Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft
File:                     MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft (raw, json)
Hash identifier:          RU62vu5sRt0V2j4oEWrr4TTjoAGv61/mhxl1e1cFSC0=
Subject key identifier:   DB:6F:0B:58:78:C2:27:13:32:87:CB:A6:0B:43:79:73:F7:36:14:F8
Authority key identifier: 31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90
Certificate issuer:       /CN=A91A7B94/serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890
Certificate serial:       0241
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft
Manifest number:          0213
Signing time:             Wed 13 May 2026 03:08:03 +0000
Manifest this update:     Wed 13 May 2026 03:08:02 +0000
Manifest next update:     Wed 20 May 2026 03:08:02 +0000
Files and hashes:         1: MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl (hash: LXqa4sELxqFXfmzWo52b7G0+mcACalroyBoyTGDfYko=)
                          2: 268DF20A940C11EE9B034255C4F9AE02.roa (hash: WlT7lqcgc4c8+rWeXt+Y5JcXRKuZvK0wiGPxDwUbSb0=)
                          3: B0562E7AEC6E11EEB7FC060BC4F9AE02.roa (hash: Oxk9ItIFF7Cmn++8Qhf8B9/Jba23NXxEuE7o6lYsVNY=)
                          4: E9874B2A16D011EF90793868C4F9AE02.roa (hash: RDszepU6uUEnaTneHbLYTo9ekedmlaHSehV5QBWdDbs=)
                          5: 2732E7CE940C11EE9B034255C4F9AE02.roa (hash: L4NVil8pbyS/cOY/ej3K8v/jrMsLv9IfqmTy0v9YRG8=)
                          6: 511564A2ED2B11F08C401BDD456F56BC.roa (hash: /UOXs33KnAIdS9eZMavjXXvZDkm7O2iN3QjaCdMcSZo=)
                          7: D2093EF4EC6E11EEAEF9610BC4F9AE02.roa (hash: 7QH1OiU8+y0kM0Xbew8STqzznYlr3akTS6fkDWFomuY=)
                          8: 9D6E545AA84B11F0B4DF3885C4F9AE02.roa (hash: f4OVUhW0bi1lo1n9ZSiR+RCv7DhSrpC0lFB7A/Kd8HU=)
                          9: AFDF1A1AEC6E11EEB7FC060BC4F9AE02.roa (hash: jqwk3bmRPDf7C3aKoz+TsrX90WbUHOfRvQL1M86whDk=)
                          10: D29109C4EC6E11EEAEF9610BC4F9AE02.roa (hash: bcg53TLs5nFR2EV4CBcEFe8zIM0whJbmabWS8ZS93/Q=)
                          11: 7474F998377111EE8AFEB74DC4F9AE02.roa (hash: XLyiIx6bH4MWL4cXY1N6tcvmekDJmpJls17+hd3FRlA=)
                          12: 7031BFB6ED2B11F083BC5EDE456F56BC.roa (hash: YUDn/ImHnu8Aga92avplp7MOrOxQVfmR+LNkM6xYKp8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl
                          rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 03:08:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 577 (0x241)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7B94, serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890
        Validity
            Not Before: May 13 03:08:02 2026 GMT
            Not After : May 20 03:08:02 2026 GMT
        Subject: CN=6a03eb12-fd70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:45:04:d3:3b:d0:ce:a2:22:a5:af:90:7f:12:
                    d1:8f:e0:77:f0:e8:aa:dc:cf:7e:6b:bd:46:e9:77:
                    51:ae:3c:57:c0:21:9f:21:5d:83:e8:88:39:9f:6b:
                    d7:72:ea:7e:10:cb:32:de:0b:e3:ff:b5:66:86:b7:
                    de:ce:d6:54:71:4b:ce:f9:80:31:ac:e8:d6:7d:aa:
                    5d:fd:75:dc:31:f6:6d:8c:32:e2:f6:9a:73:f5:fb:
                    d6:5f:f4:9e:fd:c9:b4:10:ad:ec:8a:76:9f:f9:9c:
                    7d:d6:fa:eb:2b:29:73:5d:2c:b4:57:46:4e:0e:c2:
                    ae:de:18:ed:34:84:a8:fd:01:36:61:e0:fe:92:e7:
                    3e:85:39:94:68:03:02:db:13:c4:9e:13:81:6e:89:
                    ba:ec:21:bf:e3:78:77:90:14:fd:87:09:8d:8f:38:
                    71:0b:72:6b:8c:d3:d1:b8:29:f6:78:84:1d:68:6b:
                    89:4e:ac:54:ae:73:c4:02:bb:8d:1c:af:1d:0f:9b:
                    f8:27:7d:c0:4e:a3:07:df:c5:19:f0:ee:a9:b3:4a:
                    13:ab:92:cf:ab:c9:2a:cb:7d:11:7c:fc:bc:72:f8:
                    1d:ac:f1:08:b5:e6:92:e2:4b:0d:41:c8:c0:b9:64:
                    56:b1:6f:02:36:66:b3:9a:4e:17:8e:11:f7:99:4d:
                    73:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:6F:0B:58:78:C2:27:13:32:87:CB:A6:0B:43:79:73:F7:36:14:F8
            X509v3 Authority Key Identifier:
                keyid:31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:c0:2c:4c:3d:d7:50:30:15:40:9c:63:6a:6d:30:ce:dc:73:
         b6:05:91:1d:6a:c0:0d:f1:a9:16:d3:dc:6f:43:a7:0b:06:d7:
         29:fe:58:ef:dc:67:41:a3:78:81:c6:cb:80:93:09:85:21:76:
         34:07:7e:eb:86:b9:36:be:bb:10:57:14:9a:a7:16:68:db:0c:
         27:f8:78:ff:d2:43:3d:ce:2a:35:3f:79:e1:40:9b:83:13:44:
         6e:13:61:d3:4c:1c:91:eb:8e:d3:e5:ee:93:60:b3:a0:37:d3:
         b3:9c:62:16:3a:c3:26:d7:ef:95:0c:01:0f:e6:c7:6d:e8:bf:
         38:fe:67:0d:82:d5:ef:fd:b8:1c:53:bb:ff:23:4f:76:a3:15:
         d7:da:6e:00:df:32:8a:f8:9b:ed:03:47:20:0f:ad:fc:1e:37:
         09:9a:3d:f7:2a:2d:8c:f1:2f:28:3c:d4:79:19:61:a1:76:a9:
         ed:7f:49:b9:e8:6e:76:69:09:e8:45:80:48:57:bd:3d:fe:4c:
         da:3a:db:c1:34:da:50:f5:ae:99:f0:a3:17:c0:b4:b0:0b:3b:
         81:6a:41:3e:b8:04:11:54:5c:59:5c:db:fc:86:bb:44:e6:41:
         b2:76:56:31:33:40:84:ae:24:50:87:89:2a:9c:0e:02:f0:e6:
         9c:8a:b5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:01:42 2026 by rpki-client