Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft
File:                     9iXmzAOQJv9byda9xC2NHBir8zs.mft (raw, json)
Hash identifier:          N9+fBXwl3b8LTv2RJ1juUOl5q7TaKgFhPlZhVS1t9Zk=
Subject key identifier:   9D:63:8A:97:BD:80:E9:4A:D5:03:17:93:5A:28:83:A6:77:42:4D:3D
Authority key identifier: F6:25:E6:CC:03:90:26:FF:5B:C9:D6:BD:C4:2D:8D:1C:18:AB:F3:3B
Certificate issuer:       /CN=A91B88CA/serialNumber=F625E6CC039026FF5BC9D6BDC42D8D1C18ABF33B
Certificate serial:       01BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft
Manifest number:          018F
Signing time:             Wed 13 May 2026 04:58:01 +0000
Manifest this update:     Wed 13 May 2026 04:58:00 +0000
Manifest next update:     Wed 20 May 2026 04:58:00 +0000
Files and hashes:         1: 9iXmzAOQJv9byda9xC2NHBir8zs.crl (hash: YdloKCvRvCiPELyQDzuWjW2eZfVBpnUR/e2OACdNoTU=)
                          2: E16E7E38BB8211F0B31D1B65C4F9AE02.roa (hash: wCGfC4BD+WaSxmo3hc+r7hIlBChOqs70L8QHRte2kxE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.crl
                          rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 04:57:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 442 (0x1ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B88CA, serialNumber=F625E6CC039026FF5BC9D6BDC42D8D1C18ABF33B
        Validity
            Not Before: May 13 04:58:00 2026 GMT
            Not After : May 20 04:58:00 2026 GMT
        Subject: CN=6a0404d9-8154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:67:21:f5:49:83:ca:52:3f:90:86:4b:0b:d3:
                    40:2d:96:56:19:7e:80:c5:38:e6:2b:dd:c1:5b:2f:
                    e3:df:12:76:65:c8:39:46:7b:2f:a4:1c:7d:35:09:
                    34:34:a5:a0:00:40:cb:3b:05:27:17:3a:78:2e:f4:
                    92:ed:7d:04:31:b9:63:bc:1f:1b:e3:b3:9b:de:5a:
                    9e:53:42:b3:69:db:a2:96:20:d1:f0:d9:e3:16:a0:
                    4f:e0:8a:77:62:84:e4:da:dc:3e:3e:1c:15:22:ad:
                    1c:66:38:78:db:ca:69:cc:9f:d1:45:2c:d4:50:a8:
                    ff:09:f2:43:74:11:0b:69:ec:7d:15:e1:54:42:34:
                    db:c7:35:3b:73:37:bb:89:e7:56:b7:fd:08:aa:43:
                    dd:b3:54:fa:e3:f6:4b:c6:f8:0d:35:e3:e0:42:0f:
                    9d:3b:58:f2:6d:40:2b:f2:aa:82:8f:48:f2:f1:9b:
                    9d:b2:6e:58:6c:a7:a0:d5:d4:fd:3a:b0:ff:03:8a:
                    eb:75:60:d0:e2:2b:81:03:e5:d1:c3:7d:d7:f1:53:
                    17:e9:f0:85:1b:a1:db:98:e5:1b:85:8c:35:23:7d:
                    7a:1b:a4:77:01:08:94:13:51:8e:08:10:e0:85:b8:
                    f5:9b:97:b9:0c:e3:19:b5:55:69:3d:20:1c:08:88:
                    3b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:63:8A:97:BD:80:E9:4A:D5:03:17:93:5A:28:83:A6:77:42:4D:3D
