Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft
File:                     cL0eSV4lCyLieYKWlpeFotd9c38.mft (raw, json)
Hash identifier:          GgAiyfrwUGbEe1yCrCAchKpoaaARJRa14x6SGudSQsc=
Subject key identifier:   49:CC:D7:08:1B:6C:41:02:28:9F:78:70:6B:52:BF:53:F4:4B:96:43
Authority key identifier: 70:BD:1E:49:5E:25:0B:22:E2:79:82:96:96:97:85:A2:D7:7D:73:7F
Certificate issuer:       /CN=A91EE1C4/serialNumber=70BD1E495E250B22E2798296969785A2D77D737F
Certificate serial:       0804
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft
Manifest number:          07EC
Signing time:             Tue 12 May 2026 21:21:56 +0000
Manifest this update:     Tue 12 May 2026 21:21:55 +0000
Manifest next update:     Tue 19 May 2026 21:21:55 +0000
Files and hashes:         1: cL0eSV4lCyLieYKWlpeFotd9c38.crl (hash: u1lfPWD5vFbVmNcmSwPeUNdQtrmyp1o8yN+atadScIc=)
                          2: D992CDCE2FBC11EB8E017F5CC4F9AE02.roa (hash: 9LuZa38M86RpuIBtOyu8RxTzdNFpAwgeI57izlLPJgA=)
                          3: D8EA255C2FBC11EB8E017F5CC4F9AE02.roa (hash: Rlc9tIFJ76w9w+Q182kiW0dYBgbYcuIIgNLuRF6VH4A=)
                          4: AEFB1B262FB111EB89A04D37C4F9AE02.roa (hash: tT41B0xJ+RDXXvQx3CB/Ui5y+1aA7lb07rB6KtZUBJc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.crl
                          rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:57:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2052 (0x804)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE1C4, serialNumber=70BD1E495E250B22E2798296969785A2D77D737F
        Validity
            Not Before: May 12 21:21:55 2026 GMT
            Not After : May 19 21:21:55 2026 GMT
        Subject: CN=6a0399f4-3e93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ed:87:90:fc:9e:29:2c:48:46:32:b9:a5:17:
                    a1:1b:7e:cd:73:76:3d:48:68:77:3a:f3:a0:e4:f0:
                    93:a5:02:fc:ae:6a:c0:ab:fc:b1:92:5a:bc:6e:57:
                    f7:97:7e:02:34:26:34:fa:d4:fe:88:2c:0e:5e:6d:
                    57:09:c0:9d:96:52:ec:7a:e3:7e:b7:f6:e9:54:10:
                    cc:39:15:d3:61:85:b8:38:bf:39:7c:08:2a:2c:bd:
                    e7:e5:70:04:db:c3:ec:25:4d:f3:dc:24:92:23:2a:
                    b0:c5:e4:47:1c:6d:01:26:f4:e4:4c:a6:98:8e:37:
                    4f:92:2a:61:ec:e2:26:fc:a6:e2:97:27:c3:a9:6c:
                    80:25:af:0c:be:fa:8a:37:9d:b4:e7:05:01:98:e7:
                    44:4a:c9:bb:91:20:ae:7b:50:22:aa:96:45:69:9c:
                    2d:4d:0c:a7:8f:fa:19:5f:8d:e4:ce:f4:19:8f:f7:
                    4e:e4:89:ff:33:33:58:db:9e:b9:30:e2:e5:29:14:
                    f3:ab:08:f6:3c:90:88:af:65:7c:0c:fa:cf:c0:68:
                    1f:df:77:62:9b:b8:15:f1:19:ae:79:fe:15:74:e3:
                    96:17:d1:11:f7:f5:d2:4d:50:b5:a5:a8:b6:78:5e:
                    85:5c:6d:0d:97:ac:54:1c:b0:95:fb:72:05:6d:84:
                    ac:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:CC:D7:08:1B:6C:41:02:28:9F:78:70:6B:52:BF:53:F4:4B:96:43
            X509v3 Authority Key Identifier:
                keyid:70:BD:1E:49:5E:25:0B:22:E2:79:82:96:96:97:85:A2:D7:7D:73:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:0d:df:31:c5:a5:5c:67:87:ea:3e:05:ff:27:14:03:4c:01:
         7a:df:48:f5:59:ee:ac:aa:16:1f:66:03:ae:00:44:36:76:5b:
         62:15:4a:50:58:2a:51:d6:76:1e:1a:60:82:63:7a:a1:25:b6:
         3c:63:7d:0c:94:70:05:05:1e:fe:af:39:13:56:90:ed:74:ab:
         3a:b3:84:96:36:78:6f:09:1d:89:2d:5c:a4:94:3e:f9:26:da:
         af:15:0f:28:12:5d:93:74:ec:e2:3e:a9:f8:ca:45:d2:8a:63:
         ba:bb:fb:38:f3:ad:52:91:30:f8:46:90:fe:6e:e9:05:2e:16:
         de:d6:28:26:88:4c:65:78:cf:08:63:91:a7:f4:fc:35:8a:d6:
         a4:10:d0:fe:14:99:76:18:a8:02:91:14:82:f3:91:35:3e:d5:
         8a:3d:ce:ad:66:d6:6a:95:03:08:99:b9:54:86:99:95:09:c7:
         28:72:b8:c2:b6:4b:90:d1:3d:6d:15:ad:12:4c:ea:5f:8a:f9:
         fa:55:f6:19:4b:70:73:a4:b5:a7:79:a5:b3:09:ee:d9:5f:6d:
         8b:fd:55:b9:a8:65:25:13:94:96:26:76:47:8f:37:e9:4d:80:
         1b:c2:56:c3:de:17:13:1d:c5:ff:ea:c7:2d:1c:75:f9:b7:03:
         dd:5f:3e:d3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUUxQzQxMTAvBgNVBAUTKDcwQkQxRTQ5NUUyNTBCMjJFMjc5ODI5Njk2OTc4NUEy
RDc3RDczN0YwHhcNMjYwNTEyMjEyMTU1WhcNMjYwNTE5MjEyMTU1WjAYMRYwFAYD
VQQDEw02YTAzOTlmNC0zZTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs+2HkPyeKSxIRjK5pRehG37Nc3Y9SGh3OvOg5PCTpQL8rmrAq/yxklq8blf3
l34CNCY0+tT+iCwOXm1XCcCdllLseuN+t/bpVBDMORXTYYW4OL85fAgqLL3n5XAE
28PsJU3z3CSSIyqwxeRHHG0BJvTkTKaYjjdPkiph7OIm/KbilyfDqWyAJa8MvvqK
N5205wUBmOdESsm7kSCue1AiqpZFaZwtTQynj/oZX43kzvQZj/dO5In/MzNY2565
MOLlKRTzqwj2PJCIr2V8DPrPwGgf33dim7gV8Rmuef4VdOOWF9ER9/XSTVC1pai2
eF6FXG0Nl6xUHLCV+3IFbYSsNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEnM1wgb
bEECKJ94cGtSv1P0S5ZDMB8GA1UdIwQYMBaAFHC9HkleJQsi4nmClpaXhaLXfXN/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTFDNC9GQzY3MkI3MjJG
QUYxMUVCOTQxNTVGMzNDNEY5QUUwMi9jTDBlU1Y0bEN5TGllWUtXbHBlRm90ZDlj
MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NMMGVTVjRsQ3lMaWVZS1dscGVGb3RkOWMzOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RTFDNC9GQzY3MkI3MjJGQUYxMUVCOTQxNTVGMzNDNEY5QUUwMi9jTDBlU1Y0bEN5
TGllWUtXbHBlRm90ZDljMzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXA3fMcWlXGeH6j4F/ycUA0wBet9I9VnurKoWH2YDrgBENnZbYhVKUFgqUdZ2
HhpggmN6oSW2PGN9DJRwBQUe/q85E1aQ7XSrOrOEljZ4bwkdiS1cpJQ++SbarxUP
KBJdk3Ts4j6p+MpF0opjurv7OPOtUpEw+EaQ/m7pBS4W3tYoJohMZXjPCGORp/T8
NYrWpBDQ/hSZdhioApEUgvORNT7Vij3OrWbWapUDCJm5VIaZlQnHKHK4wrZLkNE9
bRWtEkzqX4r5+lX2GUtwc6S1p3mlswnu2V9ti/1VuahlJROUliZ2R4836U2AG8JW
w94XEx3F/+rHLRx1+bcD3V8+0w==
-----END CERTIFICATE-----
Generated at Wed May 13 00:41:19 2026 by rpki-client