Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.mft
File:                     kSqzn8e7y-8c8mfp0_cZyaTwoRQ.mft (raw, json)
Hash identifier:          EnEQ1cFEpMfZmQamSXpA7WwORr34yf6/AFGyNazLEaw=
Subject key identifier:   BB:1B:AD:F5:B0:F4:0D:B9:D5:51:C2:F6:92:18:7B:9E:D6:E8:08:D5
Authority key identifier: 91:2A:B3:9F:C7:BB:CB:EF:1C:F2:67:E9:D3:F7:19:C9:A4:F0:A1:14
Certificate issuer:       /CN=A91478C3/serialNumber=912AB39FC7BBCBEF1CF267E9D3F719C9A4F0A114
Certificate serial:       0F13
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.mft
Manifest number:          0F08
Signing time:             Tue 12 May 2026 17:37:42 +0000
Manifest this update:     Tue 12 May 2026 17:37:42 +0000
Manifest next update:     Tue 19 May 2026 17:37:42 +0000
Files and hashes:         1: kSqzn8e7y-8c8mfp0_cZyaTwoRQ.crl (hash: yE4L3eLAxkdgSPKBy/OPISP0X2n4aPAo78IYLRxry5A=)
                          2: 36477FF69D2E11E99A95DC2AC4F9AE02.roa (hash: 7Zntvgptxi7t6rq+AQ6AjwkrN9jO9paj8Ccr/LfGYDk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.crl
                          rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 17:37:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3859 (0xf13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91478C3, serialNumber=912AB39FC7BBCBEF1CF267E9D3F719C9A4F0A114
        Validity
            Not Before: May 12 17:37:42 2026 GMT
            Not After : May 19 17:37:42 2026 GMT
        Subject: CN=6a036566-71c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b3:28:7d:7b:68:b7:66:a9:99:94:68:58:e4:
                    95:a2:03:6c:a3:c3:3d:0a:4b:f1:ba:e1:69:27:98:
                    ab:fa:3d:fe:42:45:e4:a3:a1:25:bf:d6:41:4b:97:
                    70:74:da:fe:6f:6e:6d:4b:82:75:8e:a2:c7:5b:5f:
                    35:6e:98:2e:d7:4a:c1:3c:5d:09:d3:dc:e7:05:27:
                    96:a0:2d:f7:a0:c3:fa:7d:b1:ff:7f:99:45:06:26:
                    87:46:b1:87:dc:80:a8:6f:de:98:84:16:ab:e2:58:
                    39:d0:53:fb:a3:6f:07:87:8e:05:5d:d7:e8:db:3e:
                    f9:50:71:20:64:67:d5:57:1d:01:e2:3e:78:a6:55:
                    07:36:ab:5e:3c:ca:59:77:cf:2c:cd:3e:b1:f1:f7:
                    cd:ec:74:9d:78:a1:2b:63:a2:55:62:5c:76:df:d9:
                    dd:87:b4:7d:01:2d:09:ce:e8:9d:d2:35:e1:c2:76:
                    9b:34:7c:7f:80:20:f4:f2:27:80:e9:35:d8:7d:d1:
                    81:32:3e:a6:b9:f1:c1:bb:ed:06:8b:21:ea:d6:09:
                    47:82:af:96:fd:be:aa:db:c8:22:b8:e1:b4:8a:84:
                    14:2a:8c:45:6d:9a:f9:16:19:9a:e2:e6:2f:4a:35:
                    d2:e5:e2:e3:0e:b9:d1:59:6b:aa:28:e0:cf:31:a3:
                    70:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:1B:AD:F5:B0:F4:0D:B9:D5:51:C2:F6:92:18:7B:9E:D6:E8:08:D5
