtoU9Rwh+ENewCrfZQ0shUUeQYFzHIKMD3PrOqreDt30
O/SEejzLZYGb4RBWTA6cufds
-----END CERTIFICATE-----
Generated at Wed May 13 07:01:45 2026 by rpki-client