Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft
File:                     tSlwZVVtKyKTSTXnUgcivVMz2k8.mft (raw, json)
Hash identifier:          l0/Ku5ie0+bu0WRjbTPPGAPQF+i59EVQImrN/NY4rdE=
Subject key identifier:   88:EA:9C:2B:3C:F2:32:2E:3E:6E:D4:EE:BA:85:2A:C6:E2:17:B5:E4
Authority key identifier: B5:29:70:65:55:6D:2B:22:93:49:35:E7:52:07:22:BD:53:33:DA:4F
Certificate issuer:       /CN=A91CD7A4/serialNumber=B5297065556D2B22934935E7520722BD5333DA4F
Certificate serial:       022C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSlwZVVtKyKTSTXnUgcivVMz2k8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft
Manifest number:          0222
Signing time:             Mon 11 May 2026 02:49:25 +0000
Manifest this update:     Mon 11 May 2026 02:49:25 +0000
Manifest next update:     Mon 18 May 2026 02:49:25 +0000
Files and hashes:         1: tSlwZVVtKyKTSTXnUgcivVMz2k8.crl (hash: FAv85KBExp0hU3HhfdtYJ8Jzxgq3aUXwqiMUBUQv6qI=)
                          2: 275245323AB511F0AE5E5919C4F9AE02.roa (hash: k50pyswPVAJjF83tcl2ttbv+lV78Nbi1RduGBQNNES0=)
                          3: AD47BEC4320611EE845F4A5AC4F9AE02.roa (hash: HkA6U1wFsTKTzUQHdDn6LGozzBTZRy33eQX4h5sxnuY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.crl
                          rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSlwZVVtKyKTSTXnUgcivVMz2k8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 02:49:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 556 (0x22c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD7A4, serialNumber=B5297065556D2B22934935E7520722BD5333DA4F
        Validity
            Not Before: May 11 02:49:25 2026 GMT
            Not After : May 18 02:49:25 2026 GMT
        Subject: CN=6a0143b5-fe73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8e:42:5f:46:36:d0:58:39:ad:cd:9c:43:45:
                    f1:1d:73:3e:e9:a9:2a:b8:83:b5:74:0c:08:be:cf:
                    e0:3a:1d:ff:c9:85:21:d7:27:1e:19:9d:67:9c:0e:
                    84:12:a3:0d:d4:c6:e6:77:b8:6f:a0:a1:06:47:2c:
                    01:0d:d7:83:d4:b3:5f:27:34:8e:fa:69:62:10:77:
                    51:9e:91:a2:8e:0e:9a:96:d4:2f:c1:99:dc:4a:73:
                    50:1a:2a:57:8a:95:3c:ef:d4:19:eb:61:77:30:ad:
                    72:85:ed:0c:44:9c:7d:8d:bf:bc:8f:90:4b:d2:2b:
                    e4:8c:33:c3:e0:aa:a0:57:b9:75:b2:aa:36:af:e6:
                    39:f7:55:58:2d:78:3c:79:b1:69:8a:e4:ad:36:c6:
                    8d:f4:c1:df:c2:a0:05:8a:65:2a:0e:89:90:97:66:
                    0f:99:f4:a4:9a:5a:2d:f1:de:65:90:cd:56:f5:d0:
                    36:57:56:99:2e:c6:06:75:b4:85:a1:6d:b1:aa:59:
                    61:af:fa:5b:66:29:ea:e2:00:67:dc:fa:f6:b8:44:
                    f6:30:c0:d6:f0:cb:a9:93:f1:d8:4f:e5:7c:4c:0d:
                    ed:dc:8d:d9:b1:a0:73:f6:71:a9:8b:23:7a:9a:b8:
                    a5:c5:ff:47:6c:81:d8:d3:cb:c3:a1:0b:bc:a6:ae:
                    af:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:EA:9C:2B:3C:F2:32:2E:3E:6E:D4:EE:BA:85:2A:C6:E2:17:B5:E4
            X509v3 Authority Key Identifier:
                keyid:B5:29:70:65:55:6D:2B:22:93:49:35:E7:52:07:22:BD:53:33:DA:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSlwZVVtKyKTSTXnUgcivVMz2k8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:00:15:80:4d:eb:55:8b:6d:7c:86:9b:2d:77:df:b5:f7:00:
         05:37:c3:b8:e8:3b:c3:56:3c:4b:3c:51:01:30:cb:c1:ce:99:
         e5:49:6f:3c:30:c9:81:8f:28:34:44:25:86:31:d6:9d:e9:fa:
         38:82:84:f4:55:04:1a:6b:47:83:c0:e7:f7:dc:26:a6:86:5b:
         d5:80:e4:01:6d:1a:43:c1:13:2a:00:d9:5f:f0:15:f2:25:26:
         7c:c3:90:56:ab:d6:93:6e:5e:e7:92:c2:75:57:1f:d1:4a:73:
         67:d0:29:df:8e:6b:4a:fb:dd:a2:38:70:fc:3d:0c:6b:ed:ec:
         b4:17:5d:9e:0d:15:80:3c:4b:14:f2:6a:64:bb:f8:62:a2:fa:
         d9:c1:fd:b7:d0:e0:73:fe:ee:83:36:f2:08:79:72:cb:10:c0:
         1a:e6:8e:39:f0:9a:78:69:27:b4:81:74:76:a4:8d:3f:11:2b:
         1b:e9:78:25:23:0c:8e:ac:80:8f:68:80:53:99:f0:c0:f2:9d:
         5a:09:fa:33:a9:a4:df:00:fa:57:88:d0:1b:c8:f5:e8:8a:bd:
         ca:88:9f:12:9e:29:a4:c5:92:45:62:2a:18:f9:21:bd:01:71:
         90:3e:f2:80:76:f5:f2:f0:23:de:f8:02:7f:cd:18:88:0e:b5:
         1b:dc:d7:b1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0Q3QTQxMTAvBgNVBAUTKEI1Mjk3MDY1NTU2RDJCMjI5MzQ5MzVFNzUyMDcyMkJE
NTMzM0RBNEYwHhcNMjYwNTExMDI0OTI1WhcNMjYwNTE4MDI0OTI1WjAYMRYwFAYD
VQQDEw02YTAxNDNiNS1mZTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuo5CX0Y20Fg5rc2cQ0XxHXM+6akquIO1dAwIvs/gOh3/yYUh1yceGZ1nnA6E
EqMN1Mbmd7hvoKEGRywBDdeD1LNfJzSO+mliEHdRnpGijg6altQvwZncSnNQGipX
ipU879QZ62F3MK1yhe0MRJx9jb+8j5BL0ivkjDPD4KqgV7l1sqo2r+Y591VYLXg8
ebFpiuStNsaN9MHfwqAFimUqDomQl2YPmfSkmlot8d5lkM1W9dA2V1aZLsYGdbSF
oW2xqllhr/pbZinq4gBn3Pr2uET2MMDW8Mupk/HYT+V8TA3t3I3ZsaBz9nGpiyN6
mrilxf9HbIHY08vDoQu8pq6vOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIjqnCs8
8jIuPm7U7rqFKsbiF7XkMB8GA1UdIwQYMBaAFLUpcGVVbSsik0k151IHIr1TM9pP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDdBNC8zQ0M3MTk5NjEx
ODcxMUVFQjM5RkUyNDNDNEY5QUUwMi90U2x3WlZWdEt5S1RTVFhuVWdjaXZWTXoy
azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RTbHdaVlZ0S3lLVFNUWG5VZ2NpdlZNejJrOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RDdBNC8zQ0M3MTk5NjExODcxMUVFQjM5RkUyNDNDNEY5QUUwMi90U2x3WlZWdEt5
S1RTVFhuVWdjaXZWTXoyazgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXQAVgE3rVYttfIabLXfftfcABTfDuOg7w1Y8SzxRATDLwc6Z5UlvPDDJgY8o
NEQlhjHWnen6OIKE9FUEGmtHg8Dn99wmpoZb1YDkAW0aQ8ETKgDZX/AV8iUmfMOQ
VqvWk25e55LCdVcf0UpzZ9Ap345rSvvdojhw/D0Ma+3stBddng0VgDxLFPJqZLv4
YqL62cH9t9Dgc/7ugzbyCHlyyxDAGuaOOfCaeGkntIF0dqSNPxErG+l4JSMMjqyA
j2iAU5nwwPKdWgn6M6mk3wD6V4jQG8j16Iq9yoifEp4ppMWSRWIqGPkhvQFxkD7y
gHb18vAj3vgCf80YiA61G9zXsQ==
-----END CERTIFICATE-----
Generated at Wed May 13 04:49:16 2026 by rpki-client