Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft
File:                     lrZQExL54S6xmmT2IuF81Ced8M8.mft (raw, json)
Hash identifier:          NJJaZni289iz8cXEgaBy571u7MQM4Js/8gqCkDENzR0=
Subject key identifier:   43:61:21:29:4B:41:79:A0:D0:77:32:C7:50:19:9B:54:F9:08:9F:B1
Authority key identifier: 96:B6:50:13:12:F9:E1:2E:B1:9A:64:F6:22:E1:7C:D4:27:9D:F0:CF
Certificate issuer:       /CN=A91FBE5E/serialNumber=96B6501312F9E12EB19A64F622E17CD4279DF0CF
Certificate serial:       0189
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft
Manifest number:          0182
Signing time:             Mon 11 May 2026 04:37:44 +0000
Manifest this update:     Mon 11 May 2026 04:37:44 +0000
Manifest next update:     Mon 18 May 2026 04:37:44 +0000
Files and hashes:         1: lrZQExL54S6xmmT2IuF81Ced8M8.crl (hash: Ooo/Sro/mSQIlAy1TaJWZY69XSAP+EVTI9CUJEpn1vc=)
                          2: 78A6163A03A111EF8B02B62AC4F9AE02.roa (hash: /cyIS7He6/hUkUatIHzzKlcuqjzcEKY9CwicKq3CtKI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.crl
                          rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 04:37:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 393 (0x189)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FBE5E, serialNumber=96B6501312F9E12EB19A64F622E17CD4279DF0CF
        Validity
            Not Before: May 11 04:37:44 2026 GMT
            Not After : May 18 04:37:44 2026 GMT
        Subject: CN=6a015d18-7b55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bc:b9:a4:fd:dc:04:83:18:a8:c9:c0:65:18:
                    13:b8:f9:8c:c6:fa:81:37:61:98:86:50:fe:4a:c9:
                    e1:0a:2c:19:0a:d1:75:7d:03:24:e5:82:54:5e:a7:
                    3e:59:0d:9e:0b:53:06:fd:94:17:99:5e:e4:7e:bf:
                    e9:df:27:16:77:2b:4d:c0:24:36:78:d4:34:20:33:
                    2f:12:07:d6:3c:92:d8:a3:4c:93:7f:7a:9f:24:58:
                    61:b8:1f:ff:76:92:63:f2:4f:05:fb:43:a7:1a:da:
                    70:c9:60:b2:5c:8c:a4:69:fb:d3:47:a2:a7:40:2e:
                    d6:af:2e:3e:3e:c1:e9:97:24:9c:c3:95:ef:b6:ee:
                    da:f6:2f:3e:ad:df:19:ae:55:fc:0d:b5:f4:06:4b:
                    a1:d9:55:56:ed:1f:b9:0e:44:c2:f4:7d:40:48:e6:
                    25:2c:6a:25:01:dc:3e:4e:86:0f:41:ba:92:66:f9:
                    dc:96:ee:d1:99:38:60:4d:2e:d8:7f:41:35:70:60:
                    3c:d1:51:b8:4f:25:bb:5f:ce:36:3e:79:37:26:86:
                    e0:f2:99:72:fc:22:12:25:cc:ac:da:79:74:7b:be:
                    99:30:9d:6e:64:0a:7d:4c:79:fa:62:b8:53:00:20:
                    4f:d5:1d:16:60:f6:67:eb:89:c1:87:51:0c:2b:b3:
                    b0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:61:21:29:4B:41:79:A0:D0:77:32:C7:50:19:9B:54:F9:08:9F:B1
