Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.mft
File:                     MZsxRPBqjysw1BIHH-EhB3T-huc.mft (raw, json)
Hash identifier:          W9V1HXBe8WX+vNB0595K8T154xRRX40FPfzeVMPvBds=
Subject key identifier:   A7:50:3E:1B:77:48:32:25:9E:74:F1:30:F2:6B:61:FB:68:9E:47:73
Authority key identifier: 31:9B:31:44:F0:6A:8F:2B:30:D4:12:07:1F:E1:21:07:74:FE:86:E7
Certificate issuer:       /CN=A91971CB/serialNumber=319B3144F06A8F2B30D412071FE1210774FE86E7
Certificate serial:       0738
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZsxRPBqjysw1BIHH-EhB3T-huc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.mft
Manifest number:          072E
Signing time:             Tue 12 May 2026 15:12:17 +0000
Manifest this update:     Tue 12 May 2026 15:12:16 +0000
Manifest next update:     Tue 19 May 2026 15:12:16 +0000
Files and hashes:         1: MZsxRPBqjysw1BIHH-EhB3T-huc.crl (hash: Q1JPS6ccH+y2pvb3ZmF1JNe5bXfpBKv7vuVSE01VTfw=)
                          2: 27C29E5EF94411EDB4C6E91CC4F9AE02.roa (hash: dWX5BlXnJUAo9dHvNX1RgcAB0PkL/ZoFYS5PfP1NoaI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.crl
                          rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZsxRPBqjysw1BIHH-EhB3T-huc.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1848 (0x738)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91971CB, serialNumber=319B3144F06A8F2B30D412071FE1210774FE86E7
        Validity
            Not Before: May 12 15:12:16 2026 GMT
            Not After : May 19 15:12:16 2026 GMT
        Subject: CN=6a034350-9530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:74:f0:60:08:d7:d8:d4:e8:d3:ec:02:49:df:
                    50:3d:c2:de:31:22:0b:c4:2b:3c:f0:23:83:1a:58:
                    1f:84:e4:39:24:d7:ed:0a:c4:0e:91:7b:30:4e:18:
                    83:df:ac:bc:e7:c7:5c:1f:1f:45:c3:3e:e2:14:94:
                    c3:81:b3:de:bb:a6:29:42:83:c6:93:cc:7d:1a:38:
                    1d:54:a5:52:9c:0b:0e:95:47:04:41:a5:d7:e6:02:
                    6d:c7:49:d4:ec:e1:20:6f:7a:69:a9:bd:76:df:6c:
                    39:f8:f9:ad:85:51:eb:4e:46:7e:33:54:b1:8b:76:
                    4e:11:a3:cd:3a:40:e2:c5:37:d0:f8:dd:2e:d7:ae:
                    b3:17:ea:39:04:6d:c5:0d:f4:bb:05:4f:a5:de:cf:
                    0e:0f:91:8f:38:47:cc:c4:a8:c2:ce:59:16:46:bc:
                    de:13:4e:17:5d:e7:7c:26:4c:d8:a9:64:0c:8a:56:
                    b1:f7:7d:f5:96:e5:3f:9b:37:f2:c5:36:16:be:b6:
                    29:3c:ec:a8:de:82:a6:e7:cc:d6:0e:88:eb:c3:a6:
                    df:10:de:c1:50:33:57:2d:4c:41:10:cb:42:a4:f0:
                    12:72:fa:4e:8b:5c:be:7e:18:9b:a8:78:f2:4a:df:
                    56:8f:e2:15:ff:b6:82:53:7f:b5:d2:88:56:ed:a0:
                    d0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:50:3E:1B:77:48:32:25:9E:74:F1:30:F2:6B:61:FB:68:9E:47:73
