Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft
File:                     3owRZVEEK-jnJkvttYLwo3e7JL0.mft (raw, json)
Hash identifier:          XJT9oKvzMzzKZjP9nM785C0fGExqTRly/dAVEyUMmSw=
Subject key identifier:   10:6C:46:0C:16:62:1D:91:0A:50:60:B7:B6:23:F5:E0:46:7D:7B:26
Authority key identifier: DE:8C:11:65:51:04:2B:E8:E7:26:4B:ED:B5:82:F0:A3:77:BB:24:BD
Certificate issuer:       /CN=A91471A0/serialNumber=DE8C116551042BE8E7264BEDB582F0A377BB24BD
Certificate serial:       61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3owRZVEEK-jnJkvttYLwo3e7JL0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft
Manifest number:          56
Signing time:             Fri 15 May 2026 08:24:31 +0000
Manifest this update:     Fri 15 May 2026 08:24:30 +0000
Manifest next update:     Fri 22 May 2026 08:24:30 +0000
Files and hashes:         1: 3owRZVEEK-jnJkvttYLwo3e7JL0.crl (hash: 9vXAgwftV+UHwWdX6+dr9zIfCIp+eVq0lslKPkiSWY0=)
                          2: 9572FAF41D1B11F1B62EA9A5103D8C67.roa (hash: YxVjuj/u6cFjLolYA4vHKI/ekIe2/ZI5hcZUBzFakNE=)
                          3: A4A022041D1B11F188B066AA103D8C67.roa (hash: 0UiK+7UG4gazEA6M9ztbhs59f2RFRj/xH1mxg/FNT2U=)
                          4: 947595301D1B11F1B62EA9A5103D8C67.roa (hash: fyVIn40fjMUq1jfx5eUqoEzNu3Qfs0MIIOR0mSpXHec=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.crl
                          rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3owRZVEEK-jnJkvttYLwo3e7JL0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 May 2026 08:24:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91471A0, serialNumber=DE8C116551042BE8E7264BEDB582F0A377BB24BD
        Validity
            Not Before: May 15 08:24:30 2026 GMT
            Not After : May 22 08:24:30 2026 GMT
        Subject: CN=6a06d83f-e50e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:16:c8:9a:20:81:74:13:8c:45:ad:59:5c:17:
                    d8:be:67:fb:1d:1c:6d:b7:1d:d5:77:69:ca:06:80:
                    63:7d:21:d6:05:6f:31:e7:5e:62:ab:bc:2a:80:12:
                    e3:4b:de:06:9c:15:8c:85:e5:03:19:38:97:ff:e1:
                    f8:c6:b7:d9:7d:85:03:db:4f:9f:d0:ef:6b:8d:69:
                    81:ee:8a:15:ed:cc:bb:40:04:01:42:a5:4a:aa:1b:
                    ac:3f:af:d3:69:42:0d:4f:70:65:a4:c8:f8:75:bd:
                    da:0a:7a:c6:31:19:7b:99:cd:e4:82:92:4a:db:1f:
                    cd:09:16:fd:0f:dc:d7:f1:dc:d9:3e:dc:c7:2c:b0:
                    af:86:69:1f:77:18:51:b4:5d:cb:ff:30:c5:80:d4:
                    0e:90:fe:4a:32:27:01:4c:1d:64:3e:c3:45:dd:52:
                    e5:e6:b0:fa:1e:35:a0:56:81:c6:8b:7e:67:4e:d6:
                    a7:7e:70:13:fb:b4:7b:ef:92:8b:f9:38:98:48:62:
                    22:46:16:7b:2c:75:05:ef:74:bb:2e:b9:c1:f2:f8:
                    00:48:da:0f:e1:ca:91:05:e2:05:a1:f9:90:ea:00:
                    aa:a1:ef:09:ec:0d:8d:b5:23:9b:f8:8d:1c:6b:c9:
                    d6:19:bc:e3:3a:7d:54:7e:20:f9:29:73:53:77:27:
