Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft
File:                     8dIEca4xiTbXk7RttEgiB9lyRYs.mft (raw, json)
Hash identifier:          aD0qdOp8EjsJwzh4xNCHjThGcpe9U0p5QX1rv4mAvhk=
Subject key identifier:   82:03:E3:E8:2D:E3:79:05:49:5A:13:6E:56:54:13:3F:BE:2B:A0:41
Authority key identifier: F1:D2:04:71:AE:31:89:36:D7:93:B4:6D:B4:48:22:07:D9:72:45:8B
Certificate issuer:       /CN=A91D8EAF/serialNumber=F1D20471AE318936D793B46DB4482207D972458B
Certificate serial:       0D20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8dIEca4xiTbXk7RttEgiB9lyRYs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft
Manifest number:          0D07
Signing time:             Tue 12 May 2026 18:14:30 +0000
Manifest this update:     Tue 12 May 2026 18:14:30 +0000
Manifest next update:     Tue 19 May 2026 18:14:30 +0000
Files and hashes:         1: 8dIEca4xiTbXk7RttEgiB9lyRYs.crl (hash: RJ3O92rO5f8s7dO9eFdIgi/LE4cA/fhSLzlAZW75cGU=)
                          2: F4C2F7F604FF11EABFF6E022C4F9AE02.roa (hash: DvZA6XJDkyHfkolYQVEDhxnUbcvdyFYpNYGE/Rx6mkk=)
                          3: 168AD09A04EF11EA9060B76BC4F9AE02.roa (hash: zG4D1s2xrlJsIzyQLjKkrbBcFvkHI/PRTbX5mMwZqTk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.crl
                          rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8dIEca4xiTbXk7RttEgiB9lyRYs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3360 (0xd20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8EAF, serialNumber=F1D20471AE318936D793B46DB4482207D972458B
        Validity
            Not Before: May 12 18:14:30 2026 GMT
            Not After : May 19 18:14:30 2026 GMT
        Subject: CN=6a036e06-f753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:04:74:02:b2:93:c1:e0:a7:c0:bb:f1:40:2e:
                    0b:2e:57:a5:68:e0:94:c8:f7:71:d2:18:d2:e9:43:
                    98:5e:8f:19:13:60:7e:d7:b2:0b:ae:b3:40:8d:2c:
                    b4:9e:55:f8:99:1c:74:96:30:c7:18:f0:b1:29:fb:
                    be:2a:2f:73:55:e5:ff:c8:65:d9:da:8a:a4:c7:f8:
                    01:c6:0b:16:95:d6:f6:bf:6f:8b:47:16:5f:c9:fc:
                    d1:e7:b2:9d:21:18:58:0d:91:52:d9:81:21:26:c0:
                    3e:c4:09:ed:1c:7e:b2:0b:8a:cc:54:26:3c:9c:4c:
                    89:4e:81:72:6c:75:b8:54:02:9a:54:0f:e3:23:e4:
                    eb:b3:c2:d7:ae:07:5a:15:00:be:15:81:d4:e4:07:
                    c3:93:72:5c:0b:83:56:32:bf:a3:e8:54:d3:09:06:
                    59:de:50:a1:fd:f0:80:03:42:5b:78:1a:3a:65:b0:
                    30:02:07:11:c9:ea:ec:e5:a7:c9:3e:eb:45:1e:61:
                    9a:52:37:f3:5b:54:81:0c:65:6d:8b:9a:d6:9e:30:
                    7c:26:a1:d9:b9:a2:bf:2b:88:27:e9:31:ae:39:20:
                    da:2a:85:59:a3:ca:93:08:aa:68:f5:79:08:19:6b:
                    fb:97:29:7a:dc:cc:13:d4:7e:db:4f:6b:17:ab:e8:
                    28:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:03:E3:E8:2D:E3:79:05:49:5A:13:6E:56:54:13:3F:BE:2B:A0:41
            X509v3 Authority Key Identifier:
                keyid:F1:D2:04:71:AE:31:89:36:D7:93:B4:6D:B4:48:22:07:D9:72:45:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8dIEca4xiTbXk7RttEgiB9lyRYs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:a2:36:2b:a9:01:8c:a4:1d:d4:ff:8a:5d:4d:98:fd:0d:29:
         28:00:0c:1c:a9:08:90:b8:00:b2:4b:cc:b5:ef:79:87:c9:fd:
         81:36:94:6e:be:eb:ad:d4:ba:33:3e:ce:12:f2:e1:63:a7:83:
         5e:92:ed:99:2c:6b:50:7c:bc:c0:e0:ae:38:4e:9a:04:a7:e7:
         19:83:4a:cd:46:7b:7d:32:a7:80:41:75:36:ce:2f:ca:41:8f:
         9a:7d:2f:66:35:03:06:5a:ef:6c:78:04:20:88:f4:ae:92:60:
         24:b2:81:25:31:a9:03:b2:93:a5:10:c3:38:53:84:13:9a:60:
         65:10:cb:26:1a:e2:d9:c5:e8:78:62:65:0c:96:44:f8:74:97:
         13:0d:4c:25:62:94:b6:4a:be:62:60:09:c6:30:a8:6c:b6:bb:
         00:66:8c:69:f3:72:c2:44:77:ef:8e:ea:23:44:e5:6b:92:8f:
         62:46:18:e5:af:79:5c:fd:72:b6:fc:26:28:a8:39:21:9a:c8:
         f6:68:d3:9a:1d:c7:45:a3:7b:59:da:06:5d:6c:60:bc:64:9f:
         72:dc:51:f2:26:b3:c1:e1:59:31:13:84:01:24:03:b9:3d:a8:
         7d:6f:ee:92:b9:71:1f:8f:cb:70:00:0b:61:dc:44:c2:fe:a5:
         92:5e:b8:c4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDSAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDhFQUYxMTAvBgNVBAUTKEYxRDIwNDcxQUUzMTg5MzZENzkzQjQ2REI0NDgyMjA3
RDk3MjQ1OEIwHhcNMjYwNTEyMTgxNDMwWhcNMjYwNTE5MTgxNDMwWjAYMRYwFAYD
VQQDEw02YTAzNmUwNi1mNzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuQR0ArKTweCnwLvxQC4LLlelaOCUyPdx0hjS6UOYXo8ZE2B+17ILrrNAjSy0
nlX4mRx0ljDHGPCxKfu+Ki9zVeX/yGXZ2oqkx/gBxgsWldb2v2+LRxZfyfzR57Kd
IRhYDZFS2YEhJsA+xAntHH6yC4rMVCY8nEyJToFybHW4VAKaVA/jI+Trs8LXrgda
FQC+FYHU5AfDk3JcC4NWMr+j6FTTCQZZ3lCh/fCAA0JbeBo6ZbAwAgcRyers5afJ
PutFHmGaUjfzW1SBDGVti5rWnjB8JqHZuaK/K4gn6TGuOSDaKoVZo8qTCKpo9XkI
GWv7lyl63MwT1H7bT2sXq+goYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIID4+gt
43kFSVoTblZUEz++K6BBMB8GA1UdIwQYMBaAFPHSBHGuMYk215O0bbRIIgfZckWL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEVBRi8xMEIwRTNEMDA0
RUExMUVBQkVEQzgxNjFDNEY5QUUwMi84ZElFY2E0eGlUYlhrN1J0dEVnaUI5bHlS
WXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhkSUVjYTR4aVRiWGs3UnR0RWdpQjlseVJZcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
OEVBRi8xMEIwRTNEMDA0RUExMUVBQkVEQzgxNjFDNEY5QUUwMi84ZElFY2E0eGlU
YlhrN1J0dEVnaUI5bHlSWXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAT6I2K6kBjKQd1P+KXU2Y/Q0pKAAMHKkIkLgAskvMte95h8n9gTaUbr7rrdS6
Mz7OEvLhY6eDXpLtmSxrUHy8wOCuOE6aBKfnGYNKzUZ7fTKngEF1Ns4vykGPmn0v
ZjUDBlrvbHgEIIj0rpJgJLKBJTGpA7KTpRDDOFOEE5pgZRDLJhri2cXoeGJlDJZE
+HSXEw1MJWKUtkq+YmAJxjCobLa7AGaMafNywkR3747qI0Tla5KPYkYY5a95XP1y
tvwmKKg5IZrI9mjTmh3HRaN7WdoGXWxgvGSfctxR8iazweFZMROEASQDuT2ofW/u
krlxH4/LcAALYdxEwv6lkl64xA==
-----END CERTIFICATE-----
Generated at Wed May 13 00:59:52 2026 by rpki-client