Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
File:                     nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft (raw, json)
Hash identifier:          0YEeg+Msl5skenvW9hBsykW+8wQzfWHMS2E4hrJKXRA=
Subject key identifier:   A4:36:9E:E6:0E:72:60:9D:FA:A4:B7:72:45:22:C0:4B:F2:EF:B0:A1
Authority key identifier: 9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82
Certificate issuer:       /CN=A91688D4/serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
Certificate serial:       05C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
Manifest number:          0594
Signing time:             Tue 12 May 2026 23:27:23 +0000
Manifest this update:     Tue 12 May 2026 23:27:23 +0000
Manifest next update:     Tue 19 May 2026 23:27:23 +0000
Files and hashes:         1: nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl (hash: tkr6CUqCgJdDdKUrzcZpeq04DxzEEHYmhJ8uXcysWP0=)
                          2: FBBECF1A694111F08D368069C4F9AE02.roa (hash: HO1DGtNQx+OH3SloGIt02Rz1EoCoy8/3rF9m0kcImEQ=)
                          3: 9EABFF288CA011F0B1F47C12C4F9AE02.roa (hash: xb+uRHoHsQjZ3bcCgpJzZNIAPd4nFn7kpkaspAVlz/c=)
                          4: 53B4619407CB11F19B0357131B3D8C67.roa (hash: FE2rPrjsmUgohHBi/GpAcZVW0Hos/Z/JQQ5dDQAETOY=)
                          5: 9E3C65828CA011F0B1F47C12C4F9AE02.roa (hash: Q6qYKHjV9NmhmzxqH8ayk30H8rtTg6j37bugDkJvn/Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl
                          rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 23:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1474 (0x5c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91688D4, serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
        Validity
            Not Before: May 12 23:27:23 2026 GMT
            Not After : May 19 23:27:23 2026 GMT
        Subject: CN=6a03b75b-4133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f3:b7:8f:37:f2:39:b2:b2:ea:a7:ea:6e:d9:
                    4f:f4:de:f3:a7:39:97:69:d3:e0:4a:b7:6c:33:9c:
                    55:1c:62:61:c6:a5:b1:3a:34:c7:a1:bb:9e:c6:27:
                    17:a4:f9:ca:3c:30:55:d2:41:34:2d:d7:a9:f0:70:
                    43:2c:1b:96:d4:a5:77:b2:1e:40:fe:e4:34:87:68:
                    34:3b:ee:e5:84:16:74:e0:d7:62:ee:f8:d2:52:6e:
                    32:cb:c3:84:32:35:42:90:93:bc:9a:cd:a9:16:78:
                    96:22:4a:29:37:69:8b:92:0f:c3:55:17:4b:0a:8d:
                    15:bc:c8:e2:62:81:80:aa:6c:f1:59:8d:ef:63:16:
                    ee:ad:47:54:af:7d:89:d9:a6:0f:28:d4:32:7e:9b:
                    02:12:b0:d3:ab:7b:80:25:c4:e5:33:b7:0e:41:a2:
                    70:aa:0d:6f:8a:a2:86:a5:f2:60:f3:68:71:15:79:
                    fa:3c:14:16:5f:e4:74:ce:fb:08:59:7b:bc:78:94:
                    4d:f3:2d:2b:f0:7c:49:6c:ff:f8:70:bd:b9:b5:b1:
                    f3:d9:dd:64:4a:ee:9f:e7:e5:a9:00:53:19:11:a1:
                    4a:71:d0:d8:42:98:0b:b2:46:6d:84:34:5c:7a:6b:
                    b4:27:24:88:4e:c1:9c:5f:8d:fb:b2:85:4d:ae:5c:
                    94:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:36:9E:E6:0E:72:60:9D:FA:A4:B7:72:45:22:C0:4B:F2:EF:B0:A1
            X509v3 Authority Key Identifier:
                keyid:9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:45:3c:1f:bd:1c:07:92:07:66:e6:47:3b:54:16:6f:c8:cd:
         47:26:06:a5:49:20:cd:66:46:7d:58:2c:55:85:f9:0f:50:91:
         c5:41:23:b6:30:7a:24:76:49:a7:f9:29:ba:3b:c1:e8:06:7a:
         4e:8d:ba:f2:ed:de:9f:c6:fe:01:df:2a:24:0c:69:33:de:8c:
         27:0f:8c:bf:64:9e:01:8d:81:3b:94:75:2d:a4:b5:28:d6:44:
         15:7f:33:0c:c6:9c:5c:c3:3e:22:e0:94:79:81:27:3f:01:f5:
         23:95:02:57:b4:63:e0:df:a7:0d:b6:83:e8:f7:fb:bd:25:50:
         cb:38:a7:f3:1f:ee:c3:ff:fe:f4:59:93:78:5b:d0:2b:ee:a9:
         e0:d0:58:39:dd:63:1b:91:75:fe:17:58:2d:f4:4d:f8:5a:63:
         f6:8b:ae:f4:cb:9e:a7:3f:5d:d6:90:ed:e8:af:82:bf:34:e7:
         8b:b7:ed:28:89:23:b2:c5:cb:16:96:fa:c8:10:23:11:cb:88:
         28:a9:36:c2:72:7c:6a:bf:e0:c7:03:e1:8b:ef:c6:7b:c7:3b:
         19:3c:1a:3b:31:a7:8d:75:a1:3d:d1:c8:98:11:7b:f7:e1:91:
         09:5b:65:dd:e6:7d:7d:06:79:14:47:72:f8:af:71:c7:3a:7f:
         65:69:00:ad
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njg4RDQxMTAvBgNVBAUTKDlDOEFFM0RDN0IwNUIzODUzOTY3OTBDQTczMjNEM0Ew
OTA2RkVEODIwHhcNMjYwNTEyMjMyNzIzWhcNMjYwNTE5MjMyNzIzWjAYMRYwFAYD
VQQDEw02YTAzYjc1Yi00MTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApvO3jzfyObKy6qfqbtlP9N7zpzmXadPgSrdsM5xVHGJhxqWxOjTHobuexicX
pPnKPDBV0kE0Ldep8HBDLBuW1KV3sh5A/uQ0h2g0O+7lhBZ04Ndi7vjSUm4yy8OE
MjVCkJO8ms2pFniWIkopN2mLkg/DVRdLCo0VvMjiYoGAqmzxWY3vYxburUdUr32J
2aYPKNQyfpsCErDTq3uAJcTlM7cOQaJwqg1viqKGpfJg82hxFXn6PBQWX+R0zvsI
WXu8eJRN8y0r8HxJbP/4cL25tbHz2d1kSu6f5+WpAFMZEaFKcdDYQpgLskZthDRc
emu0JySITsGcX437soVNrlyUdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKQ2nuYO
cmCd+qS3ckUiwEvy77ChMB8GA1UdIwQYMBaAFJyK49x7BbOFOWeQynMj06CQb+2C
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODhENC8yRjU4RTQ3MjJF
NTAxMUVDQTA0QjZDMjVDNEY5QUUwMi9uSXJqM0hzRnM0VTVaNURLY3lQVG9KQnY3
WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25JcmozSHNGczRVNVo1REtjeVBUb0pCdjdZSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
ODhENC8yRjU4RTQ3MjJFNTAxMUVDQTA0QjZDMjVDNEY5QUUwMi9uSXJqM0hzRnM0
VTVaNURLY3lQVG9KQnY3WUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALUU8H70cB5IHZuZHO1QWb8jNRyYGpUkgzWZGfVgsVYX5D1CRxUEjtjB6JHZJ
p/kpujvB6AZ6To268u3en8b+Ad8qJAxpM96MJw+Mv2SeAY2BO5R1LaS1KNZEFX8z
DMacXMM+IuCUeYEnPwH1I5UCV7Rj4N+nDbaD6Pf7vSVQyzin8x/uw//+9FmTeFvQ
K+6p4NBYOd1jG5F1/hdYLfRN+Fpj9ouu9Muepz9d1pDt6K+CvzTni7ftKIkjssXL
Fpb6yBAjEcuIKKk2wnJ8ar/gxwPhi+/Ge8c7GTwaOzGnjXWhPdHImBF79+GRCVtl
3eZ9fQZ5FEdy+K9xxzp/ZWkArQ==
-----END CERTIFICATE-----
Generated at Wed May 13 03:13:55 2026 by rpki-client