Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft
File:                     72LxVcGXHVBJQfVx7t-sCvzFKFk.mft (raw, json)
Hash identifier:          OJ0+eOchG09nUubfiZCI+gQkrBac1QChYehS0DGe3uo=
Subject key identifier:   66:AA:4F:6E:CD:F0:1D:E3:AF:AC:61:E1:63:87:EF:FB:D2:89:86:48
Authority key identifier: EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59
Certificate issuer:       /CN=A91BFE6A/serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859
Certificate serial:       134B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft
Manifest number:          1320
Signing time:             Tue 12 May 2026 17:02:09 +0000
Manifest this update:     Tue 12 May 2026 17:02:08 +0000
Manifest next update:     Tue 19 May 2026 17:02:08 +0000
Files and hashes:         1: 72LxVcGXHVBJQfVx7t-sCvzFKFk.crl (hash: azx4EUP48zlFP9V2YS+UNVWFYgs32xpRzxkPiEpX0zQ=)
                          2: CEBECC28D38811E8A763B462C4F9AE02.roa (hash: QFWUYSiZUJc8h7YGZVvOm14atuGAeik2TO0HfRh5JB8=)
                          3: 5122B56A51F311E9AB54691EC4F9AE02.roa (hash: pA/9FBNMln0DoNLtOKkiTbgr8bTJzminkkAizik/o0Y=)
                          4: ED388A1840BB11E9A6718844C4F9AE02.roa (hash: BhycUplre6fTkJAbGpyBSXmycS7IRjXv3cPTzMpBNhY=)
                          5: 08DCBB24DC8011F0AB4C816E3A6F56BC.roa (hash: 96/u/vfI+bwY9VG+LkNCPlB++nMFvbH2aJWjRVlgcT0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl
                          rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 17:02:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4939 (0x134b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BFE6A, serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859
        Validity
            Not Before: May 12 17:02:08 2026 GMT
            Not After : May 19 17:02:08 2026 GMT
        Subject: CN=6a035d11-4c7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:b2:b6:1e:97:eb:d0:8b:50:c0:8c:fe:a6:8d:
                    6b:35:55:f7:1b:36:d8:65:68:3c:7b:e1:7d:a9:2a:
                    49:30:35:9b:66:f0:4f:75:dd:06:7d:b5:fc:cd:41:
                    d8:ed:41:6f:e4:fd:e3:54:a2:c3:c8:c4:8b:53:cd:
                    60:52:a7:50:cb:5c:6c:0f:c8:f2:08:92:f2:93:4c:
                    a5:8b:4f:30:fc:6b:0a:24:3e:f6:d6:30:6a:df:0b:
                    15:07:e4:7f:bb:e2:5e:ed:8a:a2:56:52:5b:72:26:
                    81:ac:ee:d7:cf:77:ca:fd:bc:5e:40:ea:ff:6a:a9:
                    ae:a0:c5:df:1f:2f:83:1d:cb:b0:53:bc:1a:cc:ce:
                    6a:3e:ca:45:c6:86:c3:c6:93:a3:9c:46:f9:b2:0d:
                    b3:c8:f1:28:34:55:24:29:cf:2b:b0:85:58:da:2d:
                    a1:07:35:78:0a:be:31:75:40:7b:75:1d:ff:b4:fe:
                    3d:70:50:c1:1f:7a:eb:30:e6:bd:b8:85:02:c7:47:
                    fc:b3:15:57:12:74:aa:cf:e5:26:ee:f1:72:bd:be:
                    6e:17:b4:7b:7d:f9:c7:6d:cc:a6:e9:47:78:4b:33:
                    87:47:42:85:95:89:bc:ab:a7:6b:b4:c7:ae:6c:ea:
