Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft
File:                     -SrbMNtsD5zpgLXbl3FF-MGcgks.mft (raw, json)
Hash identifier:          K8rGPSRwJYat/z+yv96UuOVQd9uOgBCqsQPUWCrzb74=
Subject key identifier:   76:CF:50:24:FF:4E:43:BD:50:64:D0:50:7A:C1:CE:3E:8F:90:F5:01
Authority key identifier: F9:2A:DB:30:DB:6C:0F:9C:E9:80:B5:DB:97:71:45:F8:C1:9C:82:4B
Certificate issuer:       /CN=A91C0FCC/serialNumber=F92ADB30DB6C0F9CE980B5DB977145F8C19C824B
Certificate serial:       09D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft
Manifest number:          09CC
Signing time:             Tue 12 May 2026 19:57:00 +0000
Manifest this update:     Tue 12 May 2026 19:57:00 +0000
Manifest next update:     Tue 19 May 2026 19:57:00 +0000
Files and hashes:         1: -SrbMNtsD5zpgLXbl3FF-MGcgks.crl (hash: kKc6kHyyekp7He7p12mh21VoA+wC5YFTrHj4OHMBr+E=)
                          2: A778AAF6A42111EAB3108934C4F9AE02.roa (hash: +2e0ypBMf/2EVb6MaYRFXsgQhBqjAZqucCJc3CHmtVE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.crl
                          rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2516 (0x9d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0FCC, serialNumber=F92ADB30DB6C0F9CE980B5DB977145F8C19C824B
        Validity
            Not Before: May 12 19:57:00 2026 GMT
            Not After : May 19 19:57:00 2026 GMT
        Subject: CN=6a03860c-a849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f0:09:c3:d7:d1:d0:3e:a4:f0:9d:53:7b:40:
                    f2:a2:e5:09:f9:96:2f:d5:99:3f:5c:28:4c:95:06:
                    a6:8f:ea:a3:ba:fe:a3:c5:48:21:df:b6:be:7a:48:
                    8f:37:14:d5:30:67:7a:a3:40:f6:52:e6:45:e7:86:
                    26:fd:cf:74:69:e0:96:4d:47:32:e6:44:05:96:20:
                    5f:cd:6d:09:3c:b9:10:f2:70:cd:27:83:ce:b8:db:
                    f6:a5:be:9b:d1:26:ad:36:91:e5:9f:1e:77:53:77:
                    ee:14:b8:0c:25:67:a0:88:e3:7b:92:13:7b:65:c2:
                    86:fc:ed:a6:5e:ba:2b:98:32:a0:3c:42:99:ca:44:
                    7a:6f:eb:59:45:6b:60:54:b5:65:68:23:38:14:e6:
                    18:01:6e:5d:ab:5a:27:9a:96:d9:6e:29:de:42:27:
                    34:c5:05:9b:ba:27:42:55:31:c5:5a:81:3b:9d:60:
                    d1:17:bf:8c:8c:ff:88:66:93:90:a9:b7:3c:78:2f:
                    12:17:29:12:5a:de:a6:4f:ff:b8:b1:11:fe:8d:89:
                    9b:cf:e1:e5:61:24:d8:85:0c:69:bf:3c:d1:2d:ed:
                    e6:89:83:b1:ed:30:48:53:17:96:a6:7e:e6:e6:b9:
                    e9:d4:32:f9:92:24:1b:02:87:f6:69:19:1e:44:8c:
                    48:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:CF:50:24:FF:4E:43:BD:50:64:D0:50:7A:C1:CE:3E:8F:90:F5:01
