Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.mft
File:                     F2pOA7VAryUUqLxxnCug-fdv-y8.mft (raw, json)
Hash identifier:          1EmA4JC+r7vlePPu+c47aQLXJ8KHDuVKZL6xKWzXrYc=
Subject key identifier:   05:CF:F5:C6:9F:2A:D0:82:96:C5:D5:66:65:02:8A:B7:D0:60:BC:5A
Authority key identifier: 17:6A:4E:03:B5:40:AF:25:14:A8:BC:71:9C:2B:A0:F9:F7:6F:FB:2F
Certificate issuer:       /CN=A91F2230/serialNumber=176A4E03B540AF2514A8BC719C2BA0F9F76FFB2F
Certificate serial:       0FF4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2pOA7VAryUUqLxxnCug-fdv-y8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.mft
Manifest number:          0FEA
Signing time:             Tue 12 May 2026 17:29:58 +0000
Manifest this update:     Tue 12 May 2026 17:29:57 +0000
Manifest next update:     Tue 19 May 2026 17:29:57 +0000
Files and hashes:         1: F2pOA7VAryUUqLxxnCug-fdv-y8.crl (hash: vpZHLaNLP2uNPnRGf4VYr3Jb7eamMW1eIrnfS5M99gs=)
                          2: 09CEF4D0708411E9AC9EA90EC4F9AE02.roa (hash: hr/wquqVL5NSo19ZoDQBpFuCTGdgVWRZL+OouZ/q0dk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.crl
                          rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2pOA7VAryUUqLxxnCug-fdv-y8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 17:29:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4084 (0xff4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2230, serialNumber=176A4E03B540AF2514A8BC719C2BA0F9F76FFB2F
        Validity
            Not Before: May 12 17:29:57 2026 GMT
            Not After : May 19 17:29:57 2026 GMT
        Subject: CN=6a036396-d4e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6a:ac:8e:36:ad:5a:a5:b1:c3:61:0d:67:07:
                    1b:66:34:4f:d8:7b:88:ec:2e:94:bf:d7:65:da:25:
                    c8:6f:b7:86:0b:ad:dd:6f:76:54:29:49:aa:cd:2c:
                    a1:56:0f:e3:25:97:c7:1f:c4:0b:10:15:6d:77:77:
                    99:da:d6:b5:f1:92:0d:b8:b2:65:22:1c:6e:6c:22:
                    f9:97:6e:94:fd:13:58:64:0e:b7:c3:00:22:67:98:
                    e4:29:45:0b:53:4b:8f:5c:ef:99:ff:45:61:ff:0b:
                    8f:6f:69:72:18:cd:f1:85:23:ee:76:7e:6d:0b:4e:
                    e0:74:9b:3b:db:73:e9:1f:42:f6:ac:f9:62:8c:da:
                    e7:de:68:64:e3:b3:e9:f1:12:da:43:42:48:f4:10:
                    db:9c:b3:e3:ad:29:bb:58:c5:1f:8e:ba:fc:e4:e3:
                    90:60:73:30:2e:da:b5:b3:c6:df:35:50:40:19:a6:
                    18:7c:55:2a:72:e4:57:20:97:70:dd:4d:39:18:12:
                    df:b2:a4:a3:7b:12:27:5c:fb:69:80:10:6e:86:a4:
                    35:16:d1:20:51:09:8c:25:1c:e4:63:92:1f:b3:78:
                    89:f6:90:68:ed:25:c8:e2:31:cb:b5:8a:1a:13:0f:
                    04:d1:ae:9e:50:87:5a:fb:80:a2:c9:43:5b:45:76:
                    d4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:CF:F5:C6:9F:2A:D0:82:96:C5:D5:66:65:02:8A:B7:D0:60:BC:5A
