Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft
File:                     A4qG82KyVX-Uvncu4MX9MYRf4mM.mft (raw, json)
Hash identifier:          QHj/ZfZZw9vezgFX4yb+GJoBaefVxV6idsIDhXkPHD0=
Subject key identifier:   A1:BB:2B:C6:B3:61:25:77:19:54:32:89:AF:D4:60:9E:43:58:DE:55
Authority key identifier: 03:8A:86:F3:62:B2:55:7F:94:BE:77:2E:E0:C5:FD:31:84:5F:E2:63
Certificate issuer:       /CN=A91C4003/serialNumber=038A86F362B2557F94BE772EE0C5FD31845FE263
Certificate serial:       0CAA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4qG82KyVX-Uvncu4MX9MYRf4mM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft
Manifest number:          0C91
Signing time:             Tue 12 May 2026 18:37:49 +0000
Manifest this update:     Tue 12 May 2026 18:37:48 +0000
Manifest next update:     Tue 19 May 2026 18:37:48 +0000
Files and hashes:         1: A4qG82KyVX-Uvncu4MX9MYRf4mM.crl (hash: cLnJmgGKKYaJRBXNiXDwkH39fJje+1V3CJGH7evw2KQ=)
                          2: 711115241AD911EA97EF1C30C4F9AE02.roa (hash: mmYtVC6pA0xQGYtEhv2t2oPHHPFtT0oBTCui3h88ftY=)
                          3: 398848523A0011EFB7007939C4F9AE02.roa (hash: RuZgiCZxEAf3Xl/8VUs7ZvEmESPbH1fM/aP5m0qwSvI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.crl
                          rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4qG82KyVX-Uvncu4MX9MYRf4mM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:37:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3242 (0xcaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4003, serialNumber=038A86F362B2557F94BE772EE0C5FD31845FE263
        Validity
            Not Before: May 12 18:37:48 2026 GMT
            Not After : May 19 18:37:48 2026 GMT
        Subject: CN=6a03737c-5f0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a8:da:aa:1e:f8:8b:22:13:fe:8c:48:0e:79:
                    e6:a9:18:7d:41:95:7e:46:23:30:29:44:45:ac:3c:
                    76:de:16:ad:b8:21:5e:18:32:d3:d6:a6:e1:0d:36:
                    3d:45:2b:15:cc:85:3e:3e:f4:7a:82:23:d4:14:cc:
                    66:6e:07:a9:8a:af:92:35:9c:a8:b9:ff:03:5c:9b:
                    32:2d:00:ea:ba:f8:91:4e:ed:3a:b8:2e:92:15:f9:
                    6c:59:30:da:dc:af:c1:3c:e5:f3:cf:ac:fb:12:d3:
                    74:a6:1a:48:fa:bb:f9:1c:36:c2:f3:27:10:ef:6d:
                    2d:a4:29:76:68:f7:6c:10:5a:2f:28:1d:d0:f8:61:
                    b8:ca:5c:dd:62:09:6b:fb:83:f6:ab:bd:37:89:45:
                    56:f0:71:f2:bf:ee:5b:ef:3d:ca:8e:f4:d1:36:55:
                    1d:46:51:a9:b3:fc:13:50:39:c1:fb:d4:b5:80:5e:
                    67:93:45:3c:be:84:28:c6:38:57:e4:94:3d:c4:81:
                    9f:67:e9:3a:21:43:89:19:03:97:f6:e6:97:51:64:
                    b9:4d:1e:b4:e1:88:8f:33:23:2d:1e:e7:24:99:5d:
                    59:39:62:7a:2c:5e:f0:18:27:43:fa:54:f6:38:fc:
                    9e:70:27:a3:16:58:c2:b6:0d:63:27:98:30:b3:a4:
