Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft
File:                     MMRROGeLe9mvTFyk6xpdPiBhxcE.mft (raw, json)
Hash identifier:          VwOHWTB6+vDrPHV6NESgmh1tvg965Xtoo4izz8P1w7U=
Subject key identifier:   EE:63:62:AC:C3:C7:12:7C:6E:11:E8:96:11:D9:55:CD:C1:D4:6F:F5
Authority key identifier: 30:C4:51:38:67:8B:7B:D9:AF:4C:5C:A4:EB:1A:5D:3E:20:61:C5:C1
Certificate issuer:       /CN=A91F59A6/serialNumber=30C45138678B7BD9AF4C5CA4EB1A5D3E2061C5C1
Certificate serial:       0DD0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft
Manifest number:          0DAA
Signing time:             Tue 12 May 2026 17:58:38 +0000
Manifest this update:     Tue 12 May 2026 17:58:38 +0000
Manifest next update:     Tue 19 May 2026 17:58:38 +0000
Files and hashes:         1: MMRROGeLe9mvTFyk6xpdPiBhxcE.crl (hash: r2xtuZDar5S5DnVtS3I9QH5+HXer6uszAbU1jH8Zezg=)
                          2: 81D3C438E5E611E9A31D0F15C4F9AE02.roa (hash: E6xKBwdXXk6plBWpWlytPRfzZulatDVFNhrKKgIrSig=)
                          3: 82A69048E5E611E9A31D0F15C4F9AE02.roa (hash: AfD5HxA5Aq0yoBWic1AreIDVnB+IzK6gGah8YdarTYM=)
                          4: 813F208AE5E611E9A31D0F15C4F9AE02.roa (hash: rqH3evVe4RRzDIoqiHRSRZUenT8VbTWiFy0YpHu4G6w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.crl
                          rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 17:58:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3536 (0xdd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F59A6, serialNumber=30C45138678B7BD9AF4C5CA4EB1A5D3E2061C5C1
        Validity
            Not Before: May 12 17:58:38 2026 GMT
            Not After : May 19 17:58:38 2026 GMT
        Subject: CN=6a036a4e-0ace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f4:df:a3:88:2f:bf:55:5b:13:77:8c:04:65:
                    8a:f7:8a:47:96:e2:10:41:1b:ca:ad:de:f4:d0:7b:
                    e8:ea:45:9e:92:58:78:35:13:c9:6c:c4:f9:2b:ee:
                    dd:e3:ed:60:29:fe:2c:3f:ec:92:b0:7d:5f:d1:ef:
                    13:6b:d0:85:5a:74:de:8c:c3:42:91:10:49:3e:41:
                    35:98:c2:4f:95:15:6a:03:95:d8:2c:95:be:1b:a8:
                    83:9f:1c:68:09:66:95:b1:be:13:9f:66:67:1c:42:
                    f5:09:0a:ce:8f:3b:5d:a7:ee:22:e3:af:9b:e5:28:
                    7f:b0:6e:06:1c:79:fb:d6:48:de:ae:97:26:c1:28:
                    dd:d8:6c:5a:13:07:2f:b9:18:d6:5f:aa:3e:ca:3c:
                    95:71:8b:c5:33:f5:4a:e9:89:eb:8a:ab:b0:97:ed:
                    b3:06:bd:cf:bf:f0:f4:d8:ab:33:a2:a1:6e:6c:31:
                    ec:01:d7:3a:34:e7:ed:5c:d0:c8:4b:27:46:74:fc:
                    d0:2e:20:68:7a:25:fb:08:cf:ed:fb:26:f7:19:3b:
                    a9:33:e5:7d:ef:23:9a:80:e5:df:cb:07:e5:1e:65:
                    3e:85:dd:0f:0b:db:63:d7:30:a2:ae:cd:ec:65:c6:
                    3b:30:c7:9a:ef:fe:26:bf:a2:00:8c:dd:ea:f4:28:
