Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.mft
File:                     ABN5IHjRGy-UAw18O-71ATKibUA.mft (raw, json)
Hash identifier:          CM+Mb7Nz4UkiAFDCdmHLxWH9e6eRllJ57xXkv1IdM24=
Subject key identifier:   88:0B:1C:B2:E3:BA:EC:CD:C4:E9:74:80:2F:5D:FD:83:29:FC:AC:87
Authority key identifier: 00:13:79:20:78:D1:1B:2F:94:03:0D:7C:3B:EE:F5:01:32:A2:6D:40
Certificate issuer:       /CN=A91B9C74/serialNumber=0013792078D11B2F94030D7C3BEEF50132A26D40
Certificate serial:       02B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABN5IHjRGy-UAw18O-71ATKibUA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.mft
Manifest number:          02A5
Signing time:             Mon 11 May 2026 01:37:16 +0000
Manifest this update:     Mon 11 May 2026 01:37:15 +0000
Manifest next update:     Mon 18 May 2026 01:37:15 +0000
Files and hashes:         1: ABN5IHjRGy-UAw18O-71ATKibUA.crl (hash: JQ+eA/KDZmbxgPjlRdulN+ZXVoi35xpdHcurCOZf1Rg=)
                          2: F853742A5A9911EDA14F453FC4F9AE02.roa (hash: JJGT3Nb5VCKirzUE1ySYS3IWcoQmYybrBNJaHh+4Dao=)
                          3: 273E7B284E2311EDB6F68A4AC4F9AE02.roa (hash: MbY6IL5kpc7/CsrHl9Dq+//Dc21bFOal48QqzlMkm3s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.crl
                          rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABN5IHjRGy-UAw18O-71ATKibUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 01:37:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 694 (0x2b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9C74, serialNumber=0013792078D11B2F94030D7C3BEEF50132A26D40
        Validity
            Not Before: May 11 01:37:15 2026 GMT
            Not After : May 18 01:37:15 2026 GMT
        Subject: CN=6a0132cb-daec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:97:9d:a1:6b:5f:4b:51:16:8f:5c:d4:5f:b6:
                    2f:77:57:07:47:6d:26:59:eb:a1:b3:55:ad:a8:67:
                    52:4d:a2:e6:71:5f:55:f0:15:da:1c:75:c8:a2:c1:
                    1b:de:3c:95:dd:ac:14:01:3e:df:9e:30:72:cb:12:
                    bd:47:ca:3e:99:69:f8:ca:50:3c:b7:02:0e:b2:e4:
                    4f:27:21:40:6d:da:d1:cd:8b:07:6e:bb:35:45:40:
                    42:ad:9b:3b:a8:1f:6d:e6:62:d2:62:ec:0f:6c:ac:
                    00:78:7a:e0:5d:57:ae:d6:e6:30:4b:b4:e2:f5:ef:
                    94:5a:fa:a1:1d:05:48:46:22:24:f9:e5:8c:83:e5:
                    a9:e5:cf:02:51:18:cc:29:2c:1e:2b:5e:ee:34:bb:
                    63:a4:84:94:8a:fb:3a:fd:4e:f4:c5:7a:4c:ed:ac:
                    75:fc:cd:ba:af:ea:3b:1f:d3:46:cb:7b:ab:49:7d:
                    9b:30:eb:c2:a1:07:37:02:5e:c2:6a:a9:eb:14:b0:
                    23:fa:06:fe:28:e3:45:c5:1c:a4:b0:72:d0:d6:91:
                    61:b4:c3:56:1f:f8:74:b1:e7:bf:11:63:5f:66:a2:
                    ed:1a:21:07:fe:f7:6f:1a:f8:10:64:ce:c4:9a:c0:
                    00:96:b9:ed:14:89:2e:87:3d:d8:b4:b1:db:94:4b:
                    a6:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:0B:1C:B2:E3:BA:EC:CD:C4:E9:74:80:2F:5D:FD:83:29:FC:AC:87
            X509v3 Authority Key Identifier:
                keyid:00:13:79:20:78:D1:1B:2F:94:03:0D:7C:3B:EE:F5:01:32:A2:6D:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABN5IHjRGy-UAw18O-71ATKibUA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:b9:dd:9c:57:e1:4a:dc:67:e5:9d:37:c0:49:d4:0c:1f:13:
         e7:a4:1f:22:4c:7f:12:ff:80:68:2f:2d:c6:e0:01:06:6d:c1:
         f4:43:c8:fb:6d:eb:73:b5:19:f0:9f:a7:95:8b:40:16:a1:21:
         84:3f:ca:3e:aa:1c:26:d8:99:4a:ab:ff:53:e3:2e:14:2c:b5:
         43:08:af:af:9b:fd:69:06:55:0a:7f:24:cf:54:cd:fa:1e:d9:
         ef:5c:f5:12:12:90:ae:02:e2:1d:4f:97:95:d4:fc:44:9d:c5:
         cb:2b:7c:3f:e2:9a:81:e3:43:c6:d3:2d:dd:8e:9d:3d:f9:5e:
         99:31:ca:5f:a0:e5:6c:90:42:be:4e:d2:47:84:d3:f8:c9:8f:
         18:69:de:01:9b:22:a3:9f:92:69:62:f4:4b:91:8e:85:2c:5a:
         b4:fa:f6:bb:36:4c:b5:ad:d9:41:88:6e:ee:65:84:19:6b:db:
         f0:b6:a4:d4:28:dc:d0:47:da:09:23:53:ff:3a:c8:bd:63:67:
         e9:1e:59:98:67:9a:6d:ad:58:15:f4:c4:cf:bc:a9:02:10:e2:
         6d:91:2d:d6:1b:ef:32:78:39:f9:c4:0f:80:9f:7e:23:02:21:
         17:a5:1d:74:c0:d4:e1:bc:4d:85:63:6d:45:ab:3d:da:78:04:
         7e:ec:e4:d8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICArYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjlDNzQxMTAvBgNVBAUTKDAwMTM3OTIwNzhEMTFCMkY5NDAzMEQ3QzNCRUVGNTAx
MzJBMjZENDAwHhcNMjYwNTExMDEzNzE1WhcNMjYwNTE4MDEzNzE1WjAYMRYwFAYD
VQQDEw02YTAxMzJjYi1kYWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA95edoWtfS1EWj1zUX7Yvd1cHR20mWeuhs1WtqGdSTaLmcV9V8BXaHHXIosEb
3jyV3awUAT7fnjByyxK9R8o+mWn4ylA8twIOsuRPJyFAbdrRzYsHbrs1RUBCrZs7
qB9t5mLSYuwPbKwAeHrgXVeu1uYwS7Ti9e+UWvqhHQVIRiIk+eWMg+Wp5c8CURjM
KSweK17uNLtjpISUivs6/U70xXpM7ax1/M26r+o7H9NGy3urSX2bMOvCoQc3Al7C
aqnrFLAj+gb+KONFxRyksHLQ1pFhtMNWH/h0see/EWNfZqLtGiEH/vdvGvgQZM7E
msAAlrntFIkuhz3YtLHblEumFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIgLHLLj
uuzNxOl0gC9d/YMp/KyHMB8GA1UdIwQYMBaAFAATeSB40RsvlAMNfDvu9QEyom1A
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUM3NC80NENDOTcxRTRF
MUYxMUVEQjNFNkNDMkZDNEY5QUUwMi9BQk41SUhqUkd5LVVBdzE4Ty03MUFUS2li
VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FCTjVJSGpSR3ktVUF3MThPLTcxQVRLaWJVQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OUM3NC80NENDOTcxRTRFMUYxMUVEQjNFNkNDMkZDNEY5QUUwMi9BQk41SUhqUkd5
LVVBdzE4Ty03MUFUS2liVUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAz7ndnFfhStxn5Z03wEnUDB8T56QfIkx/Ev+AaC8txuABBm3B9EPI+23rc7UZ
8J+nlYtAFqEhhD/KPqocJtiZSqv/U+MuFCy1Qwivr5v9aQZVCn8kz1TN+h7Z71z1
EhKQrgLiHU+XldT8RJ3Fyyt8P+KageNDxtMt3Y6dPflemTHKX6DlbJBCvk7SR4TT
+MmPGGneAZsio5+SaWL0S5GOhSxatPr2uzZMta3ZQYhu7mWEGWvb8Lak1Cjc0Efa
CSNT/zrIvWNn6R5ZmGeaba1YFfTEz7ypAhDibZEt1hvvMng5+cQPgJ9+IwIhF6Ud
dMDU4bxNhWNtRas92ngEfuzk2A==
-----END CERTIFICATE-----
Generated at Wed May 13 03:10:00 2026 by rpki-client