            X509v3 Authority Key Identifier:
                keyid:F9:2A:DB:30:DB:6C:0F:9C:E9:80:B5:DB:97:71:45:F8:C1:9C:82:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:3d:0d:87:4d:fa:cb:ac:e1:8e:d7:d6:ef:9f:00:e5:d6:71:
         68:eb:e4:6f:e8:b1:b5:fe:c4:ea:31:76:23:3e:74:dc:90:04:
         6c:fd:03:7c:6b:19:33:5a:3a:af:b2:5a:29:b6:9c:6f:10:0d:
         23:93:ec:e4:59:c5:89:c8:43:af:23:03:c4:5a:e6:ab:d0:7e:
         45:11:23:53:e8:8c:84:10:50:04:11:90:70:2b:ac:30:45:4e:
         fe:53:6b:81:eb:26:05:04:8e:96:b0:05:cd:75:b7:16:24:a8:
         1d:89:9b:4d:86:4a:29:6a:b7:5d:94:b3:95:00:83:27:01:73:
         e5:94:60:57:fd:66:13:6c:c6:f9:6b:0e:06:d7:49:30:46:14:
         cc:43:b4:92:9b:1f:8b:2e:d6:78:cc:cb:d1:6f:9d:ce:0b:9c:
         2c:4e:ee:fa:af:36:16:3d:39:ea:8b:85:21:ea:f4:30:a3:ce:
         4b:a3:b3:16:50:1c:ae:d3:ec:0e:48:53:96:c2:53:e7:e1:63:
         31:51:a3:30:c2:31:39:e3:9a:fb:39:9e:8c:8e:92:10:51:e1:
         72:79:06:83:6c:90:77:78:48:7f:79:a3:57:ae:0e:dc:da:8e:
         27:54:08:ec:c0:22:30:3a:fd:39:0d:e4:51:c7:6e:d9:6b:96:
         8b:96:05:f2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzBGQ0MxMTAvBgNVBAUTKEY5MkFEQjMwREI2QzBGOUNFOTgwQjVEQjk3NzE0NUY4
QzE5QzgyNEIwHhcNMjYwNTEyMTk1NzAwWhcNMjYwNTE5MTk1NzAwWjAYMRYwFAYD
VQQDEw02YTAzODYwYy1hODQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuvAJw9fR0D6k8J1Te0DyouUJ+ZYv1Zk/XChMlQamj+qjuv6jxUgh37a+ekiP
NxTVMGd6o0D2UuZF54Ym/c90aeCWTUcy5kQFliBfzW0JPLkQ8nDNJ4POuNv2pb6b
0SatNpHlnx53U3fuFLgMJWegiON7khN7ZcKG/O2mXrormDKgPEKZykR6b+tZRWtg
VLVlaCM4FOYYAW5dq1onmpbZbineQic0xQWbuidCVTHFWoE7nWDRF7+MjP+IZpOQ
qbc8eC8SFykSWt6mT/+4sRH+jYmbz+HlYSTYhQxpvzzRLe3miYOx7TBIUxeWpn7m
5rnp1DL5kiQbAof2aRkeRIxIAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHbPUCT/
TkO9UGTQUHrBzj6PkPUBMB8GA1UdIwQYMBaAFPkq2zDbbA+c6YC125dxRfjBnIJL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEZDQy9GNUM0MjQwOEE0
MUYxMUVBQkRDMkY1MzFDNEY5QUUwMi8tU3JiTU50c0Q1enBnTFhibDNGRi1NR2Nn
a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1TcmJNTnRzRDV6cGdMWGJsM0ZGLU1HY2drcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MEZDQy9GNUM0MjQwOEE0MUYxMUVBQkRDMkY1MzFDNEY5QUUwMi8tU3JiTU50c0Q1
enBnTFhibDNGRi1NR2Nna3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkz0Nh036y6zhjtfW758A5dZxaOvkb+ixtf7E6jF2Iz503JAEbP0DfGsZM1o6
r7JaKbacbxANI5Ps5FnFichDryMDxFrmq9B+RREjU+iMhBBQBBGQcCusMEVO/lNr
gesmBQSOlrAFzXW3FiSoHYmbTYZKKWq3XZSzlQCDJwFz5ZRgV/1mE2zG+WsOBtdJ
MEYUzEO0kpsfiy7WeMzL0W+dzgucLE7u+q82Fj056ouFIer0MKPOS6OzFlAcrtPs
DkhTlsJT5+FjMVGjMMIxOeOa+zmejI6SEFHhcnkGg2yQd3hIf3mjV64O3NqOJ1QI
7MAiMDr9OQ3kUcdu2WuWi5YF8g==
-----END CERTIFICATE-----
Generated at Wed May 13 03:11:20 2026 by rpki-client