            X509v3 Authority Key Identifier:
                keyid:F6:25:E6:CC:03:90:26:FF:5B:C9:D6:BD:C4:2D:8D:1C:18:AB:F3:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:40:72:1f:c6:2c:37:9d:35:00:bc:ec:0c:33:d7:85:43:00:
         ca:c0:88:75:e5:01:0b:67:5e:84:c8:c9:a9:c3:f6:c2:5e:1e:
         23:1b:f0:4d:99:3a:15:42:2d:81:dd:5f:cc:91:17:65:41:f5:
         f8:61:ee:d2:c3:99:fd:25:59:10:51:cf:16:f3:73:02:b3:ae:
         64:57:24:51:bd:bb:1b:4c:43:3e:98:8d:50:d4:72:26:8b:aa:
         ca:1e:b3:f6:a3:d2:e1:e2:d4:cc:76:fa:11:66:94:05:ec:50:
         59:4f:31:04:ab:0e:8f:d7:1a:ea:60:c2:38:02:b7:e4:ae:21:
         07:f9:59:4f:ee:a0:2b:1d:76:23:30:e0:a8:0a:3d:1f:34:81:
         d0:cb:50:74:e5:e4:a7:b8:27:d6:8b:1b:4c:af:03:5d:5c:fe:
         9a:47:c5:bc:52:1d:c8:cf:c4:24:18:95:91:60:93:8f:b0:47:
         b9:01:a4:86:39:c5:40:c4:79:e3:2f:10:77:85:a8:bf:ba:ab:
         7c:f3:85:cf:7c:ce:a5:52:39:d9:d4:34:20:71:b1:48:2d:e4:
         02:64:5a:80:a6:0f:6e:be:e1:4d:da:c2:38:1c:8a:cf:cc:bd:
         fc:f8:05:53:99:f6:92:90:12:92:e3:f0:21:d5:dc:da:42:5f:
         c3:af:78:c4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qjg4Q0ExMTAvBgNVBAUTKEY2MjVFNkNDMDM5MDI2RkY1QkM5RDZCREM0MkQ4RDFD
MThBQkYzM0IwHhcNMjYwNTEzMDQ1ODAwWhcNMjYwNTIwMDQ1ODAwWjAYMRYwFAYD
VQQDEw02YTA0MDRkOS04MTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyWch9UmDylI/kIZLC9NALZZWGX6AxTjmK93BWy/j3xJ2Zcg5RnsvpBx9NQk0
NKWgAEDLOwUnFzp4LvSS7X0EMbljvB8b47Ob3lqeU0KzaduiliDR8NnjFqBP4Ip3
YoTk2tw+PhwVIq0cZjh428ppzJ/RRSzUUKj/CfJDdBELaex9FeFUQjTbxzU7cze7
iedWt/0IqkPds1T64/ZLxvgNNePgQg+dO1jybUAr8qqCj0jy8Zudsm5YbKeg1dT9
OrD/A4rrdWDQ4iuBA+XRw33X8VMX6fCFG6HbmOUbhYw1I316G6R3AQiUE1GOCBDg
hbj1m5e5DOMZtVVpPSAcCIg7/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ1jipe9
gOlK1QMXk1oog6Z3Qk09MB8GA1UdIwQYMBaAFPYl5swDkCb/W8nWvcQtjRwYq/M7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODhDQS81Njk2RTc0NjM0
NjUxMUVGQUY2REVCNEVDNEY5QUUwMi85aVhtekFPUUp2OWJ5ZGE5eEMyTkhCaXI4
enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlpWG16QU9RSnY5YnlkYTl4QzJOSEJpcjh6cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
ODhDQS81Njk2RTc0NjM0NjUxMUVGQUY2REVCNEVDNEY5QUUwMi85aVhtekFPUUp2
OWJ5ZGE5eEMyTkhCaXI4enMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdEByH8YsN501ALzsDDPXhUMAysCIdeUBC2dehMjJqcP2wl4eIxvwTZk6FUIt
gd1fzJEXZUH1+GHu0sOZ/SVZEFHPFvNzArOuZFckUb27G0xDPpiNUNRyJouqyh6z
9qPS4eLUzHb6EWaUBexQWU8xBKsOj9ca6mDCOAK35K4hB/lZT+6gKx12IzDgqAo9
HzSB0MtQdOXkp7gn1osbTK8DXVz+mkfFvFIdyM/EJBiVkWCTj7BHuQGkhjnFQMR5
4y8Qd4Wov7qrfPOFz3zOpVI52dQ0IHGxSC3kAmRagKYPbr7hTdrCOByKz8y9/PgF
U5n2kpASkuPwIdXc2kJfw694xA==
-----END CERTIFICATE-----
Generated at Wed May 13 12:08:58 2026 by rpki-client