Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft
File:                     fvLsMxvWVD0y25gMUGJsBAfKiYI.mft (raw, json)
Hash identifier:          2cuPnhbQWOSt4JI5Y+o03C9tyHsOaDkZaWl8MjRc39A=
Subject key identifier:   84:04:E5:EF:1D:EF:85:72:49:E8:DC:FA:BA:A0:0A:1A:28:2F:C3:BB
Authority key identifier: 7E:F2:EC:33:1B:D6:54:3D:32:DB:98:0C:50:62:6C:04:07:CA:89:82
Certificate issuer:       /CN=A91D5E23/serialNumber=7EF2EC331BD6543D32DB980C50626C0407CA8982
Certificate serial:       0994
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvLsMxvWVD0y25gMUGJsBAfKiYI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft
Manifest number:          098B
Signing time:             Tue 12 May 2026 20:04:47 +0000
Manifest this update:     Tue 12 May 2026 20:04:46 +0000
Manifest next update:     Tue 19 May 2026 20:04:46 +0000
Files and hashes:         1: fvLsMxvWVD0y25gMUGJsBAfKiYI.crl (hash: eL/A5yjMfZrtv2CMjWx+O6vkbDFjaoI9TVnyk0bSk5A=)
                          2: 70C35E88B07511EA8C0EC372C4F9AE02.roa (hash: nEw1J5nI/jYM2/PDdrlSv5FQkDbuSGPVtzOk8gJbumo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.crl
                          rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvLsMxvWVD0y25gMUGJsBAfKiYI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:57:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2452 (0x994)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5E23, serialNumber=7EF2EC331BD6543D32DB980C50626C0407CA8982
        Validity
            Not Before: May 12 20:04:46 2026 GMT
            Not After : May 19 20:04:46 2026 GMT
        Subject: CN=6a0387df-d690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:74:57:b0:64:1b:a8:72:28:42:99:bb:7b:24:
                    24:70:ac:6b:2f:38:82:ca:5b:c4:33:5c:16:f2:21:
                    f9:af:12:2c:b8:d4:c5:29:7c:eb:e6:f1:fe:ee:64:
                    fd:42:08:99:97:e8:82:a8:f2:a1:74:5f:e3:ab:78:
                    3b:6c:62:2b:7a:a8:db:8b:54:9b:7d:23:ec:da:c3:
                    7d:a1:57:3a:a2:92:37:25:0d:4d:c7:0f:39:0f:e9:
                    ed:c4:24:5f:bc:c0:24:c8:c1:0d:59:82:87:22:ac:
                    ae:8e:04:95:c4:7a:49:d2:8c:d2:cf:ef:5f:da:3a:
                    65:8b:fc:fd:2f:2f:19:2b:e2:cc:0a:d7:0e:58:8e:
                    49:d5:e3:b7:29:8d:3f:4b:e3:53:dc:59:6b:db:b9:
                    25:fd:18:c4:61:a6:2c:bc:02:6b:ca:f9:ac:bb:d8:
                    e3:ad:81:6e:df:a6:ae:b5:bf:25:60:2a:36:3c:c1:
                    28:13:27:eb:d0:2e:87:e9:ac:79:d5:7d:fa:83:3a:
                    63:7a:fb:39:0c:c1:2e:8e:ea:ec:d5:ba:01:00:55:
                    79:39:dd:6e:bd:70:b0:5f:91:ac:1c:f3:15:35:49:
                    96:8f:14:5b:9b:e0:08:50:9b:92:82:5e:b9:47:3a:
                    52:e5:af:3b:ab:cb:53:e0:ca:86:b7:4f:85:5d:49:
                    58:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:04:E5:EF:1D:EF:85:72:49:E8:DC:FA:BA:A0:0A:1A:28:2F:C3:BB
            X509v3 Authority Key Identifier:
                keyid:7E:F2:EC:33:1B:D6:54:3D:32:DB:98:0C:50:62:6C:04:07:CA:89:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvLsMxvWVD0y25gMUGJsBAfKiYI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:eb:2f:e8:14:36:0b:b5:87:16:79:f1:f4:71:26:aa:2c:54:
         b4:16:c8:a4:7b:30:3b:89:9e:f7:54:70:37:87:a8:b8:dd:0d:
         a9:79:df:d9:61:4d:35:ae:07:f4:67:7c:97:a9:40:bc:f9:c9:
         89:ef:28:cd:88:6e:9d:34:4c:7e:1f:b9:72:4b:40:31:46:ba:
         7c:f9:be:fb:ee:8e:e3:35:53:13:18:cc:bc:c2:65:2d:ae:3b:
         7d:69:9f:70:c9:be:5a:29:3f:95:dd:69:68:35:1d:78:64:f7:
         a5:8b:ed:ca:64:d8:aa:31:1f:e9:6a:87:78:48:f9:89:16:2d:
         39:03:7b:b6:b7:64:b0:72:06:55:3e:b8:74:99:d2:3a:0c:9b:
         e5:83:a7:68:d8:a1:6b:45:e6:b7:03:c8:4b:38:01:fa:68:1a:
         96:cc:28:9e:53:8e:a7:35:3f:1f:a2:f2:32:63:d3:b1:f9:3c:
         1e:c9:bc:9d:9e:76:39:0a:54:ca:24:1e:e4:80:c4:af:da:ca:
         76:ca:fe:29:5b:92:ac:a0:99:2f:61:4b:e9:4d:c5:97:75:4e:
         61:69:7c:73:3f:0e:eb:55:fa:fc:3d:73:b9:53:81:40:f5:5a:
         81:ec:e4:d5:f6:d9:6a:b8:2c:39:25:9a:1b:52:27:af:d9:b6:
         00:d5:fe:fe
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDVFMjMxMTAvBgNVBAUTKDdFRjJFQzMzMUJENjU0M0QzMkRCOTgwQzUwNjI2QzA0
MDdDQTg5ODIwHhcNMjYwNTEyMjAwNDQ2WhcNMjYwNTE5MjAwNDQ2WjAYMRYwFAYD
VQQDEw02YTAzODdkZi1kNjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmXRXsGQbqHIoQpm7eyQkcKxrLziCylvEM1wW8iH5rxIsuNTFKXzr5vH+7mT9
QgiZl+iCqPKhdF/jq3g7bGIreqjbi1SbfSPs2sN9oVc6opI3JQ1Nxw85D+ntxCRf
vMAkyMENWYKHIqyujgSVxHpJ0ozSz+9f2jpli/z9Ly8ZK+LMCtcOWI5J1eO3KY0/
S+NT3Flr27kl/RjEYaYsvAJryvmsu9jjrYFu36autb8lYCo2PMEoEyfr0C6H6ax5
1X36gzpjevs5DMEujurs1boBAFV5Od1uvXCwX5GsHPMVNUmWjxRbm+AIUJuSgl65
RzpS5a87q8tT4MqGt0+FXUlYzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIQE5e8d
74VySejc+rqgChooL8O7MB8GA1UdIwQYMBaAFH7y7DMb1lQ9MtuYDFBibAQHyomC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUUyMy84NjJBODNDQUIw
NzMxMUVBOTBFQzk5NkVDNEY5QUUwMi9mdkxzTXh2V1ZEMHkyNWdNVUdKc0JBZktp
WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Z2THNNeHZXVkQweTI1Z01VR0pzQkFmS2lZSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NUUyMy84NjJBODNDQUIwNzMxMUVBOTBFQzk5NkVDNEY5QUUwMi9mdkxzTXh2V1ZE
MHkyNWdNVUdKc0JBZktpWUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeOsv6BQ2C7WHFnnx9HEmqixUtBbIpHswO4me91RwN4eouN0NqXnf2WFNNa4H
9Gd8l6lAvPnJie8ozYhunTRMfh+5cktAMUa6fPm+++6O4zVTExjMvMJlLa47fWmf
cMm+Wik/ld1paDUdeGT3pYvtymTYqjEf6WqHeEj5iRYtOQN7trdksHIGVT64dJnS
Ogyb5YOnaNiha0XmtwPISzgB+mgalswonlOOpzU/H6LyMmPTsfk8Hsm8nZ52OQpU
yiQe5IDEr9rKdsr+KVuSrKCZL2FL6U3Fl3VOYWl8cz8O61X6/D1zuVOBQPVagezk
1fbZargsOSWaG1Inr9m2ANX+/g==
-----END CERTIFICATE-----
Generated at Wed May 13 01:03:17 2026 by rpki-client