Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft
File:                     toWM6JkRXyxWHHZl74vgaIBoEJw.mft (raw, json)
Hash identifier:          L5bTHSQ6LRMXPSfTpOB6e3cuSNjgPcVyIIBXRGsgvX8=
Subject key identifier:   17:83:9A:7B:39:FC:E3:7A:94:2B:21:82:8C:A3:BA:BF:51:40:02:87
Authority key identifier: B6:85:8C:E8:99:11:5F:2C:56:1C:76:65:EF:8B:E0:68:80:68:10:9C
Certificate issuer:       /CN=A91D120D/serialNumber=B6858CE899115F2C561C7665EF8BE0688068109C
Certificate serial:       09EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft
Manifest number:          09C5
Signing time:             Tue 12 May 2026 19:58:47 +0000
Manifest this update:     Tue 12 May 2026 19:58:46 +0000
Manifest next update:     Tue 19 May 2026 19:58:46 +0000
Files and hashes:         1: toWM6JkRXyxWHHZl74vgaIBoEJw.crl (hash: qX1qefclFrJDvteK/QLoZ2P0K/cmLuQX9EC4tjF5fkA=)
                          2: 95DC9990D0A211EE9C97373FC4F9AE02.roa (hash: l2egmQd3zsdtRbINJVQmYS6+Vjf9g6ZTB8lsSZj6OnM=)
                          3: 9D83F4E6FB7711EDA78AAC1DC4F9AE02.roa (hash: 8s3OLywFU0iSe0asfoBu9okI5WeihCkAQz7KzNUA7Rc=)
                          4: 1A4ED0E8A71811EA80A77B1FC4F9AE02.roa (hash: oq37cvFdf0Lwnn48NX4zkotyv1ewB96NkLUyO7/90Dg=)
                          5: 9C454274FB7711EDA78AAC1DC4F9AE02.roa (hash: hhZNB/58biqDU/puvBuRkIn6cgsCh7V3z4s20oQo9/c=)
                          6: 8C79CFC6A6FD11EAA1B00744C4F9AE02.roa (hash: ZfiWnW2QWI/riqicAikvVoOAgBW+tB/Nt2Y+DVitm8Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.crl
                          rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:58:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2540 (0x9ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D120D, serialNumber=B6858CE899115F2C561C7665EF8BE0688068109C
        Validity
            Not Before: May 12 19:58:46 2026 GMT
            Not After : May 19 19:58:46 2026 GMT
        Subject: CN=6a038677-9d77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:22:fa:37:7a:b7:3f:1c:48:4b:07:cd:e4:6d:
                    e0:27:7f:28:42:70:61:43:9d:1b:54:a1:3f:5a:37:
                    7a:67:79:40:aa:da:e9:63:84:60:76:1a:1c:bb:96:
                    4c:c9:7e:61:a4:a8:d7:ab:8b:3b:16:29:7b:98:6e:
                    4f:da:92:5a:d6:58:f0:5f:17:2e:ea:f9:b1:ac:b6:
                    d2:d8:3b:29:6f:95:bd:e6:69:cc:18:27:cc:44:fe:
                    6c:44:67:fb:3e:b3:6b:64:9d:ad:2f:56:52:53:fb:
                    b0:14:9b:32:2e:cc:cc:2d:e8:f4:65:e1:0f:03:a0:
                    e2:0e:b6:28:2c:37:15:40:2d:46:b6:9a:bc:9c:a9:
                    d1:eb:9f:18:c6:9a:66:f9:e9:6e:17:a3:02:8c:97:
                    9d:2f:b2:c9:04:05:0d:45:b0:80:f4:e0:16:b5:69:
                    46:0e:86:3e:67:b3:3c:fb:17:a6:85:d7:25:27:94:
                    0c:8a:d6:20:84:a4:73:39:e4:f8:6b:e5:b2:74:ea:
                    33:b3:60:68:47:03:36:cf:cc:38:00:66:c0:a1:a8:
                    1b:96:52:c6:be:d6:43:f7:af:eb:78:7f:2e:38:51:
                    b4:d9:8b:99:ff:58:a9:78:d1:e9:cf:83:fd:59:65:
                    88:a7:6a:8e:f2:00:70:58:f4:84:b7:bb:a9:02:6f:
                    25:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:83:9A:7B:39:FC:E3:7A:94:2B:21:82:8C:A3:BA:BF:51:40:02:87
            X509v3 Authority Key Identifier:
                keyid:B6:85:8C:E8:99:11:5F:2C:56:1C:76:65:EF:8B:E0:68:80:68:10:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:43:eb:52:8e:08:6e:4d:58:50:9f:ec:22:c8:52:25:e8:29:
         db:21:4e:72:0e:a0:dc:30:ec:57:ce:8e:4f:38:68:58:53:12:
         89:5b:4c:24:a7:3c:24:35:45:7a:db:42:a6:9f:0c:e3:84:65:
         53:31:08:91:7c:82:ff:69:15:8d:26:a6:fd:ed:a4:0d:a9:20:
         af:77:3d:16:f5:2b:0c:12:0f:ac:01:05:d2:50:d3:f7:72:17:
         96:16:d9:4b:f3:0f:f1:66:c0:25:3a:ee:7b:ca:be:94:90:0f:
         61:83:92:8f:06:70:98:23:a3:06:07:48:5e:97:c4:30:69:40:
         0f:bc:5d:65:4c:9b:12:d8:bb:e6:04:08:12:14:80:a2:b5:9c:
         2c:03:e2:b3:44:3a:c6:09:96:42:e4:a2:31:0b:5d:6d:65:43:
         f6:37:6f:55:3a:e3:17:e7:f0:cf:2d:d2:dc:5e:9a:22:07:dc:
         bd:89:01:ea:2e:ec:57:0c:e4:16:cd:d5:72:de:a3:92:a9:9d:
         22:4c:9c:bf:22:ef:1a:e7:72:5b:fc:79:16:c5:1d:ad:a0:2a:
         68:63:78:e8:81:cf:7b:a7:43:10:bb:a3:5f:e3:49:d2:c4:d9:
         e7:77:ea:dc:62:f0:50:5e:f7:5f:53:24:7e:89:f6:8c:97:52:
         b7:8a:45:8c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDEyMEQxMTAvBgNVBAUTKEI2ODU4Q0U4OTkxMTVGMkM1NjFDNzY2NUVGOEJFMDY4
ODA2ODEwOUMwHhcNMjYwNTEyMTk1ODQ2WhcNMjYwNTE5MTk1ODQ2WjAYMRYwFAYD
VQQDEw02YTAzODY3Ny05ZDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2CL6N3q3PxxISwfN5G3gJ38oQnBhQ50bVKE/Wjd6Z3lAqtrpY4Rgdhocu5ZM
yX5hpKjXq4s7Fil7mG5P2pJa1ljwXxcu6vmxrLbS2Dspb5W95mnMGCfMRP5sRGf7
PrNrZJ2tL1ZSU/uwFJsyLszMLej0ZeEPA6DiDrYoLDcVQC1Gtpq8nKnR658Yxppm
+eluF6MCjJedL7LJBAUNRbCA9OAWtWlGDoY+Z7M8+xemhdclJ5QMitYghKRzOeT4
a+WydOozs2BoRwM2z8w4AGbAoagbllLGvtZD96/reH8uOFG02YuZ/1ipeNHpz4P9
WWWIp2qO8gBwWPSEt7upAm8lxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBeDmns5
/ON6lCshgoyjur9RQAKHMB8GA1UdIwQYMBaAFLaFjOiZEV8sVhx2Ze+L4GiAaBCc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTIwRC81MUU4MEU5OEE2
RTExMUVBODA0MjQxNkFDNEY5QUUwMi90b1dNNkprUlh5eFdISFpsNzR2Z2FJQm9F
SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RvV002SmtSWHl4V0hIWmw3NHZnYUlCb0VKdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MTIwRC81MUU4MEU5OEE2RTExMUVBODA0MjQxNkFDNEY5QUUwMi90b1dNNkprUlh5
eFdISFpsNzR2Z2FJQm9FSncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASkPrUo4Ibk1YUJ/sIshSJegp2yFOcg6g3DDsV86OTzhoWFMSiVtMJKc8JDVF
ettCpp8M44RlUzEIkXyC/2kVjSam/e2kDakgr3c9FvUrDBIPrAEF0lDT93IXlhbZ
S/MP8WbAJTrue8q+lJAPYYOSjwZwmCOjBgdIXpfEMGlAD7xdZUybEti75gQIEhSA
orWcLAPis0Q6xgmWQuSiMQtdbWVD9jdvVTrjF+fwzy3S3F6aIgfcvYkB6i7sVwzk
Fs3Vct6jkqmdIkycvyLvGudyW/x5FsUdraAqaGN46IHPe6dDELujX+NJ0sTZ53fq
3GLwUF73X1Mkfon2jJdSt4pFjA==
-----END CERTIFICATE-----
Generated at Wed May 13 15:48:48 2026 by rpki-client