Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft
File:                     SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft (raw, json)
Hash identifier:          ptnW4FA0QPyyFHZhecEudK/ccCkM0km7bRTwcAoX0nA=
Subject key identifier:   C8:28:86:54:24:71:75:AD:6D:7D:84:A1:C5:AF:AD:28:6F:38:AD:07
Authority key identifier: 49:47:5B:59:75:F1:97:98:95:A3:C6:E4:41:83:E4:BC:A2:E8:34:6F
Certificate issuer:       /CN=A91BC4FF/serialNumber=49475B5975F1979895A3C6E44183E4BCA2E8346F
Certificate serial:       0134
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft
Manifest number:          012F
Signing time:             Wed 13 May 2026 05:38:31 +0000
Manifest this update:     Wed 13 May 2026 05:38:30 +0000
Manifest next update:     Wed 20 May 2026 05:38:30 +0000
Files and hashes:         1: SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl (hash: 5hYc+jsuGUMnKgf8T6WU/ooMudVbaF91JeSD1Zv0reU=)
                          2: 35525B92845611EFB053C341C4F9AE02.roa (hash: nap5DwScCHSxl7+vobvju05szU4kvHjXe5lhp9A3q7I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl
                          rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 05:38:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 308 (0x134)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC4FF, serialNumber=49475B5975F1979895A3C6E44183E4BCA2E8346F
        Validity
            Not Before: May 13 05:38:30 2026 GMT
            Not After : May 20 05:38:30 2026 GMT
        Subject: CN=6a040e57-dec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0f:4c:34:36:87:f0:f4:da:00:1b:9d:84:19:
                    bd:16:5b:c7:b4:aa:58:5b:68:e9:37:b8:e9:31:46:
                    e0:b8:2a:14:59:32:88:b1:c7:0a:cd:bc:7d:84:a4:
                    32:ee:62:36:aa:25:fa:ed:ef:5d:3f:2e:71:29:77:
                    ec:d5:1a:c2:cd:9a:32:70:ec:b0:95:db:8c:87:c4:
                    54:8d:c3:2e:72:43:18:0b:13:68:f4:8a:82:e8:45:
                    56:a3:65:76:94:a6:5a:c9:bb:52:fa:ba:55:60:d6:
                    e6:e9:c6:0b:d0:c0:6c:e9:5a:83:7b:af:c7:0e:fb:
                    3d:74:b4:0e:80:9e:48:c5:28:6a:f4:96:e4:93:f9:
                    06:3c:51:87:98:7d:90:42:f2:89:61:70:17:94:9c:
                    d9:ca:91:53:76:2e:2c:57:33:b6:70:5c:cd:8c:70:
                    03:e9:85:b6:6b:c5:64:c6:d8:05:76:dd:b0:43:99:
                    fa:61:9a:1b:14:e2:52:e7:73:9a:e8:b4:58:3b:c0:
                    ca:20:01:3a:ed:c5:f3:b8:3b:df:9e:49:1d:c0:8e:
                    3a:10:82:f0:d7:38:48:96:9b:65:5c:8f:c7:b3:bd:
                    7c:83:a9:b2:64:9b:f9:59:73:aa:ef:67:b0:f2:57:
                    43:4a:92:53:f2:36:e9:c0:10:1e:b4:07:e1:c1:a7:
                    e6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:28:86:54:24:71:75:AD:6D:7D:84:A1:C5:AF:AD:28:6F:38:AD:07
