Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft
File:                     pYh4bi_YjPqvU6qilsNkRg7m6m0.mft (raw, json)
Hash identifier:          dpSOKClU2Ma4UUJQCqNlsYk5/yDoXAR3j8NKEd4bleM=
Subject key identifier:   14:04:50:8E:A2:40:6B:84:B0:BB:55:BC:EE:57:16:6A:68:B3:C6:8F
Authority key identifier: A5:88:78:6E:2F:D8:8C:FA:AF:53:AA:A2:96:C3:64:46:0E:E6:EA:6D
Certificate issuer:       /CN=A91C8485/serialNumber=A588786E2FD88CFAAF53AAA296C364460EE6EA6D
Certificate serial:       0120
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft
Manifest number:          0110
Signing time:             Wed 13 May 2026 06:07:21 +0000
Manifest this update:     Wed 13 May 2026 06:07:20 +0000
Manifest next update:     Wed 20 May 2026 06:07:20 +0000
Files and hashes:         1: pYh4bi_YjPqvU6qilsNkRg7m6m0.crl (hash: 2uw7vOOHtGqAJUhDSYgjsbiLa2tnnr6WPhMmb6MhR5I=)
                          2: A59FFB3EB7D711EF9ED0C324C4F9AE02.roa (hash: 6KLtFcE2fvWR+tw55m57pBI0diDqJjyzD/r4YO1tgys=)
                          3: 5B4A5E7EB7CF11EF860F535AC4F9AE02.roa (hash: zNFgnvoA/0CMs26VKwtX8JS10QHmGc04Gpc4vtJA0LQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.crl
                          rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 06:07:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 288 (0x120)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8485, serialNumber=A588786E2FD88CFAAF53AAA296C364460EE6EA6D
        Validity
            Not Before: May 13 06:07:20 2026 GMT
            Not After : May 20 06:07:20 2026 GMT
        Subject: CN=6a041519-67e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0b:09:f7:53:d3:e9:f5:f2:17:cf:1a:e9:63:
                    4f:2a:90:29:e1:07:1b:7f:d0:11:8c:8a:60:d8:07:
                    bb:ab:85:5d:6d:3f:af:6f:36:95:c0:43:55:f0:99:
                    cd:75:96:0f:85:ef:c0:8d:37:5e:86:9d:4d:a6:e1:
                    3c:7c:e0:49:ca:fd:e8:35:de:cc:0d:b7:f2:56:8c:
                    e5:3a:cc:bc:15:63:24:15:c9:68:49:d4:59:b3:50:
                    14:39:91:f7:6a:bd:18:19:f3:2b:da:fb:ef:5f:e7:
                    2a:88:80:01:1f:aa:c6:6a:61:f3:e0:84:f2:5c:c3:
                    5d:21:3e:7a:eb:3d:bb:77:ad:74:50:4f:42:25:a6:
                    34:51:ec:9a:4e:68:b3:76:70:90:d7:f4:18:55:10:
                    71:06:85:64:ec:59:30:07:16:60:6e:c6:04:3c:37:
                    cc:7e:e8:11:d4:d6:81:e5:dd:20:02:d7:eb:fc:67:
                    be:cc:c6:32:90:de:40:53:31:7f:77:3e:0f:68:50:
                    68:ba:f4:1f:d8:25:4b:f7:d2:63:a8:eb:cc:cf:1c:
                    36:22:50:f3:a8:5a:19:b8:26:07:2f:18:2e:61:97:
                    26:9a:01:74:ad:51:2c:2c:de:79:89:e3:1e:99:56:
                    e4:b3:2b:db:06:be:22:f5:4a:bc:53:4e:59:19:3a:
                    c9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:04:50:8E:A2:40:6B:84:B0:BB:55:BC:EE:57:16:6A:68:B3:C6:8F
            X509v3 Authority Key Identifier:
                keyid:A5:88:78:6E:2F:D8:8C:FA:AF:53:AA:A2:96:C3:64:46:0E:E6:EA:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:6e:2d:87:a0:f8:86:2a:d0:c6:75:1d:d3:02:36:aa:ef:34:
         04:17:43:6c:ec:de:ad:fb:10:de:43:cc:55:39:2d:85:41:33:
         94:f7:6a:22:9b:2a:8a:1b:6c:5d:19:24:05:5d:f1:d0:8b:a5:
         3d:9c:d0:d2:98:8f:8e:35:19:18:b3:84:ba:e2:ce:38:b4:19:
         62:ae:4a:a5:17:69:eb:03:12:d0:47:6b:7e:60:93:00:d2:c1:
         f3:8e:46:ed:96:9d:8f:48:27:eb:03:1d:68:cc:32:16:12:be:
         ee:5c:43:0d:50:c7:b7:06:4e:d1:f6:91:dc:99:48:98:19:54:
         2a:8c:cb:61:53:15:35:b9:dd:3d:5f:df:44:d1:bb:48:25:bc:
         98:71:cf:4c:ee:c2:ff:23:ba:09:d1:c5:11:20:f2:77:61:be:
         b8:ff:8e:38:65:93:24:8d:20:21:39:01:64:3d:36:f5:cc:40:
         40:b9:ea:19:a3:e0:54:0b:b2:ff:ed:c6:88:e3:4d:f9:91:d4:
         12:72:40:64:3d:2b:83:0f:2e:2c:3f:99:ad:5e:c3:27:41:fe:
         6f:2c:d8:5e:bf:18:55:e3:17:5b:23:50:22:c8:4a:45:df:e3:
         0d:91:48:68:1d:78:e7:ea:02:f7:a2:8a:af:8a:00:a0:95:f7:
         ea:e8:e8:6d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qzg0ODUxMTAvBgNVBAUTKEE1ODg3ODZFMkZEODhDRkFBRjUzQUFBMjk2QzM2NDQ2
MEVFNkVBNkQwHhcNMjYwNTEzMDYwNzIwWhcNMjYwNTIwMDYwNzIwWjAYMRYwFAYD
VQQDEw02YTA0MTUxOS02N2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0QsJ91PT6fXyF88a6WNPKpAp4Qcbf9ARjIpg2Ae7q4VdbT+vbzaVwENV8JnN
dZYPhe/AjTdehp1NpuE8fOBJyv3oNd7MDbfyVozlOsy8FWMkFcloSdRZs1AUOZH3
ar0YGfMr2vvvX+cqiIABH6rGamHz4ITyXMNdIT566z27d610UE9CJaY0UeyaTmiz
dnCQ1/QYVRBxBoVk7FkwBxZgbsYEPDfMfugR1NaB5d0gAtfr/Ge+zMYykN5AUzF/
dz4PaFBouvQf2CVL99JjqOvMzxw2IlDzqFoZuCYHLxguYZcmmgF0rVEsLN55ieMe
mVbksyvbBr4i9Uq8U05ZGTrJ5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBQEUI6i
QGuEsLtVvO5XFmpos8aPMB8GA1UdIwQYMBaAFKWIeG4v2Iz6r1OqopbDZEYO5upt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODQ4NS8yREJDRUY0NkI0
MTIxMUVGQjhFNkU3NzNDNEY5QUUwMi9wWWg0YmlfWWpQcXZVNnFpbHNOa1JnN202
bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BZaDRiaV9ZalBxdlU2cWlsc05rUmc3bTZtMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
ODQ4NS8yREJDRUY0NkI0MTIxMUVGQjhFNkU3NzNDNEY5QUUwMi9wWWg0YmlfWWpQ
cXZVNnFpbHNOa1JnN202bTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAg24th6D4hirQxnUd0wI2qu80BBdDbOzerfsQ3kPMVTkthUEzlPdqIpsqihts
XRkkBV3x0IulPZzQ0piPjjUZGLOEuuLOOLQZYq5KpRdp6wMS0EdrfmCTANLB845G
7Zadj0gn6wMdaMwyFhK+7lxDDVDHtwZO0faR3JlImBlUKozLYVMVNbndPV/fRNG7
SCW8mHHPTO7C/yO6CdHFESDyd2G+uP+OOGWTJI0gITkBZD029cxAQLnqGaPgVAuy
/+3GiONN+ZHUEnJAZD0rgw8uLD+ZrV7DJ0H+byzYXr8YVeMXWyNQIshKRd/jDZFI
aB145+oC96KKr4oAoJX36ujobQ==
-----END CERTIFICATE-----
Generated at Wed May 13 11:36:46 2026 by rpki-client