Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft
File:                     wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft (raw, json)
Hash identifier:          vO5x2u+jZXtg3PTA8fFvfcUwvWEC8894XUBaJMcTyKA=
Subject key identifier:   44:84:3C:9E:8D:22:47:21:D8:54:21:28:64:7A:04:39:E3:18:DD:CA
Authority key identifier: C1:21:09:F5:5C:55:87:3A:41:C3:77:83:72:FB:09:A0:B7:40:D2:CD
Certificate issuer:       /CN=A91A839E/serialNumber=C12109F55C55873A41C3778372FB09A0B740D2CD
Certificate serial:       BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft
Manifest number:          B9
Signing time:             Wed 13 May 2026 07:08:06 +0000
Manifest this update:     Wed 13 May 2026 07:08:05 +0000
Manifest next update:     Wed 20 May 2026 07:08:05 +0000
Files and hashes:         1: wSEJ9VxVhzpBw3eDcvsJoLdA0s0.crl (hash: lBwuTkV6Eb9KXejaUAE2PGDUqHKuEKwHzDnCa50GemM=)
                          2: C317D9BA341A11F0B6835730C4F9AE02.roa (hash: XkHC8IfLahC3QlH1b+920w4LrDSkz3dxnoxC4nAJaWc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.crl
                          rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 07:08:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 187 (0xbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A839E, serialNumber=C12109F55C55873A41C3778372FB09A0B740D2CD
        Validity
            Not Before: May 13 07:08:05 2026 GMT
            Not After : May 20 07:08:05 2026 GMT
        Subject: CN=6a042356-6577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:08:2a:f8:49:a8:ee:e9:3c:4e:3b:63:a5:f4:
                    35:8d:9f:40:52:f8:ad:25:b5:32:ed:81:2e:13:3c:
                    8a:78:a7:23:d3:a6:15:21:40:6e:57:c2:16:70:c3:
                    3f:c8:ea:49:dd:a2:bb:e1:e6:bd:c7:10:e9:c1:b1:
                    28:9e:9c:35:3c:23:60:89:0a:9f:2c:6b:20:e4:aa:
                    e8:b0:63:b2:af:45:9f:3b:dc:aa:19:ea:4b:97:a1:
                    3b:b0:94:dc:6e:71:d2:70:8c:8a:a5:f8:9c:b5:4e:
                    59:8c:e5:ea:ac:78:d6:91:f1:5e:fe:fe:61:2b:8d:
                    c1:58:b9:cc:8b:da:16:42:a2:17:47:1b:a3:99:76:
                    c6:8d:72:38:bf:61:1e:a3:51:c1:84:aa:6d:fd:92:
                    eb:29:3e:ff:fb:10:79:3f:45:04:b9:51:2c:22:af:
                    1b:02:4e:72:27:9e:38:3b:4b:79:33:9e:1e:2c:34:
                    ec:f6:1c:fc:dd:3c:a3:30:38:4f:6d:73:4c:01:2d:
                    91:5f:52:93:35:7c:92:73:59:03:b5:39:7a:59:7a:
                    7d:84:49:cf:b1:73:74:d1:7e:ab:c6:23:35:83:13:
                    9f:00:69:0a:f3:d9:44:42:c9:c3:2f:60:25:5f:1f:
                    00:29:fd:df:07:13:97:9f:b0:ae:bf:98:2e:46:79:
                    60:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:84:3C:9E:8D:22:47:21:D8:54:21:28:64:7A:04:39:E3:18:DD:CA
