Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft
File:                     E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft (raw, json)
Hash identifier:          BcsRjMPkBMxMEuO1UbM6OYlE8koPyIN6HwzkhZlm70Q=
Subject key identifier:   3F:47:CD:60:64:60:7B:65:70:06:2C:F8:86:1C:78:6A:35:A6:39:4C
Authority key identifier: 13:67:41:BD:9E:87:0F:06:EC:E5:CB:35:5B:8C:75:71:CC:96:BA:74
Certificate issuer:       /CN=A91CE9D6/serialNumber=136741BD9E870F06ECE5CB355B8C7571CC96BA74
Certificate serial:       0AC5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft
Manifest number:          0AA7
Signing time:             Tue 12 May 2026 19:34:21 +0000
Manifest this update:     Tue 12 May 2026 19:34:20 +0000
Manifest next update:     Tue 19 May 2026 19:34:20 +0000
Files and hashes:         1: E2dBvZ6HDwbs5cs1W4x1ccyWunQ.crl (hash: gAX36vL1K1UZ9+Ybb5kNxpdxEAc5NF+4XFGMIFzXYDI=)
                          2: 02BA60CCDADF11F08398647877D3641D.roa (hash: 1tpNHg5V2m7AJT6KzHxfBy6gB5PqDPo6eAkyeJw5XNY=)
                          3: 0166B48CDADF11F08398647877D3641D.roa (hash: ZJV2dmhu0JE10nRhjUYBdcTdypFTIKq4KfcDe8/doJQ=)
                          4: 722D43AC7A5A11EABD77E486C4F9AE02.roa (hash: 4cAcI5ocqsy1hZe8HsYZTbIwmQxRPKHWv8/zl5w8ZJQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.crl
                          rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:34:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2757 (0xac5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE9D6, serialNumber=136741BD9E870F06ECE5CB355B8C7571CC96BA74
        Validity
            Not Before: May 12 19:34:20 2026 GMT
            Not After : May 19 19:34:20 2026 GMT
        Subject: CN=6a0380bc-e093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ba:56:ba:37:64:44:fe:bc:1f:b4:19:d9:08:
                    f0:6c:4e:1a:04:23:c1:ba:09:98:8e:06:26:b4:44:
                    86:28:88:1b:7c:c7:e6:c4:c3:93:02:3b:17:a4:40:
                    9f:67:4e:2a:2b:11:30:9e:aa:50:52:9f:76:d8:9c:
                    4d:2e:2a:72:d2:0f:c1:ab:dc:1e:8b:3f:9f:cc:36:
                    e0:f8:bb:f0:ac:cd:9b:f5:9d:2d:2f:67:37:c7:38:
                    c4:f5:32:32:ea:58:13:bb:1e:72:bc:86:ca:57:b3:
                    67:90:41:7f:4c:cb:c3:00:21:7f:d4:aa:9c:92:62:
                    b9:65:82:c9:a6:9a:50:3f:8d:b8:87:d8:4d:66:25:
                    35:ea:d4:71:07:2e:9e:ee:ec:13:5d:d3:98:5a:db:
                    ba:33:15:32:0d:39:b9:38:7a:30:9d:3b:f5:28:b3:
                    08:f9:91:4e:8d:23:3f:b8:62:c6:c7:b5:51:60:a5:
                    75:c7:bf:a6:df:cf:1b:fc:7e:ac:e6:df:57:d1:1c:
                    84:ca:c9:90:1b:a7:92:f9:2f:91:75:f4:19:cc:b7:
                    e7:0e:72:e0:34:df:06:c8:98:7f:77:1c:1c:26:b7:
                    c4:f7:5b:96:9d:16:73:6f:4b:5c:b5:cd:d3:d5:b2:
                    09:18:24:7d:4d:74:14:ac:a7:e4:04:ec:a3:c7:04:
                    7b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:47:CD:60:64:60:7B:65:70:06:2C:F8:86:1C:78:6A:35:A6:39:4C
            X509v3 Authority Key Identifier:
                keyid:13:67:41:BD:9E:87:0F:06:EC:E5:CB:35:5B:8C:75:71:CC:96:BA:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:3f:5d:5a:f1:99:ba:e2:8a:04:67:ac:86:cf:bd:8f:c3:ea:
         7e:56:b6:d4:74:cc:a5:88:bd:31:1f:cf:db:76:32:82:ef:90:
         5e:8e:18:8c:6d:a0:e4:ee:6e:fa:dd:75:e5:c7:46:ce:e5:bf:
         c3:b1:18:01:1e:5d:b3:de:33:9d:54:4b:e2:88:a1:7a:e5:4a:
         2f:c4:36:8b:13:00:bf:59:68:e2:1c:81:dc:e1:58:07:47:b8:
         b5:1a:61:78:be:80:ee:0c:a7:16:32:33:69:84:66:a2:ef:3d:
         17:40:4c:98:69:79:80:bd:fb:32:d1:d7:5c:92:fb:dc:10:45:
         87:ef:e6:47:2d:89:c8:2d:80:4d:95:d9:48:ae:fe:27:3c:0f:
         58:25:87:3f:de:6f:e6:82:2e:56:8c:0a:8f:8c:fe:d1:0d:23:
         41:a6:96:46:f2:99:b5:c9:52:75:0d:d6:92:eb:e3:6f:80:ba:
         6a:12:76:3d:16:5e:e2:8d:3c:f2:18:cf:ed:e5:dd:96:75:3b:
         55:0e:10:d3:49:4a:50:31:c6:0c:67:50:33:eb:7b:8b:52:6d:
         5a:9a:5d:c2:75:26:a2:4b:80:64:58:23:dc:1d:fd:78:a2:bb:
         87:47:33:51:b9:a4:7a:76:82:48:3f:66:7b:5e:9d:13:5b:05:
         07:9d:78:07
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0U5RDYxMTAvBgNVBAUTKDEzNjc0MUJEOUU4NzBGMDZFQ0U1Q0IzNTVCOEM3NTcx
Q0M5NkJBNzQwHhcNMjYwNTEyMTkzNDIwWhcNMjYwNTE5MTkzNDIwWjAYMRYwFAYD
VQQDEw02YTAzODBiYy1lMDkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt7pWujdkRP68H7QZ2QjwbE4aBCPBugmYjgYmtESGKIgbfMfmxMOTAjsXpECf
Z04qKxEwnqpQUp922JxNLipy0g/Bq9weiz+fzDbg+LvwrM2b9Z0tL2c3xzjE9TIy
6lgTux5yvIbKV7NnkEF/TMvDACF/1KqckmK5ZYLJpppQP424h9hNZiU16tRxBy6e
7uwTXdOYWtu6MxUyDTm5OHownTv1KLMI+ZFOjSM/uGLGx7VRYKV1x7+m388b/H6s
5t9X0RyEysmQG6eS+S+RdfQZzLfnDnLgNN8GyJh/dxwcJrfE91uWnRZzb0tctc3T
1bIJGCR9TXQUrKfkBOyjxwR7YwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD9HzWBk
YHtlcAYs+IYceGo1pjlMMB8GA1UdIwQYMBaAFBNnQb2ehw8G7OXLNVuMdXHMlrp0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTlENi85RTY2RjUxMjdB
NTUxMUVBQkZCRTk0N0FDNEY5QUUwMi9FMmRCdlo2SER3YnM1Y3MxVzR4MWNjeVd1
blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0UyZEJ2WjZIRHdiczVjczFXNHgxY2N5V3VuUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RTlENi85RTY2RjUxMjdBNTUxMUVBQkZCRTk0N0FDNEY5QUUwMi9FMmRCdlo2SER3
YnM1Y3MxVzR4MWNjeVd1blEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQT9dWvGZuuKKBGeshs+9j8Pqfla21HTMpYi9MR/P23Yygu+QXo4YjG2g5O5u
+t115cdGzuW/w7EYAR5ds94znVRL4oiheuVKL8Q2ixMAv1lo4hyB3OFYB0e4tRph
eL6A7gynFjIzaYRmou89F0BMmGl5gL37MtHXXJL73BBFh+/mRy2JyC2ATZXZSK7+
JzwPWCWHP95v5oIuVowKj4z+0Q0jQaaWRvKZtclSdQ3Wkuvjb4C6ahJ2PRZe4o08
8hjP7eXdlnU7VQ4Q00lKUDHGDGdQM+t7i1JtWppdwnUmokuAZFgj3B39eKK7h0cz
UbmkenaCSD9me16dE1sFB514Bw==
-----END CERTIFICATE-----
Generated at Wed May 13 04:07:59 2026 by rpki-client