Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft
File:                     oVZKa9a5Cg-he_V9i-rJ4pJZves.mft (raw, json)
Hash identifier:          Gbkjj37VYgnuwoCG7O4yYLE5p0S5CDrak+Mo83TcwQI=
Subject key identifier:   D6:80:E5:1E:32:B8:51:6C:50:35:5D:E8:64:51:D2:52:43:85:89:1C
Authority key identifier: A1:56:4A:6B:D6:B9:0A:0F:A1:7B:F5:7D:8B:EA:C9:E2:92:59:BD:EB
Certificate issuer:       /CN=A91F61DA/serialNumber=A1564A6BD6B90A0FA17BF57D8BEAC9E29259BDEB
Certificate serial:       0D60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oVZKa9a5Cg-he_V9i-rJ4pJZves.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft
Manifest number:          0D54
Signing time:             Tue 12 May 2026 18:02:19 +0000
Manifest this update:     Tue 12 May 2026 18:02:18 +0000
Manifest next update:     Tue 19 May 2026 18:02:18 +0000
Files and hashes:         1: oVZKa9a5Cg-he_V9i-rJ4pJZves.crl (hash: i5iqXHjN0vkehgtXD/SPcMgbFxqN54sQMfTs2QNlMvg=)
                          2: EA18D5547D8F11EC8E894A1DC4F9AE02.roa (hash: XMEHY700mwLD1H5UH+kDiYWGkC5d0JNM+7D3NKZezoM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.crl
                          rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oVZKa9a5Cg-he_V9i-rJ4pJZves.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3424 (0xd60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F61DA, serialNumber=A1564A6BD6B90A0FA17BF57D8BEAC9E29259BDEB
        Validity
            Not Before: May 12 18:02:18 2026 GMT
            Not After : May 19 18:02:18 2026 GMT
        Subject: CN=6a036b2b-7b71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ee:27:f5:f6:2c:0f:75:92:c6:7e:35:d2:8d:
                    8f:4d:d6:7d:90:6d:e2:68:d2:7e:cd:b6:76:2f:55:
                    a8:2c:bb:3b:0c:82:7a:44:f8:e8:30:a8:41:81:15:
                    cb:32:f3:ba:2a:f6:f3:f0:45:a0:fd:a8:95:e5:29:
                    bc:a6:a7:c5:40:ee:56:78:11:db:b2:c8:a5:48:9c:
                    64:16:82:6f:ef:01:dc:36:03:ba:80:58:a2:35:49:
                    5d:50:70:e3:38:ec:f5:c0:ca:33:8a:79:04:a9:e0:
                    cb:02:9a:7d:a8:df:a8:31:ab:9a:b6:b1:3b:da:57:
                    db:ef:e1:11:06:fa:f0:ff:37:d1:1f:b9:f3:9a:b2:
                    eb:3f:d1:6c:fa:74:1e:10:a5:7c:6f:e5:b4:de:c9:
                    1f:43:94:a2:50:05:ad:21:7e:87:37:2d:bb:a4:84:
                    e3:ea:1a:bc:55:b9:46:e8:68:15:01:27:54:03:1c:
                    ad:15:88:21:c0:32:16:85:79:7a:23:e4:85:c0:62:
                    87:d1:33:71:a1:42:61:2f:f6:c4:f3:60:3e:00:dd:
                    ca:42:e7:9c:34:ac:94:4d:e0:35:27:81:94:c5:97:
                    fc:ff:09:0a:9c:76:6b:77:4e:66:73:e8:ff:3d:df:
                    3d:12:84:5b:72:be:fd:c9:85:48:dc:c1:ae:b7:bd:
                    e3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:80:E5:1E:32:B8:51:6C:50:35:5D:E8:64:51:D2:52:43:85:89:1C
