Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft
File:                     2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft (raw, json)
Hash identifier:          6CYwdaxYVdLK1uU00jG8nufX6j7QRypf3qNOl7J3A2s=
Subject key identifier:   C1:B5:09:AE:FE:2E:1F:DA:5D:2B:1D:74:BB:24:96:68:56:32:2D:24
Authority key identifier: DB:EE:EB:C2:5A:7A:9B:9B:67:5A:04:E2:F4:21:EF:E4:6E:A7:25:20
Certificate issuer:       /CN=A91A300F/serialNumber=DBEEEBC25A7A9B9B675A04E2F421EFE46EA72520
Certificate serial:       0501
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft
Manifest number:          04F8
Signing time:             Mon 01 Jun 2026 00:23:41 +0000
Manifest this update:     Mon 01 Jun 2026 00:23:40 +0000
Manifest next update:     Mon 08 Jun 2026 00:23:40 +0000
Files and hashes:         1: 2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl (hash: rMUj+9cLWZAropPNAqViLFiOQx9ew7lALvCk3n01vgY=)
                          2: 90065F424DB511F0A1C8D30DC4F9AE02.roa (hash: vqS90tievR3HU16OsLXcBKQDauAULDoOuFd6Vz6BI+U=)
                          3: 9C2DE17A5D9311ECB2ABB63FC4F9AE02.roa (hash: ez7xnIQP2Ioo5zgea1e7sjsLohhlbtgkdaKlVhizArA=)
                          4: E03427482D2411F192A7D59AB8833773.roa (hash: 6XCUaJGME6Z9CZytyWw6X1X7WoldzofbdyDhfxUS80A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl
                          rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 00:23:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1281 (0x501)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A300F, serialNumber=DBEEEBC25A7A9B9B675A04E2F421EFE46EA72520
        Validity
            Not Before: Jun  1 00:23:40 2026 GMT
            Not After : Jun  8 00:23:40 2026 GMT
        Subject: CN=6a1cd10c-dd77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:de:33:ef:90:3c:8b:81:a0:b7:e1:0a:1e:23:
                    eb:44:ab:63:a1:74:5e:3d:31:36:3e:91:f9:53:34:
                    bd:84:7f:5b:63:70:3b:bc:f8:ee:81:37:6e:bc:9d:
                    66:7f:c9:c3:c6:a5:a4:61:a5:c8:f1:77:63:72:e0:
                    7c:65:cb:10:18:3b:75:b1:6e:fa:8b:65:95:09:c0:
                    53:7d:dc:af:d1:a5:8e:e6:bd:a6:f0:9f:39:90:4d:
                    e8:4a:e4:18:d5:10:d3:4b:56:40:06:d4:fd:02:d4:
                    c5:e3:fe:f3:7c:d3:8a:c4:b7:99:32:35:6c:15:a3:
                    50:3b:db:de:3c:15:b1:69:96:42:6d:0d:c9:b7:40:
                    4f:36:b4:9c:c4:71:58:a9:fc:8d:7e:8b:66:c1:7e:
                    e0:4f:c3:07:2f:6f:40:f7:2f:6f:3f:91:ca:93:27:
                    dc:04:ad:32:24:33:d6:d4:d6:fd:09:ee:2e:9e:47:
                    ba:00:e7:d9:bc:11:44:7a:02:79:e6:fa:2b:58:e5:
                    d2:59:2e:59:ec:f0:72:2e:85:9f:6e:c2:49:0f:47:
                    f6:55:b8:6e:1a:ea:d8:25:94:3f:5b:e5:b7:29:de:
                    60:0c:3c:f5:eb:49:25:f4:11:a2:04:ab:a6:e0:0a:
                    95:b6:50:d4:b2:38:03:b9:ca:69:7b:67:b4:64:4d:
                    ab:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B5:09:AE:FE:2E:1F:DA:5D:2B:1D:74:BB:24:96:68:56:32:2D:24
            X509v3 Authority Key Identifier:
                keyid:DB:EE:EB:C2:5A:7A:9B:9B:67:5A:04:E2:F4:21:EF:E4:6E:A7:25:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:07:67:75:2c:2d:5e:19:cc:6c:a0:ee:47:69:2a:32:57:cb:
         ba:a5:9b:c1:8c:ed:7c:01:6c:8f:e8:38:55:87:cd:30:c2:95:
         90:bb:04:a7:45:27:0e:ed:fe:61:09:53:57:b7:64:be:f6:72:
         19:50:ee:5f:31:f1:98:38:d9:bc:28:a6:5c:c0:2a:e4:a1:61:
         9b:17:fa:80:69:b5:0b:53:aa:68:b9:48:ac:39:45:cc:68:a3:
         1b:2f:14:a0:a4:da:b9:d1:78:15:fd:4c:61:01:fe:9a:67:00:
         f1:5b:98:a9:1a:ff:89:10:a0:23:2f:ef:8a:39:95:af:5d:44:
         2a:a2:e8:ab:6e:c2:89:34:f8:98:50:72:ed:c4:22:dd:c0:1b:
         51:4f:8d:48:de:69:59:ff:37:1a:e0:18:7d:3b:1c:50:af:07:
         8a:98:34:4f:db:55:f4:65:4e:c8:c4:a2:51:25:fd:d7:fc:d6:
         55:60:53:cd:6d:35:76:a0:e2:a1:93:75:07:72:34:05:96:ef:
         c3:96:f8:04:48:a8:5e:ef:52:8f:28:b6:7c:51:f4:25:7c:9c:
         59:63:fe:37:50:77:d0:6d:95:26:75:02:6b:a0:49:4a:73:ec:
         f8:80:48:33:7b:48:af:ed:44:cb:8e:cc:78:39:3c:0f:c4:62:
         23:95:b1:64
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTMwMEYxMTAvBgNVBAUTKERCRUVFQkMyNUE3QTlCOUI2NzVBMDRFMkY0MjFFRkU0
NkVBNzI1MjAwHhcNMjYwNjAxMDAyMzQwWhcNMjYwNjA4MDAyMzQwWjAYMRYwFAYD
VQQDEw02YTFjZDEwYy1kZDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy94z75A8i4Ggt+EKHiPrRKtjoXRePTE2PpH5UzS9hH9bY3A7vPjugTduvJ1m
f8nDxqWkYaXI8XdjcuB8ZcsQGDt1sW76i2WVCcBTfdyv0aWO5r2m8J85kE3oSuQY
1RDTS1ZABtT9AtTF4/7zfNOKxLeZMjVsFaNQO9vePBWxaZZCbQ3Jt0BPNrScxHFY
qfyNfotmwX7gT8MHL29A9y9vP5HKkyfcBK0yJDPW1Nb9Ce4unke6AOfZvBFEegJ5
5vorWOXSWS5Z7PByLoWfbsJJD0f2VbhuGurYJZQ/W+W3Kd5gDDz160kl9BGiBKum
4AqVtlDUsjgDucppe2e0ZE2raQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMG1Ca7+
Lh/aXSsddLsklmhWMi0kMB8GA1UdIwQYMBaAFNvu68JaepubZ1oE4vQh7+RupyUg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzAwRi8xQUQ1QUY3NDVE
OTExMUVDOUFGQjhEM0RDNEY5QUUwMi8yLTdyd2xwNm01dG5XZ1RpOUNIdjVHNm5K
U0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzItN3J3bHA2bTV0bldnVGk5Q0h2NUc2bkpTQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MzAwRi8xQUQ1QUY3NDVEOTExMUVDOUFGQjhEM0RDNEY5QUUwMi8yLTdyd2xwNm01
dG5XZ1RpOUNIdjVHNm5KU0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAegdndSwtXhnMbKDuR2kqMlfLuqWbwYztfAFsj+g4VYfNMMKVkLsEp0UnDu3+
YQlTV7dkvvZyGVDuXzHxmDjZvCimXMAq5KFhmxf6gGm1C1OqaLlIrDlFzGijGy8U
oKTaudF4Ff1MYQH+mmcA8VuYqRr/iRCgIy/vijmVr11EKqLoq27CiTT4mFBy7cQi
3cAbUU+NSN5pWf83GuAYfTscUK8Hipg0T9tV9GVOyMSiUSX91/zWVWBTzW01dqDi
oZN1B3I0BZbvw5b4BEioXu9Sjyi2fFH0JXycWWP+N1B30G2VJnUCa6BJSnPs+IBI
M3tIr+1Ey47MeDk8D8RiI5WxZA==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:57:36 2026 by rpki-client