Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft
File:                     NfIQw_y-8NYqPeiPXz-iThGTdEw.mft (raw, json)
Hash identifier:          3ob5qsStxiONLow7rkVROB0MiC4D4tS5hZK9J3SFwac=
Subject key identifier:   3B:A9:64:2A:14:03:3D:4F:4D:8E:98:4E:D9:2E:5C:10:15:DD:2C:17
Authority key identifier: 35:F2:10:C3:FC:BE:F0:D6:2A:3D:E8:8F:5F:3F:A2:4E:11:93:74:4C
Certificate issuer:       /CN=A91A1860/serialNumber=35F210C3FCBEF0D62A3DE88F5F3FA24E1193744C
Certificate serial:       0266
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfIQw_y-8NYqPeiPXz-iThGTdEw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft
Manifest number:          0261
Signing time:             Wed 13 May 2026 02:13:33 +0000
Manifest this update:     Wed 13 May 2026 02:13:33 +0000
Manifest next update:     Wed 20 May 2026 02:13:33 +0000
Files and hashes:         1: NfIQw_y-8NYqPeiPXz-iThGTdEw.crl (hash: OlEsrW+lqjVTwvb6J29hmupyeHXdqb9uNhFzSRYIZVE=)
                          2: 832503DCAD0311ED8DFD5339C4F9AE02.roa (hash: DEHa9wU+Ix9r57aVN3GaYMWyOOaqTPBIMaPsZXZX4DU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.crl
                          rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfIQw_y-8NYqPeiPXz-iThGTdEw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:13:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 614 (0x266)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1860, serialNumber=35F210C3FCBEF0D62A3DE88F5F3FA24E1193744C
        Validity
            Not Before: May 13 02:13:33 2026 GMT
            Not After : May 20 02:13:33 2026 GMT
        Subject: CN=6a03de4d-dd1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:17:08:b0:7b:8e:0d:73:51:01:d0:86:69:2f:
                    81:1b:a8:53:c3:15:64:5c:53:3c:08:19:92:16:f3:
                    39:ff:ec:8a:ba:1d:c3:75:8c:38:92:67:55:66:cb:
                    96:b3:10:07:03:b8:24:27:eb:8d:09:c8:19:f7:cd:
                    e9:30:1a:f7:3d:c3:67:56:43:e5:ce:05:4b:a4:26:
                    9f:a3:26:f7:ee:c5:ea:8f:96:68:f9:6c:97:ea:dd:
                    11:21:55:de:b6:ba:c8:d2:75:16:c1:93:0a:62:15:
                    96:48:11:8d:5c:66:c1:94:d5:26:b4:be:c4:8a:a8:
                    90:42:be:a6:f6:7b:a0:9b:f4:71:d0:b9:84:be:d2:
                    51:c0:89:c6:7a:ff:b5:2d:24:90:ce:78:b5:57:0e:
                    7b:56:b4:2c:59:18:81:75:3e:3b:53:8b:7b:16:0a:
                    89:ad:9c:4a:ae:c7:f2:3f:e7:a7:40:93:01:18:ce:
                    4c:62:a6:1b:81:ab:c7:89:18:51:52:21:af:c4:9a:
                    a7:e1:f9:b3:7a:f9:57:92:dc:2f:95:92:9c:9a:f9:
                    b1:7d:d1:9d:a1:7a:6c:77:eb:3a:86:99:77:df:1f:
                    78:bf:b8:88:17:8d:da:39:35:83:ce:1d:06:d5:dc:
                    21:7c:04:8f:5e:5c:1e:c2:f8:c6:25:c0:d1:4e:b8:
                    ae:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:A9:64:2A:14:03:3D:4F:4D:8E:98:4E:D9:2E:5C:10:15:DD:2C:17
