Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/eMSRns-ZWb9xNONd1eQs3qtC1Ug.mft
File:                     eMSRns-ZWb9xNONd1eQs3qtC1Ug.mft (raw, json)
Hash identifier:          5O+dfoo5KGvwANKEceQRIsnXqpYorV/unbnLwwVQRqo=
Subject key identifier:   0C:15:0E:77:D4:50:97:47:0B:F5:58:1E:FF:D9:8C:0C:92:88:17:7A
Authority key identifier: 78:C4:91:9E:CF:99:59:BF:71:34:E3:5D:D5:E4:2C:DE:AB:42:D5:48
Certificate issuer:       /CN=A91458BD/serialNumber=78C4919ECF9959BF7134E35DD5E42CDEAB42D548
Certificate serial:       0640
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eMSRns-ZWb9xNONd1eQs3qtC1Ug.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/eMSRns-ZWb9xNONd1eQs3qtC1Ug.mft
Manifest number:          0629
Signing time:             Wed 20 May 2026 22:53:32 +0000
Manifest this update:     Wed 20 May 2026 22:53:32 +0000
Manifest next update:     Wed 27 May 2026 22:53:32 +0000
Files and hashes:         1: eMSRns-ZWb9xNONd1eQs3qtC1Ug.crl (hash: hLw3jKyXD0J+pTdosT4ackZYyTLI0ZCUtRgTpqlbjQU=)
                          2: 0A816CBA49DA11F09907E971C4F9AE02.roa (hash: yqTmXisx0OJdHsQMjT38VE/WSwPBITWKMsPdafbLD/c=)
                          3: 2B2AA83249DA11F0ADC32972C4F9AE02.roa (hash: 0/laoLHIL/zDE6DfvUg8AUNMtCOl036HObAE+/SZXEk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/eMSRns-ZWb9xNONd1eQs3qtC1Ug.crl
                          rsync://rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/eMSRns-ZWb9xNONd1eQs3qtC1Ug.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eMSRns-ZWb9xNONd1eQs3qtC1Ug.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 22:53:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1600 (0x640)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91458BD, serialNumber=78C4919ECF9959BF7134E35DD5E42CDEAB42D548
        Validity
            Not Before: May 20 22:53:32 2026 GMT
            Not After : May 27 22:53:32 2026 GMT
        Subject: CN=6a0e3b6c-b7c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:fd:28:cd:b3:4d:c3:8e:28:0d:49:88:17:41:
                    ee:28:a9:ae:77:a2:78:cb:4a:26:12:81:d1:5d:10:
                    60:8e:65:e8:aa:c3:bc:fb:07:67:bc:09:b3:43:fe:
                    a6:0a:f5:02:8c:44:1c:6c:6c:14:6b:a6:08:80:6a:
                    01:e8:7e:cd:71:11:86:af:3e:3d:72:72:a4:ec:4c:
                    09:2e:81:94:f8:81:36:87:a6:a4:4d:9c:aa:4d:25:
                    03:56:6c:67:cc:49:84:98:09:f5:c5:5f:9f:37:df:
                    18:cb:38:e2:97:a8:40:9f:d1:8c:77:48:83:89:24:
                    3b:f0:04:3e:66:63:f2:4d:70:cd:54:b7:d3:4e:32:
                    5e:7d:16:d8:88:6f:a2:69:16:5c:07:24:af:8d:92:
                    91:50:d7:45:12:7a:90:e7:a8:63:76:d3:d6:9a:9f:
                    c0:d1:b3:95:83:c8:0c:30:8a:e3:b6:5d:21:2f:7b:
                    4d:d7:04:3b:c1:6f:96:c7:bb:0e:72:d3:e7:cc:96:
                    f4:ac:c6:fc:b3:5c:8a:0a:7c:fe:09:4d:ad:31:d8:
                    68:3b:a2:ca:9e:42:0a:5d:95:8f:80:06:b2:a7:e1:
                    52:0f:e5:8c:f9:ad:97:a8:38:02:cd:11:09:6d:b4:
                    d8:23:32:a9:17:8a:1d:1e:5c:cb:e8:57:ad:46:25:
                    75:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:15:0E:77:D4:50:97:47:0B:F5:58:1E:FF:D9:8C:0C:92:88:17:7A
            X509v3 Authority Key Identifier:
                keyid:78:C4:91:9E:CF:99:59:BF:71:34:E3:5D:D5:E4:2C:DE:AB:42:D5:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/eMSRns-ZWb9xNONd1eQs3qtC1Ug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eMSRns-ZWb9xNONd1eQs3qtC1Ug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/eMSRns-ZWb9xNONd1eQs3qtC1Ug.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:d6:5e:73:ad:5c:98:c2:b4:a0:fe:fe:8d:0a:ce:a1:b7:d0:
         5b:1d:7e:95:ce:1b:09:a2:f9:80:8e:f6:a4:fd:c7:d0:61:36:
         89:87:cd:fb:45:6d:95:1c:d4:f0:28:48:d0:ab:74:3c:48:5a:
         47:5f:d4:3b:e6:de:4a:4d:39:59:8b:8f:59:6c:3d:50:ac:21:
         b9:7c:c1:e6:63:a9:34:b3:9e:bb:54:76:8a:0e:b7:b5:54:e8:
         9c:90:e4:e9:b9:3c:c8:cb:45:2b:7c:55:86:0c:92:ac:ed:94:
         1d:74:58:27:16:74:6b:d9:86:eb:c0:fa:4d:1f:af:67:25:bc:
         6c:5e:f8:fd:24:f9:ee:e5:f6:b9:0d:7c:64:85:be:e3:ee:51:
         2a:1f:bf:10:35:8c:84:c9:31:db:c9:1d:ac:ec:71:4b:de:b1:
         5d:55:f2:a5:62:03:fc:68:c2:16:6f:65:22:d3:61:15:7b:3c:
         03:18:62:c6:88:ae:11:20:27:a8:75:39:12:6e:12:3c:83:a5:
         12:e0:a0:38:a2:c7:b8:35:89:da:d2:aa:e1:74:21:b0:9c:e5:
         59:20:d1:a5:35:b0:70:9d:c3:2a:b8:32:b1:8f:6f:06:28:1b:
         fd:9e:87:2c:67:4f:0a:ab:50:d8:40:87:dd:66:15:63:ab:d0:
         be:a5:0e:02
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDU4QkQxMTAvBgNVBAUTKDc4QzQ5MTlFQ0Y5OTU5QkY3MTM0RTM1REQ1RTQyQ0RF
QUI0MkQ1NDgwHhcNMjYwNTIwMjI1MzMyWhcNMjYwNTI3MjI1MzMyWjAYMRYwFAYD
VQQDEw02YTBlM2I2Yy1iN2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3P0ozbNNw44oDUmIF0HuKKmud6J4y0omEoHRXRBgjmXoqsO8+wdnvAmzQ/6m
CvUCjEQcbGwUa6YIgGoB6H7NcRGGrz49cnKk7EwJLoGU+IE2h6akTZyqTSUDVmxn
zEmEmAn1xV+fN98Yyzjil6hAn9GMd0iDiSQ78AQ+ZmPyTXDNVLfTTjJefRbYiG+i
aRZcBySvjZKRUNdFEnqQ56hjdtPWmp/A0bOVg8gMMIrjtl0hL3tN1wQ7wW+Wx7sO
ctPnzJb0rMb8s1yKCnz+CU2tMdhoO6LKnkIKXZWPgAayp+FSD+WM+a2XqDgCzREJ
bbTYIzKpF4odHlzL6FetRiV1LQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAwVDnfU
UJdHC/VYHv/ZjAySiBd6MB8GA1UdIwQYMBaAFHjEkZ7PmVm/cTTjXdXkLN6rQtVI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NThCRC85MDIyRjMxNkU4
OUExMUVCOThDQUNBN0FDNEY5QUUwMi9lTVNSbnMtWldiOXhOT05kMWVRczNxdEMx
VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VNU1Jucy1aV2I5eE5PTmQxZVFzM3F0QzFVZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NThCRC85MDIyRjMxNkU4OUExMUVCOThDQUNBN0FDNEY5QUUwMi9lTVNSbnMtWldi
OXhOT05kMWVRczNxdEMxVWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMNZec61cmMK0oP7+jQrOobfQWx1+lc4bCaL5gI72pP3H0GE2iYfN+0VtlRzU
8ChI0Kt0PEhaR1/UO+beSk05WYuPWWw9UKwhuXzB5mOpNLOeu1R2ig63tVTonJDk
6bk8yMtFK3xVhgySrO2UHXRYJxZ0a9mG68D6TR+vZyW8bF74/ST57uX2uQ18ZIW+
4+5RKh+/EDWMhMkx28kdrOxxS96xXVXypWID/GjCFm9lItNhFXs8AxhixoiuESAn
qHU5Em4SPIOlEuCgOKLHuDWJ2tKq4XQhsJzlWSDRpTWwcJ3DKrgysY9vBigb/Z6H
LGdPCqtQ2ECH3WYVY6vQvqUOAg==
-----END CERTIFICATE-----
Generated at Thu May 21 10:22:56 2026 by rpki-client