Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4060/569389FE39D011EB8F471569C4F9AE02/4h8k4MVNu5P2Z4FEAtZq1AgHERQ.mft
File:                     4h8k4MVNu5P2Z4FEAtZq1AgHERQ.mft (raw, json)
Hash identifier:          fXUqC+OZumu+mwINmxhAEfHqHxEAHZcqeeXoEy8Z9w4=
Subject key identifier:   4A:4C:E7:C9:6A:8F:D7:12:32:E9:D7:2F:5B:82:C7:3A:B7:64:64:33
Authority key identifier: E2:1F:24:E0:C5:4D:BB:93:F6:67:81:44:02:D6:6A:D4:08:07:11:14
Certificate issuer:       /CN=A91C4060/serialNumber=E21F24E0C54DBB93F667814402D66AD408071114
Certificate serial:       07DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4h8k4MVNu5P2Z4FEAtZq1AgHERQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4060/569389FE39D011EB8F471569C4F9AE02/4h8k4MVNu5P2Z4FEAtZq1AgHERQ.mft
Manifest number:          07D0
Signing time:             Tue 12 May 2026 21:26:41 +0000
Manifest this update:     Tue 12 May 2026 21:26:40 +0000
Manifest next update:     Tue 19 May 2026 21:26:40 +0000
Files and hashes:         1: 4h8k4MVNu5P2Z4FEAtZq1AgHERQ.crl (hash: i70DcD3xEwHplfmzBcIfcB4UABbi6HuhoFxS2E/txzk=)
                          2: 71C26BD039D211EB84B9FD6BC4F9AE02.roa (hash: m1LwxR5yBiEhYayYDDx+VeEVNC28wm7cqjOPRTGQW8s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4060/569389FE39D011EB8F471569C4F9AE02/4h8k4MVNu5P2Z4FEAtZq1AgHERQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C4060/569389FE39D011EB8F471569C4F9AE02/4h8k4MVNu5P2Z4FEAtZq1AgHERQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4h8k4MVNu5P2Z4FEAtZq1AgHERQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 21:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2014 (0x7de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4060, serialNumber=E21F24E0C54DBB93F667814402D66AD408071114
        Validity
            Not Before: May 12 21:26:40 2026 GMT
            Not After : May 19 21:26:40 2026 GMT
        Subject: CN=6a039b11-5801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:33:a6:34:05:ea:77:fe:c0:51:8a:3a:13:a5:
                    cd:b0:7c:0a:10:d7:b8:3d:f9:17:eb:a8:ac:2d:66:
                    b0:9e:8d:18:86:af:6d:7d:85:07:31:3f:65:14:aa:
                    cb:f3:b6:68:e4:b5:72:74:c9:cf:e7:54:17:68:3b:
                    cd:1b:b8:61:ec:2e:b0:14:3b:34:8c:86:b1:a0:87:
                    aa:84:2b:eb:7c:e0:a9:b4:f8:17:69:c9:6d:03:fd:
                    54:fd:22:82:22:0a:8d:88:f8:34:17:7f:14:09:32:
                    3c:a2:8a:a6:ba:f4:43:13:87:d1:c5:65:5b:b3:d2:
                    8b:15:bf:fc:2e:c4:3c:6a:ac:7a:32:07:fb:d9:0c:
                    0b:af:c5:29:ae:a6:65:a6:3d:9a:56:fa:6f:45:e2:
                    f0:82:35:aa:d9:6d:9a:0a:90:42:7e:80:7c:ff:56:
                    d3:5f:6a:5a:e0:99:26:95:34:1e:56:64:59:3c:71:
                    c9:aa:51:87:fe:8d:ab:0c:20:24:a5:ec:1b:b6:6b:
                    68:9c:27:eb:84:0a:15:ff:ee:14:fa:35:7d:db:6d:
                    ef:53:2d:55:54:76:a1:61:07:78:12:31:82:ee:57:
                    ab:4d:fa:ea:6d:be:0d:ce:ca:b4:47:80:b5:c0:87:
                    b1:77:8f:62:c9:30:25:d0:89:27:82:07:f0:fe:3f:
