Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.mft
File:                     Km8SBBLYIPn_JM0F1ez0nmYtmco.mft (raw, json)
Hash identifier:          zDpmv2hIvjKJmvFL+cHnl9JOB47XZrwb96Lqf33E18Q=
Subject key identifier:   58:6D:29:75:FE:0A:0A:50:C1:EF:F4:0C:DC:19:21:2D:E2:3A:A2:CE
Authority key identifier: 2A:6F:12:04:12:D8:20:F9:FF:24:CD:05:D5:EC:F4:9E:66:2D:99:CA
Certificate issuer:       /CN=A91F240B/serialNumber=2A6F120412D820F9FF24CD05D5ECF49E662D99CA
Certificate serial:       2035
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Km8SBBLYIPn_JM0F1ez0nmYtmco.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.mft
Manifest number:          2025
Signing time:             Tue 12 May 2026 15:57:49 +0000
Manifest this update:     Tue 12 May 2026 15:57:48 +0000
Manifest next update:     Tue 19 May 2026 15:57:48 +0000
Files and hashes:         1: Km8SBBLYIPn_JM0F1ez0nmYtmco.crl (hash: YaO0se0SoF3WVByn7F/4uybWpYQ7iCB+yYlhnyfCQvE=)
                          2: E352E0A2896F11E7BBF2923CC4F9AE02.roa (hash: f53n49BRZ+a4OFczbu9IHjhQmjnGPixaP4vK3+8G2j0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.crl
                          rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Km8SBBLYIPn_JM0F1ez0nmYtmco.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:57:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8245 (0x2035)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F240B, serialNumber=2A6F120412D820F9FF24CD05D5ECF49E662D99CA
        Validity
            Not Before: May 12 15:57:48 2026 GMT
            Not After : May 19 15:57:48 2026 GMT
        Subject: CN=6a034dfc-862a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:88:e2:57:b8:26:9b:d6:3d:8b:c2:81:f3:68:
                    d5:ad:f6:0c:c7:7c:49:53:bd:4c:63:9d:67:38:86:
                    25:80:df:57:9a:9f:78:62:5f:1f:11:8e:12:70:b5:
                    be:27:5d:58:8e:e0:4d:f7:3a:52:a1:53:89:fd:71:
                    ed:82:7d:0a:88:15:92:87:18:27:60:16:9d:af:da:
                    f8:c1:83:26:5c:26:37:2a:71:2d:92:44:a5:69:bf:
                    5f:17:91:3c:18:ec:d1:03:01:3a:87:5f:06:74:48:
                    18:e8:50:ca:f9:df:cb:13:50:f8:e3:7c:9e:06:a1:
                    02:c8:15:72:65:c6:22:13:58:23:4d:80:26:a6:08:
                    90:c3:71:63:12:56:09:98:91:51:09:77:0b:19:17:
                    2f:4c:2c:80:75:05:05:75:57:96:e4:88:d9:f5:74:
                    43:4e:e3:9d:c1:b0:c1:20:f3:36:41:3b:64:0b:46:
                    40:11:68:76:35:59:f5:11:7e:39:78:c3:77:d2:dc:
                    df:bf:74:ed:c3:2d:6f:9c:ab:c8:95:cd:85:3f:09:
                    4a:58:bc:89:58:89:ad:28:6a:ed:0f:ac:fd:83:52:
                    50:6d:2b:b1:00:49:c1:ce:d9:3b:07:eb:36:76:b1:
                    ea:84:c8:36:1b:eb:a8:cb:d0:cb:39:cb:0c:05:f1:
                    1b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:6D:29:75:FE:0A:0A:50:C1:EF:F4:0C:DC:19:21:2D:E2:3A:A2:CE
