Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft
File:                     P7w69DECztpPoPf6m9kbLWU0bW4.mft (raw, json)
Hash identifier:          d4I0d8K0aeeF0I9m66weEU8IbSDZMPEuzdR3JQxq6p0=
Subject key identifier:   66:F3:67:74:AB:01:EC:CB:05:D0:D5:F7:1E:D1:55:B0:C2:0E:D3:10
Authority key identifier: 3F:BC:3A:F4:31:02:CE:DA:4F:A0:F7:FA:9B:D9:1B:2D:65:34:6D:6E
Certificate issuer:       /CN=A9161DF8/serialNumber=3FBC3AF43102CEDA4FA0F7FA9BD91B2D65346D6E
Certificate serial:       0319
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7w69DECztpPoPf6m9kbLWU0bW4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft
Manifest number:          02E2
Signing time:             Thu 21 May 2026 01:38:35 +0000
Manifest this update:     Thu 21 May 2026 01:38:34 +0000
Manifest next update:     Thu 28 May 2026 01:38:34 +0000
Files and hashes:         1: P7w69DECztpPoPf6m9kbLWU0bW4.crl (hash: 1W74PuzRiOgV5xyo793HnS823+YfHoirU7b+RqBll44=)
                          2: 845D92BAFC5111EFA8505536C4F9AE02.roa (hash: E6jRmVhR8Wb8IiIIspZxX6LgF3mhurpDSKUcMeN6BpM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.crl
                          rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7w69DECztpPoPf6m9kbLWU0bW4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 01:38:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 793 (0x319)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161DF8, serialNumber=3FBC3AF43102CEDA4FA0F7FA9BD91B2D65346D6E
        Validity
            Not Before: May 21 01:38:34 2026 GMT
            Not After : May 28 01:38:34 2026 GMT
        Subject: CN=6a0e621b-ead6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b3:0f:a4:8b:79:94:6a:9d:29:a4:73:76:96:
                    68:f8:3a:d1:b7:ea:3e:6d:57:19:67:70:a0:9d:2c:
                    f5:0a:9c:2d:a1:83:0f:6a:fd:34:d6:04:58:61:cd:
                    05:82:60:a0:d3:20:67:49:8f:65:8c:ad:c4:d8:6c:
                    f6:fb:26:c2:0c:ab:6a:98:b5:d7:87:8c:5a:d7:b3:
                    84:d9:e4:03:a4:c4:5a:84:36:c7:f3:d3:fd:6a:8e:
                    7e:25:91:42:2b:98:94:4b:28:24:85:7e:bb:88:83:
                    d3:b6:45:ae:b1:57:d8:43:cc:79:1e:0f:74:38:af:
                    c1:8c:0b:96:61:ff:aa:d1:de:fa:56:55:3c:7e:26:
                    41:24:1d:fa:6d:84:d7:91:10:16:06:6d:99:1d:b2:
                    8e:a2:48:c7:27:6b:02:a6:a3:0d:cf:52:e9:43:62:
                    81:8c:b7:06:9f:a3:f7:f9:d2:0b:df:74:7b:d2:86:
                    dc:50:36:81:92:8c:c2:d2:02:3e:50:8f:c7:d4:86:
                    32:54:f3:a1:ae:8a:bc:f0:c5:8f:7d:cb:9e:a2:5f:
                    fc:1e:e2:16:0d:bd:ee:d5:c8:59:ad:13:90:b4:d3:
                    a8:1d:76:ba:29:82:ef:b5:c5:ba:33:a0:50:0e:22:
                    b0:a6:08:c6:81:34:ea:d3:b9:7f:02:29:2c:0a:be:
                    af:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:F3:67:74:AB:01:EC:CB:05:D0:D5:F7:1E:D1:55:B0:C2:0E:D3:10