            X509v3 Authority Key Identifier:
                keyid:31:9B:31:44:F0:6A:8F:2B:30:D4:12:07:1F:E1:21:07:74:FE:86:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZsxRPBqjysw1BIHH-EhB3T-huc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:73:28:36:05:4b:28:1b:8a:75:b2:5a:78:e5:40:f6:f3:d9:
         76:5b:5d:7f:95:b6:65:b3:16:be:79:f6:01:62:19:44:c4:af:
         37:38:eb:c0:7e:b0:c1:c0:50:d4:6a:d0:b6:eb:e5:36:d6:c4:
         0a:e1:ee:3a:0b:ac:00:ff:9a:45:49:f6:8e:a2:fb:df:45:a9:
         be:b6:e4:56:ff:27:4b:26:23:70:e2:ba:57:b1:a7:67:11:b5:
         85:3c:8a:35:54:89:70:02:6e:46:bf:80:91:f8:4e:c5:fd:bd:
         af:70:2c:27:3f:c8:ec:88:80:86:d7:aa:d9:1f:6d:5f:1a:8f:
         e2:7b:27:e5:4f:3d:2b:e5:8c:c8:64:82:70:94:91:6b:49:5c:
         d9:42:3e:8c:be:cd:b5:fd:73:b5:58:e6:d3:4d:37:94:3a:6f:
         e7:03:4f:ca:24:44:5e:ae:52:84:0d:67:d3:7d:c6:87:84:73:
         9e:b0:fe:33:61:52:94:d4:35:7a:81:79:87:33:9c:12:3b:7d:
         97:07:55:f5:08:5e:4a:8e:02:99:87:92:5b:55:0e:aa:4c:91:
         5c:a8:6c:3a:2a:12:d6:8f:fa:b6:a7:5a:e1:e0:5f:54:9b:7e:
         71:d5:8c:9c:8f:f8:1a:d1:50:52:a2:21:74:6c:6d:26:6d:f3:
         2a:97:d6:97
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTcxQ0IxMTAvBgNVBAUTKDMxOUIzMTQ0RjA2QThGMkIzMEQ0MTIwNzFGRTEyMTA3
NzRGRTg2RTcwHhcNMjYwNTEyMTUxMjE2WhcNMjYwNTE5MTUxMjE2WjAYMRYwFAYD
VQQDEw02YTAzNDM1MC05NTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxXTwYAjX2NTo0+wCSd9QPcLeMSILxCs88CODGlgfhOQ5JNftCsQOkXswThiD
36y858dcHx9Fwz7iFJTDgbPeu6YpQoPGk8x9GjgdVKVSnAsOlUcEQaXX5gJtx0nU
7OEgb3ppqb1232w5+PmthVHrTkZ+M1Sxi3ZOEaPNOkDixTfQ+N0u166zF+o5BG3F
DfS7BU+l3s8OD5GPOEfMxKjCzlkWRrzeE04XXed8JkzYqWQMilax9331luU/mzfy
xTYWvrYpPOyo3oKm58zWDojrw6bfEN7BUDNXLUxBEMtCpPAScvpOi1y+fhibqHjy
St9Wj+IV/7aCU3+10ohW7aDQoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKdQPht3
SDIlnnTxMPJrYftonkdzMB8GA1UdIwQYMBaAFDGbMUTwao8rMNQSBx/hIQd0/obn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzFDQi8wMTBFQjI4ODgw
ODkxMUVCOEI1MDVGMjBDNEY5QUUwMi9NWnN4UlBCcWp5c3cxQklISC1FaEIzVC1o
dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL01ac3hSUEJxanlzdzFCSUhILUVoQjNULWh1Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NzFDQi8wMTBFQjI4ODgwODkxMUVCOEI1MDVGMjBDNEY5QUUwMi9NWnN4UlBCcWp5
c3cxQklISC1FaEIzVC1odWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbXMoNgVLKBuKdbJaeOVA9vPZdltdf5W2ZbMWvnn2AWIZRMSvNzjrwH6wwcBQ
1GrQtuvlNtbECuHuOgusAP+aRUn2jqL730WpvrbkVv8nSyYjcOK6V7GnZxG1hTyK
NVSJcAJuRr+AkfhOxf29r3AsJz/I7IiAhteq2R9tXxqP4nsn5U89K+WMyGSCcJSR
a0lc2UI+jL7Ntf1ztVjm0003lDpv5wNPyiREXq5ShA1n033Gh4RznrD+M2FSlNQ1
eoF5hzOcEjt9lwdV9QheSo4CmYeSW1UOqkyRXKhsOioS1o/6tqda4eBfVJt+cdWM
nI/4GtFQUqIhdGxtJm3zKpfWlw==
-----END CERTIFICATE-----
Generated at Wed May 13 08:52:59 2026 by rpki-client