Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft
File:                     dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft (raw, json)
Hash identifier:          qr7ofyZUpn+FTx+Z9qYj676MJ7vCOKjuK6C948PH9Ts=
Subject key identifier:   41:85:C4:A8:59:1D:E4:71:35:8D:39:3D:23:20:42:6E:89:23:12:F2
Authority key identifier: 74:8B:C7:9A:FA:9B:7F:F7:5B:13:00:AD:29:40:E7:FC:C1:42:F8:86
Certificate issuer:       /CN=A91D76E5/serialNumber=748BC79AFA9B7FF75B1300AD2940E7FCC142F886
Certificate serial:       0915
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft
Manifest number:          0909
Signing time:             Tue 12 May 2026 20:22:04 +0000
Manifest this update:     Tue 12 May 2026 20:22:04 +0000
Manifest next update:     Tue 19 May 2026 20:22:04 +0000
Files and hashes:         1: dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl (hash: ezJ6xFVXbzt3loejzICt2ttqtDwY1/tWTPJcF7QsPOE=)
                          2: 94B101721B8B11EEACEA736AC4F9AE02.roa (hash: qKTt9ATlz/vyXKRzdg+bUvwyPMjVccPyHDh5rJ6vtFA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl
                          rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:22:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2325 (0x915)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D76E5, serialNumber=748BC79AFA9B7FF75B1300AD2940E7FCC142F886
        Validity
            Not Before: May 12 20:22:04 2026 GMT
            Not After : May 19 20:22:04 2026 GMT
        Subject: CN=6a038bec-19e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:06:f2:09:99:bf:ad:2f:08:bf:09:42:d2:2d:
                    b3:83:c8:f1:8f:89:96:d6:b7:6a:6e:fe:96:0a:f6:
                    35:d7:b0:fe:e3:33:88:19:f6:62:af:90:8d:3c:14:
                    9b:15:01:ab:46:31:b0:5b:84:32:30:56:a5:46:af:
                    fa:4a:47:4d:d4:48:93:ce:c4:e7:bf:63:9c:c8:da:
                    1d:77:3c:6f:23:83:db:4f:46:d7:69:0b:87:0e:18:
                    93:4c:c2:54:27:71:a2:25:71:ea:08:71:98:17:5b:
                    3f:be:58:62:b9:67:70:42:f2:6c:ba:d5:bf:1b:28:
                    be:6d:92:f0:a2:57:8e:7b:1a:86:5e:ef:92:22:50:
                    2e:d1:c7:a5:cf:15:d3:79:eb:cb:2d:e8:bf:dc:da:
                    2b:71:2e:cb:9f:fa:f4:c3:81:94:99:6c:bd:3f:09:
                    69:39:9d:61:a8:de:0a:7e:0f:c6:40:6f:b3:f3:51:
                    59:c6:b5:f8:b6:35:ff:ab:bc:9f:5f:f3:40:1b:a4:
                    81:ba:97:f9:8b:2b:58:08:b2:f8:0d:af:61:30:a0:
                    50:c2:ae:15:c3:60:0f:1e:9a:73:32:ce:47:1a:8b:
                    03:d4:23:57:72:01:13:86:3b:17:82:40:76:08:82:
                    d6:14:41:9c:1b:9e:36:34:b3:b0:3c:90:4f:e7:c8:
                    cc:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:85:C4:A8:59:1D:E4:71:35:8D:39:3D:23:20:42:6E:89:23:12:F2