                    76:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:6C:46:0C:16:62:1D:91:0A:50:60:B7:B6:23:F5:E0:46:7D:7B:26
            X509v3 Authority Key Identifier:
                keyid:DE:8C:11:65:51:04:2B:E8:E7:26:4B:ED:B5:82:F0:A3:77:BB:24:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3owRZVEEK-jnJkvttYLwo3e7JL0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:ad:67:5d:8d:90:3a:28:13:b5:aa:83:99:74:03:2b:f6:10:
         fc:36:5a:13:ea:2f:74:0a:c7:04:bc:55:89:75:3b:92:1d:94:
         f6:d2:cd:d5:48:d9:6e:ab:f2:de:02:87:b2:0d:da:c3:1b:79:
         65:bd:4d:b1:41:d6:3a:ac:c1:a1:6a:46:85:53:2e:a7:c2:e2:
         39:e6:bf:ff:a2:c0:fa:85:69:64:92:2a:62:22:1d:ef:b3:c7:
         8c:ff:c0:01:49:97:2d:17:61:96:b1:3b:f8:c8:6d:4b:9e:aa:
         df:bf:5a:9f:26:e2:20:b2:e5:db:9c:4b:11:2e:9e:61:99:63:
         be:b6:33:e0:bc:00:3f:df:d9:cd:61:65:fd:8f:97:9f:e2:9a:
         b4:e2:b3:97:99:18:44:7c:6b:06:19:57:85:cb:e6:99:e1:41:
         30:02:46:dc:0e:eb:3c:b9:4a:ad:bb:67:bb:07:33:d9:a1:08:
         8b:e2:ae:ed:1d:49:ca:44:ee:4f:92:fa:87:20:0c:50:73:bd:
         ce:5f:df:24:61:e0:fc:f4:ec:32:e8:62:3b:67:e0:5e:23:00:
         70:f6:89:63:3a:7d:1e:92:50:e2:be:3d:62:d9:0b:56:24:5c:
         ce:d7:86:23:df:a6:b3:52:0d:5e:0a:a1:c7:2d:69:48:d4:d5:
         72:56:6d:fe
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
NzFBMDExMC8GA1UEBRMoREU4QzExNjU1MTA0MkJFOEU3MjY0QkVEQjU4MkYwQTM3
N0JCMjRCRDAeFw0yNjA1MTUwODI0MzBaFw0yNjA1MjIwODI0MzBaMBgxFjAUBgNV
BAMTDTZhMDZkODNmLWU1MGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCcFsiaIIF0E4xFrVlcF9i+Z/sdHG23HdV3acoGgGN9IdYFbzHnXmKrvCqAEuNL
3gacFYyF5QMZOJf/4fjGt9l9hQPbT5/Q72uNaYHuihXtzLtABAFCpUqqG6w/r9Np
Qg1PcGWkyPh1vdoKesYxGXuZzeSCkkrbH80JFv0P3Nfx3Nk+3McssK+GaR93GFG0
Xcv/MMWA1A6Q/koyJwFMHWQ+w0XdUuXmsPoeNaBWgcaLfmdO1qd+cBP7tHvvkov5
OJhIYiJGFnssdQXvdLsuucHy+ABI2g/hypEF4gWh+ZDqAKqh7wnsDY21I5v4jRxr
ydYZvOM6fVR+IPkpc1N3J3ZHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUEGxGDBZi
HZEKUGC3tiP14EZ9eyYwHwYDVR0jBBgwFoAU3owRZVEEK+jnJkvttYLwo3e7JL0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3MUEwL0Q2OTk0REU2REEz
RTExRjA4MUY1QTQ1NzhFRDM2NDFELzNvd1JaVkVFSy1qbkprdnR0WUx3bzNlN0pM
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvM293UlpWRUVLLWpuSmt2dHRZTHdvM2U3SkwwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3
MUEwL0Q2OTk0REU2REEzRTExRjA4MUY1QTQ1NzhFRDM2NDFELzNvd1JaVkVFSy1q
bkprdnR0WUx3bzNlN0pMMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA8rWddjZA6KBO1qoOZdAMr9hD8NloT6i90CscEvFWJdTuSHZT20s3VSNluq/Le
AoeyDdrDG3llvU2xQdY6rMGhakaFUy6nwuI55r//osD6hWlkkipiIh3vs8eM/8AB
SZctF2GWsTv4yG1Lnqrfv1qfJuIgsuXbnEsRLp5hmWO+tjPgvAA/39nNYWX9j5ef
4pq04rOXmRhEfGsGGVeFy+aZ4UEwAkbcDus8uUqtu2e7BzPZoQiL4q7tHUnKRO5P
kvqHIAxQc73OX98kYeD89Owy6GI7Z+BeIwBw9oljOn0eklDivj1i2QtWJFzO14Yj
36azUg1eCqHHLWlI1NVyVm3+
-----END CERTIFICATE-----
Generated at Sun May 17 04:37:57 2026 by rpki-client