Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft
File:                     rzCJXc48ZcI77FTLCJhY66Fhic4.mft (raw, json)
Hash identifier:          2yudutnLvCzEBxjuHyMGO8vOe8yu+ej1PoD0w3h/rdo=
Subject key identifier:   1C:00:A5:9E:4C:10:1E:00:A9:FF:A8:7D:45:CF:48:98:5E:E3:EA:B5
Authority key identifier: AF:30:89:5D:CE:3C:65:C2:3B:EC:54:CB:08:98:58:EB:A1:61:89:CE
Certificate issuer:       /CN=A91CA294/serialNumber=AF30895DCE3C65C23BEC54CB089858EBA16189CE
Certificate serial:       80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft
Manifest number:          79
Signing time:             Mon 11 May 2026 07:56:07 +0000
Manifest this update:     Mon 11 May 2026 07:56:07 +0000
Manifest next update:     Mon 18 May 2026 07:56:07 +0000
Files and hashes:         1: rzCJXc48ZcI77FTLCJhY66Fhic4.crl (hash: B2IcEXTlyiBJ0WSzvhNG1uyXfePfTOvCCNS0hocf+H8=)
                          2: 44D1A4E69DAB11F0A7401064C4F9AE02.roa (hash: /dWw78lmDvPsrlgqtDvPWypN8cQFZwkLxuNHhkdxFFI=)
                          3: 7CCBF066A2F811F09235B919C4F9AE02.roa (hash: L2xc97rBOEo7wGTXyTU4krqEAbLPgvd1QpBdIvhLYmA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.crl
                          rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 07:56:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128 (0x80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA294, serialNumber=AF30895DCE3C65C23BEC54CB089858EBA16189CE
        Validity
            Not Before: May 11 07:56:07 2026 GMT
            Not After : May 18 07:56:07 2026 GMT
        Subject: CN=6a018b97-9724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:50:81:f7:7d:a2:2f:0a:ad:28:bd:be:6e:59:
                    cc:fe:cc:96:94:e3:fa:16:0d:fe:a5:3f:1b:2f:8d:
                    2b:01:03:b0:22:4e:53:b4:f8:f8:68:8f:86:0d:33:
                    05:9c:2a:87:84:77:f7:d6:5d:96:de:40:20:f5:d9:
                    ee:60:06:84:f4:29:69:3c:e4:0c:b1:77:17:91:0b:
                    b7:45:18:fb:6c:27:b7:64:48:a4:9a:b9:e9:45:73:
                    65:bc:a9:bc:be:6f:82:8e:a4:bf:0c:ce:56:24:88:
                    74:65:53:88:44:f3:15:90:10:82:14:ab:b0:ac:f1:
                    28:15:ef:79:dd:78:1a:ce:b3:28:5d:1c:58:53:05:
                    53:af:ea:bb:25:89:42:83:bb:85:10:bc:cc:e3:87:
                    72:f4:a1:18:35:7a:85:f3:d8:a5:60:57:2d:42:08:
                    90:6a:92:21:0e:e4:37:72:a1:2a:5f:e6:c3:69:34:
                    51:17:ad:37:97:9b:ba:7a:13:36:1b:9f:dc:d7:dc:
                    55:f3:62:00:59:d2:42:fd:77:5f:40:ed:6a:90:b7:
                    cb:9d:f0:10:eb:4f:c6:57:9f:73:01:32:d8:ab:00:
                    75:26:3e:f7:14:f6:99:51:a1:51:d1:66:1e:8b:e7:
                    3b:52:ed:6d:ce:4e:ec:a5:25:f8:97:ff:49:f4:2d:
                    dd:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:00:A5:9E:4C:10:1E:00:A9:FF:A8:7D:45:CF:48:98:5E:E3:EA:B5
            X509v3 Authority Key Identifier:
                keyid:AF:30:89:5D:CE:3C:65:C2:3B:EC:54:CB:08:98:58:EB:A1:61:89:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:b1:c3:83:c2:14:09:37:28:4b:df:39:18:65:75:ee:71:74:
         6b:17:04:a7:4c:c1:9a:5b:76:4e:3e:38:da:6f:52:3b:4a:d0:
         52:30:d5:61:f9:8b:75:bf:3e:40:ef:e0:6c:33:ea:2c:32:3c:
         06:f6:ae:e9:34:00:fe:a0:0f:9c:be:ad:73:2b:c8:5d:93:81:
         29:a1:95:0c:22:af:93:06:68:b2:45:f2:e5:3e:95:f0:b6:1b:
         4a:19:08:af:d5:a0:b2:38:0a:91:fd:e0:fd:6d:1f:ee:8a:84:
         e6:c6:71:ff:b7:92:93:a9:89:b6:f0:b2:64:61:b7:6b:76:27:
         5f:68:7b:e7:ee:65:33:94:7f:e0:76:d7:ba:03:89:ce:ff:14:
         3c:75:40:2c:f3:51:cb:57:0e:20:cb:39:96:7b:ee:41:e3:3d:
         90:dd:05:11:bc:81:55:08:67:1c:39:a1:92:bd:a0:47:f8:e9:
         fe:d2:6c:be:59:8c:34:9e:a4:3e:da:11:c2:23:95:2d:5a:1b:
         59:f0:eb:e1:c8:dd:24:2e:b7:3f:fd:f3:52:19:90:3c:87:01:
         9e:28:9e:3f:91:fe:f2:62:b7:2a:59:a6:08:59:1b:b4:3e:77:
         61:40:68:78:e5:c1:39:63:c3:a1:49:cc:52:f2:83:7d:ab:e2:
         dc:53:ac:f2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0EyOTQxMTAvBgNVBAUTKEFGMzA4OTVEQ0UzQzY1QzIzQkVDNTRDQjA4OTg1OEVC
QTE2MTg5Q0UwHhcNMjYwNTExMDc1NjA3WhcNMjYwNTE4MDc1NjA3WjAYMRYwFAYD
VQQDEw02YTAxOGI5Ny05NzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6lCB932iLwqtKL2+blnM/syWlOP6Fg3+pT8bL40rAQOwIk5TtPj4aI+GDTMF
nCqHhHf31l2W3kAg9dnuYAaE9ClpPOQMsXcXkQu3RRj7bCe3ZEikmrnpRXNlvKm8
vm+CjqS/DM5WJIh0ZVOIRPMVkBCCFKuwrPEoFe953XgazrMoXRxYUwVTr+q7JYlC
g7uFELzM44dy9KEYNXqF89ilYFctQgiQapIhDuQ3cqEqX+bDaTRRF603l5u6ehM2
G5/c19xV82IAWdJC/XdfQO1qkLfLnfAQ60/GV59zATLYqwB1Jj73FPaZUaFR0WYe
i+c7Uu1tzk7spSX4l/9J9C3dHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBwApZ5M
EB4Aqf+ofUXPSJhe4+q1MB8GA1UdIwQYMBaAFK8wiV3OPGXCO+xUywiYWOuhYYnO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTI5NC9DN0FGQTZBMjlE
QUExMUYwOTY0MjBCNjNDNEY5QUUwMi9yekNKWGM0OFpjSTc3RlRMQ0poWTY2Rmhp
YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3J6Q0pYYzQ4WmNJNzdGVExDSmhZNjZGaGljNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QTI5NC9DN0FGQTZBMjlEQUExMUYwOTY0MjBCNjNDNEY5QUUwMi9yekNKWGM0OFpj
STc3RlRMQ0poWTY2RmhpYzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQLHDg8IUCTcoS985GGV17nF0axcEp0zBmlt2Tj442m9SO0rQUjDVYfmLdb8+
QO/gbDPqLDI8Bvau6TQA/qAPnL6tcyvIXZOBKaGVDCKvkwZoskXy5T6V8LYbShkI
r9WgsjgKkf3g/W0f7oqE5sZx/7eSk6mJtvCyZGG3a3YnX2h75+5lM5R/4HbXugOJ
zv8UPHVALPNRy1cOIMs5lnvuQeM9kN0FEbyBVQhnHDmhkr2gR/jp/tJsvlmMNJ6k
PtoRwiOVLVobWfDr4cjdJC63P/3zUhmQPIcBniieP5H+8mK3KlmmCFkbtD53YUBo
eOXBOWPDoUnMUvKDfavi3FOs8g==
-----END CERTIFICATE-----
Generated at Wed May 13 07:16:06 2026 by rpki-client