Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft
File:                     TvuTtJvxulYAjfxgYItSFq7JmsY.mft (raw, json)
Hash identifier:          45+X/PzrpwGfk0YJtpTQlOqADJiwjBUjUBgyYJO+e80=
Subject key identifier:   67:43:FA:21:71:03:30:38:01:15:7C:CA:3F:A7:D3:D0:91:5F:42:C8
Authority key identifier: 4E:FB:93:B4:9B:F1:BA:56:00:8D:FC:60:60:8B:52:16:AE:C9:9A:C6
Certificate issuer:       /CN=A91B8070/serialNumber=4EFB93B49BF1BA56008DFC60608B5216AEC99AC6
Certificate serial:       E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvuTtJvxulYAjfxgYItSFq7JmsY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft
Manifest number:          DA
Signing time:             Mon 11 May 2026 06:54:46 +0000
Manifest this update:     Mon 11 May 2026 06:54:45 +0000
Manifest next update:     Mon 18 May 2026 06:54:45 +0000
Files and hashes:         1: TvuTtJvxulYAjfxgYItSFq7JmsY.crl (hash: /BwR3bW2LHdSI9bpp0V2mqQaW5RaU8+ZmaLjYdhuPzc=)
                          2: 5905CBAEDFE111F083058845556F56BC.roa (hash: Ep0ZjILGTIRguDCqf/7ebqhYEj4n0HP0tW0NEv654xk=)
                          3: BA8DE47CDFE311F08DEF0674556F56BC.roa (hash: Zh6wXEXphp1EIjFhhkqihtiOfs2baqRkCWO1whLIxuk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.crl
                          rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvuTtJvxulYAjfxgYItSFq7JmsY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:54:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 229 (0xe5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8070, serialNumber=4EFB93B49BF1BA56008DFC60608B5216AEC99AC6
        Validity
            Not Before: May 11 06:54:45 2026 GMT
            Not After : May 18 06:54:45 2026 GMT
        Subject: CN=6a017d36-dc93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6d:dc:33:da:56:ac:ef:1f:0b:32:d3:dd:e0:
                    53:2c:ab:61:9f:36:01:90:42:f0:2e:d0:4c:9b:e7:
                    97:62:cb:de:a3:21:62:6e:da:a3:42:cb:6c:4f:44:
                    6c:89:57:3a:a3:46:4c:e7:85:18:15:70:ea:87:68:
                    09:aa:09:f6:49:c2:c3:f2:b2:c2:49:56:ec:af:b1:
                    bd:55:9e:17:97:6f:9d:97:8e:ad:75:cd:d7:aa:c3:
                    99:9c:83:52:a9:5f:10:ba:5e:6d:3e:67:77:73:02:
                    ce:af:53:23:f9:c9:03:64:6b:9f:d7:c5:b2:38:8d:
                    c3:a7:97:48:be:51:d0:a5:27:76:a9:d3:d5:c5:53:
                    6b:c8:14:3d:e3:71:05:de:f6:89:c3:0f:d7:25:ec:
                    0a:09:31:95:65:e4:9c:7a:89:44:61:2a:ce:8b:90:
                    2d:28:2c:24:53:c2:96:c0:73:92:61:53:69:5b:90:
                    8e:64:9f:b8:09:76:da:69:73:32:ad:ef:80:97:d9:
                    2b:78:bd:89:04:d0:a6:46:50:67:cd:f5:7d:18:57:
                    d3:c9:72:29:7f:83:cd:dc:d1:70:1e:db:cf:fc:a4:
                    55:5b:28:cc:ac:44:e4:4c:b0:9e:d4:3c:1b:42:c9:
                    11:52:c0:b5:a9:d8:82:51:04:4e:06:4c:15:66:8e:
                    07:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:43:FA:21:71:03:30:38:01:15:7C:CA:3F:A7:D3:D0:91:5F:42:C8
            X509v3 Authority Key Identifier:
                keyid:4E:FB:93:B4:9B:F1:BA:56:00:8D:FC:60:60:8B:52:16:AE:C9:9A:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvuTtJvxulYAjfxgYItSFq7JmsY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:5a:df:1b:da:5c:9c:a4:e7:e2:03:1a:cc:7c:6a:04:ac:84:
         6d:4c:45:50:a6:31:76:f7:5a:dd:04:4c:f1:da:5a:8b:23:cb:
         85:8a:ec:f9:10:dd:7d:6f:3a:ef:36:59:67:bb:e2:60:bb:9d:
         76:96:66:6f:af:fb:01:62:10:5e:d8:0c:08:ea:99:70:ac:da:
         c2:28:43:95:59:ff:6f:9f:2b:f4:b2:4f:56:f2:63:e2:bd:84:
         a6:b6:59:6e:85:ed:9e:7b:65:a0:91:15:c3:43:6c:2e:da:96:
         91:d4:92:77:a0:01:b9:b3:f3:22:dc:27:a7:4d:70:ea:7b:9c:
         3e:bb:e9:cb:4f:24:4e:1a:5e:98:0a:83:19:49:da:5c:72:6e:
         67:67:af:c5:c1:3c:b1:0e:55:2c:eb:74:34:b6:48:b6:97:4a:
         e3:12:e6:ce:d2:68:92:bc:21:59:53:a7:42:bc:94:91:92:b4:
         00:96:68:6c:a3:55:97:72:bb:1f:98:75:18:10:ef:f7:59:09:
         c4:c6:34:b3:00:70:74:4d:12:6a:e0:66:2d:80:1e:63:19:e7:
         8a:93:fe:ed:e8:c8:00:f1:7c:e1:27:e0:c4:da:bc:94:ed:02:
         77:f9:f1:9a:ef:b7:71:de:0e:d5:be:58:76:66:8d:92:4e:cf:
         1a:f9:22:b1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjgwNzAxMTAvBgNVBAUTKDRFRkI5M0I0OUJGMUJBNTYwMDhERkM2MDYwOEI1MjE2
QUVDOTlBQzYwHhcNMjYwNTExMDY1NDQ1WhcNMjYwNTE4MDY1NDQ1WjAYMRYwFAYD
VQQDEw02YTAxN2QzNi1kYzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4m3cM9pWrO8fCzLT3eBTLKthnzYBkELwLtBMm+eXYsveoyFibtqjQstsT0Rs
iVc6o0ZM54UYFXDqh2gJqgn2ScLD8rLCSVbsr7G9VZ4Xl2+dl46tdc3XqsOZnINS
qV8Qul5tPmd3cwLOr1Mj+ckDZGuf18WyOI3Dp5dIvlHQpSd2qdPVxVNryBQ943EF
3vaJww/XJewKCTGVZeSceolEYSrOi5AtKCwkU8KWwHOSYVNpW5COZJ+4CXbaaXMy
re+Al9kreL2JBNCmRlBnzfV9GFfTyXIpf4PN3NFwHtvP/KRVWyjMrETkTLCe1Dwb
QskRUsC1qdiCUQROBkwVZo4HvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGdD+iFx
AzA4ARV8yj+n09CRX0LIMB8GA1UdIwQYMBaAFE77k7Sb8bpWAI38YGCLUhauyZrG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODA3MC9BRTM2NDY5NjEz
ODQxMUYwQkM1RjQ1NDdDNEY5QUUwMi9UdnVUdEp2eHVsWUFqZnhnWUl0U0ZxN0pt
c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1R2dVR0SnZ4dWxZQWpmeGdZSXRTRnE3Sm1zWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
ODA3MC9BRTM2NDY5NjEzODQxMUYwQkM1RjQ1NDdDNEY5QUUwMi9UdnVUdEp2eHVs
WUFqZnhnWUl0U0ZxN0ptc1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtlrfG9pcnKTn4gMazHxqBKyEbUxFUKYxdvda3QRM8dpaiyPLhYrs+RDdfW86
7zZZZ7viYLuddpZmb6/7AWIQXtgMCOqZcKzawihDlVn/b58r9LJPVvJj4r2EprZZ
boXtnntloJEVw0NsLtqWkdSSd6ABubPzItwnp01w6nucPrvpy08kThpemAqDGUna
XHJuZ2evxcE8sQ5VLOt0NLZItpdK4xLmztJokrwhWVOnQryUkZK0AJZobKNVl3K7
H5h1GBDv91kJxMY0swBwdE0SauBmLYAeYxnnipP+7ejIAPF84SfgxNq8lO0Cd/nx
mu+3cd4O1b5YdmaNkk7PGvkisQ==
-----END CERTIFICATE-----
Generated at Wed May 13 04:02:00 2026 by rpki-client