            X509v3 Authority Key Identifier:
                keyid:C1:21:09:F5:5C:55:87:3A:41:C3:77:83:72:FB:09:A0:B7:40:D2:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:d4:61:8d:c2:f5:9e:0c:a4:e0:5a:0b:14:44:67:8e:28:96:
         bc:2a:53:a2:97:1b:fe:31:67:75:25:63:05:f0:5e:a3:e7:01:
         7b:3c:0c:44:8b:6b:7d:04:0d:4c:6b:d5:3b:21:ad:0a:c3:fb:
         cc:ed:04:c3:34:1b:64:42:9b:4d:3e:f4:05:7f:2b:fd:c3:52:
         d1:dd:6a:78:f0:a5:7e:bb:ac:c5:8c:a9:06:45:d1:d8:44:52:
         4e:5d:66:c2:48:8b:e8:c8:7b:e7:e3:8e:ed:54:bc:e8:a3:da:
         62:e0:ab:f1:c7:91:b7:02:99:cb:eb:85:5b:a1:da:02:70:f7:
         a9:30:28:50:6b:e8:89:a4:40:d1:e2:b7:ed:b0:70:55:c9:4d:
         c8:d6:a5:7b:3a:90:e5:95:63:81:63:2b:8e:d6:02:84:7d:c8:
         61:0b:b6:e6:f6:1d:1d:0d:dc:8a:2c:cf:84:09:55:5d:66:23:
         39:d3:f1:8f:8f:f2:fa:9e:92:9c:8f:a2:b3:67:d4:68:c3:13:
         a0:96:ac:31:7f:01:01:69:e2:57:99:11:23:4b:da:ef:ce:45:
         10:23:dd:52:44:ce:6c:44:97:6f:6c:c2:17:60:ca:84:a3:20:
         cf:bd:53:d7:4c:c2:37:6f:25:1b:6a:7c:19:44:92:ca:96:04:
         b4:40:49:ce
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTgzOUUxMTAvBgNVBAUTKEMxMjEwOUY1NUM1NTg3M0E0MUMzNzc4MzcyRkIwOUEw
Qjc0MEQyQ0QwHhcNMjYwNTEzMDcwODA1WhcNMjYwNTIwMDcwODA1WjAYMRYwFAYD
VQQDEw02YTA0MjM1Ni02NTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzwgq+Emo7uk8TjtjpfQ1jZ9AUvitJbUy7YEuEzyKeKcj06YVIUBuV8IWcMM/
yOpJ3aK74ea9xxDpwbEonpw1PCNgiQqfLGsg5KrosGOyr0WfO9yqGepLl6E7sJTc
bnHScIyKpfictU5ZjOXqrHjWkfFe/v5hK43BWLnMi9oWQqIXRxujmXbGjXI4v2Ee
o1HBhKpt/ZLrKT7/+xB5P0UEuVEsIq8bAk5yJ544O0t5M54eLDTs9hz83TyjMDhP
bXNMAS2RX1KTNXySc1kDtTl6WXp9hEnPsXN00X6rxiM1gxOfAGkK89lEQsnDL2Al
Xx8AKf3fBxOXn7Cuv5guRnlglQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFESEPJ6N
Ikch2FQhKGR6BDnjGN3KMB8GA1UdIwQYMBaAFMEhCfVcVYc6QcN3g3L7CaC3QNLN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODM5RS8zNDVEMDU4NjMz
NjgxMUYwQjFCNTZENkNDNEY5QUUwMi93U0VKOVZ4Vmh6cEJ3M2VEY3ZzSm9MZEEw
czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dTRUo5VnhWaHpwQnczZURjdnNKb0xkQTBzMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
ODM5RS8zNDVEMDU4NjMzNjgxMUYwQjFCNTZENkNDNEY5QUUwMi93U0VKOVZ4Vmh6
cEJ3M2VEY3ZzSm9MZEEwczAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAg9RhjcL1ngyk4FoLFERnjiiWvCpTopcb/jFndSVjBfBeo+cBezwMRItrfQQN
TGvVOyGtCsP7zO0EwzQbZEKbTT70BX8r/cNS0d1qePClfrusxYypBkXR2ERSTl1m
wkiL6Mh75+OO7VS86KPaYuCr8ceRtwKZy+uFW6HaAnD3qTAoUGvoiaRA0eK37bBw
VclNyNalezqQ5ZVjgWMrjtYChH3IYQu25vYdHQ3ciizPhAlVXWYjOdPxj4/y+p6S
nI+is2fUaMMToJasMX8BAWniV5kRI0va785FECPdUkTObESXb2zCF2DKhKMgz71T
10zCN28lG2p8GUSSypYEtEBJzg==
-----END CERTIFICATE-----
Generated at Wed May 13 12:00:56 2026 by rpki-client