Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft
File:                     Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft (raw, json)
Hash identifier:          2w+Z7EGfzto3LMmWJf9qzJ6SrqNm1IJ497GY9XtQAPw=
Subject key identifier:   53:EC:E9:0C:B5:38:F4:FA:F2:A9:75:65:E2:18:0C:52:4C:36:1B:2C
Authority key identifier: 02:9F:82:12:43:0A:8D:D7:E7:95:4F:EC:31:3F:15:DA:47:CB:44:DD
Certificate issuer:       /CN=A91D2FC0/serialNumber=029F8212430A8DD7E7954FEC313F15DA47CB44DD
Certificate serial:       0BB9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft
Manifest number:          0BA9
Signing time:             Tue 12 May 2026 19:07:37 +0000
Manifest this update:     Tue 12 May 2026 19:07:37 +0000
Manifest next update:     Tue 19 May 2026 19:07:37 +0000
Files and hashes:         1: Ap-CEkMKjdfnlU_sMT8V2kfLRN0.crl (hash: 3s/5zOPCmvFawVGeZ58irgYqwTejiL4exPUdNPTUFwU=)
                          2: 81D0374C475111EA82F8B821C4F9AE02.roa (hash: TOj5s+aNQC9Z5ZqVlC2yt7q1plWezfus1BZx0sUNSs8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.crl
                          rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:07:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3001 (0xbb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2FC0, serialNumber=029F8212430A8DD7E7954FEC313F15DA47CB44DD
        Validity
            Not Before: May 12 19:07:37 2026 GMT
            Not After : May 19 19:07:37 2026 GMT
        Subject: CN=6a037a79-b70c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:bb:38:dd:0c:53:90:e7:24:28:9e:13:1c:c0:
                    ac:ce:89:e2:9c:15:f3:87:69:14:ed:9b:f3:ba:e9:
                    b9:ff:07:99:71:86:e1:e4:46:b6:dc:c8:d3:02:04:
                    29:48:73:2b:93:47:53:6a:6d:21:59:db:9d:23:bf:
                    54:bb:8d:9c:c0:e7:72:7e:26:a3:23:40:ef:db:83:
                    e1:5b:1f:69:78:5b:a0:75:39:46:af:f4:55:a3:fd:
                    bc:bc:88:ce:4f:c9:26:ed:69:0c:64:93:1c:e4:c8:
                    95:02:43:ef:e6:7c:2a:fc:ca:c8:6c:97:50:71:1b:
                    1c:f8:f9:cd:a2:c9:0c:cc:2f:8d:9e:90:3e:90:8e:
                    1d:cf:4c:cd:f7:ad:a5:4a:ff:d2:38:2a:0a:c5:24:
                    47:0c:aa:51:05:f6:cd:22:bf:57:e4:61:bb:11:66:
                    00:58:ee:71:3d:b9:e7:ab:c1:e0:d9:8b:95:a5:e8:
                    96:96:f7:af:df:73:46:a5:b1:c1:50:9d:44:3a:36:
                    0c:d1:41:0c:a3:8a:62:92:b0:97:6f:f2:16:cd:3f:
                    f6:69:c7:b9:23:2d:50:8a:1c:8c:06:23:73:3b:a2:
                    23:c8:f5:53:73:31:b4:df:8e:0c:46:7a:59:4c:68:
                    d3:67:61:2c:e1:95:ae:7f:a8:e1:ba:99:7f:f1:e7:
                    3a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:EC:E9:0C:B5:38:F4:FA:F2:A9:75:65:E2:18:0C:52:4C:36:1B:2C
