Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft
File:                     eEGgmdwU4pNx5MwYVIn_riEyI0k.mft (raw, json)
Hash identifier:          ZqH2ZbOCowlzPkpImUoNciyYab/8WdnF4H4R+R9b07M=
Subject key identifier:   EF:31:48:53:EE:0C:9B:91:BE:8E:4F:A6:35:EE:7E:B7:8E:E5:73:A9
Authority key identifier: 78:41:A0:99:DC:14:E2:93:71:E4:CC:18:54:89:FF:AE:21:32:23:49
Certificate issuer:       /CN=A91F8966/serialNumber=7841A099DC14E29371E4CC185489FFAE21322349
Certificate serial:       0A17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft
Manifest number:          0A0E
Signing time:             Tue 12 May 2026 19:51:58 +0000
Manifest this update:     Tue 12 May 2026 19:51:58 +0000
Manifest next update:     Tue 19 May 2026 19:51:58 +0000
Files and hashes:         1: eEGgmdwU4pNx5MwYVIn_riEyI0k.crl (hash: JSOkoK5gNGoEUKUf1tTiOPAtUKlTZSkNRHvsqop6YWY=)
                          2: CA4C06CA976711EAA651F944C4F9AE02.roa (hash: HjiLuMpEKDFq4BbZHd2t+ZeOPmcjFgJgpkLo6Is6Q70=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.crl
                          rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:51:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2583 (0xa17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8966, serialNumber=7841A099DC14E29371E4CC185489FFAE21322349
        Validity
            Not Before: May 12 19:51:58 2026 GMT
            Not After : May 19 19:51:58 2026 GMT
        Subject: CN=6a0384de-21be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5a:dd:76:08:25:4c:0a:55:8a:e3:ba:38:bc:
                    6f:fc:ed:5a:c3:56:59:24:ea:8e:26:5d:bb:d5:45:
                    6c:53:eb:96:5b:48:3d:20:44:09:63:e5:b5:05:b7:
                    44:06:7b:7a:55:d2:78:9a:72:5b:4b:80:d6:96:95:
                    4b:78:0e:60:d6:fe:b8:32:0b:87:40:f6:1e:e5:12:
                    d7:81:89:b6:b8:26:2c:4a:28:fb:21:3f:45:26:90:
                    22:07:7a:17:06:3d:bf:84:d8:8b:98:cb:8b:97:c6:
                    f9:ce:4f:b1:f9:6c:a4:99:6b:1c:c6:31:7c:01:ee:
                    27:88:8f:40:38:21:44:41:fb:68:34:63:44:11:35:
                    ea:6c:dd:e1:20:3f:f3:25:32:96:9f:a9:58:30:76:
                    d4:d8:bb:31:41:d7:31:41:e4:60:55:8f:17:80:bc:
                    86:dc:7d:34:99:bb:9d:7e:a6:f9:e9:1a:8b:1c:7f:
                    e1:b6:c3:bc:ba:9f:62:4a:c1:c0:b0:52:29:27:9f:
                    27:ab:96:9b:46:7a:9e:04:3a:d2:00:26:95:c4:b0:
                    19:e7:57:ed:16:4f:35:c6:c7:1c:53:31:11:64:96:
                    52:02:a2:d7:c1:1b:12:f1:17:3a:7e:56:ef:d4:09:
                    70:80:9e:a1:ad:51:e2:89:c0:74:b5:fd:3c:f5:c5:
                    e5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:31:48:53:EE:0C:9B:91:BE:8E:4F:A6:35:EE:7E:B7:8E:E5:73:A9