            X509v3 Authority Key Identifier:
                keyid:96:B6:50:13:12:F9:E1:2E:B1:9A:64:F6:22:E1:7C:D4:27:9D:F0:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:c0:23:33:d7:ec:b4:b1:8f:49:7d:e0:de:5c:7e:95:8a:4a:
         ef:c4:f3:c7:18:7a:c2:fd:b7:89:92:ff:9b:3f:9c:ce:eb:94:
         ee:08:81:e2:b8:12:f1:79:d8:f9:25:14:e6:3c:96:35:82:66:
         3e:a0:a5:69:a5:be:d8:e8:37:18:30:11:17:f2:71:2f:69:2d:
         4c:b2:e3:42:b7:6a:56:3d:50:06:ac:e6:b5:4f:63:32:5e:2c:
         b6:c3:ca:55:98:a3:8c:27:f4:b5:4c:f3:c6:7b:a0:4a:7f:b3:
         0e:69:fd:c0:27:df:1a:64:98:d6:eb:ff:d6:29:c0:ac:de:74:
         30:c6:ba:8a:8a:17:69:7b:26:80:90:b3:3d:02:bc:aa:16:dd:
         4a:e3:62:60:fa:85:76:18:4d:e5:67:73:f0:d6:59:35:98:2e:
         4c:e1:08:da:f0:42:83:20:c0:80:da:15:86:6c:f2:23:a7:6b:
         bd:f0:e3:08:a4:fe:51:30:87:2a:fc:2f:93:72:c8:6a:a3:1d:
         4e:91:5f:94:fa:a5:c0:6e:c0:f2:78:21:da:3f:d3:bc:d0:1f:
         5e:5c:c2:8f:75:06:25:d9:93:14:2d:06:2e:11:e5:c2:87:74:
         f2:4a:05:87:b2:5c:d9:31:40:6a:86:f9:74:dc:03:7a:6e:df:
         22:c1:26:b5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkJFNUUxMTAvBgNVBAUTKDk2QjY1MDEzMTJGOUUxMkVCMTlBNjRGNjIyRTE3Q0Q0
Mjc5REYwQ0YwHhcNMjYwNTExMDQzNzQ0WhcNMjYwNTE4MDQzNzQ0WjAYMRYwFAYD
VQQDEw02YTAxNWQxOC03YjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApby5pP3cBIMYqMnAZRgTuPmMxvqBN2GYhlD+SsnhCiwZCtF1fQMk5YJUXqc+
WQ2eC1MG/ZQXmV7kfr/p3ycWdytNwCQ2eNQ0IDMvEgfWPJLYo0yTf3qfJFhhuB//
dpJj8k8F+0OnGtpwyWCyXIykafvTR6KnQC7Wry4+PsHplyScw5Xvtu7a9i8+rd8Z
rlX8DbX0Bkuh2VVW7R+5DkTC9H1ASOYlLGolAdw+ToYPQbqSZvnclu7RmThgTS7Y
f0E1cGA80VG4TyW7X842Pnk3Jobg8ply/CISJcys2nl0e76ZMJ1uZAp9THn6YrhT
ACBP1R0WYPZn64nBh1EMK7OwAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFENhISlL
QXmg0Hcyx1AZm1T5CJ+xMB8GA1UdIwQYMBaAFJa2UBMS+eEusZpk9iLhfNQnnfDP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkU1RS84M0I4NzJGNDAz
OUYxMUVGOTBGNjYyMjdDNEY5QUUwMi9sclpRRXhMNTRTNnhtbVQySXVGODFDZWQ4
TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xyWlFFeEw1NFM2eG1tVDJJdUY4MUNlZDhNOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QkU1RS84M0I4NzJGNDAzOUYxMUVGOTBGNjYyMjdDNEY5QUUwMi9sclpRRXhMNTRT
NnhtbVQySXVGODFDZWQ4TTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAS8AjM9fstLGPSX3g3lx+lYpK78Tzxxh6wv23iZL/mz+czuuU7giB4rgS8XnY
+SUU5jyWNYJmPqClaaW+2Og3GDARF/JxL2ktTLLjQrdqVj1QBqzmtU9jMl4stsPK
VZijjCf0tUzzxnugSn+zDmn9wCffGmSY1uv/1inArN50MMa6iooXaXsmgJCzPQK8
qhbdSuNiYPqFdhhN5Wdz8NZZNZguTOEI2vBCgyDAgNoVhmzyI6drvfDjCKT+UTCH
Kvwvk3LIaqMdTpFflPqlwG7A8ngh2j/TvNAfXlzCj3UGJdmTFC0GLhHlwod08koF
h7Jc2TFAaob5dNwDem7fIsEmtQ==
-----END CERTIFICATE-----
Generated at Wed May 13 04:33:18 2026 by rpki-client