Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft
File:                     rEGRrDoak5bnjWEvN026zI8tkbU.mft (raw, json)
Hash identifier:          AwDlG0xnWr+MRpTW8V9ZmSs4uYcLt/ECtyL/TMIv9zA=
Subject key identifier:   52:C8:69:A3:19:4D:2C:F7:10:98:77:DA:C5:57:5A:02:83:FC:1D:4C
Authority key identifier: AC:41:91:AC:3A:1A:93:96:E7:8D:61:2F:37:4D:BA:CC:8F:2D:91:B5
Certificate issuer:       /CN=A9169CD3/serialNumber=AC4191AC3A1A9396E78D612F374DBACC8F2D91B5
Certificate serial:       2563
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft
Manifest number:          2542
Signing time:             Tue 12 May 2026 15:45:49 +0000
Manifest this update:     Tue 12 May 2026 15:45:48 +0000
Manifest next update:     Tue 19 May 2026 15:45:48 +0000
Files and hashes:         1: rEGRrDoak5bnjWEvN026zI8tkbU.crl (hash: KO4x0UdElR+0Xf46MHo/OgQNlQ6PU0+BkXn+RLcJEqA=)
                          2: 174B2A3441B611F0A03F6C24C4F9AE02.roa (hash: i+GdPwFxjLjj+7bNWOxBthvhtqMbDPp4GipdpNEloMI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.crl
                          rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:45:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9571 (0x2563)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169CD3, serialNumber=AC4191AC3A1A9396E78D612F374DBACC8F2D91B5
        Validity
            Not Before: May 12 15:45:48 2026 GMT
            Not After : May 19 15:45:48 2026 GMT
        Subject: CN=6a034b2d-78df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ad:96:52:13:ae:ac:e5:a7:3a:70:12:92:ac:
                    75:6f:96:9a:c9:5a:9b:98:3a:86:87:97:cd:30:91:
                    59:0c:82:16:52:88:b9:a3:2b:2d:2b:28:43:39:fc:
                    0b:cf:80:c0:68:67:bd:96:af:c5:b9:2c:b8:ae:1b:
                    7b:1b:0e:10:88:60:2a:ac:c9:67:ec:27:72:84:7b:
                    67:91:ff:2f:fe:1d:0f:4e:04:bf:48:fe:c3:91:9a:
                    e2:c4:b4:cc:b6:d4:8a:5a:4a:bf:d4:25:1a:2d:e8:
                    0d:f8:36:45:f5:93:a3:97:84:c7:c4:f3:24:fd:c5:
                    87:cb:b6:25:46:92:f5:47:14:78:7a:77:0c:8c:76:
                    3d:f9:4d:fb:bf:26:1b:92:05:07:6a:ad:62:95:79:
                    2b:0b:7f:40:4d:cf:21:dd:0b:64:f5:71:21:5b:65:
                    53:98:71:9a:03:f6:8b:6f:25:d0:8d:91:3c:e0:a6:
                    a5:84:75:6e:6e:6f:2f:c2:43:c9:fc:0f:e5:89:ef:
                    67:31:17:c4:98:b2:a8:34:6b:e8:e5:0c:1d:61:e7:
                    d0:38:1d:eb:48:48:5b:55:c0:18:c1:f0:93:d3:de:
                    9e:da:b7:c7:83:90:ca:0a:71:6f:58:d0:ea:3a:fe:
                    49:6e:e4:d1:a7:83:23:e0:ee:eb:ce:6e:97:95:5f:
                    34:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:C8:69:A3:19:4D:2C:F7:10:98:77:DA:C5:57:5A:02:83:FC:1D:4C