            X509v3 Authority Key Identifier:
                keyid:49:47:5B:59:75:F1:97:98:95:A3:C6:E4:41:83:E4:BC:A2:E8:34:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:d8:83:80:3c:60:ff:b2:47:40:91:bc:74:53:54:29:41:7a:
         fe:b3:9b:0e:e4:30:8c:d0:53:48:fc:b0:9c:1d:55:26:05:1f:
         6e:93:9f:aa:4e:c9:57:0a:21:1f:59:0b:dc:77:94:d3:ec:87:
         ce:ae:92:80:80:5c:8e:f3:36:e8:9b:c7:f1:23:2f:c0:27:02:
         4c:99:24:dd:4f:99:ec:d9:82:33:47:b0:1a:ed:60:d5:e9:92:
         52:dd:36:fd:51:e9:fa:f7:ad:3c:09:97:4c:42:a0:e8:59:33:
         e7:d8:f4:fc:4c:13:f1:73:be:f9:33:bf:77:cf:9b:b8:e6:ac:
         d6:e7:a4:48:a7:52:11:4b:9a:28:ff:43:72:98:1e:9f:24:4a:
         62:8f:14:0a:cf:3e:70:f3:46:84:fc:43:e3:dc:9b:a0:39:09:
         3c:2a:e3:8c:02:15:7d:90:cf:c5:f6:39:19:01:83:67:e0:62:
         a3:f1:18:55:24:06:b1:1d:fd:9f:48:34:9a:42:22:d5:7e:6f:
         06:00:1d:e7:2a:00:6e:8f:d4:a2:ed:c5:19:b3:20:3f:9f:b5:
         b8:e9:23:ad:3f:c8:2a:0e:8b:ba:6e:85:45:91:c7:62:79:d2:
         a9:f6:91:54:c0:98:57:83:fd:83:8c:7a:41:83:d0:bd:6b:c6:
         c8:bc:13:1c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkM0RkYxMTAvBgNVBAUTKDQ5NDc1QjU5NzVGMTk3OTg5NUEzQzZFNDQxODNFNEJD
QTJFODM0NkYwHhcNMjYwNTEzMDUzODMwWhcNMjYwNTIwMDUzODMwWjAYMRYwFAYD
VQQDEw02YTA0MGU1Ny1kZWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyw9MNDaH8PTaABudhBm9FlvHtKpYW2jpN7jpMUbguCoUWTKIsccKzbx9hKQy
7mI2qiX67e9dPy5xKXfs1RrCzZoycOywlduMh8RUjcMuckMYCxNo9IqC6EVWo2V2
lKZaybtS+rpVYNbm6cYL0MBs6VqDe6/HDvs9dLQOgJ5IxShq9Jbkk/kGPFGHmH2Q
QvKJYXAXlJzZypFTdi4sVzO2cFzNjHAD6YW2a8VkxtgFdt2wQ5n6YZobFOJS53Oa
6LRYO8DKIAE67cXzuDvfnkkdwI46EILw1zhIlptlXI/Hs718g6myZJv5WXOq72ew
8ldDSpJT8jbpwBAetAfhwafmdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMgohlQk
cXWtbX2EocWvrShvOK0HMB8GA1UdIwQYMBaAFElHW1l18ZeYlaPG5EGD5Lyi6DRv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzRGRi85QzU2QkU0Mjg0
NTUxMUVGQjc2RDI3NDBDNEY5QUUwMi9TVWRiV1hYeGw1aVZvOGJrUVlQa3ZLTG9O
RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NVZGJXWFh4bDVpVm84YmtRWVBrdktMb05HOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QzRGRi85QzU2QkU0Mjg0NTUxMUVGQjc2RDI3NDBDNEY5QUUwMi9TVWRiV1hYeGw1
aVZvOGJrUVlQa3ZLTG9ORzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJ9iDgDxg/7JHQJG8dFNUKUF6/rObDuQwjNBTSPywnB1VJgUfbpOfqk7JVwoh
H1kL3HeU0+yHzq6SgIBcjvM26JvH8SMvwCcCTJkk3U+Z7NmCM0ewGu1g1emSUt02
/VHp+vetPAmXTEKg6Fkz59j0/EwT8XO++TO/d8+buOas1uekSKdSEUuaKP9Dcpge
nyRKYo8UCs8+cPNGhPxD49yboDkJPCrjjAIVfZDPxfY5GQGDZ+Bio/EYVSQGsR39
n0g0mkIi1X5vBgAd5yoAbo/Uou3FGbMgP5+1uOkjrT/IKg6Lum6FRZHHYnnSqfaR
VMCYV4P9g4x6QYPQvWvGyLwTHA==
-----END CERTIFICATE-----
Generated at Wed May 13 11:34:07 2026 by rpki-client