Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft
File:                     jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft (raw, json)
Hash identifier:          raTYiZezpnNJieCmw3+2M0lu3z1nYFbX1ZBTNaQcSx0=
Subject key identifier:   8E:53:FF:C1:49:59:B5:2E:21:02:52:8E:E0:02:04:B7:0B:5A:18:E9
Authority key identifier: 8D:1C:D6:59:E6:1D:B6:49:5B:36:CE:69:C4:9F:5A:83:2E:DB:D5:9D
Certificate issuer:       /CN=A91D94CD/serialNumber=8D1CD659E61DB6495B36CE69C49F5A832EDBD59D
Certificate serial:       7A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRzWWeYdtklbNs5pxJ9agy7b1Z0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft
Manifest number:          77
Signing time:             Mon 11 May 2026 07:56:58 +0000
Manifest this update:     Mon 11 May 2026 07:56:57 +0000
Manifest next update:     Mon 18 May 2026 07:56:57 +0000
Files and hashes:         1: jRzWWeYdtklbNs5pxJ9agy7b1Z0.crl (hash: zMNRvGxrPNk3M3uvvAqE2DWE8XzH+My7ubJWqpVNwYA=)
                          2: 69EFC826355811F19E199801B7833773.roa (hash: 5Px2UpFHQXMRz7JAVKu8YUPCJLo8uTG2CQvVH1gHKGw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.crl
                          rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRzWWeYdtklbNs5pxJ9agy7b1Z0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 07:56:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D94CD, serialNumber=8D1CD659E61DB6495B36CE69C49F5A832EDBD59D
        Validity
            Not Before: May 11 07:56:57 2026 GMT
            Not After : May 18 07:56:57 2026 GMT
        Subject: CN=6a018bca-f7a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:2d:e8:f2:4e:dd:9c:d5:ce:1a:29:c4:d7:c1:
                    71:56:72:a4:8c:dd:82:db:8d:e5:3b:85:25:86:22:
                    e7:3d:b9:70:bd:ed:fc:26:cf:2e:1c:81:18:11:8c:
                    4f:08:96:f4:f5:1a:e9:62:ff:ff:dc:8e:be:51:bf:
                    22:20:a6:43:a9:cb:2e:92:29:7f:25:c3:03:75:7d:
                    7c:4a:a4:d8:49:11:5c:6d:4a:a6:36:ee:44:ac:a2:
                    a0:f8:24:d4:ea:77:6f:4a:84:07:f6:8a:70:06:94:
                    c7:27:11:b8:ec:5e:bc:7c:4b:ee:2c:46:9e:ca:ae:
                    59:01:df:6d:96:48:91:2a:97:19:5e:fc:7d:cd:a1:
                    8f:a7:fc:e5:cd:73:2a:33:b3:24:50:00:97:b5:62:
                    d6:55:51:52:7d:9a:fb:b4:86:21:13:c1:d5:e1:5e:
                    f9:c4:1e:a8:a1:ad:57:b8:93:57:fc:d8:31:97:86:
                    22:f6:67:6f:bc:8c:a8:c3:05:99:ec:74:95:2a:9d:
                    78:e2:73:bc:32:99:c7:be:5d:ea:67:8f:d7:b9:8c:
                    26:be:19:74:c9:69:85:54:47:fc:e4:5c:f4:77:9c:
                    bd:3c:15:57:52:85:af:ff:1c:44:d4:0f:fc:1e:2b:
                    28:07:e9:9d:8f:bc:a4:a0:fb:d7:11:f1:c8:93:01:
                    6d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:53:FF:C1:49:59:B5:2E:21:02:52:8E:E0:02:04:B7:0B:5A:18:E9