            X509v3 Authority Key Identifier:
                keyid:78:41:A0:99:DC:14:E2:93:71:E4:CC:18:54:89:FF:AE:21:32:23:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:68:e2:43:16:29:8a:1d:7a:9d:7f:1b:b1:a2:e6:fd:7c:fa:
         79:83:34:25:05:68:63:9d:48:4d:e0:89:32:cd:db:70:7f:84:
         4f:2d:84:bf:4b:c2:ee:b7:4a:91:2c:30:5a:9f:d3:b3:68:0a:
         3f:90:8f:16:71:28:98:a5:79:d4:41:27:2a:96:2e:e1:c5:d8:
         82:bb:a6:e4:ad:6d:3d:89:90:ad:c2:ae:6f:b4:43:67:d4:34:
         71:df:f0:b6:63:16:3e:85:6b:81:6d:44:db:d9:2b:f9:11:ee:
         47:b6:6c:2e:ba:35:05:99:d3:7b:0c:8d:c1:76:08:bf:92:43:
         b2:90:f8:93:a7:02:f2:32:35:2f:66:8d:22:f2:98:e7:fd:34:
         d3:4a:eb:28:90:b4:ca:38:67:31:13:72:7f:53:b3:08:f6:dc:
         f0:84:3f:78:28:0c:62:9e:be:88:02:f5:85:63:fb:47:8e:35:
         b4:06:22:61:b4:46:1f:d4:b5:c3:75:58:8f:69:15:34:79:56:
         18:46:37:72:34:27:ec:db:a9:2a:ba:f0:fb:0d:e9:69:16:36:
         10:d3:73:08:32:ba:d5:12:f5:61:6c:62:bb:7b:84:01:30:37:
         90:86:ab:67:3c:de:b9:7b:b6:ab:08:e8:a2:28:ea:30:32:a9:
         44:47:1b:9f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICChcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjg5NjYxMTAvBgNVBAUTKDc4NDFBMDk5REMxNEUyOTM3MUU0Q0MxODU0ODlGRkFF
MjEzMjIzNDkwHhcNMjYwNTEyMTk1MTU4WhcNMjYwNTE5MTk1MTU4WjAYMRYwFAYD
VQQDEw02YTAzODRkZS0yMWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0lrddgglTApViuO6OLxv/O1aw1ZZJOqOJl271UVsU+uWW0g9IEQJY+W1BbdE
Bnt6VdJ4mnJbS4DWlpVLeA5g1v64MguHQPYe5RLXgYm2uCYsSij7IT9FJpAiB3oX
Bj2/hNiLmMuLl8b5zk+x+WykmWscxjF8Ae4niI9AOCFEQftoNGNEETXqbN3hID/z
JTKWn6lYMHbU2LsxQdcxQeRgVY8XgLyG3H00mbudfqb56RqLHH/htsO8up9iSsHA
sFIpJ58nq5abRnqeBDrSACaVxLAZ51ftFk81xsccUzERZJZSAqLXwRsS8Rc6flbv
1AlwgJ6hrVHiicB0tf089cXl4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO8xSFPu
DJuRvo5PpjXufreO5XOpMB8GA1UdIwQYMBaAFHhBoJncFOKTceTMGFSJ/64hMiNJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODk2Ni8zRUYyMjQwMjk3
NjYxMUVBOUVCNDk1NDJDNEY5QUUwMi9lRUdnbWR3VTRwTng1TXdZVkluX3JpRXlJ
MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VFR2dtZHdVNHBOeDVNd1lWSW5fcmlFeUkway5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
ODk2Ni8zRUYyMjQwMjk3NjYxMUVBOUVCNDk1NDJDNEY5QUUwMi9lRUdnbWR3VTRw
Tng1TXdZVkluX3JpRXlJMGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHGjiQxYpih16nX8bsaLm/Xz6eYM0JQVoY51ITeCJMs3bcH+ETy2Ev0vC7rdK
kSwwWp/Ts2gKP5CPFnEomKV51EEnKpYu4cXYgrum5K1tPYmQrcKub7RDZ9Q0cd/w
tmMWPoVrgW1E29kr+RHuR7ZsLro1BZnTewyNwXYIv5JDspD4k6cC8jI1L2aNIvKY
5/0000rrKJC0yjhnMRNyf1OzCPbc8IQ/eCgMYp6+iAL1hWP7R441tAYiYbRGH9S1
w3VYj2kVNHlWGEY3cjQn7NupKrrw+w3paRY2ENNzCDK61RL1YWxiu3uEATA3kIar
ZzzeuXu2qwjooijqMDKpREcbnw==
-----END CERTIFICATE-----
Generated at Wed May 13 01:43:27 2026 by rpki-client