Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft
File:                     Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft (raw, json)
Hash identifier:          09J4cVcSao4elMBqgQe+QVZEha5bRJVAuZ1Jskbfuew=
Subject key identifier:   23:D3:5B:74:49:D7:39:5F:E9:C8:1F:BF:DF:AF:70:57:D0:44:17:FB
Authority key identifier: 05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC
Certificate issuer:       /CN=A91941E9/serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC
Certificate serial:       089A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft
Manifest number:          0871
Signing time:             Sat 16 May 2026 20:50:12 +0000
Manifest this update:     Sat 16 May 2026 20:50:12 +0000
Manifest next update:     Sat 23 May 2026 20:50:12 +0000
Files and hashes:         1: Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl (hash: Qz7UaxhaOm74VtFXVVZAgF791tQn3obt3HwceblwxS4=)
                          2: 1F5EE982235011F1ABBAE38DAE833773.roa (hash: 4vii0PEyxfAMDDStR+CEGDgcVMprRDhlhb9Z9n20u5A=)
                          3: 4314DB4C8EAF11F091C0B421C4F9AE02.roa (hash: v7v6WaMiJJgHGJFslronZNjFXcWnrbiRDd5BXO1kv5Q=)
                          4: 1069D50EB54B11F092E79246C4F9AE02.roa (hash: sMAmYlXlaGfYX483zQnKNNyggh6fdl5j3X0veZpEvVk=)
                          5: 1DB0529C7CA711F0A52C5966C4F9AE02.roa (hash: Jad+xXpbo9F1Si83r3/4thdMZxhxo4YYl8MwD9607wo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl
                          rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 May 2026 20:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2202 (0x89a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91941E9, serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC
        Validity
            Not Before: May 16 20:50:12 2026 GMT
            Not After : May 23 20:50:12 2026 GMT
        Subject: CN=6a08d884-e876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7e:1a:3a:93:ad:6c:6b:05:71:49:6b:1d:2b:
                    3a:b5:43:cb:01:16:25:3b:dd:79:bb:09:83:0e:b4:
                    8c:da:72:81:ff:54:2b:28:b7:c6:03:47:36:b6:68:
                    a9:2d:94:65:99:d3:90:50:49:dd:95:88:e4:a4:57:
                    b2:df:86:c5:66:71:eb:15:04:04:e5:f8:dc:50:0d:
                    0b:4e:7f:ac:6f:d6:de:30:e8:fc:84:2c:f3:7e:1d:
                    0f:68:72:ed:52:41:a1:a7:75:da:45:f5:f8:7e:56:
                    fc:fb:3f:97:25:aa:26:d1:60:c6:1e:20:cf:86:00:
                    f3:a7:49:55:5f:1a:35:0c:c6:13:32:14:34:62:fc:
                    d7:e7:a4:fd:10:59:08:97:93:45:b4:83:e9:fb:ec:
                    0e:34:5e:71:b5:0b:0e:a7:e1:58:27:3c:2b:83:b5:
                    3f:ed:15:3b:fa:02:37:a2:c0:33:18:22:cb:15:28:
                    84:66:e3:e9:0b:05:2f:d7:17:99:d7:a2:46:69:3e:
                    f7:42:20:55:2a:72:74:88:de:3e:a7:e2:d1:1d:27:
                    58:9c:6c:8a:4e:ec:2e:76:2e:50:0a:6b:22:da:d5:
                    0e:49:dd:43:26:6e:8d:01:89:2f:04:51:a1:87:77:
                    22:d9:4e:de:49:2b:17:f2:5c:0e:9b:14:56:da:13:
                    69:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:D3:5B:74:49:D7:39:5F:E9:C8:1F:BF:DF:AF:70:57:D0:44:17:FB
            X509v3 Authority Key Identifier:
                keyid:05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:aa:a3:79:1f:e0:98:c3:be:c1:7b:00:9e:5c:1d:50:6d:00:
         c7:21:7f:96:a9:1e:0c:93:99:52:c0:49:90:59:63:77:53:ad:
         35:b7:49:f0:a6:e3:84:f3:f5:8a:69:4b:6b:1e:d9:97:33:b6:
         d8:5a:03:fc:a6:7c:71:bd:65:a3:dd:2b:23:fb:40:ec:29:34:
         96:2a:f9:cd:e7:99:4b:f3:49:df:87:aa:23:6f:1e:86:6d:fd:
         0c:8a:ce:e6:35:2c:52:47:64:2b:73:e7:d4:49:52:4a:11:17:
         36:4a:40:c7:09:31:c2:dc:f3:0d:cb:24:ca:79:22:d1:7b:9d:
         5f:48:7b:fd:68:5c:15:6c:54:b7:f5:42:d3:78:e7:fb:71:1c:
         5d:b4:a7:f2:0c:00:a2:48:c9:03:72:81:30:c1:db:25:ed:6d:
         57:b5:93:29:67:a7:4b:60:12:8e:e8:a0:07:f9:22:de:fa:df:
         27:99:d0:3d:4c:ca:8e:4b:57:db:d0:36:0a:21:0c:e5:48:5c:
         78:d3:ce:5f:39:72:51:83:2c:01:bd:19:cf:08:b9:c0:b6:1d:
         9f:21:c5:04:02:89:51:bd:ed:02:d5:be:09:14:8f:ba:62:69:
         fc:e8:39:ea:9d:12:d2:52:0f:30:54:14:56:5d:c6:bf:8e:96:
         bd:cc:9b:63
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTQxRTkxMTAvBgNVBAUTKDA1QUQzRTRBQTE5NjFCQTdFQ0JFMDI5MzU3MjVDMjVD
RDI2QkQ2QkMwHhcNMjYwNTE2MjA1MDEyWhcNMjYwNTIzMjA1MDEyWjAYMRYwFAYD
VQQDEw02YTA4ZDg4NC1lODc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtn4aOpOtbGsFcUlrHSs6tUPLARYlO915uwmDDrSM2nKB/1QrKLfGA0c2tmip
LZRlmdOQUEndlYjkpFey34bFZnHrFQQE5fjcUA0LTn+sb9beMOj8hCzzfh0PaHLt
UkGhp3XaRfX4flb8+z+XJaom0WDGHiDPhgDzp0lVXxo1DMYTMhQ0YvzX56T9EFkI
l5NFtIPp++wONF5xtQsOp+FYJzwrg7U/7RU7+gI3osAzGCLLFSiEZuPpCwUv1xeZ
16JGaT73QiBVKnJ0iN4+p+LRHSdYnGyKTuwudi5QCmsi2tUOSd1DJm6NAYkvBFGh
h3ci2U7eSSsX8lwOmxRW2hNphwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCPTW3RJ
1zlf6cgfv9+vcFfQRBf7MB8GA1UdIwQYMBaAFAWtPkqhlhun7L4Ck1clwlzSa9a8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDFFOS9EQUQ4RkI4MDA3
OTAxMUVCQkI5OEMwNzZDNEY5QUUwMi9CYTAtU3FHV0c2ZnN2Z0tUVnlYQ1hOSnIx
cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JhMC1TcUdXRzZmc3ZnS1RWeVhDWE5KcjFydy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NDFFOS9EQUQ4RkI4MDA3OTAxMUVCQkI5OEMwNzZDNEY5QUUwMi9CYTAtU3FHV0c2
ZnN2Z0tUVnlYQ1hOSnIxcncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAM6qjeR/gmMO+wXsAnlwdUG0AxyF/lqkeDJOZUsBJkFljd1OtNbdJ8KbjhPP1
imlLax7ZlzO22FoD/KZ8cb1lo90rI/tA7Ck0lir5zeeZS/NJ34eqI28ehm39DIrO
5jUsUkdkK3Pn1ElSShEXNkpAxwkxwtzzDcskynki0XudX0h7/WhcFWxUt/VC03jn
+3EcXbSn8gwAokjJA3KBMMHbJe1tV7WTKWenS2ASjuigB/ki3vrfJ5nQPUzKjktX
29A2CiEM5UhceNPOXzlyUYMsAb0Zzwi5wLYdnyHFBAKJUb3tAtW+CRSPumJp/Og5
6p0S0lIPMFQUVl3Gv46WvcybYw==
-----END CERTIFICATE-----
Generated at Sun May 17 07:00:40 2026 by rpki-client