Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft
File:                     kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft (raw, json)
Hash identifier:          09frMqetn7fAkk1AM8FScd0lO2TrOv8CoZ+UKZk2lvA=
Subject key identifier:   03:E4:BF:FB:92:B4:B8:50:B1:F4:9E:8D:37:97:5E:8B:6B:16:47:81
Authority key identifier: 93:3E:F7:26:06:D9:D5:B2:9F:E3:A4:1F:20:C5:2B:20:CA:F5:55:BA
Certificate issuer:       /CN=A91D6503/serialNumber=933EF72606D9D5B29FE3A41F20C52B20CAF555BA
Certificate serial:       0899
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kz73JgbZ1bKf46QfIMUrIMr1Vbo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft
Manifest number:          0890
Signing time:             Tue 12 May 2026 20:38:21 +0000
Manifest this update:     Tue 12 May 2026 20:38:20 +0000
Manifest next update:     Tue 19 May 2026 20:38:20 +0000
Files and hashes:         1: kz73JgbZ1bKf46QfIMUrIMr1Vbo.crl (hash: ZZyZ8t8IkIgAs1VobPu324IYoE+WleCpXWYi9RB6m5s=)
                          2: 3CC77D02EE8811EA9225690DC4F9AE02.roa (hash: Zu7ovE1EUW36D/gzrtGv9a6ZOHHzmdXPGruHnQFEs4E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.crl
                          rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kz73JgbZ1bKf46QfIMUrIMr1Vbo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:38:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2201 (0x899)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6503, serialNumber=933EF72606D9D5B29FE3A41F20C52B20CAF555BA
        Validity
            Not Before: May 12 20:38:20 2026 GMT
            Not After : May 19 20:38:20 2026 GMT
        Subject: CN=6a038fbd-9df2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:87:8c:50:a1:2f:11:0e:7a:45:63:e0:9c:24:
                    83:e9:91:fa:a3:72:af:f0:18:fa:86:0a:26:5d:9d:
                    30:c5:0a:ed:e9:c7:ec:8c:b3:16:b9:fa:52:82:c9:
                    e5:85:13:ba:ba:e0:cc:14:13:27:7e:9e:9b:ca:2b:
                    c7:ee:d9:f1:22:8e:2b:e6:df:b0:3c:5a:08:ab:de:
                    4a:38:6e:16:0a:24:bc:fb:c7:d9:76:57:d6:96:74:
                    82:47:32:67:f8:6e:18:ab:71:6f:d6:c2:93:e6:96:
                    e3:1b:f6:e7:ff:84:cc:32:6b:b0:41:17:15:09:b9:
                    88:3d:d7:91:7c:34:d4:4e:9c:1b:64:62:c2:dd:44:
                    7e:a3:ec:b1:5d:ec:c4:7d:c4:e0:f9:1f:c9:c6:37:
                    6a:8a:31:d3:2b:13:49:bb:de:45:59:da:3c:d2:72:
                    19:4a:bb:0d:6f:ab:ed:7c:62:59:5d:2a:2f:56:12:
                    d9:be:e2:b2:1b:41:6a:02:53:be:82:bf:0d:50:91:
                    23:ec:f7:66:d1:35:01:65:48:93:50:38:68:40:8e:
                    32:c9:27:02:e8:0c:a5:b6:16:e6:c4:26:36:a8:a0:
                    c0:96:34:c9:63:36:02:bc:15:2a:0e:eb:2d:b6:83:
                    8c:eb:b5:ec:0f:1f:ab:b3:87:4b:26:8e:57:63:df:
                    de:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E4:BF:FB:92:B4:B8:50:B1:F4:9E:8D:37:97:5E:8B:6B:16:47:81
            X509v3 Authority Key Identifier:
                keyid:93:3E:F7:26:06:D9:D5:B2:9F:E3:A4:1F:20:C5:2B:20:CA:F5:55:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kz73JgbZ1bKf46QfIMUrIMr1Vbo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:db:27:11:35:4e:f6:c0:03:6d:e8:b0:b3:94:af:0b:98:a9:
         cb:28:ba:cc:86:fc:66:71:57:1b:4a:a2:bf:4c:56:ba:69:33:
         de:3c:1b:2d:93:5a:ca:1c:c8:cf:9f:b0:cf:20:49:5f:b1:e0:
         29:46:09:20:cd:d7:97:21:48:5f:98:b0:cb:0a:e7:3d:c3:f5:
         df:a5:60:f8:ed:c2:ad:8e:14:01:05:10:f5:22:a4:b8:1b:55:
         a9:64:d7:d4:f4:95:65:54:0f:60:d9:2d:0b:e9:d3:88:d6:d0:
         d2:e7:93:6b:57:8a:58:79:86:bb:aa:19:3f:95:ce:f6:c7:d4:
         fd:26:71:ae:8c:cf:6c:85:c2:4e:48:0a:de:af:cd:2c:51:f6:
         c5:7a:86:00:f2:a4:e1:82:2d:10:d1:fd:3d:aa:a2:24:c9:8b:
         83:65:2b:74:73:0f:32:84:ca:41:5d:6b:e8:b1:29:57:9e:d8:
         e9:db:f4:dd:78:32:94:68:54:45:21:d4:fb:49:84:7b:c4:d2:
         29:e1:f6:f3:3b:be:14:1c:52:18:7c:3f:a9:e3:be:c3:68:27:
         32:c3:7c:cc:85:c3:1e:1c:26:af:ce:06:a7:28:40:70:7d:ce:
         4a:5f:46:2f:48:4a:ec:f2:e7:57:25:19:ce:02:1a:4b:c5:a0:
         06:29:51:f1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDY1MDMxMTAvBgNVBAUTKDkzM0VGNzI2MDZEOUQ1QjI5RkUzQTQxRjIwQzUyQjIw
Q0FGNTU1QkEwHhcNMjYwNTEyMjAzODIwWhcNMjYwNTE5MjAzODIwWjAYMRYwFAYD
VQQDEw02YTAzOGZiZC05ZGYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq4eMUKEvEQ56RWPgnCSD6ZH6o3Kv8Bj6hgomXZ0wxQrt6cfsjLMWufpSgsnl
hRO6uuDMFBMnfp6byivH7tnxIo4r5t+wPFoIq95KOG4WCiS8+8fZdlfWlnSCRzJn
+G4Yq3Fv1sKT5pbjG/bn/4TMMmuwQRcVCbmIPdeRfDTUTpwbZGLC3UR+o+yxXezE
fcTg+R/JxjdqijHTKxNJu95FWdo80nIZSrsNb6vtfGJZXSovVhLZvuKyG0FqAlO+
gr8NUJEj7Pdm0TUBZUiTUDhoQI4yyScC6AylthbmxCY2qKDAljTJYzYCvBUqDust
toOM67XsDx+rs4dLJo5XY9/eHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAPkv/uS
tLhQsfSejTeXXotrFkeBMB8GA1UdIwQYMBaAFJM+9yYG2dWyn+OkHyDFKyDK9VW6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjUwMy8wMTU0QjRCNkVF
ODcxMUVBQjUyQTVDMDlDNEY5QUUwMi9rejczSmdiWjFiS2Y0NlFmSU1VcklNcjFW
Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2t6NzNKZ2JaMWJLZjQ2UWZJTVVySU1yMVZiby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NjUwMy8wMTU0QjRCNkVFODcxMUVBQjUyQTVDMDlDNEY5QUUwMi9rejczSmdiWjFi
S2Y0NlFmSU1VcklNcjFWYm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACNsnETVO9sADbeiws5SvC5ipyyi6zIb8ZnFXG0qiv0xWumkz3jwbLZNayhzI
z5+wzyBJX7HgKUYJIM3XlyFIX5iwywrnPcP136Vg+O3CrY4UAQUQ9SKkuBtVqWTX
1PSVZVQPYNktC+nTiNbQ0ueTa1eKWHmGu6oZP5XO9sfU/SZxrozPbIXCTkgK3q/N
LFH2xXqGAPKk4YItENH9PaqiJMmLg2UrdHMPMoTKQV1r6LEpV57Y6dv03XgylGhU
RSHU+0mEe8TSKeH28zu+FBxSGHw/qeO+w2gnMsN8zIXDHhwmr84GpyhAcH3OSl9G
L0hK7PLnVyUZzgIaS8WgBilR8Q==
-----END CERTIFICATE-----
Generated at Wed May 13 05:28:21 2026 by rpki-client