                    78:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:63:62:AC:C3:C7:12:7C:6E:11:E8:96:11:D9:55:CD:C1:D4:6F:F5
            X509v3 Authority Key Identifier:
                keyid:30:C4:51:38:67:8B:7B:D9:AF:4C:5C:A4:EB:1A:5D:3E:20:61:C5:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:19:a2:21:23:1f:17:3c:b0:b9:01:5a:2e:50:71:89:fd:4e:
         06:d8:3e:ef:ab:15:92:86:a5:50:b1:ad:d4:c6:12:a3:63:2e:
         a8:46:f6:d2:9c:a2:75:50:62:e6:02:24:cb:ca:77:f6:e1:3b:
         d4:12:58:f3:ce:64:70:b0:03:0a:b5:63:9f:ff:16:4a:cd:75:
         bb:86:1c:9a:52:1b:74:19:60:d5:38:d0:6b:8e:9a:06:2d:e6:
         94:ba:a8:8c:94:c8:1d:32:2f:70:43:92:56:da:21:7d:fe:5e:
         54:8f:ff:ec:a6:c2:f7:71:d1:ff:df:d6:d2:83:d6:68:41:76:
         f1:8e:59:91:a2:bb:b7:d1:00:75:d4:e2:fa:53:a2:2a:fc:de:
         98:04:ff:8c:1f:73:29:a6:b2:7d:58:f7:8d:58:3a:fe:8a:ed:
         07:92:d6:95:e8:77:b1:cc:3d:61:7c:8c:ae:96:3d:3e:5d:42:
         81:12:ad:ac:34:27:03:51:1b:95:29:d8:19:cf:e2:23:7b:68:
         24:cd:fb:e3:69:66:71:1a:81:bf:cf:d9:01:1c:6e:bc:30:ff:
         4a:96:46:76:4e:fb:b3:ef:78:ee:7b:79:7f:b0:f8:85:2a:fa:
         81:37:a4:aa:5e:be:77:31:91:ec:c1:76:f1:24:45:ae:84:4c:
         56:ea:dc:98
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjU5QTYxMTAvBgNVBAUTKDMwQzQ1MTM4Njc4QjdCRDlBRjRDNUNBNEVCMUE1RDNF
MjA2MUM1QzEwHhcNMjYwNTEyMTc1ODM4WhcNMjYwNTE5MTc1ODM4WjAYMRYwFAYD
VQQDEw02YTAzNmE0ZS0wYWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0fTfo4gvv1VbE3eMBGWK94pHluIQQRvKrd700Hvo6kWeklh4NRPJbMT5K+7d
4+1gKf4sP+ySsH1f0e8Ta9CFWnTejMNCkRBJPkE1mMJPlRVqA5XYLJW+G6iDnxxo
CWaVsb4Tn2ZnHEL1CQrOjztdp+4i46+b5Sh/sG4GHHn71kjerpcmwSjd2GxaEwcv
uRjWX6o+yjyVcYvFM/VK6Ynriquwl+2zBr3Pv/D02KszoqFubDHsAdc6NOftXNDI
SydGdPzQLiBoeiX7CM/t+yb3GTupM+V97yOagOXfywflHmU+hd0PC9tj1zCirs3s
ZcY7MMea7/4mv6IAjN3q9Ch4VQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO5jYqzD
xxJ8bhHolhHZVc3B1G/1MB8GA1UdIwQYMBaAFDDEUThni3vZr0xcpOsaXT4gYcXB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTlBNi80MDg0OEMzRUU1
RTUxMUU5OUYxRjdDMTNDNEY5QUUwMi9NTVJST0dlTGU5bXZURnlrNnhwZFBpQmh4
Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01NUlJPR2VMZTltdlRGeWs2eHBkUGlCaHhjRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NTlBNi80MDg0OEMzRUU1RTUxMUU5OUYxRjdDMTNDNEY5QUUwMi9NTVJST0dlTGU5
bXZURnlrNnhwZFBpQmh4Y0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApBmiISMfFzywuQFaLlBxif1OBtg+76sVkoalULGt1MYSo2MuqEb20pyidVBi
5gIky8p39uE71BJY885kcLADCrVjn/8WSs11u4YcmlIbdBlg1TjQa46aBi3mlLqo
jJTIHTIvcEOSVtohff5eVI//7KbC93HR/9/W0oPWaEF28Y5ZkaK7t9EAddTi+lOi
KvzemAT/jB9zKaayfVj3jVg6/ortB5LWleh3scw9YXyMrpY9Pl1CgRKtrDQnA1Eb
lSnYGc/iI3toJM3742lmcRqBv8/ZARxuvDD/SpZGdk77s+947nt5f7D4hSr6gTek
ql6+dzGR7MF28SRFroRMVurcmA==
-----END CERTIFICATE-----
Generated at Wed May 13 00:19:38 2026 by rpki-client