                    69:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:BB:2B:C6:B3:61:25:77:19:54:32:89:AF:D4:60:9E:43:58:DE:55
            X509v3 Authority Key Identifier:
                keyid:03:8A:86:F3:62:B2:55:7F:94:BE:77:2E:E0:C5:FD:31:84:5F:E2:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4qG82KyVX-Uvncu4MX9MYRf4mM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:f3:c4:2a:bc:b9:57:30:b2:e7:d8:a9:40:4f:de:d6:b1:a5:
         81:cd:b8:c7:56:17:4d:38:c5:52:66:09:69:c7:c4:64:7b:d3:
         83:70:43:3c:d7:25:db:36:53:ea:97:a9:cd:be:67:7a:be:1a:
         38:38:05:2c:a1:f4:43:f5:6b:7e:70:a8:44:0d:31:cb:58:2e:
         f0:10:cc:45:ac:b0:f3:ba:6c:29:48:c6:30:56:1a:1b:5f:d5:
         e2:08:8f:ca:90:96:04:58:dc:99:d3:27:16:68:aa:6d:de:37:
         31:9d:6e:fd:56:ee:65:76:52:86:82:93:09:9e:f9:39:f2:88:
         3c:3e:72:7a:86:55:9d:d1:47:7e:83:31:50:f1:01:02:35:89:
         07:44:d0:c7:e0:38:01:5f:12:bc:64:52:3e:08:94:82:0a:4f:
         09:d5:a9:ca:2e:24:b1:b0:c5:9d:b4:7c:ae:7e:46:83:24:d2:
         fe:54:03:1c:3f:7b:5d:5e:ad:36:e0:88:81:29:ad:7f:d1:44:
         b1:e6:70:b1:d4:4a:dd:15:ea:0c:33:38:93:94:c6:02:ef:e3:
         c4:9d:04:4d:a6:94:4a:cb:69:9c:d2:b9:fd:68:0f:cd:92:14:
         a5:8f:15:ac:61:25:ef:f1:8c:c1:e0:1c:73:0d:77:27:77:67:
         83:ee:c8:d1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzQwMDMxMTAvBgNVBAUTKDAzOEE4NkYzNjJCMjU1N0Y5NEJFNzcyRUUwQzVGRDMx
ODQ1RkUyNjMwHhcNMjYwNTEyMTgzNzQ4WhcNMjYwNTE5MTgzNzQ4WjAYMRYwFAYD
VQQDEw02YTAzNzM3Yy01ZjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0ajaqh74iyIT/oxIDnnmqRh9QZV+RiMwKURFrDx23hatuCFeGDLT1qbhDTY9
RSsVzIU+PvR6giPUFMxmbgepiq+SNZyouf8DXJsyLQDquviRTu06uC6SFflsWTDa
3K/BPOXzz6z7EtN0phpI+rv5HDbC8ycQ720tpCl2aPdsEFovKB3Q+GG4ylzdYglr
+4P2q703iUVW8HHyv+5b7z3KjvTRNlUdRlGps/wTUDnB+9S1gF5nk0U8voQoxjhX
5JQ9xIGfZ+k6IUOJGQOX9uaXUWS5TR604YiPMyMtHuckmV1ZOWJ6LF7wGCdD+lT2
OPyecCejFljCtg1jJ5gws6Rp8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKG7K8az
YSV3GVQyia/UYJ5DWN5VMB8GA1UdIwQYMBaAFAOKhvNislV/lL53LuDF/TGEX+Jj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDAwMy9COEU4QUQ3MjFB
RDgxMUVBODJFNzRCMkZDNEY5QUUwMi9BNHFHODJLeVZYLVV2bmN1NE1YOU1ZUmY0
bU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0E0cUc4Mkt5VlgtVXZuY3U0TVg5TVlSZjRtTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NDAwMy9COEU4QUQ3MjFBRDgxMUVBODJFNzRCMkZDNEY5QUUwMi9BNHFHODJLeVZY
LVV2bmN1NE1YOU1ZUmY0bU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZPPEKry5VzCy59ipQE/e1rGlgc24x1YXTTjFUmYJacfEZHvTg3BDPNcl2zZT
6pepzb5ner4aODgFLKH0Q/VrfnCoRA0xy1gu8BDMRayw87psKUjGMFYaG1/V4giP
ypCWBFjcmdMnFmiqbd43MZ1u/VbuZXZShoKTCZ75OfKIPD5yeoZVndFHfoMxUPEB
AjWJB0TQx+A4AV8SvGRSPgiUggpPCdWpyi4ksbDFnbR8rn5GgyTS/lQDHD97XV6t
NuCIgSmtf9FEseZwsdRK3RXqDDM4k5TGAu/jxJ0ETaaUSstpnNK5/WgPzZIUpY8V
rGEl7/GMweAccw13J3dng+7I0Q==
-----END CERTIFICATE-----
Generated at Wed May 13 08:47:38 2026 by rpki-client