Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft
File:                     lAjp17bOuDTKkJAeRXhgEMBpwys.mft (raw, json)
Hash identifier:          qOhs+v8wWT9mZvqHz01SjQ0JoM7SumIC73oLQ0vxrIs=
Subject key identifier:   F3:87:68:99:C3:C7:F2:D6:1E:49:78:36:66:B0:D0:6A:C4:9E:67:0B
Authority key identifier: 94:08:E9:D7:B6:CE:B8:34:CA:90:90:1E:45:78:60:10:C0:69:C3:2B
Certificate issuer:       /CN=A91A394B/serialNumber=9408E9D7B6CEB834CA90901E45786010C069C32B
Certificate serial:       01F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAjp17bOuDTKkJAeRXhgEMBpwys.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft
Manifest number:          01EB
Signing time:             Wed 13 May 2026 03:24:53 +0000
Manifest this update:     Wed 13 May 2026 03:24:53 +0000
Manifest next update:     Wed 20 May 2026 03:24:53 +0000
Files and hashes:         1: lAjp17bOuDTKkJAeRXhgEMBpwys.crl (hash: zu1yQz2eBPYtQRL+OU/sQLRACmYw81QU1/WBwS70ndE=)
                          2: 6015E82861B411EEBAA6AD59C4F9AE02.roa (hash: UORe/0TZF8IoRoAarwALcIbpOxjo7QBKBArFHjwhFB4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.crl
                          rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAjp17bOuDTKkJAeRXhgEMBpwys.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 03:24:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 497 (0x1f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A394B, serialNumber=9408E9D7B6CEB834CA90901E45786010C069C32B
        Validity
            Not Before: May 13 03:24:53 2026 GMT
            Not After : May 20 03:24:53 2026 GMT
        Subject: CN=6a03ef05-cd73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:31:78:cf:6e:fc:ef:c8:a9:2a:09:b6:9a:90:
                    b6:7f:b2:1d:87:65:05:c5:18:3a:5f:35:88:c1:0e:
                    85:9a:42:61:dc:a6:96:b3:33:14:f7:53:b8:d3:1e:
                    59:81:5e:2e:bb:e7:b9:fd:29:7c:e0:79:60:9f:a8:
                    4a:7a:6c:ae:86:48:a7:76:ca:a6:f8:f3:11:9e:75:
                    a9:9b:5b:32:f1:bd:ad:cf:a9:53:aa:f0:6d:cc:f4:
                    ae:3a:46:af:67:fa:0a:f8:d6:8a:a8:dc:32:ed:b0:
                    d9:09:c5:7b:b2:5f:15:17:e9:cf:bf:c6:77:4b:60:
                    6c:d7:a1:85:5c:13:51:1f:ee:eb:56:5c:8e:b0:ef:
                    7b:76:24:3d:df:c9:3e:78:a4:29:bf:6d:8f:09:ed:
                    5e:e8:4b:a9:ae:f9:58:c3:8d:68:81:42:33:81:1e:
                    f0:eb:2a:ed:b7:9a:97:a8:3e:e3:3b:06:f6:49:ca:
                    60:dd:bd:c1:04:e4:44:fd:b4:c6:80:8d:c5:c7:87:
                    ef:c7:97:b3:d7:46:3e:5b:68:09:ec:6e:7e:92:c1:
                    78:0d:33:f7:93:8d:84:cf:41:d5:45:34:8e:55:8e:
                    12:a9:b3:c9:24:6e:02:54:e2:9d:34:85:9c:bd:e2:
                    e6:a1:31:fb:5b:05:42:4b:b6:57:04:4b:6f:ec:6c:
                    ee:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:87:68:99:C3:C7:F2:D6:1E:49:78:36:66:B0:D0:6A:C4:9E:67:0B
            X509v3 Authority Key Identifier:
                keyid:94:08:E9:D7:B6:CE:B8:34:CA:90:90:1E:45:78:60:10:C0:69:C3:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAjp17bOuDTKkJAeRXhgEMBpwys.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:59:75:f9:1b:6c:3d:59:5f:23:90:65:8b:b0:20:84:03:18:
         b5:e2:be:88:dc:4d:57:98:3d:c8:ca:d1:8a:2f:27:22:28:51:
         2d:34:b3:98:77:25:6c:58:ad:eb:94:20:3b:f4:de:01:e2:bb:
         f3:9d:6c:54:d1:74:43:03:2b:49:ba:2a:92:20:1b:75:c5:e8:
         84:fd:d2:2d:ea:cc:5c:42:25:ee:95:32:50:92:5d:c7:92:29:
         29:be:0f:33:be:85:78:ec:aa:b7:32:39:15:a4:b4:cc:87:6a:
         57:95:b2:1d:ec:29:d4:a2:a1:33:de:68:b5:6c:db:8c:f4:56:
         09:0d:f3:65:bb:7c:ed:92:91:e0:64:de:de:22:b8:e2:c3:4b:
         35:c1:8e:67:5c:3e:dd:c4:3f:0e:2d:67:a1:fb:9d:de:51:5d:
         6d:6a:50:48:d4:66:54:11:65:f0:bd:8d:eb:73:42:75:bc:a0:
         6c:06:bd:b0:dc:e3:e2:9a:8b:9b:99:1e:71:5f:5a:f6:a8:25:
         3f:ad:d4:22:7e:c4:1d:68:af:c0:6e:97:16:ca:18:32:19:dc:
         51:00:0e:3f:62:69:fd:43:79:ac:45:da:c3:47:54:c4:c7:cc:
         30:37:0d:b9:f3:17:9d:4a:db:84:0b:f5:71:28:9b:ea:7a:5c:
         fd:29:cf:91
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTM5NEIxMTAvBgNVBAUTKDk0MDhFOUQ3QjZDRUI4MzRDQTkwOTAxRTQ1Nzg2MDEw
QzA2OUMzMkIwHhcNMjYwNTEzMDMyNDUzWhcNMjYwNTIwMDMyNDUzWjAYMRYwFAYD
VQQDEw02YTAzZWYwNS1jZDczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArzF4z27878ipKgm2mpC2f7Idh2UFxRg6XzWIwQ6FmkJh3KaWszMU91O40x5Z
gV4uu+e5/Sl84Hlgn6hKemyuhkindsqm+PMRnnWpm1sy8b2tz6lTqvBtzPSuOkav
Z/oK+NaKqNwy7bDZCcV7sl8VF+nPv8Z3S2Bs16GFXBNRH+7rVlyOsO97diQ938k+
eKQpv22PCe1e6EuprvlYw41ogUIzgR7w6yrtt5qXqD7jOwb2Scpg3b3BBORE/bTG
gI3Fx4fvx5ez10Y+W2gJ7G5+ksF4DTP3k42Ez0HVRTSOVY4SqbPJJG4CVOKdNIWc
veLmoTH7WwVCS7ZXBEtv7GzuAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPOHaJnD
x/LWHkl4Nmaw0GrEnmcLMB8GA1UdIwQYMBaAFJQI6de2zrg0ypCQHkV4YBDAacMr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzk0Qi8xMEFDQUIwQTYx
QjQxMUVFODBDRTE4NDZDNEY5QUUwMi9sQWpwMTdiT3VEVEtrSkFlUlhoZ0VNQnB3
eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xBanAxN2JPdURUS2tKQWVSWGhnRU1CcHd5cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
Mzk0Qi8xMEFDQUIwQTYxQjQxMUVFODBDRTE4NDZDNEY5QUUwMi9sQWpwMTdiT3VE
VEtrSkFlUlhoZ0VNQnB3eXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYll1+RtsPVlfI5Bli7AghAMYteK+iNxNV5g9yMrRii8nIihRLTSzmHclbFit
65QgO/TeAeK7851sVNF0QwMrSboqkiAbdcXohP3SLerMXEIl7pUyUJJdx5IpKb4P
M76FeOyqtzI5FaS0zIdqV5WyHewp1KKhM95otWzbjPRWCQ3zZbt87ZKR4GTe3iK4
4sNLNcGOZ1w+3cQ/Di1nofud3lFdbWpQSNRmVBFl8L2N63NCdbygbAa9sNzj4pqL
m5kecV9a9qglP63UIn7EHWivwG6XFsoYMhncUQAOP2Jp/UN5rEXaw0dUxMfMMDcN
ufMXnUrbhAv1cSib6npc/SnPkQ==
-----END CERTIFICATE-----
Generated at Wed May 13 16:23:29 2026 by rpki-client