Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft
File:                     tdM6ejKlCC0za2sFt5ZfMHRwonY.mft (raw, json)
Hash identifier:          +vaBT9+jqy/lmd1wjyGnHwEbWsmvUL6IGmoTIiwLcQs=
Subject key identifier:   E6:7C:B3:2A:DE:59:E2:A8:B4:70:54:5C:7F:4D:E4:EB:9B:DD:D5:D3
Authority key identifier: B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76
Certificate issuer:       /CN=A91F1446/serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276
Certificate serial:       0403
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft
Manifest number:          03EA
Signing time:             Wed 13 May 2026 00:38:07 +0000
Manifest this update:     Wed 13 May 2026 00:38:06 +0000
Manifest next update:     Wed 20 May 2026 00:38:06 +0000
Files and hashes:         1: tdM6ejKlCC0za2sFt5ZfMHRwonY.crl (hash: y8HuTLchmQL3IsPN2CTq1BQ+5H2rBRDg0H/DCTM6Qq8=)
                          2: 31521640C6CB11ECB185E43EC4F9AE02.roa (hash: JsxVCM2jhz9Lx7VvZgXYGsgvn7pvcdkyEVtE+jYL+ow=)
                          3: D56B4ABED54E11EFAD8C4E52C4F9AE02.roa (hash: GdMrJQOmwecU85NbmUFnrqBWRHWEAMkwnRXidf68flk=)
                          4: 69B0C410EC2411EFBE58C381C4F9AE02.roa (hash: jSMX3ABEtZSpyQCFX5+dmu6REmnL6WokXfamqru1uKo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl
                          rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 00:38:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1027 (0x403)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1446, serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276
        Validity
            Not Before: May 13 00:38:06 2026 GMT
            Not After : May 20 00:38:06 2026 GMT
        Subject: CN=6a03c7ee-8a7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d3:a1:73:42:be:48:7e:b0:ea:66:f1:f4:29:
                    c3:21:be:a4:4b:11:b8:41:af:b9:74:3f:ca:b0:cd:
                    ec:36:c4:76:a6:09:d2:60:20:83:57:6e:e3:7b:02:
                    1f:78:2b:fe:fd:44:26:f1:cf:98:db:29:14:eb:b6:
                    38:e2:25:00:ea:d7:0e:e3:db:ba:47:e6:aa:37:98:
                    e5:6c:43:90:35:20:e2:c4:15:c9:a5:0b:a8:f6:42:
                    9e:11:b6:6f:f1:29:93:72:c4:6b:81:a2:31:57:65:
                    13:3e:72:ca:8d:b4:90:df:bc:91:8a:81:c8:8b:fc:
                    a1:6c:b9:8c:14:6e:f0:28:d0:d3:ce:5e:4d:47:c3:
                    4a:7d:ef:e5:49:1d:ca:66:98:c5:d4:96:02:c0:26:
                    13:9c:87:11:00:bd:b6:6b:54:1a:09:85:a4:b0:0c:
                    a3:2e:32:d6:a2:57:e3:1a:30:f8:db:7c:f7:33:61:
                    3c:8b:56:fc:55:65:71:a8:b9:6a:d5:90:7f:fa:40:
                    a8:d9:62:fc:f3:f9:41:ea:9f:ac:bc:43:64:a7:5a:
                    53:55:fa:af:bf:17:7b:02:c6:66:39:6e:13:30:f2:
                    ab:c8:7b:3b:21:a3:33:1a:3c:14:8f:00:37:f6:57:
                    db:54:39:63:04:c8:9a:3c:09:c6:51:67:5d:22:13:
                    79:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:7C:B3:2A:DE:59:E2:A8:B4:70:54:5C:7F:4D:E4:EB:9B:DD:D5:D3
            X509v3 Authority Key Identifier:
                keyid:B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:3b:7d:2a:51:52:bd:91:7a:b7:6e:fc:21:12:34:4f:39:f4:
         94:35:1c:35:06:b8:9f:29:ea:83:dc:46:70:33:db:31:ae:48:
         c7:f7:c9:b7:f8:05:e4:33:1c:32:97:2e:16:d1:14:f5:6a:be:
         68:19:e7:53:d9:93:8f:c6:51:7e:00:8c:18:e7:55:ee:b6:0f:
         ce:89:9b:5e:f8:5f:19:fe:65:68:34:eb:2d:e0:e1:85:e1:bf:
         1f:05:e6:5d:3e:66:04:dd:76:04:ad:af:5b:99:9b:01:6e:65:
         1c:63:62:76:a9:90:e3:ec:cc:41:55:af:8b:01:9f:e9:0d:c0:
         b4:b1:ae:9a:21:8d:b8:05:d1:f1:29:56:19:f2:2f:6b:9b:d5:
         7d:34:8d:60:04:34:82:f9:d3:4b:b6:de:6f:74:94:60:d2:29:
         54:1b:92:c8:c5:33:67:45:f6:2a:d2:c3:a7:61:4c:d2:f6:6c:
         60:be:24:e9:ab:e9:a3:4d:2e:65:2b:53:6a:fd:09:96:c4:f2:
         67:70:94:36:5c:05:6e:dd:42:b0:31:bf:f2:37:a9:bd:ea:32:
         ac:b3:a8:f7:49:f4:82:95:97:01:1f:18:df:dd:f6:f1:ec:06:
         35:9d:ae:98:dc:da:26:e9:c1:e0:79:a6:ff:df:c4:a4:0b:28:
         72:cf:a1:b4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBAMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjE0NDYxMTAvBgNVBAUTKEI1RDMzQTdBMzJBNTA4MkQzMzZCNkIwNUI3OTY1RjMw
NzQ3MEEyNzYwHhcNMjYwNTEzMDAzODA2WhcNMjYwNTIwMDAzODA2WjAYMRYwFAYD
VQQDEw02YTAzYzdlZS04YTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy9Ohc0K+SH6w6mbx9CnDIb6kSxG4Qa+5dD/KsM3sNsR2pgnSYCCDV27jewIf
eCv+/UQm8c+Y2ykU67Y44iUA6tcO49u6R+aqN5jlbEOQNSDixBXJpQuo9kKeEbZv
8SmTcsRrgaIxV2UTPnLKjbSQ37yRioHIi/yhbLmMFG7wKNDTzl5NR8NKfe/lSR3K
ZpjF1JYCwCYTnIcRAL22a1QaCYWksAyjLjLWolfjGjD423z3M2E8i1b8VWVxqLlq
1ZB/+kCo2WL88/lB6p+svENkp1pTVfqvvxd7AsZmOW4TMPKryHs7IaMzGjwUjwA3
9lfbVDljBMiaPAnGUWddIhN5NwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOZ8syre
WeKotHBUXH9N5Oub3dXTMB8GA1UdIwQYMBaAFLXTOnoypQgtM2trBbeWXzB0cKJ2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTQ0Ni8yQTFGRjU2RUM1
MzUxMUVDOEU1QTAzMTNDNEY5QUUwMi90ZE02ZWpLbENDMHphMnNGdDVaZk1IUndv
blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RkTTZlaktsQ0MwemEyc0Z0NVpmTUhSd29uWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MTQ0Ni8yQTFGRjU2RUM1MzUxMUVDOEU1QTAzMTNDNEY5QUUwMi90ZE02ZWpLbEND
MHphMnNGdDVaZk1IUndvblkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABTt9KlFSvZF6t278IRI0Tzn0lDUcNQa4nynqg9xGcDPbMa5Ix/fJt/gF5DMc
MpcuFtEU9Wq+aBnnU9mTj8ZRfgCMGOdV7rYPzombXvhfGf5laDTrLeDhheG/HwXm
XT5mBN12BK2vW5mbAW5lHGNidqmQ4+zMQVWviwGf6Q3AtLGumiGNuAXR8SlWGfIv
a5vVfTSNYAQ0gvnTS7beb3SUYNIpVBuSyMUzZ0X2KtLDp2FM0vZsYL4k6avpo00u
ZStTav0JlsTyZ3CUNlwFbt1CsDG/8jepveoyrLOo90n0gpWXAR8Y39328ewGNZ2u
mNzaJunB4Hmm/9/EpAsocs+htA==
-----END CERTIFICATE-----
Generated at Wed May 13 05:04:48 2026 by rpki-client