Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft
File:                     4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft (raw, json)
Hash identifier:          gQk97GdCU30SPuK1FG9UK/la/LkHjS6TLRJ3e3vnn18=
Subject key identifier:   E0:A1:07:64:AD:81:5A:70:AB:B1:7D:0C:1A:85:24:56:AC:CD:13:C1
Authority key identifier: E1:C1:C7:2B:67:93:A9:03:BA:3D:E0:31:02:75:19:B4:30:21:75:6A
Certificate issuer:       /CN=A91493FC/serialNumber=E1C1C72B6793A903BA3DE031027519B43021756A
Certificate serial:       0279
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cHHK2eTqQO6PeAxAnUZtDAhdWo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft
Manifest number:          026C
Signing time:             Mon 11 May 2026 02:06:55 +0000
Manifest this update:     Mon 11 May 2026 02:06:55 +0000
Manifest next update:     Mon 18 May 2026 02:06:55 +0000
Files and hashes:         1: 4cHHK2eTqQO6PeAxAnUZtDAhdWo.crl (hash: be6DcZgVdn4+ZoT6BC7g6SWiwZowrmDEi489YzBRn3A=)
                          2: D076B1A49F2911ED937CF05AC4F9AE02.roa (hash: ruF2i3AOGgPYwroRD2rSZSmDfGWURXx0prKXNcqPrNM=)
                          3: 38702E769AF611ED8D41985BC4F9AE02.roa (hash: nnTjgZ46HqO0Mpo0brQW7RdIt/A/0sbmdcDjLarFt5g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.crl
                          rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cHHK2eTqQO6PeAxAnUZtDAhdWo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 02:06:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 633 (0x279)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91493FC, serialNumber=E1C1C72B6793A903BA3DE031027519B43021756A
        Validity
            Not Before: May 11 02:06:55 2026 GMT
            Not After : May 18 02:06:55 2026 GMT
        Subject: CN=6a0139bf-b671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f6:72:9c:a5:28:e4:b8:27:b1:64:0e:d4:16:
                    2f:6c:84:19:8a:16:aa:b3:2c:a6:4a:67:84:14:1d:
                    1a:7a:69:50:d1:64:17:ec:a5:84:19:64:d2:94:2b:
                    ec:43:3e:48:4a:5c:fd:75:7f:5f:e0:9d:d3:29:3f:
                    2c:29:05:9b:6d:71:80:5d:25:66:01:10:6c:7c:3a:
                    52:3b:d7:f3:cd:ae:dd:ac:f1:4c:93:ab:58:5f:93:
                    63:f4:83:ae:a3:ab:4a:a9:06:d3:9f:76:6b:be:7c:
                    8e:9d:cd:5a:0b:4c:55:3d:af:da:c3:da:f9:5d:44:
                    dc:94:05:c3:cf:12:16:8b:a9:8f:82:7f:05:56:c4:
                    f4:32:52:88:40:25:29:a3:2b:d2:b9:dd:f9:02:ef:
                    16:65:ba:22:d3:9b:35:21:d8:e4:66:f9:80:9c:bb:
                    72:b2:d3:b8:84:88:b3:69:a6:fa:c5:79:b2:13:fe:
                    91:28:2a:ba:ff:47:bb:0f:c9:27:31:71:cb:43:08:
                    41:8f:db:7a:da:3b:b9:69:6c:b8:1d:14:c4:3b:84:
                    f3:7d:da:25:e8:bd:61:5e:e4:24:5b:16:7e:da:96:
                    60:dc:9e:71:89:a2:09:c0:96:60:00:0e:39:a3:ba:
                    e5:b3:cf:46:7d:c2:c9:7a:f1:6c:29:dd:0e:9b:e6:
                    c3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A1:07:64:AD:81:5A:70:AB:B1:7D:0C:1A:85:24:56:AC:CD:13:C1
            X509v3 Authority Key Identifier:
                keyid:E1:C1:C7:2B:67:93:A9:03:BA:3D:E0:31:02:75:19:B4:30:21:75:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cHHK2eTqQO6PeAxAnUZtDAhdWo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:c7:91:42:39:ed:40:7f:8f:c4:9c:7a:9a:2f:23:7f:db:6b:
         65:97:ba:ae:8f:ca:5b:7a:71:40:1d:31:79:59:73:f9:05:b9:
         c3:f0:99:5b:3f:f4:a9:6c:73:e7:e9:53:28:bf:28:8d:a7:6c:
         1e:23:2f:fd:90:a2:06:12:b3:77:5f:1b:58:8f:7c:8e:e9:e1:
         e5:2c:df:9f:68:9a:16:84:f2:9e:43:01:66:c7:14:d7:e6:6b:
         82:23:37:33:3e:0c:27:a7:50:64:b6:ce:4c:08:72:5e:42:65:
         ef:38:94:98:4a:d9:c6:a1:62:e3:70:94:59:18:db:b0:3c:cb:
         35:53:28:4b:32:31:57:c6:b8:cb:62:ae:0d:6b:b0:d0:6b:a7:
         16:c0:5e:91:f5:fc:dd:b2:9e:e5:9a:a8:41:08:45:ea:85:86:
         70:3c:62:18:d8:b5:8a:f0:aa:1d:4d:56:ff:53:98:a5:82:3f:
         06:08:cd:ca:5e:07:1b:c5:40:7c:98:f5:9c:95:bb:d8:b4:50:
         7a:26:7f:ed:d8:a0:22:50:68:c2:2a:db:47:05:63:c2:d2:c1:
         24:7f:7d:a9:90:7d:2d:ed:d4:70:b1:f8:be:cc:13:5a:57:b0:
         31:e0:73:47:36:2a:0e:4d:eb:85:04:b7:5d:64:de:d3:4a:c4:
         75:62:ae:c9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDkzRkMxMTAvBgNVBAUTKEUxQzFDNzJCNjc5M0E5MDNCQTNERTAzMTAyNzUxOUI0
MzAyMTc1NkEwHhcNMjYwNTExMDIwNjU1WhcNMjYwNTE4MDIwNjU1WjAYMRYwFAYD
VQQDEw02YTAxMzliZi1iNjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsfZynKUo5LgnsWQO1BYvbIQZihaqsyymSmeEFB0aemlQ0WQX7KWEGWTSlCvs
Qz5ISlz9dX9f4J3TKT8sKQWbbXGAXSVmARBsfDpSO9fzza7drPFMk6tYX5Nj9IOu
o6tKqQbTn3ZrvnyOnc1aC0xVPa/aw9r5XUTclAXDzxIWi6mPgn8FVsT0MlKIQCUp
oyvSud35Au8WZboi05s1IdjkZvmAnLtystO4hIizaab6xXmyE/6RKCq6/0e7D8kn
MXHLQwhBj9t62ju5aWy4HRTEO4Tzfdol6L1hXuQkWxZ+2pZg3J5xiaIJwJZgAA45
o7rls89GfcLJevFsKd0Om+bDewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOChB2St
gVpwq7F9DBqFJFaszRPBMB8GA1UdIwQYMBaAFOHBxytnk6kDuj3gMQJ1GbQwIXVq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTNGQy9BOTZGNEI3ODlB
RjMxMUVEOTAxQUU0NUFDNEY5QUUwMi80Y0hISzJlVHFRTzZQZUF4QW5VWnREQWhk
V28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRjSEhLMmVUcVFPNlBlQXhBblVadERBaGRXby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OTNGQy9BOTZGNEI3ODlBRjMxMUVEOTAxQUU0NUFDNEY5QUUwMi80Y0hISzJlVHFR
TzZQZUF4QW5VWnREQWhkV28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAh8eRQjntQH+PxJx6mi8jf9trZZe6ro/KW3pxQB0xeVlz+QW5w/CZWz/0qWxz
5+lTKL8ojadsHiMv/ZCiBhKzd18bWI98junh5Szfn2iaFoTynkMBZscU1+ZrgiM3
Mz4MJ6dQZLbOTAhyXkJl7ziUmErZxqFi43CUWRjbsDzLNVMoSzIxV8a4y2KuDWuw
0GunFsBekfX83bKe5ZqoQQhF6oWGcDxiGNi1ivCqHU1W/1OYpYI/BgjNyl4HG8VA
fJj1nJW72LRQeiZ/7digIlBowirbRwVjwtLBJH99qZB9Le3UcLH4vswTWlewMeBz
RzYqDk3rhQS3XWTe00rEdWKuyQ==
-----END CERTIFICATE-----
Generated at Wed May 13 01:12:56 2026 by rpki-client