Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft
File:                     epirabcrqsZmDlTdHG2KBi4s0v4.mft (raw, json)
Hash identifier:          4+sJe9Lrjy72FvyZjffNzayafEbP6y21OcolBHD9iZY=
Subject key identifier:   B7:2B:F5:98:DE:AF:1E:B6:BF:85:F1:79:3E:27:16:19:B4:54:5E:BA
Authority key identifier: 7A:98:AB:69:B7:2B:AA:C6:66:0E:54:DD:1C:6D:8A:06:2E:2C:D2:FE
Certificate issuer:       /CN=A91E6038/serialNumber=7A98AB69B72BAAC6660E54DD1C6D8A062E2CD2FE
Certificate serial:       0427
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft
Manifest number:          041D
Signing time:             Mon 11 May 2026 00:26:30 +0000
Manifest this update:     Mon 11 May 2026 00:26:30 +0000
Manifest next update:     Mon 18 May 2026 00:26:30 +0000
Files and hashes:         1: epirabcrqsZmDlTdHG2KBi4s0v4.crl (hash: YqqETpSxV6pRsOCDPc2lYSAQ8wzNuV2+KmlHTviCnK8=)
                          2: C7C714A2B19D11F0AB4AC87EC4F9AE02.roa (hash: D6VPmXFDc+G5ZgUvGAmbcPnFMvgmVskOcccS3cS1IpY=)
                          3: BA6115F6B19D11F08DA2A57EC4F9AE02.roa (hash: Utidw5eD+Ey8KmLxBNEaERSjjHpRl3N3GM7Q067OeCo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.crl
                          rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 00:26:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1063 (0x427)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6038, serialNumber=7A98AB69B72BAAC6660E54DD1C6D8A062E2CD2FE
        Validity
            Not Before: May 11 00:26:30 2026 GMT
            Not After : May 18 00:26:30 2026 GMT
        Subject: CN=6a012236-3c6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:52:da:5f:7d:43:68:d7:06:d3:ff:d9:af:91:
                    ec:fc:b0:b5:3c:76:62:ac:ae:06:13:07:fb:ad:09:
                    a6:cb:08:0d:75:c5:62:ae:f1:d2:e6:95:0e:bf:f4:
                    13:a5:29:6e:e6:48:70:89:a1:33:d9:7c:6b:c6:90:
                    25:55:ac:61:b5:6b:4e:8d:df:38:af:4b:7c:fd:98:
                    77:a5:2c:f3:95:3d:85:b6:ec:53:29:5a:3b:e1:6a:
                    84:57:ed:a7:37:92:ca:dc:37:69:d6:10:2e:7b:51:
                    7e:4d:29:ab:7b:80:b0:dc:e3:df:a4:35:4d:d3:c1:
                    94:69:97:f9:8c:c4:ee:7f:d9:51:d6:9a:48:d0:89:
                    12:bc:28:69:7e:45:24:18:6b:36:de:79:21:8c:be:
                    02:4e:76:b4:0c:10:a9:43:3c:bb:33:c7:91:20:37:
                    19:76:2a:06:c1:51:f1:20:05:38:d3:1d:20:53:6c:
                    65:11:b0:0c:08:cd:a7:af:4a:90:f1:a5:a8:65:1c:
                    da:32:5f:4d:3d:2d:ef:37:0d:e8:42:c7:44:45:09:
                    90:48:07:82:a6:73:30:d8:cb:6c:f5:69:a6:ac:92:
                    5a:54:95:87:a8:77:cd:9f:2e:86:5a:6f:26:04:b2:
                    36:06:47:44:aa:5e:66:bd:f9:31:c1:ac:0e:f6:f1:
                    61:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:2B:F5:98:DE:AF:1E:B6:BF:85:F1:79:3E:27:16:19:B4:54:5E:BA
            X509v3 Authority Key Identifier:
                keyid:7A:98:AB:69:B7:2B:AA:C6:66:0E:54:DD:1C:6D:8A:06:2E:2C:D2:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:d4:a5:c4:52:c2:d5:36:c0:6b:cd:5f:a2:3f:33:20:66:b8:
         64:8d:84:d5:87:98:27:25:93:1d:cf:30:92:23:d8:8a:a5:f2:
         5f:06:13:60:9f:07:c1:5f:cc:47:78:43:bf:b6:ac:88:30:4b:
         01:c0:4c:fa:db:e5:8d:a0:90:69:63:83:26:49:f3:47:1e:db:
         45:bf:fc:e2:03:ba:67:67:22:28:62:8a:44:95:62:54:2d:fa:
         b7:61:81:21:b6:e3:12:da:a4:43:ee:4a:d5:74:94:78:db:f1:
         6a:42:c6:71:f8:68:8d:d1:e5:23:50:77:17:1b:23:60:ab:ac:
         7e:40:e9:7a:b3:f1:91:bd:75:b7:70:1f:48:12:5c:11:d9:87:
         6f:52:e0:2f:2e:f7:38:2b:1c:70:d8:28:68:2b:53:74:07:56:
         89:e1:65:44:16:9f:ea:77:51:a1:01:02:4b:3c:4d:81:cb:c2:
         0d:89:04:85:38:0a:38:a1:89:a5:a1:8a:a5:aa:b4:35:c9:45:
         82:e4:19:e9:ab:15:24:21:7d:b5:a7:9d:aa:80:45:0b:a1:d4:
         e5:8e:29:b3:8f:ee:ff:80:55:53:d6:12:00:de:80:d7:5a:5d:
         3a:59:f3:8b:62:e8:52:0f:d3:07:ad:ba:ae:e2:ed:78:1a:a4:
         0c:f1:70:1a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBCcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYwMzgxMTAvBgNVBAUTKDdBOThBQjY5QjcyQkFBQzY2NjBFNTRERDFDNkQ4QTA2
MkUyQ0QyRkUwHhcNMjYwNTExMDAyNjMwWhcNMjYwNTE4MDAyNjMwWjAYMRYwFAYD
VQQDEw02YTAxMjIzNi0zYzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzVLaX31DaNcG0//Zr5Hs/LC1PHZirK4GEwf7rQmmywgNdcVirvHS5pUOv/QT
pSlu5khwiaEz2XxrxpAlVaxhtWtOjd84r0t8/Zh3pSzzlT2FtuxTKVo74WqEV+2n
N5LK3Ddp1hAue1F+TSmre4Cw3OPfpDVN08GUaZf5jMTuf9lR1ppI0IkSvChpfkUk
GGs23nkhjL4CTna0DBCpQzy7M8eRIDcZdioGwVHxIAU40x0gU2xlEbAMCM2nr0qQ
8aWoZRzaMl9NPS3vNw3oQsdERQmQSAeCpnMw2Mts9WmmrJJaVJWHqHfNny6GWm8m
BLI2BkdEql5mvfkxwawO9vFh0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLcr9Zje
rx62v4XxeT4nFhm0VF66MB8GA1UdIwQYMBaAFHqYq2m3K6rGZg5U3RxtigYuLNL+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjAzOC85MUUwQzg1MkFG
RkMxMUVDQjBDMzg4NURDNEY5QUUwMi9lcGlyYWJjcnFzWm1EbFRkSEcyS0JpNHMw
djQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VwaXJhYmNycXNabURsVGRIRzJLQmk0czB2NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NjAzOC85MUUwQzg1MkFGRkMxMUVDQjBDMzg4NURDNEY5QUUwMi9lcGlyYWJjcnFz
Wm1EbFRkSEcyS0JpNHMwdjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbdSlxFLC1TbAa81foj8zIGa4ZI2E1YeYJyWTHc8wkiPYiqXyXwYTYJ8HwV/M
R3hDv7asiDBLAcBM+tvljaCQaWODJknzRx7bRb/84gO6Z2ciKGKKRJViVC36t2GB
IbbjEtqkQ+5K1XSUeNvxakLGcfhojdHlI1B3FxsjYKusfkDperPxkb11t3AfSBJc
EdmHb1LgLy73OCsccNgoaCtTdAdWieFlRBaf6ndRoQECSzxNgcvCDYkEhTgKOKGJ
paGKpaq0NclFguQZ6asVJCF9taedqoBFC6HU5Y4ps4/u/4BVU9YSAN6A11pdOlnz
i2LoUg/TB626ruLteBqkDPFwGg==
-----END CERTIFICATE-----
Generated at Wed May 13 03:41:18 2026 by rpki-client