Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft
File:                     o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft (raw, json)
Hash identifier:          6BRfWI6VqfKTWOpgt7RFIOhYgy5vLM2oR03+rZm831w=
Subject key identifier:   02:72:36:D8:FB:38:65:11:03:23:BA:D7:DE:F2:E1:23:B5:15:0C:82
Authority key identifier: A3:8D:48:7B:D5:D9:A8:A8:94:80:27:4F:E6:F7:C0:61:C6:24:BC:C0
Certificate issuer:       /CN=A91FEF3B/serialNumber=A38D487BD5D9A8A89480274FE6F7C061C624BCC0
Certificate serial:       ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o41Ie9XZqKiUgCdP5vfAYcYkvMA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft
Manifest number:          E9
Signing time:             Mon 11 May 2026 06:32:05 +0000
Manifest this update:     Mon 11 May 2026 06:32:05 +0000
Manifest next update:     Mon 18 May 2026 06:32:05 +0000
Files and hashes:         1: o41Ie9XZqKiUgCdP5vfAYcYkvMA.crl (hash: DuFIpOlc7ZoB9tL8HcMNAupiPcsETCytxWgAH/Q5q9A=)
                          2: 10800248E9C711EFA1589312C4F9AE02.roa (hash: VpW1ss/FISZUa4YxltnTH36k8qN9hgV+vDjB+vqrTUU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.crl
                          rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o41Ie9XZqKiUgCdP5vfAYcYkvMA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:32:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 237 (0xed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FEF3B, serialNumber=A38D487BD5D9A8A89480274FE6F7C061C624BCC0
        Validity
            Not Before: May 11 06:32:05 2026 GMT
            Not After : May 18 06:32:05 2026 GMT
        Subject: CN=6a0177e5-8194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:39:80:d7:ce:8f:4b:fc:de:91:7e:1e:ff:08:
                    f7:9c:db:53:3f:bf:f7:d0:59:55:41:7a:ea:a9:33:
                    3e:c4:90:33:73:05:5c:ef:17:e4:44:bf:74:14:d7:
                    4b:a0:ed:f9:40:fd:f8:f4:3b:83:8b:70:06:e6:0a:
                    91:5f:7b:cc:c0:12:6d:04:c1:00:20:f7:43:bb:b3:
                    dc:bd:62:8f:07:b2:d0:ba:19:8c:6f:5b:de:b3:7a:
                    ee:b5:69:4c:52:d3:f0:e4:19:b6:b4:dc:6c:0a:6f:
                    dc:7c:5e:cf:e3:e7:b3:a6:4a:23:36:3c:11:78:d9:
                    7d:3c:d5:ac:78:1a:1a:a6:05:2e:35:b9:43:05:99:
                    ad:64:bf:90:e0:ee:b2:a2:20:f9:b8:6c:89:c4:cf:
                    cc:20:ea:03:2c:db:f3:a5:9c:c1:fc:93:44:b2:8e:
                    88:84:38:c0:7e:87:f0:bf:f8:2d:79:c5:69:6e:85:
                    f3:4d:8d:6b:54:ff:7b:a3:bb:69:dc:98:a6:a9:ce:
                    43:7a:bc:9e:1d:6b:b4:5c:ba:59:3d:aa:ca:ef:74:
                    fd:3b:2d:dd:22:07:66:61:6d:a9:13:52:d3:39:9c:
                    b2:28:0f:c9:48:97:9a:fd:af:d9:16:54:80:46:0c:
                    ac:ca:f3:0d:a1:e6:11:2a:03:b3:7f:b6:e7:4e:3a:
                    77:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:72:36:D8:FB:38:65:11:03:23:BA:D7:DE:F2:E1:23:B5:15:0C:82
            X509v3 Authority Key Identifier:
                keyid:A3:8D:48:7B:D5:D9:A8:A8:94:80:27:4F:E6:F7:C0:61:C6:24:BC:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o41Ie9XZqKiUgCdP5vfAYcYkvMA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:d3:c0:2a:df:0c:6d:0b:9a:15:94:bf:c0:63:9d:e1:71:72:
         5d:6a:60:d4:c4:2c:b8:53:be:a2:a5:4a:30:64:7b:73:22:f2:
         ac:f0:ba:0c:4b:6a:3f:0d:38:e5:5a:9e:d4:6d:3a:15:c7:59:
         3e:dd:0e:d9:13:f0:72:80:54:3e:ec:1c:4a:0e:21:69:f4:f6:
         7c:a6:4f:67:41:e2:bd:7c:16:01:f4:6a:dc:10:d9:38:3f:d6:
         0b:90:3c:8f:a7:12:21:99:8e:ca:13:32:dd:2b:bd:d7:1a:de:
         17:09:7a:58:2f:9c:6c:7e:50:ff:e0:cc:02:0a:80:28:b6:e5:
         05:8a:cb:31:98:ab:9a:7b:26:35:d2:64:26:7a:e3:b9:7f:cb:
         1e:cd:2b:d0:70:bc:45:09:1d:ce:35:38:3e:a8:e0:89:90:3b:
         11:3a:93:9f:1c:86:e4:f4:fa:a7:64:3e:55:80:63:dc:98:6e:
         41:1b:37:df:db:aa:f7:ae:1d:ed:b5:8c:98:6b:16:0d:18:4e:
         b9:84:ce:c3:e7:ee:b1:ce:07:c9:18:cf:0b:62:ed:5e:d4:40:
         4e:ce:a4:eb:e1:a7:7e:1c:96:dc:c6:6a:50:24:b3:e4:74:b7:
         40:4f:f4:23:5a:25:a8:7f:b9:d7:41:71:e7:35:dc:49:91:be:
         d2:57:3b:75
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkVGM0IxMTAvBgNVBAUTKEEzOEQ0ODdCRDVEOUE4QTg5NDgwMjc0RkU2RjdDMDYx
QzYyNEJDQzAwHhcNMjYwNTExMDYzMjA1WhcNMjYwNTE4MDYzMjA1WjAYMRYwFAYD
VQQDEw02YTAxNzdlNS04MTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjDmA186PS/zekX4e/wj3nNtTP7/30FlVQXrqqTM+xJAzcwVc7xfkRL90FNdL
oO35QP349DuDi3AG5gqRX3vMwBJtBMEAIPdDu7PcvWKPB7LQuhmMb1ves3rutWlM
UtPw5Bm2tNxsCm/cfF7P4+ezpkojNjwReNl9PNWseBoapgUuNblDBZmtZL+Q4O6y
oiD5uGyJxM/MIOoDLNvzpZzB/JNEso6IhDjAfofwv/gtecVpboXzTY1rVP97o7tp
3Jimqc5DeryeHWu0XLpZParK73T9Oy3dIgdmYW2pE1LTOZyyKA/JSJea/a/ZFlSA
RgysyvMNoeYRKgOzf7bnTjp3OwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAJyNtj7
OGURAyO6197y4SO1FQyCMB8GA1UdIwQYMBaAFKONSHvV2aiolIAnT+b3wGHGJLzA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUYzQi9BQzc2MjIwMEU5
QzYxMUVGOUZBMTc3MTFDNEY5QUUwMi9vNDFJZTlYWnFLaVVnQ2RQNXZmQVljWWt2
TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL280MUllOVhacUtpVWdDZFA1dmZBWWNZa3ZNQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RUYzQi9BQzc2MjIwMEU5QzYxMUVGOUZBMTc3MTFDNEY5QUUwMi9vNDFJZTlYWnFL
aVVnQ2RQNXZmQVljWWt2TUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjtPAKt8MbQuaFZS/wGOd4XFyXWpg1MQsuFO+oqVKMGR7cyLyrPC6DEtqPw04
5Vqe1G06FcdZPt0O2RPwcoBUPuwcSg4hafT2fKZPZ0HivXwWAfRq3BDZOD/WC5A8
j6cSIZmOyhMy3Su91xreFwl6WC+cbH5Q/+DMAgqAKLblBYrLMZirmnsmNdJkJnrj
uX/LHs0r0HC8RQkdzjU4PqjgiZA7ETqTnxyG5PT6p2Q+VYBj3JhuQRs339uq964d
7bWMmGsWDRhOuYTOw+fusc4HyRjPC2LtXtRATs6k6+GnfhyW3MZqUCSz5HS3QE/0
I1olqH+510Fx5zXcSZG+0lc7dQ==
-----END CERTIFICATE-----
Generated at Wed May 13 04:46:53 2026 by rpki-client