            X509v3 Authority Key Identifier:
                keyid:35:F2:10:C3:FC:BE:F0:D6:2A:3D:E8:8F:5F:3F:A2:4E:11:93:74:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfIQw_y-8NYqPeiPXz-iThGTdEw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1860/4222E664ACFF11ED81035733C4F9AE02/NfIQw_y-8NYqPeiPXz-iThGTdEw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:7b:a4:be:4a:6f:b1:41:30:94:2e:21:04:5c:31:9c:41:8e:
         d5:f1:b0:80:31:11:71:9f:0a:78:e0:68:ff:2b:47:1b:33:2b:
         d7:55:e3:a3:03:7e:e0:4b:f0:f0:d1:9b:26:f2:d5:b4:d7:a8:
         e6:3e:8a:0a:cf:ff:f1:13:9e:93:ad:8e:a7:3b:b7:7b:6b:21:
         4a:e8:a8:b1:24:fa:31:a9:59:aa:ef:97:2c:6e:3e:51:99:58:
         b7:74:8a:89:4b:0d:82:e3:c7:9f:f9:a8:0d:75:72:df:db:5b:
         d8:73:f8:52:1d:27:70:6b:19:61:82:b9:7c:21:d7:fd:c8:9c:
         d0:06:4f:51:92:87:b2:66:74:4b:50:9e:58:44:9d:ab:d2:81:
         cd:b5:40:bd:db:0b:f5:78:02:0f:87:3f:db:28:07:33:e5:f5:
         6f:62:ed:de:f0:47:7b:a5:a3:02:b1:1e:36:b2:88:df:5f:9d:
         e2:56:b6:a1:fd:32:69:7a:45:67:0b:0b:61:0d:10:b0:ca:d2:
         27:1b:13:8b:b5:0a:56:57:77:36:8b:92:a3:3a:33:9c:40:14:
         d6:71:a5:b8:73:24:c2:8c:73:c6:51:85:60:87:c7:82:c9:45:
         0f:ee:7c:c0:2d:fd:9c:70:04:be:a9:8f:89:53:c5:3d:e1:1b:
         12:57:95:e7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAmYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTE4NjAxMTAvBgNVBAUTKDM1RjIxMEMzRkNCRUYwRDYyQTNERTg4RjVGM0ZBMjRF
MTE5Mzc0NEMwHhcNMjYwNTEzMDIxMzMzWhcNMjYwNTIwMDIxMzMzWjAYMRYwFAYD
VQQDEw02YTAzZGU0ZC1kZDFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvRcIsHuODXNRAdCGaS+BG6hTwxVkXFM8CBmSFvM5/+yKuh3DdYw4kmdVZsuW
sxAHA7gkJ+uNCcgZ983pMBr3PcNnVkPlzgVLpCafoyb37sXqj5Zo+WyX6t0RIVXe
trrI0nUWwZMKYhWWSBGNXGbBlNUmtL7EiqiQQr6m9nugm/Rx0LmEvtJRwInGev+1
LSSQzni1Vw57VrQsWRiBdT47U4t7FgqJrZxKrsfyP+enQJMBGM5MYqYbgavHiRhR
UiGvxJqn4fmzevlXktwvlZKcmvmxfdGdoXpsd+s6hpl33x94v7iIF43aOTWDzh0G
1dwhfASPXlwewvjGJcDRTriu9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDupZCoU
Az1PTY6YTtkuXBAV3SwXMB8GA1UdIwQYMBaAFDXyEMP8vvDWKj3oj18/ok4Rk3RM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTg2MC80MjIyRTY2NEFD
RkYxMUVEODEwMzU3MzNDNEY5QUUwMi9OZklRd195LThOWXFQZWlQWHotaVRoR1Rk
RXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05mSVF3X3ktOE5ZcVBlaVBYei1pVGhHVGRFdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MTg2MC80MjIyRTY2NEFDRkYxMUVEODEwMzU3MzNDNEY5QUUwMi9OZklRd195LThO
WXFQZWlQWHotaVRoR1RkRXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAv3ukvkpvsUEwlC4hBFwxnEGO1fGwgDERcZ8KeOBo/ytHGzMr11XjowN+4Evw
8NGbJvLVtNeo5j6KCs//8ROek62Opzu3e2shSuiosST6MalZqu+XLG4+UZlYt3SK
iUsNguPHn/moDXVy39tb2HP4Uh0ncGsZYYK5fCHX/cic0AZPUZKHsmZ0S1CeWESd
q9KBzbVAvdsL9XgCD4c/2ygHM+X1b2Lt3vBHe6WjArEeNrKI31+d4la2of0yaXpF
ZwsLYQ0QsMrSJxsTi7UKVld3NouSozoznEAU1nGluHMkwoxzxlGFYIfHgslFD+58
wC39nHAEvqmPiVPFPeEbEleV5w==
-----END CERTIFICATE-----
Generated at Wed May 13 16:23:08 2026 by rpki-client