Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft
File:                     h_lY2vSYZZqe7g_xRCJrFxBIneA.mft (raw, json)
Hash identifier:          DWxnMAA01cSpNnAt+CTbEi6085DhIN8ETjbAI6QJoVk=
Subject key identifier:   1E:8B:7B:41:5B:69:45:D0:D3:01:4A:7B:EE:01:EB:D9:C5:9F:C7:56
Authority key identifier: 87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0
Certificate issuer:       /CN=A91354AE/serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0
Certificate serial:       044D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft
Manifest number:          0439
Signing time:             Tue 05 May 2026 00:24:12 +0000
Manifest this update:     Tue 05 May 2026 00:24:11 +0000
Manifest next update:     Tue 12 May 2026 00:24:11 +0000
Files and hashes:         1: h_lY2vSYZZqe7g_xRCJrFxBIneA.crl (hash: 8DxTedaAkCnaLZ9Z8pWlD3iU8pEg9EalXCsykbReFmI=)
                          2: 8C5D4FF4766511EF8820F844C4F9AE02.roa (hash: iCSd+4enkqxY2lDM1zxQZRRXgBPKUIXfnyxSxCEqtSs=)
                          3: 8DB35F6A766511EF8820F844C4F9AE02.roa (hash: YKkvmk+q8uJbT1Z9J9DbUkbZ+Iajvavs0STqwkz+YJA=)
                          4: FFF8A36A34E311EE877E760DC4F9AE02.roa (hash: GiZELc+b+jUgp2lXXKA22MVtc86QrBiVWxgNmFeaq0w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl
                          rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 May 2026 22:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1101 (0x44d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91354AE, serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0
        Validity
            Not Before: May  5 00:24:11 2026 GMT
            Not After : May 12 00:24:11 2026 GMT
        Subject: CN=69f938ac-7c46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ac:ef:40:8d:d8:0e:5d:53:dc:14:76:47:17:
                    7f:1a:4e:10:df:a9:89:07:4f:1e:f4:54:80:35:2d:
                    3e:61:96:87:ac:3e:4c:f8:b1:21:02:3b:8e:51:f5:
                    89:78:e6:c1:04:37:85:ff:71:73:d6:e6:bb:17:30:
                    75:bf:3d:b3:d6:a2:b4:a4:dd:f7:7f:23:5b:44:35:
                    a0:39:af:29:77:96:3c:be:ac:73:c7:a3:29:0b:8f:
                    d4:77:ca:ad:2f:47:5a:2e:26:f8:af:35:c0:a1:6a:
                    9d:73:81:fd:b6:e4:63:02:05:89:7f:a3:09:dc:f7:
                    60:56:4b:0c:1d:7d:e5:5d:6f:b4:17:96:d1:52:11:
                    be:33:62:73:5c:28:65:a2:97:6c:2d:c7:dc:57:fd:
                    e1:a7:b2:96:ef:db:89:38:3c:49:ea:ce:2d:71:64:
                    30:43:9b:72:62:15:8d:cc:82:17:c4:08:4d:91:20:
                    ea:1e:96:d3:76:43:94:f3:05:07:c1:a4:85:4e:28:
                    e5:0d:ab:a4:63:68:35:62:90:79:4e:d6:27:5f:a8:
                    d9:e1:ea:a0:c7:6b:a1:f1:d4:cd:08:6a:1c:2d:d3:
                    96:b1:90:fd:ea:c6:1b:dc:13:20:c2:f9:f4:f2:33:
                    41:e2:71:35:c6:64:fb:c6:8b:b2:67:3f:99:95:0f:
                    16:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:8B:7B:41:5B:69:45:D0:D3:01:4A:7B:EE:01:EB:D9:C5:9F:C7:56
            X509v3 Authority Key Identifier:
                keyid:87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:22:95:3d:22:2b:66:4a:79:a5:e5:4e:96:e2:0b:47:36:fd:
         b3:23:0f:f7:16:b7:20:3c:bc:a1:e6:95:a1:40:cd:ce:88:e2:
         42:8f:68:f1:1f:42:8b:92:63:db:e6:48:e6:08:48:79:ed:9e:
         22:21:24:08:1a:f4:bb:c2:7b:e1:26:90:50:48:d8:8a:e2:a3:
         52:27:f0:c7:f9:92:ef:0e:f5:be:71:fe:5f:1e:70:7f:c6:40:
         12:20:8d:f7:c9:19:10:85:99:d4:94:f6:53:4d:74:84:4f:ce:
         69:bd:a2:cb:50:ac:fd:f5:4b:09:69:07:ca:8e:a3:25:b1:97:
         ff:b0:3e:85:75:7a:c7:12:ca:d8:20:d8:83:fb:9d:68:42:35:
         39:e6:37:c0:0b:03:cf:15:f3:be:83:92:b7:7a:89:46:7c:62:
         76:a9:61:68:a2:b2:47:16:7d:29:6f:e7:d4:37:f2:76:27:92:
         a9:41:12:6a:3e:f7:ef:ed:a4:84:36:68:2e:e0:87:1c:c0:86:
         18:22:5c:0c:76:70:23:16:04:ad:c6:c1:03:e1:f6:01:fa:a8:
         d8:68:5f:02:ab:75:62:e5:3a:52:34:49:4f:9d:4d:50:a4:b2:
         07:ab:6f:11:21:03:54:81:6f:5b:aa:0b:a8:09:d9:f8:98:40:
         d7:d0:42:1e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBE0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzU0QUUxMTAvBgNVBAUTKDg3Rjk1OERBRjQ5ODY1OUE5RUVFMEZGMTQ0MjI2QjE3
MTA0ODlERTAwHhcNMjYwNTA1MDAyNDExWhcNMjYwNTEyMDAyNDExWjAYMRYwFAYD
VQQDEw02OWY5MzhhYy03YzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnazvQI3YDl1T3BR2Rxd/Gk4Q36mJB08e9FSANS0+YZaHrD5M+LEhAjuOUfWJ
eObBBDeF/3Fz1ua7FzB1vz2z1qK0pN33fyNbRDWgOa8pd5Y8vqxzx6MpC4/Ud8qt
L0daLib4rzXAoWqdc4H9tuRjAgWJf6MJ3PdgVksMHX3lXW+0F5bRUhG+M2JzXChl
opdsLcfcV/3hp7KW79uJODxJ6s4tcWQwQ5tyYhWNzIIXxAhNkSDqHpbTdkOU8wUH
waSFTijlDaukY2g1YpB5TtYnX6jZ4eqgx2uh8dTNCGocLdOWsZD96sYb3BMgwvn0
8jNB4nE1xmT7xouyZz+ZlQ8WZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB6Le0Fb
aUXQ0wFKe+4B69nFn8dWMB8GA1UdIwQYMBaAFIf5WNr0mGWanu4P8UQiaxcQSJ3g
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTRBRS82QzlGMkRGQUE1
MDExMUVDODk2NDI3NTdDNEY5QUUwMi9oX2xZMnZTWVpacWU3Z194UkNKckZ4Qklu
ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hfbFkydlNZWlpxZTdnX3hSQ0pyRnhCSW5lQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NTRBRS82QzlGMkRGQUE1MDExMUVDODk2NDI3NTdDNEY5QUUwMi9oX2xZMnZTWVpa
cWU3Z194UkNKckZ4QkluZUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPiKVPSIrZkp5peVOluILRzb9syMP9xa3IDy8oeaVoUDNzojiQo9o8R9Ci5Jj
2+ZI5ghIee2eIiEkCBr0u8J74SaQUEjYiuKjUifwx/mS7w71vnH+Xx5wf8ZAEiCN
98kZEIWZ1JT2U010hE/Oab2iy1Cs/fVLCWkHyo6jJbGX/7A+hXV6xxLK2CDYg/ud
aEI1OeY3wAsDzxXzvoOSt3qJRnxidqlhaKKyRxZ9KW/n1DfydieSqUESaj737+2k
hDZoLuCHHMCGGCJcDHZwIxYErcbBA+H2Afqo2GhfAqt1YuU6UjRJT51NUKSyB6tv
ESEDVIFvW6oLqAnZ+JhA19BCHg==
-----END CERTIFICATE-----
Generated at Wed May 6 10:03:26 2026 by rpki-client