            X509v3 Authority Key Identifier:
                keyid:91:2A:B3:9F:C7:BB:CB:EF:1C:F2:67:E9:D3:F7:19:C9:A4:F0:A1:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:87:a4:9f:34:b1:ac:45:27:d3:d0:5c:7a:91:b0:34:e0:fe:
         8d:e7:a5:7d:cb:62:08:11:d5:6f:95:d5:d6:e1:33:75:af:21:
         26:43:44:ea:21:69:57:fd:cd:c5:6d:25:81:93:2d:e0:bf:70:
         56:8b:e4:cc:28:4f:06:0a:3e:48:a6:73:a9:29:e0:ac:cc:4f:
         95:92:6a:4f:20:41:d3:99:84:48:dd:c2:d7:0d:9f:d4:bf:e9:
         1b:be:44:46:06:5e:c6:4e:1e:4c:fc:de:a4:48:ab:c2:16:e5:
         b9:d2:b3:86:2d:e0:4f:eb:76:ba:2f:a7:8c:90:46:e0:79:3d:
         99:00:df:0f:cd:a9:d4:8c:e1:b0:f4:fa:04:97:cc:ff:40:8b:
         cb:33:ab:9d:31:38:3d:6b:a8:2a:44:56:1b:e8:fc:52:7e:11:
         e5:f2:cd:45:dd:d7:3a:d0:92:aa:de:1a:e2:1a:da:55:41:19:
         29:0a:f2:8b:a9:e4:d1:c1:65:a9:b3:a4:1d:f1:1a:c4:a7:99:
         4b:88:69:a8:b2:46:c8:24:92:b7:12:a3:54:8f:53:e0:da:67:
         74:30:d3:6b:c2:5f:7c:4c:2d:48:47:59:57:14:49:37:a3:d1:
         8e:17:36:95:08:fd:0e:9f:30:bc:67:01:9d:0b:5f:9d:af:6e:
         9c:a2:98:d0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDxMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDc4QzMxMTAvBgNVBAUTKDkxMkFCMzlGQzdCQkNCRUYxQ0YyNjdFOUQzRjcxOUM5
QTRGMEExMTQwHhcNMjYwNTEyMTczNzQyWhcNMjYwNTE5MTczNzQyWjAYMRYwFAYD
VQQDEw02YTAzNjU2Ni03MWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyrMofXtot2apmZRoWOSVogNso8M9CkvxuuFpJ5ir+j3+QkXko6Elv9ZBS5dw
dNr+b25tS4J1jqLHW181bpgu10rBPF0J09znBSeWoC33oMP6fbH/f5lFBiaHRrGH
3ICob96YhBar4lg50FP7o28Hh44FXdfo2z75UHEgZGfVVx0B4j54plUHNqtePMpZ
d88szT6x8ffN7HSdeKErY6JVYlx239ndh7R9AS0Jzuid0jXhwnabNHx/gCD08ieA
6TXYfdGBMj6mufHBu+0GiyHq1glHgq+W/b6q28giuOG0ioQUKoxFbZr5Fhma4uYv
SjXS5eLjDrnRWWuqKODPMaNwYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLsbrfWw
9A251VHC9pIYe57W6AjVMB8GA1UdIwQYMBaAFJEqs5/Hu8vvHPJn6dP3Gcmk8KEU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzhDMy9FM0Q5MTk0QzlE
MkMxMUU5ODAyMjE4MjlDNEY5QUUwMi9rU3F6bjhlN3ktOGM4bWZwMF9jWnlhVHdv
UlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tTcXpuOGU3eS04YzhtZnAwX2NaeWFUd29SUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NzhDMy9FM0Q5MTk0QzlEMkMxMUU5ODAyMjE4MjlDNEY5QUUwMi9rU3F6bjhlN3kt
OGM4bWZwMF9jWnlhVHdvUlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAI4eknzSxrEUn09BcepGwNOD+jeelfctiCBHVb5XV1uEzda8hJkNE6iFpV/3N
xW0lgZMt4L9wVovkzChPBgo+SKZzqSngrMxPlZJqTyBB05mESN3C1w2f1L/pG75E
RgZexk4eTPzepEirwhbludKzhi3gT+t2ui+njJBG4Hk9mQDfD82p1IzhsPT6BJfM
/0CLyzOrnTE4PWuoKkRWG+j8Un4R5fLNRd3XOtCSqt4a4hraVUEZKQryi6nk0cFl
qbOkHfEaxKeZS4hpqLJGyCSStxKjVI9T4NpndDDTa8JffEwtSEdZVxRJN6PRjhc2
lQj9Dp8wvGcBnQtfna9unKKY0A==
-----END CERTIFICATE-----
Generated at Wed May 13 01:43:28 2026 by rpki-client