Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft
File:                     2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft (raw, json)
Hash identifier:          2X077Kx7AEaR/Xv/r5EBCWNiv2pLQ0pd6Rb54imgvdM=
Subject key identifier:   9A:95:C0:62:06:E5:5E:32:23:33:3A:1F:96:D0:0A:7C:D0:78:04:41
Authority key identifier: D9:D6:5F:7F:36:09:0C:40:1B:CF:20:D4:BC:80:C4:3F:0D:C5:93:3D
Certificate issuer:       /CN=A91C2B93/serialNumber=D9D65F7F36090C401BCF20D4BC80C43F0DC5933D
Certificate serial:       018E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft
Manifest number:          0182
Signing time:             Mon 11 May 2026 04:36:22 +0000
Manifest this update:     Mon 11 May 2026 04:36:22 +0000
Manifest next update:     Mon 18 May 2026 04:36:22 +0000
Files and hashes:         1: 2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl (hash: o7CkkHvucXSjTLDrxqIAtVcUoYTVxFo9HVOmGoMgzu4=)
                          2: B0BE3042014A11EFA8F03B5BC4F9AE02.roa (hash: i2+AU5JC1CnIuV2WebgbR1MhXzhp17jyG1HTb2dIKP0=)
                          3: B00A68E6014A11EFA8F03B5BC4F9AE02.roa (hash: EFBskJYMHfJRXujHupPsFrdh1ToDlvL0xJdWDE7eAo8=)
                          4: E2037F8C019911EFAFFEEC5DC4F9AE02.roa (hash: EOqSQLbOPrsjZ56mAXCzCp42zP2pW/1hVyLkMumCHLc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl
                          rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 04:36:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 398 (0x18e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2B93, serialNumber=D9D65F7F36090C401BCF20D4BC80C43F0DC5933D
        Validity
            Not Before: May 11 04:36:22 2026 GMT
            Not After : May 18 04:36:22 2026 GMT
        Subject: CN=6a015cc6-4015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:06:75:b8:76:81:d0:ea:00:7a:73:1b:64:4c:
                    a0:b3:94:ce:44:f6:fb:0d:1b:9c:aa:1e:7c:fe:cb:
                    af:1c:fe:5b:37:e6:78:13:b1:5d:b1:64:ab:7f:d3:
                    a8:88:8d:42:64:0e:35:03:72:f0:6f:d5:7c:c0:18:
                    24:30:5d:be:c0:f0:47:3e:6f:dd:7b:97:53:52:12:
                    f9:cd:04:c7:2b:09:de:d4:d5:60:e0:29:f2:12:1a:
                    34:3d:6a:a4:53:92:05:ca:2e:ad:87:60:a1:ab:db:
                    f5:ac:05:c3:e9:0b:e0:fc:70:56:8b:37:57:10:60:
                    d6:67:1d:e4:4b:e1:03:9b:ae:3d:8b:f3:b2:a1:36:
                    af:ff:d0:01:11:3f:63:07:1d:a8:b1:95:7c:06:48:
                    b3:29:49:cd:68:c9:04:27:0b:13:c6:50:55:63:9f:
                    64:c1:42:15:31:07:27:4e:c8:f5:90:76:d5:f7:53:
                    6f:24:5e:2c:70:15:45:59:33:16:e5:b2:ff:c3:ee:
                    07:df:3b:e8:d9:6e:2e:04:92:36:dd:c9:b4:db:55:
                    5e:0a:f4:65:c9:ed:5c:f9:2c:40:cc:e4:f6:25:d4:
                    c4:77:ab:90:97:9b:34:7f:78:48:e8:0a:30:0c:bf:
                    ec:d3:5b:35:bb:33:7c:57:23:9d:3b:99:93:99:8e:
                    5d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:95:C0:62:06:E5:5E:32:23:33:3A:1F:96:D0:0A:7C:D0:78:04:41
            X509v3 Authority Key Identifier:
                keyid:D9:D6:5F:7F:36:09:0C:40:1B:CF:20:D4:BC:80:C4:3F:0D:C5:93:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:e0:cd:cc:fe:5c:34:c2:d1:a9:ea:a3:e1:5c:7d:2b:a3:1d:
         52:ac:6c:c5:c9:ca:f5:6a:8a:25:06:9c:b0:40:7e:05:6a:0a:
         5d:b2:14:8f:c2:92:ed:92:ef:72:8f:95:62:5d:ff:22:3e:1c:
         5d:58:54:e0:37:1d:3f:31:b0:9a:41:94:9e:f5:26:ae:99:08:
         ba:4d:05:76:a3:cc:8f:04:c2:32:8c:62:73:5b:0c:6a:93:fd:
         9d:1c:92:32:02:92:60:97:55:3c:ad:da:4b:32:a8:d5:09:3b:
         d4:dd:a1:cf:42:ad:fd:ed:7f:ee:3f:f9:a8:5e:6c:ae:b3:99:
         e1:84:1f:1f:7b:72:ea:6f:63:fe:df:78:18:f0:0f:0d:98:f8:
         47:57:05:16:10:2e:9b:f9:11:15:52:78:3a:9b:f7:df:43:89:
         27:dd:ab:55:79:15:8d:95:94:13:7b:22:63:c8:4c:cc:3c:4f:
         27:d4:d1:60:a7:0e:1b:e2:8e:be:a0:e2:eb:69:22:0e:cd:15:
         33:c9:01:12:38:92:42:98:e6:28:d1:63:ed:73:63:51:31:39:
         9f:2b:58:2a:08:99:7a:73:00:9b:87:82:f8:7c:02:e7:af:63:
         50:a8:d4:50:87:33:86:02:67:ff:ec:93:cd:e9:48:02:af:7c:
         2e:8d:b3:a0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzJCOTMxMTAvBgNVBAUTKEQ5RDY1RjdGMzYwOTBDNDAxQkNGMjBENEJDODBDNDNG
MERDNTkzM0QwHhcNMjYwNTExMDQzNjIyWhcNMjYwNTE4MDQzNjIyWjAYMRYwFAYD
VQQDEw02YTAxNWNjNi00MDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApgZ1uHaB0OoAenMbZEygs5TORPb7DRucqh58/suvHP5bN+Z4E7FdsWSrf9Oo
iI1CZA41A3Lwb9V8wBgkMF2+wPBHPm/de5dTUhL5zQTHKwne1NVg4CnyEho0PWqk
U5IFyi6th2Chq9v1rAXD6Qvg/HBWizdXEGDWZx3kS+EDm649i/OyoTav/9ABET9j
Bx2osZV8BkizKUnNaMkEJwsTxlBVY59kwUIVMQcnTsj1kHbV91NvJF4scBVFWTMW
5bL/w+4H3zvo2W4uBJI23cm021VeCvRlye1c+SxAzOT2JdTEd6uQl5s0f3hI6Aow
DL/s01s1uzN8VyOdO5mTmY5dgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJqVwGIG
5V4yIzM6H5bQCnzQeARBMB8GA1UdIwQYMBaAFNnWX382CQxAG88g1LyAxD8NxZM9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkI5My8zQUM4NzRFRTAx
NDMxMUVGODI1QTY0NjVDNEY5QUUwMi8yZFpmZnpZSkRFQWJ6eURVdklERVB3M0Zr
ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJkWmZmellKREVBYnp5RFV2SURFUHczRmt6MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MkI5My8zQUM4NzRFRTAxNDMxMUVGODI1QTY0NjVDNEY5QUUwMi8yZFpmZnpZSkRF
QWJ6eURVdklERVB3M0ZrejAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAm+DNzP5cNMLRqeqj4Vx9K6MdUqxsxcnK9WqKJQacsEB+BWoKXbIUj8KS7ZLv
co+VYl3/Ij4cXVhU4DcdPzGwmkGUnvUmrpkIuk0FdqPMjwTCMoxic1sMapP9nRyS
MgKSYJdVPK3aSzKo1Qk71N2hz0Kt/e1/7j/5qF5srrOZ4YQfH3ty6m9j/t94GPAP
DZj4R1cFFhAum/kRFVJ4Opv330OJJ92rVXkVjZWUE3siY8hMzDxPJ9TRYKcOG+KO
vqDi62kiDs0VM8kBEjiSQpjmKNFj7XNjUTE5nytYKgiZenMAm4eC+HwC569jUKjU
UIczhgJn/+yTzelIAq98Lo2zoA==
-----END CERTIFICATE-----
Generated at Wed May 13 06:23:47 2026 by rpki-client