Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.mft
File:                     99bebnsqx71FDHcVhj6XmVU4Pk4.mft (raw, json)
Hash identifier:          PSf4IQk7AFBVOWMaF24w7d6VQWKudVOj1zMVOzSQ2OI=
Subject key identifier:   F0:60:A8:C7:AF:38:D6:99:C7:D6:40:AE:28:BD:E8:54:2B:4B:6D:F6
Authority key identifier: F7:D6:DE:6E:7B:2A:C7:BD:45:0C:77:15:86:3E:97:99:55:38:3E:4E
Certificate issuer:       /CN=A91E33AA/serialNumber=F7D6DE6E7B2AC7BD450C7715863E979955383E4E
Certificate serial:       A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99bebnsqx71FDHcVhj6XmVU4Pk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.mft
Manifest number:          A2
Signing time:             Mon 11 May 2026 07:26:37 +0000
Manifest this update:     Mon 11 May 2026 07:26:36 +0000
Manifest next update:     Mon 18 May 2026 07:26:36 +0000
Files and hashes:         1: 99bebnsqx71FDHcVhj6XmVU4Pk4.crl (hash: 7swLWKJlsHVYBEJ5AnvKKXasSqdZnjiog08mzw0IB0M=)
                          2: E68B45D6596711F094054D6BC4F9AE02.roa (hash: sLjeaSGa4LRSlSB8sQPoF/VbSZaMLTrPtakBzYE292w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.crl
                          rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99bebnsqx71FDHcVhj6XmVU4Pk4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 07:26:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166 (0xa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E33AA, serialNumber=F7D6DE6E7B2AC7BD450C7715863E979955383E4E
        Validity
            Not Before: May 11 07:26:36 2026 GMT
            Not After : May 18 07:26:36 2026 GMT
        Subject: CN=6a0184ad-a143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f5:9c:a1:31:9b:4f:83:82:af:96:85:22:c8:
                    aa:2a:2e:4b:11:4e:ec:71:ef:ef:c0:bd:5c:df:5e:
                    2e:bc:ea:15:46:7e:29:e2:33:95:90:0e:46:7e:44:
                    c6:12:f5:52:8d:87:be:12:d8:74:30:8b:a3:cc:95:
                    c0:74:bf:30:aa:6f:a2:fe:95:19:72:6b:53:ab:fd:
                    f7:07:da:3d:ea:e1:eb:04:e5:b0:f6:7d:95:30:1a:
                    d7:4c:2a:c5:45:97:89:fa:94:cb:cc:d0:23:64:eb:
                    e5:9f:9a:33:c2:bc:ac:a7:85:fb:52:f3:1e:3f:18:
                    1c:84:72:41:ff:63:2e:a0:ff:8e:bb:94:ee:80:a9:
                    86:19:6f:56:f6:ec:c1:08:0a:45:57:4b:0a:a4:2e:
                    7e:4f:83:fe:8d:b8:20:e0:56:cd:64:65:8c:35:af:
                    16:70:9e:38:9b:f0:27:f5:83:ea:3b:49:01:a7:e6:
                    1b:06:ff:23:79:d2:45:a9:39:21:74:91:43:f8:6a:
                    18:e7:d6:cc:86:cd:ab:5f:14:30:10:e7:9e:dc:0c:
                    90:7a:d8:6e:1b:85:cd:a8:ce:10:24:fb:2a:35:5b:
                    d2:19:da:5b:b8:ab:f6:eb:30:75:c3:e4:4b:c9:d6:
                    60:c4:8e:81:c5:6f:29:7b:fb:ec:05:e6:45:3f:1e:
                    ca:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:60:A8:C7:AF:38:D6:99:C7:D6:40:AE:28:BD:E8:54:2B:4B:6D:F6
            X509v3 Authority Key Identifier:
                keyid:F7:D6:DE:6E:7B:2A:C7:BD:45:0C:77:15:86:3E:97:99:55:38:3E:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99bebnsqx71FDHcVhj6XmVU4Pk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:7a:18:4e:43:fb:35:5c:2d:04:d1:0f:51:03:c6:55:b0:00:
         42:31:31:ff:ac:0a:0f:03:4c:b5:d5:52:78:64:7e:a2:43:68:
         5b:af:4a:ba:08:2e:1c:30:a8:1c:ae:c7:85:90:c0:1f:1b:83:
         5e:b3:5b:ca:36:7a:e4:3d:25:77:94:32:d1:15:22:2a:89:df:
         9a:75:6b:fa:d4:5c:98:0d:15:62:5d:e2:c5:92:9b:33:35:4e:
         7b:32:d4:da:a9:d7:1c:4d:55:31:2e:ac:c5:d0:e5:fc:74:fe:
         41:6c:5c:dd:3d:76:ed:e0:df:79:cf:17:bb:a2:94:6b:ef:8e:
         19:53:93:ea:55:03:67:22:f2:bd:e4:56:65:d3:65:a6:fa:24:
         38:9f:ed:37:27:56:bc:5c:73:12:7d:80:b0:85:ae:2c:45:9b:
         e8:cc:ba:cd:78:1c:42:13:ae:b0:84:43:87:02:94:48:42:24:
         fd:d4:0d:9c:2c:7a:77:ec:86:1a:d2:25:05:85:2b:93:f4:f8:
         6d:89:41:7d:b1:4a:e2:79:be:c2:bc:59:3b:d0:62:8b:f8:a8:
         97:07:eb:b6:0c:ae:16:ea:4f:57:f5:36:dc:31:4d:12:20:4b:
         86:85:74:90:64:10:8c:d1:4d:8d:24:48:2d:81:4a:4c:05:5d:
         43:b9:0a:e2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTMzQUExMTAvBgNVBAUTKEY3RDZERTZFN0IyQUM3QkQ0NTBDNzcxNTg2M0U5Nzk5
NTUzODNFNEUwHhcNMjYwNTExMDcyNjM2WhcNMjYwNTE4MDcyNjM2WjAYMRYwFAYD
VQQDEw02YTAxODRhZC1hMTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzfWcoTGbT4OCr5aFIsiqKi5LEU7sce/vwL1c314uvOoVRn4p4jOVkA5GfkTG
EvVSjYe+Eth0MIujzJXAdL8wqm+i/pUZcmtTq/33B9o96uHrBOWw9n2VMBrXTCrF
RZeJ+pTLzNAjZOvln5ozwrysp4X7UvMePxgchHJB/2MuoP+Ou5TugKmGGW9W9uzB
CApFV0sKpC5+T4P+jbgg4FbNZGWMNa8WcJ44m/An9YPqO0kBp+YbBv8jedJFqTkh
dJFD+GoY59bMhs2rXxQwEOee3AyQethuG4XNqM4QJPsqNVvSGdpbuKv26zB1w+RL
ydZgxI6BxW8pe/vsBeZFPx7KvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPBgqMev
ONaZx9ZArii96FQrS232MB8GA1UdIwQYMBaAFPfW3m57Kse9RQx3FYY+l5lVOD5O
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzNBQS81MkQ5QUQ0NjU5
NjcxMUYwOEM0MDc5MkNDNEY5QUUwMi85OWJlYm5zcXg3MUZESGNWaGo2WG1WVTRQ
azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzk5YmVibnNxeDcxRkRIY1ZoajZYbVZVNFBrNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MzNBQS81MkQ5QUQ0NjU5NjcxMUYwOEM0MDc5MkNDNEY5QUUwMi85OWJlYm5zcXg3
MUZESGNWaGo2WG1WVTRQazQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAHoYTkP7NVwtBNEPUQPGVbAAQjEx/6wKDwNMtdVSeGR+okNoW69KugguHDCo
HK7HhZDAHxuDXrNbyjZ65D0ld5Qy0RUiKonfmnVr+tRcmA0VYl3ixZKbMzVOezLU
2qnXHE1VMS6sxdDl/HT+QWxc3T127eDfec8Xu6KUa++OGVOT6lUDZyLyveRWZdNl
pvokOJ/tNydWvFxzEn2AsIWuLEWb6My6zXgcQhOusIRDhwKUSEIk/dQNnCx6d+yG
GtIlBYUrk/T4bYlBfbFK4nm+wrxZO9Bii/iolwfrtgyuFupPV/U23DFNEiBLhoV0
kGQQjNFNjSRILYFKTAVdQ7kK4g==
-----END CERTIFICATE-----
Generated at Wed May 13 04:40:28 2026 by rpki-client