            X509v3 Authority Key Identifier:
                keyid:A1:56:4A:6B:D6:B9:0A:0F:A1:7B:F5:7D:8B:EA:C9:E2:92:59:BD:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oVZKa9a5Cg-he_V9i-rJ4pJZves.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F61DA/17C81FD0F41E11E9A8343A74C4F9AE02/oVZKa9a5Cg-he_V9i-rJ4pJZves.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:e7:06:fd:92:a8:5e:d5:cb:1d:17:a6:f3:b5:27:06:96:ea:
         bc:35:6b:35:3f:af:37:a7:a6:00:04:d9:e2:d2:7e:6f:ec:ca:
         08:61:67:1b:bf:d8:85:65:17:36:39:86:56:f6:fe:b9:dd:31:
         93:16:20:2a:02:62:ff:6f:28:e4:68:1a:9a:23:ca:85:1a:6b:
         f1:85:97:f8:42:ed:4f:d6:ea:78:9e:74:8a:a0:9f:0a:5a:06:
         03:2e:7a:2f:94:04:c1:b0:c6:7b:a7:55:e5:ee:7c:d4:6e:52:
         44:e8:57:e2:24:4e:d6:23:86:86:ce:f6:b5:6a:ed:2a:c1:89:
         d3:1c:55:ba:fc:e2:51:76:14:92:27:46:1c:a1:f0:04:9f:33:
         14:1d:cb:f2:3f:c3:31:31:9e:b5:9b:fb:d2:8d:97:47:78:e4:
         b6:24:92:22:bd:18:4d:bf:06:fb:36:60:a6:63:80:74:5e:16:
         07:d5:5c:4e:82:91:38:82:61:88:db:3a:6a:d3:31:ba:a3:35:
         6b:96:39:10:ec:43:f9:fa:19:da:00:2d:19:5f:d1:9d:95:84:
         42:7d:3a:65:42:70:42:85:3c:56:43:aa:1b:83:9e:2f:0d:b4:
         0e:31:aa:c2:15:7c:80:b4:b2:c8:1e:0d:14:f0:0e:06:25:11:
         5f:ec:33:37
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjYxREExMTAvBgNVBAUTKEExNTY0QTZCRDZCOTBBMEZBMTdCRjU3RDhCRUFDOUUy
OTI1OUJERUIwHhcNMjYwNTEyMTgwMjE4WhcNMjYwNTE5MTgwMjE4WjAYMRYwFAYD
VQQDEw02YTAzNmIyYi03YjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArO4n9fYsD3WSxn410o2PTdZ9kG3iaNJ+zbZ2L1WoLLs7DIJ6RPjoMKhBgRXL
MvO6Kvbz8EWg/aiV5Sm8pqfFQO5WeBHbssilSJxkFoJv7wHcNgO6gFiiNUldUHDj
OOz1wMozinkEqeDLApp9qN+oMauatrE72lfb7+ERBvrw/zfRH7nzmrLrP9Fs+nQe
EKV8b+W03skfQ5SiUAWtIX6HNy27pITj6hq8VblG6GgVASdUAxytFYghwDIWhXl6
I+SFwGKH0TNxoUJhL/bE82A+AN3KQuecNKyUTeA1J4GUxZf8/wkKnHZrd05mc+j/
Pd89EoRbcr79yYVI3MGut73jjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNaA5R4y
uFFsUDVd6GRR0lJDhYkcMB8GA1UdIwQYMBaAFKFWSmvWuQoPoXv1fYvqyeKSWb3r
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjFEQS8xN0M4MUZEMEY0
MUUxMUU5QTgzNDNBNzRDNEY5QUUwMi9vVlpLYTlhNUNnLWhlX1Y5aS1ySjRwSlp2
ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29WWkthOWE1Q2ctaGVfVjlpLXJKNHBKWnZlcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NjFEQS8xN0M4MUZEMEY0MUUxMUU5QTgzNDNBNzRDNEY5QUUwMi9vVlpLYTlhNUNn
LWhlX1Y5aS1ySjRwSlp2ZXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdecG/ZKoXtXLHRem87UnBpbqvDVrNT+vN6emAATZ4tJ+b+zKCGFnG7/YhWUX
NjmGVvb+ud0xkxYgKgJi/28o5GgamiPKhRpr8YWX+ELtT9bqeJ50iqCfCloGAy56
L5QEwbDGe6dV5e581G5SROhX4iRO1iOGhs72tWrtKsGJ0xxVuvziUXYUkidGHKHw
BJ8zFB3L8j/DMTGetZv70o2XR3jktiSSIr0YTb8G+zZgpmOAdF4WB9VcToKROIJh
iNs6atMxuqM1a5Y5EOxD+foZ2gAtGV/RnZWEQn06ZUJwQoU8VkOqG4OeLw20DjGq
whV8gLSyyB4NFPAOBiURX+wzNw==
-----END CERTIFICATE-----
Generated at Wed May 13 11:11:27 2026 by rpki-client