Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.mft
File:                     ABc0faPzW3U5Ub30sbB_dh49nr8.mft (raw, json)
Hash identifier:          bTKtIrspiu469ua+UMFX4sg9ud3qbavYPFd9KSgN5ag=
Subject key identifier:   C0:7C:50:10:98:D0:DC:94:94:1B:09:07:ED:C3:84:D6:B1:BA:9D:A4
Authority key identifier: 00:17:34:7D:A3:F3:5B:75:39:51:BD:F4:B1:B0:7F:76:1E:3D:9E:BF
Certificate issuer:       /CN=A91E0AAD/serialNumber=0017347DA3F35B753951BDF4B1B07F761E3D9EBF
Certificate serial:       04CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABc0faPzW3U5Ub30sbB_dh49nr8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.mft
Manifest number:          04B9
Signing time:             Wed 13 May 2026 00:02:12 +0000
Manifest this update:     Wed 13 May 2026 00:02:11 +0000
Manifest next update:     Wed 20 May 2026 00:02:11 +0000
Files and hashes:         1: ABc0faPzW3U5Ub30sbB_dh49nr8.crl (hash: Xu5sd4zAbsKEZUmhov8wa/bW4isJAltrUkH1bN3bRZY=)
                          2: 0BE6F39E79E611EC99DA1B51C4F9AE02.roa (hash: jtPs82NLVd21ee8+NCk8Ufzq1PTdaAHag74elLulFv4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.crl
                          rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABc0faPzW3U5Ub30sbB_dh49nr8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 00:02:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1227 (0x4cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0AAD, serialNumber=0017347DA3F35B753951BDF4B1B07F761E3D9EBF
        Validity
            Not Before: May 13 00:02:11 2026 GMT
            Not After : May 20 00:02:11 2026 GMT
        Subject: CN=6a03bf84-4532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:16:0e:e6:4e:6a:97:9b:1e:15:96:71:1f:36:
                    b1:fd:99:f0:8c:f4:91:5b:32:84:e1:01:7a:29:60:
                    04:3f:cd:33:ec:7c:e1:5a:2b:af:4c:10:74:53:a8:
                    8c:23:79:00:72:53:bd:01:db:d9:f7:f2:47:a7:c8:
                    7b:11:6d:0f:fe:28:ef:f8:40:b8:41:15:11:11:6c:
                    27:17:a1:54:8a:4a:19:73:10:78:df:7c:64:37:3a:
                    73:e5:7c:97:b4:ca:9d:ea:85:c0:de:f7:ab:54:89:
                    96:f6:40:2f:88:f0:cb:8b:3d:c0:ef:ce:e4:f9:9b:
                    93:57:d3:4d:62:d0:8d:2d:ff:41:9d:2b:8a:e6:8c:
                    7f:0e:b7:64:0e:7a:a9:d3:26:8a:ac:0e:b7:9d:9e:
                    a3:09:48:13:95:fa:cb:b1:41:61:c0:61:aa:cb:4d:
                    fa:ca:24:9e:d4:00:99:10:e7:69:93:ce:29:73:35:
                    ec:67:2a:6b:c6:62:2d:86:bf:fd:38:c0:19:1f:5c:
                    4c:7e:f5:97:09:07:2b:e8:ea:09:eb:d4:06:71:3a:
                    66:00:33:9a:fe:62:d7:80:bb:b5:72:52:65:e5:4c:
                    61:b0:dd:d0:69:6f:0f:aa:ac:a0:68:ff:cd:a0:86:
                    ce:c4:88:1d:3a:64:68:97:93:52:7b:d5:e8:50:85:
                    44:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:7C:50:10:98:D0:DC:94:94:1B:09:07:ED:C3:84:D6:B1:BA:9D:A4
            X509v3 Authority Key Identifier:
                keyid:00:17:34:7D:A3:F3:5B:75:39:51:BD:F4:B1:B0:7F:76:1E:3D:9E:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABc0faPzW3U5Ub30sbB_dh49nr8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:9d:9c:24:87:6b:98:6d:d9:23:71:22:c3:d6:fe:89:75:c9:
         e5:be:80:e1:d2:0a:b3:15:3c:9a:e0:93:5d:f4:55:49:84:c8:
         02:a6:42:65:c4:23:01:9e:79:b0:b5:6c:b6:20:3a:cd:7d:d9:
         06:6d:17:b6:95:7f:f8:f0:84:e4:21:4d:fb:51:4f:a6:89:48:
         a6:8a:bc:d0:7b:36:b0:1a:39:f2:14:9f:10:f4:e5:6f:aa:e6:
         8f:f7:be:48:06:53:b2:10:19:5e:82:26:4c:13:b1:13:89:85:
         ab:cd:4e:d5:5e:35:d4:63:8a:05:ad:61:fb:f4:88:e7:f5:2e:
         26:48:16:89:12:72:56:0c:3b:9a:f1:4c:dd:a7:e4:a5:36:13:
         fd:5d:ea:7c:c7:40:03:82:5b:da:a3:7a:99:38:2b:53:8e:28:
         9f:80:bb:f0:73:39:3c:81:68:33:78:ca:59:87:0a:73:f3:36:
         27:3e:f1:d1:53:9a:9a:99:49:5c:44:11:dc:e6:c5:e2:bc:50:
         09:61:c3:76:c8:b7:a2:1b:cd:cd:83:f6:e4:9c:d2:b6:2e:6f:
         4f:81:75:07:28:5f:dd:41:0f:37:aa:73:b8:73:8e:72:99:e8:
         bb:39:ad:d7:34:d0:04:54:db:35:e2:96:5a:c6:59:41:f3:67:
         ab:96:18:33
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTBBQUQxMTAvBgNVBAUTKDAwMTczNDdEQTNGMzVCNzUzOTUxQkRGNEIxQjA3Rjc2
MUUzRDlFQkYwHhcNMjYwNTEzMDAwMjExWhcNMjYwNTIwMDAwMjExWjAYMRYwFAYD
VQQDEw02YTAzYmY4NC00NTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6hYO5k5ql5seFZZxHzax/ZnwjPSRWzKE4QF6KWAEP80z7HzhWiuvTBB0U6iM
I3kAclO9AdvZ9/JHp8h7EW0P/ijv+EC4QRUREWwnF6FUikoZcxB433xkNzpz5XyX
tMqd6oXA3verVImW9kAviPDLiz3A787k+ZuTV9NNYtCNLf9BnSuK5ox/DrdkDnqp
0yaKrA63nZ6jCUgTlfrLsUFhwGGqy036yiSe1ACZEOdpk84pczXsZyprxmIthr/9
OMAZH1xMfvWXCQcr6OoJ69QGcTpmADOa/mLXgLu1clJl5UxhsN3QaW8PqqygaP/N
oIbOxIgdOmRol5NSe9XoUIVEPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMB8UBCY
0NyUlBsJB+3DhNaxup2kMB8GA1UdIwQYMBaAFAAXNH2j81t1OVG99LGwf3YePZ6/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEFBRC8wREU1QjQwRTc5
RTIxMUVDQjUwMTMxNDhDNEY5QUUwMi9BQmMwZmFQelczVTVVYjMwc2JCX2RoNDlu
cjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FCYzBmYVB6VzNVNVViMzBzYkJfZGg0OW5yOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MEFBRC8wREU1QjQwRTc5RTIxMUVDQjUwMTMxNDhDNEY5QUUwMi9BQmMwZmFQelcz
VTVVYjMwc2JCX2RoNDlucjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHZ2cJIdrmG3ZI3Eiw9b+iXXJ5b6A4dIKsxU8muCTXfRVSYTIAqZCZcQjAZ55
sLVstiA6zX3ZBm0XtpV/+PCE5CFN+1FPpolIpoq80Hs2sBo58hSfEPTlb6rmj/e+
SAZTshAZXoImTBOxE4mFq81O1V411GOKBa1h+/SI5/UuJkgWiRJyVgw7mvFM3afk
pTYT/V3qfMdAA4Jb2qN6mTgrU44on4C78HM5PIFoM3jKWYcKc/M2Jz7x0VOamplJ
XEQR3ObF4rxQCWHDdsi3ohvNzYP25JzSti5vT4F1Byhf3UEPN6pzuHOOcpnouzmt
1zTQBFTbNeKWWsZZQfNnq5YYMw==
-----END CERTIFICATE-----
Generated at Wed May 13 11:06:24 2026 by rpki-client