            X509v3 Authority Key Identifier:
                keyid:17:6A:4E:03:B5:40:AF:25:14:A8:BC:71:9C:2B:A0:F9:F7:6F:FB:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2pOA7VAryUUqLxxnCug-fdv-y8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:f0:63:5e:c2:86:72:63:b7:4a:97:e4:00:01:c4:77:be:72:
         ca:69:34:34:f3:ed:75:91:09:a8:bd:d0:93:20:d8:e6:e2:e1:
         4f:1f:36:af:c4:17:1a:bf:58:25:ec:82:a3:4f:a9:2f:3c:7f:
         45:da:32:c2:fb:48:9c:79:05:fd:70:d0:e4:63:1f:ee:46:0c:
         b7:b8:eb:6d:9a:5c:66:8c:af:26:5c:3c:a8:de:d1:95:3b:89:
         d1:9c:79:ed:14:a5:b3:32:05:ca:69:8e:20:bf:67:34:e5:f0:
         62:4e:e2:68:d1:1d:ee:d3:21:f7:cd:df:d4:cc:38:47:30:d2:
         25:4e:30:94:6f:b2:91:f1:0a:a9:5e:84:30:6d:de:76:b8:01:
         1f:ed:96:75:8d:f3:80:7f:3d:5f:1a:75:da:24:07:6b:df:14:
         bc:63:91:18:3a:60:f5:27:7e:be:b2:89:55:ac:d0:74:35:86:
         1f:38:f0:e3:7a:33:68:eb:22:7f:c1:db:4a:62:c9:36:6d:70:
         50:f2:da:89:55:ef:f0:8d:48:05:3d:50:0a:f5:e4:52:6c:88:
         0b:b0:84:36:d0:e7:12:c4:32:14:22:78:85:f9:4a:fe:cd:c6:
         7d:ad:5d:84:07:f9:49:1a:fb:53:01:6e:d0:cf:92:e4:38:2c:
         7a:93:8a:83
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICD/QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjIyMzAxMTAvBgNVBAUTKDE3NkE0RTAzQjU0MEFGMjUxNEE4QkM3MTlDMkJBMEY5
Rjc2RkZCMkYwHhcNMjYwNTEyMTcyOTU3WhcNMjYwNTE5MTcyOTU3WjAYMRYwFAYD
VQQDEw02YTAzNjM5Ni1kNGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAj2qsjjatWqWxw2ENZwcbZjRP2HuI7C6Uv9dl2iXIb7eGC63db3ZUKUmqzSyh
Vg/jJZfHH8QLEBVtd3eZ2ta18ZINuLJlIhxubCL5l26U/RNYZA63wwAiZ5jkKUUL
U0uPXO+Z/0Vh/wuPb2lyGM3xhSPudn5tC07gdJs723PpH0L2rPlijNrn3mhk47Pp
8RLaQ0JI9BDbnLPjrSm7WMUfjrr85OOQYHMwLtq1s8bfNVBAGaYYfFUqcuRXIJdw
3U05GBLfsqSjexInXPtpgBBuhqQ1FtEgUQmMJRzkY5Ifs3iJ9pBo7SXI4jHLtYoa
Ew8E0a6eUIda+4CiyUNbRXbU2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAXP9caf
KtCClsXVZmUCirfQYLxaMB8GA1UdIwQYMBaAFBdqTgO1QK8lFKi8cZwroPn3b/sv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjIzMC9BREZBNTU0Qzcw
ODIxMUU5QjdCQzM5MEFDNEY5QUUwMi9GMnBPQTdWQXJ5VVVxTHh4bkN1Zy1mZHYt
eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0YycE9BN1ZBcnlVVXFMeHhuQ3VnLWZkdi15OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MjIzMC9BREZBNTU0QzcwODIxMUU5QjdCQzM5MEFDNEY5QUUwMi9GMnBPQTdWQXJ5
VVVxTHh4bkN1Zy1mZHYteTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEfBjXsKGcmO3SpfkAAHEd75yymk0NPPtdZEJqL3QkyDY5uLhTx82r8QXGr9Y
JeyCo0+pLzx/RdoywvtInHkF/XDQ5GMf7kYMt7jrbZpcZoyvJlw8qN7RlTuJ0Zx5
7RSlszIFymmOIL9nNOXwYk7iaNEd7tMh983f1Mw4RzDSJU4wlG+ykfEKqV6EMG3e
drgBH+2WdY3zgH89Xxp12iQHa98UvGORGDpg9Sd+vrKJVazQdDWGHzjw43ozaOsi
f8HbSmLJNm1wUPLaiVXv8I1IBT1QCvXkUmyIC7CENtDnEsQyFCJ4hflK/s3Gfa1d
hAf5SRr7UwFu0M+S5DgsepOKgw==
-----END CERTIFICATE-----
Generated at Wed May 13 05:18:21 2026 by rpki-client