Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft
File:                     m7K00aj-gR3ElT2ALRAvXQSNCB0.mft (raw, json)
Hash identifier:          9jBg8GJtwKK03H3hmfQwIGBNXanrd7lajfHpaQ4jzpE=
Subject key identifier:   62:97:51:50:06:FF:5D:1E:A6:D1:2F:09:60:DB:E5:22:24:44:FF:06
Authority key identifier: 9B:B2:B4:D1:A8:FE:81:1D:C4:95:3D:80:2D:10:2F:5D:04:8D:08:1D
Certificate issuer:       /CN=A91454A8/serialNumber=9BB2B4D1A8FE811DC4953D802D102F5D048D081D
Certificate serial:       08F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft
Manifest number:          08E6
Signing time:             Tue 12 May 2026 20:26:13 +0000
Manifest this update:     Tue 12 May 2026 20:26:12 +0000
Manifest next update:     Tue 19 May 2026 20:26:12 +0000
Files and hashes:         1: m7K00aj-gR3ElT2ALRAvXQSNCB0.crl (hash: dZvbylBKG5Po4o/ibq2lozakQXFXM4/ZoXg7o1TQCPM=)
                          2: 91CB02E0DBDD11F0B3C660C858641951.roa (hash: IDruivghScNBn7wWElCYAZJ9mPRaLr5FUKmSCdHCH3Y=)
                          3: 7B3B0868DBDD11F089B5B5C658641951.roa (hash: DCiubbftabSxu91ah+p7CZ1dSt4rSpuPeVIKNRHm1PY=)
                          4: 5EA3F4042E5C11F1A98E57D89B833773.roa (hash: N+uHaG3MJr82cfnEajXUFCCao7Ru1SBdTbuDh04l7Ng=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.crl
                          rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:26:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2294 (0x8f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91454A8, serialNumber=9BB2B4D1A8FE811DC4953D802D102F5D048D081D
        Validity
            Not Before: May 12 20:26:12 2026 GMT
            Not After : May 19 20:26:12 2026 GMT
        Subject: CN=6a038ce5-df06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3b:ca:d7:1c:72:f4:85:9a:ae:e8:52:4c:ec:
                    c8:b2:18:86:ee:11:89:e1:a4:4a:9a:f7:be:bf:90:
                    f0:37:ba:04:9b:ff:b6:27:03:0b:6c:2f:70:ff:fe:
                    60:a6:2e:ad:b6:8e:0c:88:67:ef:e9:04:ed:c2:43:
                    c2:a3:28:10:74:14:60:25:56:45:a0:74:cc:48:93:
                    10:aa:57:52:d2:1a:05:a7:7c:03:ee:76:89:ca:37:
                    83:2e:82:86:fc:a6:fb:fa:f3:b3:14:3c:ba:c2:6f:
                    49:96:4d:57:ef:f5:c9:01:92:ee:5a:33:dc:0f:08:
                    1a:74:08:f1:c4:07:14:af:fd:7f:70:6f:0e:74:fe:
                    68:6d:8c:47:3e:39:c4:70:ac:81:d8:e3:b3:71:80:
                    75:66:01:c8:c3:d5:d7:d9:1c:ad:00:0f:f2:ea:26:
                    88:d2:45:3a:f9:4d:03:74:c2:f1:d4:e4:19:89:97:
                    f3:16:f9:98:c1:de:2e:f8:1e:2a:e1:2f:9d:d0:5d:
                    f7:87:39:06:b5:7c:31:90:79:4e:44:2b:f1:6e:67:
                    31:cc:2b:1a:21:7e:b6:f0:42:a0:82:bd:0f:51:8c:
                    2e:65:10:b6:61:83:5b:05:9e:55:ce:f3:c7:a5:6c:
                    1a:69:00:83:ef:cc:6e:cd:62:19:6f:04:9d:eb:47:
                    4d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:97:51:50:06:FF:5D:1E:A6:D1:2F:09:60:DB:E5:22:24:44:FF:06
            X509v3 Authority Key Identifier:
                keyid:9B:B2:B4:D1:A8:FE:81:1D:C4:95:3D:80:2D:10:2F:5D:04:8D:08:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:45:c4:a4:da:fe:8a:82:c9:84:d6:51:17:80:10:96:92:8d:
         12:1d:1d:f8:a7:16:d9:65:d2:97:12:c5:5e:89:e9:d0:3f:a8:
         8e:df:04:fa:e5:52:b5:1c:28:82:99:0b:85:ab:a6:35:4c:07:
         89:cc:e9:ab:9d:90:f3:f8:f5:b9:51:a3:57:70:0b:32:9c:9d:
         68:a6:49:db:02:0f:ed:b9:37:d9:d3:45:72:85:bd:f0:34:62:
         6f:28:f1:8b:9b:65:5f:07:9a:15:47:3f:3e:8a:82:8b:a2:cb:
         e1:f2:0b:f8:8a:a7:90:de:86:39:1f:2e:82:2f:d1:50:2e:d0:
         c2:1d:99:05:74:ce:90:03:e6:d4:a1:a3:c6:6e:3a:0b:03:61:
         c6:a7:da:19:12:d5:cd:54:9b:5c:c5:9c:22:16:43:33:e0:fa:
         9c:62:0b:6c:6b:a7:29:a3:eb:52:ac:38:ee:8f:90:eb:90:75:
         7d:a2:20:6d:2b:f2:e9:24:b2:54:f2:5d:7e:d8:02:6f:a9:69:
         f7:2c:f3:c4:1e:05:fe:41:bb:10:19:d1:52:d7:37:bb:11:b2:
         be:cb:62:4e:95:fc:c3:fd:87:dc:44:54:9a:a4:8f:0b:13:da:
         be:46:46:30:0f:52:a2:54:d5:86:43:55:a6:5b:e2:fd:46:b1:
         5c:81:31:22
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDU0QTgxMTAvBgNVBAUTKDlCQjJCNEQxQThGRTgxMURDNDk1M0Q4MDJEMTAyRjVE
MDQ4RDA4MUQwHhcNMjYwNTEyMjAyNjEyWhcNMjYwNTE5MjAyNjEyWjAYMRYwFAYD
VQQDEw02YTAzOGNlNS1kZjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuTvK1xxy9IWaruhSTOzIshiG7hGJ4aRKmve+v5DwN7oEm/+2JwMLbC9w//5g
pi6tto4MiGfv6QTtwkPCoygQdBRgJVZFoHTMSJMQqldS0hoFp3wD7naJyjeDLoKG
/Kb7+vOzFDy6wm9Jlk1X7/XJAZLuWjPcDwgadAjxxAcUr/1/cG8OdP5obYxHPjnE
cKyB2OOzcYB1ZgHIw9XX2RytAA/y6iaI0kU6+U0DdMLx1OQZiZfzFvmYwd4u+B4q
4S+d0F33hzkGtXwxkHlORCvxbmcxzCsaIX628EKggr0PUYwuZRC2YYNbBZ5VzvPH
pWwaaQCD78xuzWIZbwSd60dN6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGKXUVAG
/10eptEvCWDb5SIkRP8GMB8GA1UdIwQYMBaAFJuytNGo/oEdxJU9gC0QL10EjQgd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTRBOC9FMjk1MjBCOEQx
Q0QxMUVBQkE0QTM0NDBDNEY5QUUwMi9tN0swMGFqLWdSM0VsVDJBTFJBdlhRU05D
QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL203SzAwYWotZ1IzRWxUMkFMUkF2WFFTTkNCMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NTRBOC9FMjk1MjBCOEQxQ0QxMUVBQkE0QTM0NDBDNEY5QUUwMi9tN0swMGFqLWdS
M0VsVDJBTFJBdlhRU05DQjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqUXEpNr+ioLJhNZRF4AQlpKNEh0d+KcW2WXSlxLFXonp0D+ojt8E+uVStRwo
gpkLhaumNUwHiczpq52Q8/j1uVGjV3ALMpydaKZJ2wIP7bk32dNFcoW98DRibyjx
i5tlXweaFUc/PoqCi6LL4fIL+IqnkN6GOR8ugi/RUC7Qwh2ZBXTOkAPm1KGjxm46
CwNhxqfaGRLVzVSbXMWcIhZDM+D6nGILbGunKaPrUqw47o+Q65B1faIgbSvy6SSy
VPJdftgCb6lp9yzzxB4F/kG7EBnRUtc3uxGyvstiTpX8w/2H3ERUmqSPCxPavkZG
MA9SolTVhkNVplvi/UaxXIExIg==
-----END CERTIFICATE-----
Generated at Wed May 13 04:01:30 2026 by rpki-client