Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.mft
File:                     df43qD7agAphAmCFh-30CJ2CQOA.mft (raw, json)
Hash identifier:          jwcwGTuoJW/iKlazQ2/bLARZyw/aa4ifq2e36t9HPZk=
Subject key identifier:   62:74:6B:59:41:57:EC:3A:F8:6A:0A:C8:FD:CC:16:60:D9:A9:4E:6B
Authority key identifier: 75:FE:37:A8:3E:DA:80:0A:61:02:60:85:87:ED:F4:08:9D:82:40:E0
Certificate issuer:       /CN=A91DC7AA/serialNumber=75FE37A83EDA800A6102608587EDF4089D8240E0
Certificate serial:       CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/df43qD7agAphAmCFh-30CJ2CQOA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.mft
Manifest number:          C6
Signing time:             Mon 11 May 2026 07:04:00 +0000
Manifest this update:     Mon 11 May 2026 07:04:00 +0000
Manifest next update:     Mon 18 May 2026 07:04:00 +0000
Files and hashes:         1: df43qD7agAphAmCFh-30CJ2CQOA.crl (hash: 7fFymZNt9xi771TBrowzKzwHTpPokEWhtFNU+ePrAwk=)
                          2: A7C7EF962A8911F09526D35BC4F9AE02.roa (hash: HcYhHFFcvCKuaGxFRTIVt3Z+Wah4d0SujZ+rvqoNWCE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.crl
                          rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/df43qD7agAphAmCFh-30CJ2CQOA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 07:03:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 206 (0xce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC7AA, serialNumber=75FE37A83EDA800A6102608587EDF4089D8240E0
        Validity
            Not Before: May 11 07:04:00 2026 GMT
            Not After : May 18 07:04:00 2026 GMT
        Subject: CN=6a017f60-ccde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:59:c9:9a:df:f0:25:45:a4:19:18:07:06:44:
                    6d:64:a0:49:94:eb:40:16:20:82:48:a5:a5:3e:c2:
                    e4:11:e1:25:00:68:1c:3b:65:24:46:e8:47:3b:19:
                    60:31:d6:11:2f:70:96:23:cf:64:fb:ef:61:3c:5d:
                    7a:b3:54:e8:b8:52:17:6a:12:fa:3b:d5:98:93:54:
                    48:61:62:7f:29:6f:2f:cc:f6:8c:c8:cf:03:54:d6:
                    69:d6:46:a9:03:ec:b0:d5:1d:3a:29:be:90:b7:f8:
                    12:e3:5e:34:3c:91:58:53:78:e2:3d:bb:4b:e3:c8:
                    20:68:32:00:49:52:18:12:29:40:82:bc:63:e4:5e:
                    46:75:c8:08:4c:f5:da:2b:a8:8b:55:a9:de:1d:22:
                    ba:3a:3b:c8:aa:cb:4f:e1:1f:20:2b:e9:0a:a5:26:
                    68:cd:6e:c2:1e:76:68:14:81:a0:2d:c0:09:c3:f6:
                    ee:69:05:15:7c:90:83:dc:aa:9e:14:c4:1a:62:ae:
                    31:bd:c9:15:b3:aa:db:fa:cf:d4:58:39:86:a7:c3:
                    a8:60:6a:b1:74:32:8d:d9:d1:6f:42:ff:2d:b8:60:
                    3b:0c:ed:c8:de:78:2e:3f:20:5b:19:4b:bc:33:14:
                    10:9e:f5:7a:50:bf:e7:d9:ba:ca:0b:24:e5:05:4f:
                    1c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:74:6B:59:41:57:EC:3A:F8:6A:0A:C8:FD:CC:16:60:D9:A9:4E:6B
            X509v3 Authority Key Identifier:
                keyid:75:FE:37:A8:3E:DA:80:0A:61:02:60:85:87:ED:F4:08:9D:82:40:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/df43qD7agAphAmCFh-30CJ2CQOA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:3e:60:e1:f8:70:b7:fc:bb:91:47:01:67:e0:ad:01:b6:ca:
         bc:3c:f9:22:b1:ed:93:e9:54:eb:2e:91:a7:f2:d1:2a:c6:19:
         54:e6:70:f2:db:0b:88:d3:cb:c4:53:d3:d2:05:f9:47:6e:2f:
         90:0f:67:cf:b6:0b:67:ca:84:66:6e:a2:9f:14:95:3f:d6:04:
         4d:3f:0d:83:2e:64:a1:c1:38:25:89:9f:06:1b:0e:5c:8d:d3:
         59:28:0c:f5:4e:4b:86:7c:5a:ba:fe:1e:22:4c:1b:69:7f:3a:
         3c:3a:64:34:26:04:11:8a:8f:13:24:0b:b9:cd:28:1d:56:e3:
         18:ab:c6:57:07:7a:f2:05:dd:81:cd:b7:f3:5e:f0:6d:63:b0:
         5e:eb:89:64:ec:c9:e1:84:4a:76:6b:2a:70:c7:84:5a:53:c4:
         30:6a:64:1b:81:f9:ef:6a:c9:63:33:ff:be:7d:72:f2:75:32:
         b4:42:8b:cb:b5:34:28:b2:6c:94:6e:45:fb:46:1a:cc:24:65:
         d1:86:ce:71:0b:2b:38:79:82:ac:e1:85:2b:88:0a:60:1a:fa:
         3a:b1:42:31:d2:46:d2:3f:b6:e2:75:93:05:08:4e:27:19:62:
         85:87:7c:ff:6c:c6:eb:32:1b:07:9e:29:a3:0b:21:c1:bd:6a:
         99:41:65:4f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REM3QUExMTAvBgNVBAUTKDc1RkUzN0E4M0VEQTgwMEE2MTAyNjA4NTg3RURGNDA4
OUQ4MjQwRTAwHhcNMjYwNTExMDcwNDAwWhcNMjYwNTE4MDcwNDAwWjAYMRYwFAYD
VQQDEw02YTAxN2Y2MC1jY2RlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAslnJmt/wJUWkGRgHBkRtZKBJlOtAFiCCSKWlPsLkEeElAGgcO2UkRuhHOxlg
MdYRL3CWI89k++9hPF16s1TouFIXahL6O9WYk1RIYWJ/KW8vzPaMyM8DVNZp1kap
A+yw1R06Kb6Qt/gS4140PJFYU3jiPbtL48ggaDIASVIYEilAgrxj5F5GdcgITPXa
K6iLVaneHSK6OjvIqstP4R8gK+kKpSZozW7CHnZoFIGgLcAJw/buaQUVfJCD3Kqe
FMQaYq4xvckVs6rb+s/UWDmGp8OoYGqxdDKN2dFvQv8tuGA7DO3I3nguPyBbGUu8
MxQQnvV6UL/n2brKCyTlBU8cqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGJ0a1lB
V+w6+GoKyP3MFmDZqU5rMB8GA1UdIwQYMBaAFHX+N6g+2oAKYQJghYft9AidgkDg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzdBQS9EMjJFREEzNDJB
ODgxMUYwQTMwRDkxNTlDNEY5QUUwMi9kZjQzcUQ3YWdBcGhBbUNGaC0zMENKMkNR
T0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RmNDNxRDdhZ0FwaEFtQ0ZoLTMwQ0oyQ1FPQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QzdBQS9EMjJFREEzNDJBODgxMUYwQTMwRDkxNTlDNEY5QUUwMi9kZjQzcUQ3YWdB
cGhBbUNGaC0zMENKMkNRT0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAzT5g4fhwt/y7kUcBZ+CtAbbKvDz5IrHtk+lU6y6Rp/LRKsYZVOZw8tsLiNPL
xFPT0gX5R24vkA9nz7YLZ8qEZm6inxSVP9YETT8Ngy5kocE4JYmfBhsOXI3TWSgM
9U5Lhnxauv4eIkwbaX86PDpkNCYEEYqPEyQLuc0oHVbjGKvGVwd68gXdgc23817w
bWOwXuuJZOzJ4YRKdmsqcMeEWlPEMGpkG4H572rJYzP/vn1y8nUytEKLy7U0KLJs
lG5F+0YazCRl0YbOcQsrOHmCrOGFK4gKYBr6OrFCMdJG0j+24nWTBQhOJxlihYd8
/2zG6zIbB54powshwb1qmUFlTw==
-----END CERTIFICATE-----
Generated at Wed May 13 01:33:58 2026 by rpki-client