            X509v3 Authority Key Identifier:
                keyid:8D:1C:D6:59:E6:1D:B6:49:5B:36:CE:69:C4:9F:5A:83:2E:DB:D5:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRzWWeYdtklbNs5pxJ9agy7b1Z0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:f1:3e:65:4b:75:41:fc:4c:0a:7b:ec:51:7b:06:b2:2c:fe:
         d4:47:7e:67:0f:1e:2f:c3:36:72:81:35:66:07:08:c0:15:ad:
         b3:df:d7:ba:6a:5a:4d:6c:da:e1:8c:ae:90:f8:be:a5:c6:04:
         52:1b:91:3b:40:e6:a5:f3:f5:bd:21:67:ed:3d:d2:6a:fa:d8:
         5a:1a:7c:07:e7:5a:77:12:31:86:49:26:42:4e:b3:09:98:46:
         21:4b:21:83:94:3e:2e:da:00:38:53:e7:0f:be:21:3e:f5:49:
         00:c5:eb:30:a3:7a:d0:8c:20:42:b0:43:38:65:fa:05:8c:42:
         2c:06:19:6c:0d:54:90:9e:c8:f5:5e:f4:6f:b7:e0:99:c5:f2:
         02:5e:97:28:9e:9a:43:3a:50:07:e8:1b:da:37:4f:da:ce:96:
         3d:79:75:c9:16:21:3d:9b:72:42:3a:ad:b6:01:2c:fe:01:d9:
         b8:d9:7a:e5:cb:57:f7:f9:7c:96:81:48:c7:ea:cc:51:78:90:
         11:c0:29:b1:bb:21:8c:d1:4e:5f:1c:d3:96:75:70:e8:ed:0e:
         af:88:88:4b:7c:96:c6:80:d2:21:d4:1a:2f:e2:d4:17:4c:4d:
         ef:6d:e3:67:4c:62:f6:5a:b0:96:90:57:ef:93:5a:6f:95:e8:
         d0:d6:96:a1
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
OTRDRDExMC8GA1UEBRMoOEQxQ0Q2NTlFNjFEQjY0OTVCMzZDRTY5QzQ5RjVBODMy
RURCRDU5RDAeFw0yNjA1MTEwNzU2NTdaFw0yNjA1MTgwNzU2NTdaMBgxFjAUBgNV
BAMTDTZhMDE4YmNhLWY3YTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDlLejyTt2c1c4aKcTXwXFWcqSM3YLbjeU7hSWGIuc9uXC97fwmzy4cgRgRjE8I
lvT1Guli///cjr5RvyIgpkOpyy6SKX8lwwN1fXxKpNhJEVxtSqY27kSsoqD4JNTq
d29KhAf2inAGlMcnEbjsXrx8S+4sRp7KrlkB322WSJEqlxle/H3NoY+n/OXNcyoz
syRQAJe1YtZVUVJ9mvu0hiETwdXhXvnEHqihrVe4k1f82DGXhiL2Z2+8jKjDBZns
dJUqnXjic7wymce+Xepnj9e5jCa+GXTJaYVUR/zkXPR3nL08FVdSha//HETUD/we
KygH6Z2PvKSg+9cR8ciTAW0XAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUjlP/wUlZ
tS4hAlKO4AIEtwtaGOkwHwYDVR0jBBgwFoAUjRzWWeYdtklbNs5pxJ9agy7b1Z0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5NENELzM2QUY5NDcyOUVD
ODExRjA4Q0QyQUM3QkM0RjlBRTAyL2pSeldXZVlkdGtsYk5zNXB4SjlhZ3k3YjFa
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvalJ6V1dlWWR0a2xiTnM1cHhKOWFneTdiMVowLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5
NENELzM2QUY5NDcyOUVDODExRjA4Q0QyQUM3QkM0RjlBRTAyL2pSeldXZVlkdGts
Yk5zNXB4SjlhZ3k3YjFaMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAE8T5lS3VB/EwKe+xRewayLP7UR35nDx4vwzZygTVmBwjAFa2z39e6alpNbNrh
jK6Q+L6lxgRSG5E7QOal8/W9IWftPdJq+thaGnwH51p3EjGGSSZCTrMJmEYhSyGD
lD4u2gA4U+cPviE+9UkAxeswo3rQjCBCsEM4ZfoFjEIsBhlsDVSQnsj1XvRvt+CZ
xfICXpconppDOlAH6BvaN0/azpY9eXXJFiE9m3JCOq22ASz+Adm42Xrly1f3+XyW
gUjH6sxReJARwCmxuyGM0U5fHNOWdXDo7Q6viIhLfJbGgNIh1Bov4tQXTE3vbeNn
TGL2WrCWkFfvk1pvlejQ1pah
-----END CERTIFICATE-----
Generated at Wed May 13 02:44:14 2026 by rpki-client