                    7e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:4C:E7:C9:6A:8F:D7:12:32:E9:D7:2F:5B:82:C7:3A:B7:64:64:33
            X509v3 Authority Key Identifier:
                keyid:E2:1F:24:E0:C5:4D:BB:93:F6:67:81:44:02:D6:6A:D4:08:07:11:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4060/569389FE39D011EB8F471569C4F9AE02/4h8k4MVNu5P2Z4FEAtZq1AgHERQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4h8k4MVNu5P2Z4FEAtZq1AgHERQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4060/569389FE39D011EB8F471569C4F9AE02/4h8k4MVNu5P2Z4FEAtZq1AgHERQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:3c:42:c1:d6:9d:b7:9c:75:09:1d:8a:b0:a6:3b:12:8a:41:
         99:44:40:87:42:6e:9e:39:e9:d3:8b:6e:39:ee:09:64:d7:e2:
         12:35:c0:19:16:c7:81:6e:fc:5d:42:e2:90:32:4f:f1:d7:80:
         a8:7f:1a:97:9c:da:c9:b5:72:8c:6a:b6:b8:b1:67:af:44:9d:
         fd:d7:1b:e9:5b:6e:ab:c4:98:8a:49:2c:39:f0:14:0f:af:3b:
         f2:e3:89:f4:46:0a:2a:39:7b:c7:6e:13:db:df:6d:40:5a:77:
         0f:f4:70:34:2e:98:2b:d0:f2:30:d8:76:ff:35:89:6f:00:4e:
         d9:67:9d:7f:c3:2f:98:5d:7d:62:89:bd:03:64:9f:dd:35:76:
         6f:bb:66:46:7d:c9:b5:1d:c5:f9:2f:36:e8:98:c6:91:fd:2a:
         d6:be:a0:53:a7:55:ff:30:82:09:e1:e4:61:25:96:7d:d0:6a:
         7f:45:37:3e:b2:d3:56:24:10:4a:c5:f8:9a:f9:04:2a:70:6b:
         5c:fe:1b:ab:0c:e8:93:6d:96:49:5b:6b:53:ce:55:30:22:7e:
         a4:7b:5f:ca:a1:7b:c2:26:82:92:6d:26:58:3c:7e:e3:c9:f9:
         b1:9c:c3:c8:c6:6b:8c:0d:2c:08:4c:67:e7:17:a5:04:31:57:
         3b:b4:d0:08
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzQwNjAxMTAvBgNVBAUTKEUyMUYyNEUwQzU0REJCOTNGNjY3ODE0NDAyRDY2QUQ0
MDgwNzExMTQwHhcNMjYwNTEyMjEyNjQwWhcNMjYwNTE5MjEyNjQwWjAYMRYwFAYD
VQQDEw02YTAzOWIxMS01ODAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArTOmNAXqd/7AUYo6E6XNsHwKENe4PfkX66isLWawno0Yhq9tfYUHMT9lFKrL
87Zo5LVydMnP51QXaDvNG7hh7C6wFDs0jIaxoIeqhCvrfOCptPgXacltA/1U/SKC
IgqNiPg0F38UCTI8ooqmuvRDE4fRxWVbs9KLFb/8LsQ8aqx6Mgf72QwLr8UprqZl
pj2aVvpvReLwgjWq2W2aCpBCfoB8/1bTX2pa4JkmlTQeVmRZPHHJqlGH/o2rDCAk
pewbtmtonCfrhAoV/+4U+jV9223vUy1VVHahYQd4EjGC7lerTfrqbb4Nzsq0R4C1
wIexd49iyTAl0Iknggfw/j9+rQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEpM58lq
j9cSMunXL1uCxzq3ZGQzMB8GA1UdIwQYMBaAFOIfJODFTbuT9meBRALWatQIBxEU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDA2MC81NjkzODlGRTM5
RDAxMUVCOEY0NzE1NjlDNEY5QUUwMi80aDhrNE1WTnU1UDJaNEZFQXRacTFBZ0hF
UlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRoOGs0TVZOdTVQMlo0RkVBdFpxMUFnSEVSUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NDA2MC81NjkzODlGRTM5RDAxMUVCOEY0NzE1NjlDNEY5QUUwMi80aDhrNE1WTnU1
UDJaNEZFQXRacTFBZ0hFUlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjzxCwdadt5x1CR2KsKY7EopBmURAh0Junjnp04tuOe4JZNfiEjXAGRbHgW78
XULikDJP8deAqH8al5zaybVyjGq2uLFnr0Sd/dcb6Vtuq8SYikksOfAUD6878uOJ
9EYKKjl7x24T299tQFp3D/RwNC6YK9DyMNh2/zWJbwBO2Wedf8MvmF19Yom9A2Sf
3TV2b7tmRn3JtR3F+S826JjGkf0q1r6gU6dV/zCCCeHkYSWWfdBqf0U3PrLTViQQ
SsX4mvkEKnBrXP4bqwzok22WSVtrU85VMCJ+pHtfyqF7wiaCkm0mWDx+48n5sZzD
yMZrjA0sCExn5xelBDFXO7TQCA==
-----END CERTIFICATE-----
Generated at Wed May 13 06:52:38 2026 by rpki-client