            X509v3 Authority Key Identifier:
                keyid:3F:BC:3A:F4:31:02:CE:DA:4F:A0:F7:FA:9B:D9:1B:2D:65:34:6D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7w69DECztpPoPf6m9kbLWU0bW4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:cd:69:f6:3c:a9:70:1a:5d:7f:d7:f2:46:dc:ef:20:d4:e7:
         99:e2:dd:55:7d:8c:f8:46:4d:ba:ae:c6:c7:fa:21:58:ae:13:
         b1:7d:8f:5b:7f:16:a4:ca:bb:4d:8e:cf:02:58:85:fe:90:9f:
         39:54:45:b6:11:25:15:a9:21:2e:64:b2:fc:db:dd:36:f4:08:
         1e:40:f4:05:2f:2e:cf:b5:07:70:59:70:9f:63:62:14:c0:f8:
         4f:f0:f4:99:ed:b5:2c:0e:4c:90:e2:d1:05:82:62:ba:df:67:
         8c:2b:cf:65:da:1c:10:34:5b:7b:09:17:da:a5:91:7e:43:70:
         67:f7:18:aa:01:8c:6f:68:0d:57:91:94:b1:e9:28:63:59:ce:
         1b:36:06:9f:54:ae:77:07:0f:ac:55:36:67:5d:49:77:04:4f:
         ea:93:ca:a6:81:99:e5:9a:83:78:d5:b2:dc:87:b9:38:f9:fb:
         5f:a3:b0:70:39:e8:b3:1f:94:96:1a:2f:d5:59:8d:e4:f3:98:
         a8:bb:e8:e9:d6:ac:dc:60:38:66:9a:16:5b:aa:b6:42:e2:17:
         60:36:ea:9d:83:c2:8d:1b:dc:92:f5:ad:bb:37:0b:f9:c9:72:
         a1:ef:b3:77:1f:45:ce:0d:41:32:fb:18:3a:64:14:72:a7:49:
         6a:ab:bc:f7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAxkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjFERjgxMTAvBgNVBAUTKDNGQkMzQUY0MzEwMkNFREE0RkEwRjdGQTlCRDkxQjJE
NjUzNDZENkUwHhcNMjYwNTIxMDEzODM0WhcNMjYwNTI4MDEzODM0WjAYMRYwFAYD
VQQDEw02YTBlNjIxYi1lYWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqbMPpIt5lGqdKaRzdpZo+DrRt+o+bVcZZ3CgnSz1CpwtoYMPav001gRYYc0F
gmCg0yBnSY9ljK3E2Gz2+ybCDKtqmLXXh4xa17OE2eQDpMRahDbH89P9ao5+JZFC
K5iUSygkhX67iIPTtkWusVfYQ8x5Hg90OK/BjAuWYf+q0d76VlU8fiZBJB36bYTX
kRAWBm2ZHbKOokjHJ2sCpqMNz1LpQ2KBjLcGn6P3+dIL33R70obcUDaBkozC0gI+
UI/H1IYyVPOhroq88MWPfcueol/8HuIWDb3u1chZrROQtNOoHXa6KYLvtcW6M6BQ
DiKwpgjGgTTq07l/AiksCr6vmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGbzZ3Sr
AezLBdDV9x7RVbDCDtMQMB8GA1UdIwQYMBaAFD+8OvQxAs7aT6D3+pvZGy1lNG1u
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MURGOC8yNkU1MzExNDU1
MDYxMUVEOTUwNkMwNDVDNEY5QUUwMi9QN3c2OURFQ3p0cFBvUGY2bTlrYkxXVTBi
VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1A3dzY5REVDenRwUG9QZjZtOWtiTFdVMGJXNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MURGOC8yNkU1MzExNDU1MDYxMUVEOTUwNkMwNDVDNEY5QUUwMi9QN3c2OURFQ3p0
cFBvUGY2bTlrYkxXVTBiVzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAc1p9jypcBpdf9fyRtzvINTnmeLdVX2M+EZNuq7Gx/ohWK4TsX2PW38WpMq7
TY7PAliF/pCfOVRFthElFakhLmSy/NvdNvQIHkD0BS8uz7UHcFlwn2NiFMD4T/D0
me21LA5MkOLRBYJiut9njCvPZdocEDRbewkX2qWRfkNwZ/cYqgGMb2gNV5GUseko
Y1nOGzYGn1SudwcPrFU2Z11JdwRP6pPKpoGZ5ZqDeNWy3Ie5OPn7X6OwcDnosx+U
lhov1VmN5POYqLvo6das3GA4ZpoWW6q2QuIXYDbqnYPCjRvckvWtuzcL+clyoe+z
dx9Fzg1BMvsYOmQUcqdJaqu89w==
-----END CERTIFICATE-----
Generated at Thu May 21 10:52:37 2026 by rpki-client