            X509v3 Authority Key Identifier:
                keyid:AC:41:91:AC:3A:1A:93:96:E7:8D:61:2F:37:4D:BA:CC:8F:2D:91:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:52:34:35:ba:34:03:79:78:cc:f9:98:da:c2:aa:25:ad:8e:
         f3:10:41:cf:55:cf:93:10:a5:e2:bf:c1:0c:6b:ae:d6:8a:69:
         45:6c:31:af:a6:b9:73:be:d2:dd:15:23:76:8c:bc:f1:9d:15:
         d7:15:6f:df:06:f2:b2:cd:29:f0:7b:3b:50:5a:5b:c1:86:0f:
         3a:21:6c:9a:7d:58:34:40:59:a8:53:38:06:1a:47:86:06:a6:
         01:14:f0:dc:83:e9:77:dd:66:a9:cf:28:3e:f5:04:c3:4e:3e:
         90:3b:f5:d4:0a:77:f6:35:8e:c9:df:7b:2b:63:45:95:0c:4e:
         8f:97:07:62:50:09:a5:cc:64:a7:93:83:d4:4f:3e:1c:57:29:
         b5:98:14:3d:0c:56:c4:2e:1e:ab:90:da:f2:d7:53:89:dd:81:
         e9:b1:f2:86:be:f9:86:12:a4:82:3e:a1:c8:59:26:98:6c:ad:
         94:6a:8b:3a:e5:cf:dc:b7:ff:db:5f:b1:d4:6e:d8:d8:00:ef:
         65:71:9c:57:e5:28:2a:13:08:93:71:a5:e0:90:6c:4c:41:43:
         a2:36:a6:d1:8d:46:34:4a:e0:7f:97:8f:dd:2a:6b:91:c8:c4:
         50:50:77:a0:cc:a4:2b:01:a8:f4:08:d4:1d:6d:a1:8d:7e:d3:
         c1:4e:4f:6b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjlDRDMxMTAvBgNVBAUTKEFDNDE5MUFDM0ExQTkzOTZFNzhENjEyRjM3NERCQUND
OEYyRDkxQjUwHhcNMjYwNTEyMTU0NTQ4WhcNMjYwNTE5MTU0NTQ4WjAYMRYwFAYD
VQQDEw02YTAzNGIyZC03OGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnK2WUhOurOWnOnASkqx1b5aayVqbmDqGh5fNMJFZDIIWUoi5oystKyhDOfwL
z4DAaGe9lq/FuSy4rht7Gw4QiGAqrMln7CdyhHtnkf8v/h0PTgS/SP7DkZrixLTM
ttSKWkq/1CUaLegN+DZF9ZOjl4THxPMk/cWHy7YlRpL1RxR4encMjHY9+U37vyYb
kgUHaq1ilXkrC39ATc8h3Qtk9XEhW2VTmHGaA/aLbyXQjZE84KalhHVubm8vwkPJ
/A/lie9nMRfEmLKoNGvo5QwdYefQOB3rSEhbVcAYwfCT096e2rfHg5DKCnFvWNDq
Ov5JbuTRp4Mj4O7rzm6XlV807wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFLIaaMZ
TSz3EJh32sVXWgKD/B1MMB8GA1UdIwQYMBaAFKxBkaw6GpOW541hLzdNusyPLZG1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUNEMy84MTIyODZEMjQ3
MTExMUU1QTQ0OTYzMzVDNEY5QUUwMi9yRUdSckRvYWs1Ym5qV0V2TjAyNnpJOHRr
YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JFR1JyRG9hazVibmpXRXZOMDI2ekk4dGtiVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
OUNEMy84MTIyODZEMjQ3MTExMUU1QTQ0OTYzMzVDNEY5QUUwMi9yRUdSckRvYWs1
Ym5qV0V2TjAyNnpJOHRrYlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgFI0Nbo0A3l4zPmY2sKqJa2O8xBBz1XPkxCl4r/BDGuu1oppRWwxr6a5c77S
3RUjdoy88Z0V1xVv3wbyss0p8Hs7UFpbwYYPOiFsmn1YNEBZqFM4BhpHhgamARTw
3IPpd91mqc8oPvUEw04+kDv11Ap39jWOyd97K2NFlQxOj5cHYlAJpcxkp5OD1E8+
HFcptZgUPQxWxC4eq5Da8tdTid2B6bHyhr75hhKkgj6hyFkmmGytlGqLOuXP3Lf/
21+x1G7Y2ADvZXGcV+UoKhMIk3Gl4JBsTEFDojam0Y1GNErgf5eP3SprkcjEUFB3
oMykKwGo9AjUHW2hjX7TwU5Paw==
-----END CERTIFICATE-----
Generated at Wed May 13 06:36:15 2026 by rpki-client