            X509v3 Authority Key Identifier:
                keyid:74:8B:C7:9A:FA:9B:7F:F7:5B:13:00:AD:29:40:E7:FC:C1:42:F8:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:1b:b3:af:a5:cd:76:a9:24:91:c3:99:e8:d6:93:e8:9f:1b:
         b9:ac:93:3d:55:7a:f3:ff:8f:8b:a9:96:4c:7b:0d:07:c0:76:
         6d:87:4e:42:97:f9:b3:72:20:ab:ba:9b:23:9e:b4:53:ab:2e:
         bb:bc:62:39:fc:fb:b2:67:a9:e5:d6:9f:31:25:8f:e6:80:88:
         dd:f3:05:e1:24:9c:09:1a:4c:9f:df:7a:14:0f:7c:26:d9:8b:
         c0:2e:68:be:52:e4:59:9d:b8:66:ba:7d:71:f6:c8:e4:5b:94:
         16:90:79:d9:cd:aa:9a:23:30:24:9b:ee:65:9a:a4:6a:5e:18:
         f6:f9:51:bc:8d:73:b0:3c:03:db:6c:f7:2e:4a:4e:69:d6:03:
         c7:a2:54:51:54:ee:73:30:cd:b6:5a:c8:03:74:ed:27:80:80:
         67:09:3f:6d:f6:e4:a9:ef:f7:ef:82:8a:13:e7:ed:57:b1:e6:
         76:9f:52:b6:2f:b3:e0:c6:ef:ca:4d:ef:f3:c1:63:16:bd:b8:
         54:70:79:69:42:fc:41:5d:c4:84:75:b5:77:a4:21:b7:aa:24:
         ef:ad:28:78:69:40:16:32:65:29:e0:be:52:4a:00:5d:07:e8:
         46:a6:c3:d4:a7:0e:b4:75:b7:b5:52:a4:9c:f4:df:ca:2c:fb:
         b8:0f:a3:b6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCRUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDc2RTUxMTAvBgNVBAUTKDc0OEJDNzlBRkE5QjdGRjc1QjEzMDBBRDI5NDBFN0ZD
QzE0MkY4ODYwHhcNMjYwNTEyMjAyMjA0WhcNMjYwNTE5MjAyMjA0WjAYMRYwFAYD
VQQDEw02YTAzOGJlYy0xOWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAogbyCZm/rS8IvwlC0i2zg8jxj4mW1rdqbv6WCvY117D+4zOIGfZir5CNPBSb
FQGrRjGwW4QyMFalRq/6SkdN1EiTzsTnv2OcyNoddzxvI4PbT0bXaQuHDhiTTMJU
J3GiJXHqCHGYF1s/vlhiuWdwQvJsutW/Gyi+bZLwoleOexqGXu+SIlAu0celzxXT
eevLLei/3NorcS7Ln/r0w4GUmWy9PwlpOZ1hqN4Kfg/GQG+z81FZxrX4tjX/q7yf
X/NAG6SBupf5iytYCLL4Da9hMKBQwq4Vw2APHppzMs5HGosD1CNXcgEThjsXgkB2
CILWFEGcG542NLOwPJBP58jMiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEGFxKhZ
HeRxNY05PSMgQm6JIxLyMB8GA1UdIwQYMBaAFHSLx5r6m3/3WxMArSlA5/zBQviG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzZFNS9FMDgzQTBFQUNC
MTIxMUVBOTI1MDdBMkJDNEY5QUUwMi9kSXZIbXZxYmZfZGJFd0N0S1VEbl9NRkMt
SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RJdkhtdnFiZl9kYkV3Q3RLVURuX01GQy1JWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NzZFNS9FMDgzQTBFQUNCMTIxMUVBOTI1MDdBMkJDNEY5QUUwMi9kSXZIbXZxYmZf
ZGJFd0N0S1VEbl9NRkMtSVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJhuzr6XNdqkkkcOZ6NaT6J8buayTPVV68/+Pi6mWTHsNB8B2bYdOQpf5s3Ig
q7qbI560U6suu7xiOfz7smep5dafMSWP5oCI3fMF4SScCRpMn996FA98JtmLwC5o
vlLkWZ24Zrp9cfbI5FuUFpB52c2qmiMwJJvuZZqkal4Y9vlRvI1zsDwD22z3LkpO
adYDx6JUUVTuczDNtlrIA3TtJ4CAZwk/bfbkqe/374KKE+ftV7Hmdp9Sti+z4Mbv
yk3v88FjFr24VHB5aUL8QV3EhHW1d6Qht6ok760oeGlAFjJlKeC+UkoAXQfoRqbD
1KcOtHW3tVKknPTfyiz7uA+jtg==
-----END CERTIFICATE-----
Generated at Wed May 13 15:12:13 2026 by rpki-client