Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.mft
File:                     1f9FyAWBJcJy3wRtwLjgb6owT88.mft (raw, json)
Hash identifier:          KO1U9t0qtrQ+Q77OXjG5K1w0HluygTZt2siEZrMREZQ=
Subject key identifier:   4A:5D:A5:CC:D1:39:1F:EB:82:62:3A:CB:43:CA:A9:05:2D:2B:F1:9B
Authority key identifier: D5:FF:45:C8:05:81:25:C2:72:DF:04:6D:C0:B8:E0:6F:AA:30:4F:CF
Certificate issuer:       /CN=A91A7E29/serialNumber=D5FF45C8058125C272DF046DC0B8E06FAA304FCF
Certificate serial:       0497
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1f9FyAWBJcJy3wRtwLjgb6owT88.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.mft
Manifest number:          048A
Signing time:             Mon 11 May 2026 00:06:42 +0000
Manifest this update:     Mon 11 May 2026 00:06:41 +0000
Manifest next update:     Mon 18 May 2026 00:06:41 +0000
Files and hashes:         1: 1f9FyAWBJcJy3wRtwLjgb6owT88.crl (hash: MznNYtwB4MkjaXaymMcp1djxP6HUGmVH/Vj21ZMoqy4=)
                          2: 99F51284A1E911EDAD7CE929C4F9AE02.roa (hash: lf68hMOfZ/T65yk1q4mtj4OSXwkBVD1LwcuwEotYLTc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.crl
                          rsync://rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1f9FyAWBJcJy3wRtwLjgb6owT88.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 00:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1175 (0x497)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7E29, serialNumber=D5FF45C8058125C272DF046DC0B8E06FAA304FCF
        Validity
            Not Before: May 11 00:06:41 2026 GMT
            Not After : May 18 00:06:41 2026 GMT
        Subject: CN=6a011d92-6b5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:c7:26:54:01:6c:9a:db:f4:d7:b6:d8:a2:de:
                    9f:38:5b:e1:c3:f4:4a:a3:70:c9:4f:03:2d:27:2e:
                    63:55:e1:bf:63:25:df:c9:56:2d:86:75:f6:28:38:
                    f8:6e:2b:21:8f:3d:5e:91:dd:d1:47:89:26:3b:a3:
                    f6:56:64:51:52:02:67:06:e5:b6:f6:f9:2b:bb:8a:
                    98:68:de:83:10:83:bc:36:fa:58:08:0b:c2:43:29:
                    31:fa:d7:90:63:3e:83:a9:a6:99:76:8d:2d:ca:7e:
                    af:57:99:8b:06:ee:a6:9b:0d:06:12:91:b9:d9:27:
                    35:a5:39:46:fe:ff:cb:98:73:25:1d:cc:60:b3:4d:
                    0f:94:f5:59:ca:dc:5a:f0:53:b4:c5:00:89:18:55:
                    79:32:1e:be:7b:ca:b7:e5:91:4a:c1:df:fc:ff:81:
                    3b:f6:94:70:a7:eb:62:1b:f5:94:8a:23:fe:56:ff:
                    26:24:ec:ba:2a:cb:77:a1:bb:7d:0e:e5:ae:62:69:
                    79:00:a5:af:63:99:e4:e4:19:5d:8e:0b:35:5c:98:
                    8d:70:82:1e:c9:98:d5:7d:7f:1d:1c:32:ce:11:2c:
                    04:c6:a4:c4:f8:7a:0c:3f:e2:1d:ee:eb:89:86:62:
                    89:2b:6e:d1:66:6d:1b:79:9c:a5:69:9d:20:ce:14:
                    2e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:5D:A5:CC:D1:39:1F:EB:82:62:3A:CB:43:CA:A9:05:2D:2B:F1:9B