                    4d:bd:e1:75:2e:c3:40:c6:12:df:28:a5:d9:eb:b2:
                    ad:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:AA:4F:6E:CD:F0:1D:E3:AF:AC:61:E1:63:87:EF:FB:D2:89:86:48
            X509v3 Authority Key Identifier:
                keyid:EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:47:73:28:49:d2:c5:3b:7e:00:5d:f1:62:ab:21:5b:ba:c4:
         83:d4:99:70:9b:26:f5:a6:ba:bd:b5:02:68:1c:c3:d3:bd:70:
         00:80:94:ca:08:c9:5d:f4:e7:66:e5:f1:19:ce:d7:6f:62:16:
         b6:ad:7c:ff:3d:4b:9c:90:22:45:eb:00:50:56:f9:f7:7c:18:
         57:03:04:ea:18:8d:f7:d2:59:39:ac:af:80:7a:d2:65:db:38:
         3d:d8:61:22:70:8c:98:f0:8a:fd:3f:97:d2:6a:b9:89:ca:09:
         cc:69:2a:97:41:29:cf:f6:be:55:3f:31:58:30:11:36:64:d1:
         4a:e7:e4:af:9d:38:ba:9c:2c:87:08:83:5d:a5:ab:29:f0:2b:
         b8:15:85:21:b5:ee:c5:d9:0d:29:3b:0a:ae:a0:e0:f7:bc:0d:
         f6:b7:f6:ec:fa:d0:70:e3:f3:ac:3a:1f:e3:cd:39:d2:72:63:
         10:34:33:49:fb:7d:54:fe:3c:01:bd:ed:d9:dc:31:96:a6:76:
         2a:9a:db:9d:0c:5e:9b:3a:47:11:e3:6f:2c:df:07:c2:2a:45:
         49:b0:9e:23:44:0c:99:0d:e1:7b:5d:e9:05:77:f6:22:39:74:
         1a:5c:d4:e7:4c:6c:59:a3:84:44:68:12:32:c9:70:11:8a:6e:
         8a:60:a2:ed
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICE0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkZFNkExMTAvBgNVBAUTKEVGNjJGMTU1QzE5NzFENTA0OTQxRjU3MUVFREZBQzBB
RkNDNTI4NTkwHhcNMjYwNTEyMTcwMjA4WhcNMjYwNTE5MTcwMjA4WjAYMRYwFAYD
VQQDEw02YTAzNWQxMS00YzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7rK2Hpfr0ItQwIz+po1rNVX3GzbYZWg8e+F9qSpJMDWbZvBPdd0GfbX8zUHY
7UFv5P3jVKLDyMSLU81gUqdQy1xsD8jyCJLyk0yli08w/GsKJD721jBq3wsVB+R/
u+Je7YqiVlJbciaBrO7Xz3fK/bxeQOr/aqmuoMXfHy+DHcuwU7wazM5qPspFxobD
xpOjnEb5sg2zyPEoNFUkKc8rsIVY2i2hBzV4Cr4xdUB7dR3/tP49cFDBH3rrMOa9
uIUCx0f8sxVXEnSqz+Um7vFyvb5uF7R7ffnHbcym6Ud4SzOHR0KFlYm8q6drtMeu
bOpNveF1LsNAxhLfKKXZ67Kt+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGaqT27N
8B3jr6xh4WOH7/vSiYZIMB8GA1UdIwQYMBaAFO9i8VXBlx1QSUH1ce7frAr8xShZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkU2QS8xRDY0MzI4RUQz
ODcxMUU4QkQ3MDc1NUNDNEY5QUUwMi83Mkx4VmNHWEhWQkpRZlZ4N3Qtc0N2ekZL
RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzcyTHhWY0dYSFZCSlFmVng3dC1zQ3Z6RktGay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RkU2QS8xRDY0MzI4RUQzODcxMUU4QkQ3MDc1NUNDNEY5QUUwMi83Mkx4VmNHWEhW
QkpRZlZ4N3Qtc0N2ekZLRmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJkdzKEnSxTt+AF3xYqshW7rEg9SZcJsm9aa6vbUCaBzD071wAICUygjJXfTn
ZuXxGc7Xb2IWtq18/z1LnJAiResAUFb593wYVwME6hiN99JZOayvgHrSZds4Pdhh
InCMmPCK/T+X0mq5icoJzGkql0Epz/a+VT8xWDARNmTRSufkr504upwshwiDXaWr
KfAruBWFIbXuxdkNKTsKrqDg97wN9rf27PrQcOPzrDof48050nJjEDQzSft9VP48
Ab3t2dwxlqZ2KprbnQxemzpHEeNvLN8HwipFSbCeI0QMmQ3he13pBXf2Ijl0GlzU
50xsWaOERGgSMslwEYpuimCi7Q==
-----END CERTIFICATE-----
Generated at Wed May 13 09:25:10 2026 by rpki-client