            X509v3 Authority Key Identifier:
                keyid:02:9F:82:12:43:0A:8D:D7:E7:95:4F:EC:31:3F:15:DA:47:CB:44:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:f6:5a:5b:2c:c8:da:d4:80:00:ab:2b:fb:fb:34:5c:8d:26:
         81:2b:38:27:b7:cb:7a:51:43:99:ae:cb:c7:7c:3d:d7:29:07:
         fd:e2:30:c7:a4:db:12:22:d0:6d:c9:b1:22:73:e2:f2:dd:85:
         21:39:68:33:67:fc:dc:b8:ac:6e:3b:ab:ef:e2:c5:57:2a:e2:
         20:a1:44:82:0f:9e:10:5b:0d:bc:b0:e4:8f:10:1f:21:83:ef:
         01:6c:dc:cc:1e:af:f0:99:4b:16:3e:df:f0:7b:ce:3e:b0:83:
         7a:c0:7d:b7:d2:42:23:4e:4c:b6:97:af:c9:6c:13:b9:c5:25:
         66:b5:03:94:11:f1:70:a3:ac:6f:7e:a6:5c:e2:95:d7:24:44:
         13:11:af:3c:fb:d3:dc:73:39:b9:c4:35:87:00:5b:36:21:f8:
         bd:0b:53:55:50:eb:13:93:77:43:93:37:fc:cb:d7:33:3e:53:
         03:6e:1a:79:a7:69:d4:52:84:dd:13:cd:89:6e:2f:ec:b8:af:
         e4:7f:80:af:f8:34:b1:a1:02:82:b4:47:a1:ec:a8:0e:8a:07:
         9a:0b:86:79:bc:7e:fd:30:d7:cd:c0:25:42:b5:7c:a1:3c:ba:
         fe:76:dd:e6:5d:6b:ac:45:18:51:b2:bf:24:91:87:70:44:97:
         e5:52:3d:55
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC7kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDJGQzAxMTAvBgNVBAUTKDAyOUY4MjEyNDMwQThERDdFNzk1NEZFQzMxM0YxNURB
NDdDQjQ0REQwHhcNMjYwNTEyMTkwNzM3WhcNMjYwNTE5MTkwNzM3WjAYMRYwFAYD
VQQDEw02YTAzN2E3OS1iNzBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5rs43QxTkOckKJ4THMCszoninBXzh2kU7Zvzuum5/weZcYbh5Ea23MjTAgQp
SHMrk0dTam0hWdudI79Uu42cwOdyfiajI0Dv24PhWx9peFugdTlGr/RVo/28vIjO
T8km7WkMZJMc5MiVAkPv5nwq/MrIbJdQcRsc+PnNoskMzC+NnpA+kI4dz0zN962l
Sv/SOCoKxSRHDKpRBfbNIr9X5GG7EWYAWO5xPbnnq8Hg2YuVpeiWlvev33NGpbHB
UJ1EOjYM0UEMo4pikrCXb/IWzT/2ace5Iy1QihyMBiNzO6IjyPVTczG0344MRnpZ
TGjTZ2Es4ZWuf6jhupl/8ec6TwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFPs6Qy1
OPT68ql1ZeIYDFJMNhssMB8GA1UdIwQYMBaAFAKfghJDCo3X55VP7DE/FdpHy0Td
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkZDMC8yQTgxNUEwODQ3
NTAxMUVBOENEOTc2MUZDNEY5QUUwMi9BcC1DRWtNS2pkZm5sVV9zTVQ4VjJrZkxS
TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FwLUNFa01LamRmbmxVX3NNVDhWMmtmTFJOMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MkZDMC8yQTgxNUEwODQ3NTAxMUVBOENEOTc2MUZDNEY5QUUwMi9BcC1DRWtNS2pk
Zm5sVV9zTVQ4VjJrZkxSTjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdvZaWyzI2tSAAKsr+/s0XI0mgSs4J7fLelFDma7Lx3w91ykH/eIwx6TbEiLQ
bcmxInPi8t2FITloM2f83Lisbjur7+LFVyriIKFEgg+eEFsNvLDkjxAfIYPvAWzc
zB6v8JlLFj7f8HvOPrCDesB9t9JCI05MtpevyWwTucUlZrUDlBHxcKOsb36mXOKV
1yREExGvPPvT3HM5ucQ1hwBbNiH4vQtTVVDrE5N3Q5M3/MvXMz5TA24aeadp1FKE
3RPNiW4v7Liv5H+Ar/g0saECgrRHoeyoDooHmguGebx+/TDXzcAlQrV8oTy6/nbd
5l1rrEUYUbK/JJGHcESX5VI9VQ==
-----END CERTIFICATE-----
Generated at Wed May 13 00:19:57 2026 by rpki-client