            X509v3 Authority Key Identifier:
                keyid:D5:FF:45:C8:05:81:25:C2:72:DF:04:6D:C0:B8:E0:6F:AA:30:4F:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1f9FyAWBJcJy3wRtwLjgb6owT88.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7E29/56F1C532879011EC86D0441EC4F9AE02/1f9FyAWBJcJy3wRtwLjgb6owT88.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:55:e8:75:72:dc:69:0c:10:99:e8:5f:d1:64:be:f3:7d:13:
         77:4d:f2:32:57:db:4b:ea:15:0c:ef:27:19:cf:b8:57:bd:01:
         de:01:92:38:72:4b:39:a5:54:14:5a:9b:9f:c5:0e:64:e1:cf:
         84:33:d8:46:60:13:82:11:cb:91:ce:b2:1c:13:37:fe:a6:97:
         45:71:5c:1e:b1:a2:a7:c2:70:da:86:3e:df:a1:c8:5f:cd:38:
         c6:fd:08:32:9c:6f:57:0d:40:ee:0c:b0:35:1e:b4:c7:a2:db:
         ce:14:7a:3c:b8:52:c6:01:60:93:0b:b7:31:86:94:cb:18:9f:
         ab:f2:96:b0:e1:e4:f6:f5:57:03:e2:d1:1e:6e:93:5d:d0:45:
         4b:99:a7:36:ba:82:3b:82:b6:05:54:49:21:ec:6f:20:dd:0b:
         34:f5:55:2e:ba:28:86:d3:19:67:2e:b9:b9:c8:f4:b0:83:35:
         0e:da:d9:16:60:12:f1:fe:df:89:dd:44:57:8b:3a:eb:ca:e3:
         72:f1:bf:7b:b1:1a:e9:ab:c7:fe:e8:26:76:43:11:1e:79:87:
         8d:e6:c0:68:c6:01:70:be:e2:67:f2:fe:b6:a5:03:0a:7f:45:
         99:3b:35:b9:37:be:7c:84:3f:31:50:db:9e:b6:4d:da:fa:4d:
         3f:a0:f4:c1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTdFMjkxMTAvBgNVBAUTKEQ1RkY0NUM4MDU4MTI1QzI3MkRGMDQ2REMwQjhFMDZG
QUEzMDRGQ0YwHhcNMjYwNTExMDAwNjQxWhcNMjYwNTE4MDAwNjQxWjAYMRYwFAYD
VQQDEw02YTAxMWQ5Mi02YjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7McmVAFsmtv017bYot6fOFvhw/RKo3DJTwMtJy5jVeG/YyXfyVYthnX2KDj4
bishjz1ekd3RR4kmO6P2VmRRUgJnBuW29vkru4qYaN6DEIO8NvpYCAvCQykx+teQ
Yz6DqaaZdo0tyn6vV5mLBu6mmw0GEpG52Sc1pTlG/v/LmHMlHcxgs00PlPVZytxa
8FO0xQCJGFV5Mh6+e8q35ZFKwd/8/4E79pRwp+tiG/WUiiP+Vv8mJOy6Kst3obt9
DuWuYml5AKWvY5nk5Bldjgs1XJiNcIIeyZjVfX8dHDLOESwExqTE+HoMP+Id7uuJ
hmKJK27RZm0beZylaZ0gzhQuAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEpdpczR
OR/rgmI6y0PKqQUtK/GbMB8GA1UdIwQYMBaAFNX/RcgFgSXCct8EbcC44G+qME/P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0UyOS81NkYxQzUzMjg3
OTAxMUVDODZEMDQ0MUVDNEY5QUUwMi8xZjlGeUFXQkpjSnkzd1J0d0xqZ2I2b3dU
ODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFmOUZ5QVdCSmNKeTN3UnR3TGpnYjZvd1Q4OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
N0UyOS81NkYxQzUzMjg3OTAxMUVDODZEMDQ0MUVDNEY5QUUwMi8xZjlGeUFXQkpj
Snkzd1J0d0xqZ2I2b3dUODgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhFXodXLcaQwQmehf0WS+830Td03yMlfbS+oVDO8nGc+4V70B3gGSOHJLOaVU
FFqbn8UOZOHPhDPYRmATghHLkc6yHBM3/qaXRXFcHrGip8Jw2oY+36HIX804xv0I
MpxvVw1A7gywNR60x6LbzhR6PLhSxgFgkwu3MYaUyxifq/KWsOHk9vVXA+LRHm6T
XdBFS5mnNrqCO4K2BVRJIexvIN0LNPVVLroohtMZZy65ucj0sIM1DtrZFmAS8f7f
id1EV4s668rjcvG/e7Ea6avH/ugmdkMRHnmHjebAaMYBcL7iZ/L+tqUDCn9FmTs1
uTe+fIQ/MVDbnrZN2vpNP6D0wQ==
-----END CERTIFICATE-----
Generated at Tue May 12 22:08:06 2026 by rpki-client