            X509v3 Authority Key Identifier:
                keyid:2A:6F:12:04:12:D8:20:F9:FF:24:CD:05:D5:EC:F4:9E:66:2D:99:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Km8SBBLYIPn_JM0F1ez0nmYtmco.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:50:a2:7e:ed:19:0d:53:f8:2e:ab:39:4b:42:05:2f:16:a5:
         c7:ff:7d:a4:47:42:e7:75:16:6a:c7:2a:ab:74:7c:aa:10:05:
         de:8d:d1:07:cb:7c:af:a5:66:27:f8:c9:4d:52:e5:d5:51:60:
         70:07:fc:c4:22:c8:4c:77:98:66:13:af:1c:b0:8b:e7:70:53:
         53:b2:f0:02:98:07:19:73:bb:39:03:cc:15:8b:33:0e:3c:c5:
         c4:28:6d:18:0e:bd:09:18:49:4e:42:21:a5:c2:1a:19:f2:df:
         67:5b:14:64:7a:86:2b:a5:bf:9c:84:dd:2a:0b:c6:7a:6d:ea:
         f8:d0:45:13:0d:d5:45:e6:d4:ac:d5:e8:38:e9:cf:6e:2f:a4:
         66:27:e1:ac:be:e5:ae:8d:f2:23:43:45:2a:41:d6:a7:9d:7f:
         4f:02:1b:c3:a6:96:75:5b:3d:0d:0d:37:f6:c8:79:90:50:01:
         2f:15:6f:33:53:34:b4:d8:ff:e4:db:7a:55:75:bb:0e:7f:20:
         50:5b:67:6d:35:a8:e3:e4:20:6b:99:ab:8b:0a:2f:b8:bd:f0:
         69:eb:f3:21:90:ff:c1:0f:ec:f1:1c:df:b2:f7:4e:f8:ba:0b:
         4a:92:3e:14:2f:13:a8:5e:8f:e8:e1:8c:d5:5c:be:13:aa:89:
         c3:db:90:5d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICIDUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjI0MEIxMTAvBgNVBAUTKDJBNkYxMjA0MTJEODIwRjlGRjI0Q0QwNUQ1RUNGNDlF
NjYyRDk5Q0EwHhcNMjYwNTEyMTU1NzQ4WhcNMjYwNTE5MTU1NzQ4WjAYMRYwFAYD
VQQDEw02YTAzNGRmYy04NjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoYjiV7gmm9Y9i8KB82jVrfYMx3xJU71MY51nOIYlgN9Xmp94Yl8fEY4ScLW+
J11YjuBN9zpSoVOJ/XHtgn0KiBWShxgnYBadr9r4wYMmXCY3KnEtkkSlab9fF5E8
GOzRAwE6h18GdEgY6FDK+d/LE1D443yeBqECyBVyZcYiE1gjTYAmpgiQw3FjElYJ
mJFRCXcLGRcvTCyAdQUFdVeW5IjZ9XRDTuOdwbDBIPM2QTtkC0ZAEWh2NVn1EX45
eMN30tzfv3Ttwy1vnKvIlc2FPwlKWLyJWImtKGrtD6z9g1JQbSuxAEnBztk7B+s2
drHqhMg2G+uoy9DLOcsMBfEbzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFhtKXX+
CgpQwe/0DNwZIS3iOqLOMB8GA1UdIwQYMBaAFCpvEgQS2CD5/yTNBdXs9J5mLZnK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjQwQi81QjczNkQ5MjQz
MzMxMUU2OTU5QTc4MTVDNEY5QUUwMi9LbThTQkJMWUlQbl9KTTBGMWV6MG5tWXRt
Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ttOFNCQkxZSVBuX0pNMEYxZXowbm1ZdG1jby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MjQwQi81QjczNkQ5MjQzMzMxMUU2OTU5QTc4MTVDNEY5QUUwMi9LbThTQkJMWUlQ
bl9KTTBGMWV6MG5tWXRtY28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAX1Cifu0ZDVP4Lqs5S0IFLxalx/99pEdC53UWascqq3R8qhAF3o3RB8t8r6Vm
J/jJTVLl1VFgcAf8xCLITHeYZhOvHLCL53BTU7LwApgHGXO7OQPMFYszDjzFxCht
GA69CRhJTkIhpcIaGfLfZ1sUZHqGK6W/nITdKgvGem3q+NBFEw3VRebUrNXoOOnP
bi+kZifhrL7lro3yI0NFKkHWp51/TwIbw6aWdVs9DQ039sh5kFABLxVvM1M0tNj/
5Nt6VXW7Dn8gUFtnbTWo4+Qga5mriwovuL3waevzIZD/wQ/s8RzfsvdO+LoLSpI+
FC8TqF6P6OGM1Vy+E6qJw9uQXQ==
-----END CERTIFICATE-----
Generated at Wed May 13 14:49:19 2026 by rpki-client