Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.mft
File:                     bRscXsmpziDouF2j9sHjzdQu-Dk.mft (raw, json)
Hash identifier:          UqfevMC0U7oiCcjfkLpUPYSyUn4katm0n5lZ/QalaD0=
Subject key identifier:   99:1D:2A:61:6F:5B:52:87:12:2E:25:12:8E:2F:22:E4:93:C1:0B:9A
Authority key identifier: 6D:1B:1C:5E:C9:A9:CE:20:E8:B8:5D:A3:F6:C1:E3:CD:D4:2E:F8:39
Certificate issuer:       /CN=A91B4378/serialNumber=6D1B1C5EC9A9CE20E8B85DA3F6C1E3CDD42EF839
Certificate serial:       51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRscXsmpziDouF2j9sHjzdQu-Dk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.mft
Manifest number:          4E
Signing time:             Mon 11 May 2026 08:27:12 +0000
Manifest this update:     Mon 11 May 2026 08:27:11 +0000
Manifest next update:     Mon 18 May 2026 08:27:11 +0000
Files and hashes:         1: bRscXsmpziDouF2j9sHjzdQu-Dk.crl (hash: n7W1lz/aMQ8l9F2IdhKMKhCwzR8Bu0ihrxKrAUxYuKk=)
                          2: D106F48C1D1911F19643AB4F103D8C67.roa (hash: Vnwa52V2rw4iQn/D3rDg54HehQEyfCOLvGurPGwR3Vs=)
                          3: 21656302D9A211F09604B56168D3641D.roa (hash: J7YgpNqOcaYjOCo1OiB0WdtVs6cboNKClgYeNKdHnYI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.crl
                          rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRscXsmpziDouF2j9sHjzdQu-Dk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:27:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4378, serialNumber=6D1B1C5EC9A9CE20E8B85DA3F6C1E3CDD42EF839
        Validity
            Not Before: May 11 08:27:11 2026 GMT
            Not After : May 18 08:27:11 2026 GMT
        Subject: CN=6a0192e0-f653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:90:5f:8a:16:38:c9:20:9a:ae:57:48:9c:29:
                    53:e0:db:df:55:16:0a:73:6d:fe:b2:81:dc:71:61:
                    6c:64:da:df:c0:5a:48:85:2a:a5:a6:66:7d:28:77:
                    3a:53:de:94:1d:c7:b0:90:ec:ea:d8:9e:dc:60:a7:
                    4d:f6:6e:81:97:78:25:73:fc:28:bf:53:a8:46:5c:
                    44:81:86:95:59:dc:8f:be:ed:e6:09:9d:43:99:d4:
                    4d:28:c5:26:8f:6c:99:74:0a:bd:3f:27:a4:60:6b:
                    06:9f:22:b2:70:19:37:68:92:6a:5d:4d:dd:fa:af:
                    7f:b9:0f:13:b6:db:7f:fc:69:b3:e1:45:37:5e:03:
                    7d:cc:f3:d9:9b:b0:a1:c8:47:e4:8e:e4:16:ed:ed:
                    8c:1b:e2:ef:4a:81:c1:5b:80:2b:f6:e9:ca:16:db:
                    1c:0d:87:b4:82:aa:3c:a1:d6:aa:aa:35:a2:ec:22:
                    78:36:3c:99:dd:81:cf:1b:c5:24:c4:84:e6:71:05:
                    37:1b:96:fe:98:57:8b:c2:76:e9:2e:ac:57:cc:b5:
                    38:ce:3c:2d:0b:6b:d0:c4:5e:56:e9:ff:8d:ad:c9:
                    97:4f:d2:0d:2a:93:db:87:8e:ba:cb:8a:12:2e:08:
                    cc:7c:b1:3c:a8:97:7b:4a:64:9f:86:7f:59:62:35:
                    0e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:1D:2A:61:6F:5B:52:87:12:2E:25:12:8E:2F:22:E4:93:C1:0B:9A
            X509v3 Authority Key Identifier:
                keyid:6D:1B:1C:5E:C9:A9:CE:20:E8:B8:5D:A3:F6:C1:E3:CD:D4:2E:F8:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRscXsmpziDouF2j9sHjzdQu-Dk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:70:c3:e1:93:b5:d1:26:b9:ae:7a:8d:82:63:e1:ef:6c:4a:
         12:a9:77:41:e2:2c:28:ec:9d:3b:93:b1:40:92:0e:de:88:cd:
         d5:62:24:79:4c:f9:6e:d1:98:90:c6:f0:4a:2c:ea:4d:27:cc:
         dd:f9:5f:02:30:c0:35:2d:fb:7e:ed:4b:d9:4c:f5:20:97:b6:
         eb:70:07:37:42:04:f1:3f:7c:fd:01:ca:59:64:b1:a8:36:3b:
         f0:71:9d:a5:d3:de:c6:cb:b3:62:8c:48:70:96:4f:5e:de:44:
         aa:90:a3:85:39:e9:c3:a4:94:73:b9:8b:57:4c:08:0c:7c:29:
         fe:45:3a:c3:a6:5e:2a:b2:fc:78:62:4a:d5:6d:4b:0f:92:c0:
         0d:4b:9f:ab:aa:48:2f:e3:e8:10:bf:f9:ba:b4:77:c4:7f:f1:
         c6:7e:35:f7:3b:77:19:ed:e9:23:c5:8f:57:3e:35:18:76:b2:
         a5:20:83:b0:d1:55:b5:7a:df:39:18:32:97:e1:f3:55:0b:68:
         ce:af:cf:05:30:71:53:9c:bd:e0:8b:2d:e4:bf:d2:ae:2f:61:
         e2:28:9c:b3:c4:d8:ca:6c:11:84:07:00:8d:61:f4:93:e2:99:
         e5:0b:d0:5a:93:04:4e:16:ca:5c:bf:ef:4b:86:8f:de:66:4e:
         56:67:15:34
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
NDM3ODExMC8GA1UEBRMoNkQxQjFDNUVDOUE5Q0UyMEU4Qjg1REEzRjZDMUUzQ0RE
NDJFRjgzOTAeFw0yNjA1MTEwODI3MTFaFw0yNjA1MTgwODI3MTFaMBgxFjAUBgNV
BAMTDTZhMDE5MmUwLWY2NTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCpkF+KFjjJIJquV0icKVPg299VFgpzbf6ygdxxYWxk2t/AWkiFKqWmZn0odzpT
3pQdx7CQ7OrYntxgp032boGXeCVz/Ci/U6hGXESBhpVZ3I++7eYJnUOZ1E0oxSaP
bJl0Cr0/J6RgawafIrJwGTdokmpdTd36r3+5DxO223/8abPhRTdeA33M89mbsKHI
R+SO5Bbt7Ywb4u9KgcFbgCv26coW2xwNh7SCqjyh1qqqNaLsIng2PJndgc8bxSTE
hOZxBTcblv6YV4vCdukurFfMtTjOPC0La9DEXlbp/42tyZdP0g0qk9uHjrrLihIu
CMx8sTyol3tKZJ+Gf1liNQ73AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUmR0qYW9b
UocSLiUSji8i5JPBC5owHwYDVR0jBBgwFoAUbRscXsmpziDouF2j9sHjzdQu+Dkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0Mzc4L0Y2MjkxNDhDRDlB
MDExRjA5QTBGQjAxNzY4RDM2NDFEL2JSc2NYc21wemlEb3VGMmo5c0hqemRRdS1E
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvYlJzY1hzbXB6aURvdUYyajlzSGp6ZFF1LURrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0
Mzc4L0Y2MjkxNDhDRDlBMDExRjA5QTBGQjAxNzY4RDM2NDFEL2JSc2NYc21wemlE
b3VGMmo5c0hqemRRdS1Eay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCdcMPhk7XRJrmueo2CY+HvbEoSqXdB4iwo7J07k7FAkg7eiM3VYiR5TPlu0ZiQ
xvBKLOpNJ8zd+V8CMMA1Lft+7UvZTPUgl7brcAc3QgTxP3z9AcpZZLGoNjvwcZ2l
097Gy7NijEhwlk9e3kSqkKOFOenDpJRzuYtXTAgMfCn+RTrDpl4qsvx4YkrVbUsP
ksANS5+rqkgv4+gQv/m6tHfEf/HGfjX3O3cZ7ekjxY9XPjUYdrKlIIOw0VW1et85
GDKX4fNVC2jOr88FMHFTnL3giy3kv9KuL2HiKJyzxNjKbBGEBwCNYfST4pnlC9Ba
kwROFspcv+9Lho/eZk5WZxU0
-----END CERTIFICATE-----
Generated at Wed May 13 04:04:36 2026 by rpki-client