Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft
File:                     SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft (raw, json)
Hash identifier:          I+hvWFNCwt/GaMAP7FyD4X+i/ufeJwdhvONKxuZ82tM=
Subject key identifier:   E4:AF:65:58:44:49:DB:3F:B9:DF:64:D9:29:FF:E8:46:87:F0:E4:F8
Authority key identifier: 4A:73:B1:6D:2E:E9:E9:CD:4C:3F:C0:BD:61:09:1C:48:90:53:D4:36
Certificate issuer:       /CN=A91CF364/serialNumber=4A73B16D2EE9E9CD4C3FC0BD61091C489053D436
Certificate serial:       09E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SnOxbS7p6c1MP8C9YQkcSJBT1DY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft
Manifest number:          09E0
Signing time:             Tue 12 May 2026 19:55:19 +0000
Manifest this update:     Tue 12 May 2026 19:55:19 +0000
Manifest next update:     Tue 19 May 2026 19:55:19 +0000
Files and hashes:         1: SnOxbS7p6c1MP8C9YQkcSJBT1DY.crl (hash: g4d2gPt5whvJAnVdaOhNrrX+mwEXPSS2WqWMG75oXWo=)
                          2: 1DEAACDA9F8511EABAA10F3BC4F9AE02.roa (hash: XourWZvjWeRYuoG4eJzATWITu2fMjkfcMaCSGMduRx8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.crl
                          rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SnOxbS7p6c1MP8C9YQkcSJBT1DY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:55:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2537 (0x9e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF364, serialNumber=4A73B16D2EE9E9CD4C3FC0BD61091C489053D436
        Validity
            Not Before: May 12 19:55:19 2026 GMT
            Not After : May 19 19:55:19 2026 GMT
        Subject: CN=6a0385a7-6077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:70:4e:f2:51:f2:6a:e2:dd:2a:db:33:d5:5d:
                    70:6a:6f:c7:03:f5:03:49:e7:47:89:ef:dc:61:45:
                    45:f4:b8:27:40:ff:ba:15:10:d8:b5:2a:5a:0b:29:
                    be:02:ab:64:a8:25:e2:af:1b:5c:d9:d4:b0:4c:1a:
                    3f:c7:ac:ff:89:5a:32:54:42:b8:42:e1:2f:18:88:
                    62:a5:e5:6e:c4:be:1b:1f:67:38:6f:16:6a:17:66:
                    b7:5f:71:17:4b:be:48:ba:be:b4:f6:dd:70:b0:39:
                    41:15:ef:7d:51:07:a5:6d:a7:f9:3f:55:a7:24:9b:
                    4e:69:a2:8e:5e:74:48:a5:0c:dd:1d:de:57:8e:be:
                    ce:3c:6c:0b:26:e8:2b:00:bb:a1:f9:a6:08:43:b8:
                    d1:d2:c5:b8:71:0b:ab:1c:35:a7:e9:9b:b2:f4:3c:
                    aa:1d:c0:58:ca:ac:df:30:06:0a:b0:5f:8f:1c:9e:
                    8e:d4:69:5d:8e:0a:1a:a6:76:0f:a7:0f:dc:0f:9a:
                    29:71:f0:14:ba:9b:ad:c3:11:ae:15:a2:a0:63:bd:
                    df:f4:25:5a:b9:bd:43:06:44:8d:38:80:dd:71:85:
                    fc:04:ea:8c:e8:6a:18:37:bb:36:4c:90:a0:c5:08:
                    e0:94:da:58:7c:c4:b9:4c:7c:2a:1c:bb:51:82:a0:
                    f4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:AF:65:58:44:49:DB:3F:B9:DF:64:D9:29:FF:E8:46:87:F0:E4:F8
            X509v3 Authority Key Identifier:
                keyid:4A:73:B1:6D:2E:E9:E9:CD:4C:3F:C0:BD:61:09:1C:48:90:53:D4:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SnOxbS7p6c1MP8C9YQkcSJBT1DY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:6d:27:24:7e:6c:3c:dd:c4:5b:83:46:28:9b:f4:29:6d:6a:
         c7:75:5b:f3:2b:c3:bd:92:49:e6:b3:9d:8e:1e:13:cb:3e:d7:
         cc:1f:df:43:37:8d:73:20:47:92:a9:17:ca:33:e9:e0:6b:5d:
         09:64:5c:eb:d7:c0:1e:a9:b7:59:ca:1f:b1:02:43:93:bd:48:
         a6:2e:3d:92:b0:20:76:75:0f:4e:30:0d:0a:f4:ce:45:e5:b8:
         31:7b:92:28:b6:e3:89:e5:de:2f:5f:f9:3c:a1:ad:f7:b7:a3:
         5a:e6:da:3a:c2:37:3f:c6:5a:aa:7c:9f:0d:a7:0c:2b:54:43:
         30:97:04:51:16:1a:5d:64:8a:45:0c:aa:f0:05:0c:84:26:36:
         fb:e9:2a:0c:35:72:24:d9:eb:c3:89:ad:a9:bc:7b:24:c6:a2:
         47:c3:91:59:89:23:95:a3:68:91:77:cb:4d:39:a5:6e:c9:2d:
         e4:9d:86:2c:84:a2:c2:94:b7:d6:3f:68:db:40:19:a1:5d:02:
         2c:04:c2:10:2c:88:ad:4a:0b:d7:25:87:a4:80:f5:d7:e0:b8:
         13:b8:49:ca:13:4d:33:d0:50:01:81:4b:77:4f:3e:0a:f9:85:
         d6:62:5c:7f:81:f2:1e:2b:a0:95:00:0a:1f:08:5e:80:1e:47:
         f7:49:28:de
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0YzNjQxMTAvBgNVBAUTKDRBNzNCMTZEMkVFOUU5Q0Q0QzNGQzBCRDYxMDkxQzQ4
OTA1M0Q0MzYwHhcNMjYwNTEyMTk1NTE5WhcNMjYwNTE5MTk1NTE5WjAYMRYwFAYD
VQQDEw02YTAzODVhNy02MDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkHBO8lHyauLdKtsz1V1wam/HA/UDSedHie/cYUVF9LgnQP+6FRDYtSpaCym+
AqtkqCXirxtc2dSwTBo/x6z/iVoyVEK4QuEvGIhipeVuxL4bH2c4bxZqF2a3X3EX
S75Iur609t1wsDlBFe99UQelbaf5P1WnJJtOaaKOXnRIpQzdHd5Xjr7OPGwLJugr
ALuh+aYIQ7jR0sW4cQurHDWn6Zuy9DyqHcBYyqzfMAYKsF+PHJ6O1GldjgoapnYP
pw/cD5opcfAUuputwxGuFaKgY73f9CVaub1DBkSNOIDdcYX8BOqM6GoYN7s2TJCg
xQjglNpYfMS5THwqHLtRgqD0HQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOSvZVhE
Sds/ud9k2Sn/6EaH8OT4MB8GA1UdIwQYMBaAFEpzsW0u6enNTD/AvWEJHEiQU9Q2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjM2NC83MTZBNTlBQzlG
ODMxMUVBOTMxNDkxMzVDNEY5QUUwMi9Tbk94YlM3cDZjMU1QOEM5WVFrY1NKQlQx
RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NuT3hiUzdwNmMxTVA4QzlZUWtjU0pCVDFEWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RjM2NC83MTZBNTlBQzlGODMxMUVBOTMxNDkxMzVDNEY5QUUwMi9Tbk94YlM3cDZj
MU1QOEM5WVFrY1NKQlQxRFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHW0nJH5sPN3EW4NGKJv0KW1qx3Vb8yvDvZJJ5rOdjh4Tyz7XzB/fQzeNcyBH
kqkXyjPp4GtdCWRc69fAHqm3WcofsQJDk71Ipi49krAgdnUPTjANCvTOReW4MXuS
KLbjieXeL1/5PKGt97ejWubaOsI3P8ZaqnyfDacMK1RDMJcEURYaXWSKRQyq8AUM
hCY2++kqDDVyJNnrw4mtqbx7JMaiR8ORWYkjlaNokXfLTTmlbskt5J2GLISiwpS3
1j9o20AZoV0CLATCECyIrUoL1yWHpID11+C4E7hJyhNNM9BQAYFLd08+CvmF1mJc
f4HyHiuglQAKHwhegB5H90ko3g==
-----END CERTIFICATE-----
Generated at Wed May 13 08:12:28 2026 by rpki-client