Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.mft
File:                     M5e4iQ4zfaCUjWl9QjDW_kYz0NA.mft (raw, json)
Hash identifier:          rqTUx/WF74eaTetDZGbQKrOSD6tYnEIPtKTynKYvD50=
Subject key identifier:   AB:8C:E8:77:D1:82:F2:B3:AD:C3:88:C2:E7:1A:6F:C1:99:43:9A:9E
Authority key identifier: 33:97:B8:89:0E:33:7D:A0:94:8D:69:7D:42:30:D6:FE:46:33:D0:D0
Certificate issuer:       /CN=A91A4030/serialNumber=3397B8890E337DA0948D697D4230D6FE4633D0D0
Certificate serial:       7A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.mft
Manifest number:          75
Signing time:             Thu 21 May 2026 07:54:17 +0000
Manifest this update:     Thu 21 May 2026 07:54:17 +0000
Manifest next update:     Thu 28 May 2026 07:54:17 +0000
Files and hashes:         1: M5e4iQ4zfaCUjWl9QjDW_kYz0NA.crl (hash: UiPRXHSehzNgvji0wV9F0wnGRkuM005+T2vMDW6dBS0=)
                          2: E56B8AFEAB1411F0B1936926C4F9AE02.roa (hash: WD0gErJJmyclFhmJaTMcOF1Ei1LTHwTNpBBdF8taqIs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.crl
                          rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 07:54:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4030, serialNumber=3397B8890E337DA0948D697D4230D6FE4633D0D0
        Validity
            Not Before: May 21 07:54:17 2026 GMT
            Not After : May 28 07:54:17 2026 GMT
        Subject: CN=6a0eba29-220f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c3:97:73:83:9b:da:7f:80:d7:16:85:45:02:
                    01:ec:76:07:02:17:16:78:91:99:cb:68:9d:31:21:
                    13:12:ae:d5:2d:fd:59:a0:db:9c:09:cf:be:c5:ea:
                    c4:96:eb:99:31:20:cb:c8:12:78:34:6a:96:c1:26:
                    87:1e:1f:48:94:9d:fa:dd:8e:59:51:d3:d6:02:7d:
                    c9:33:e7:bc:87:ba:36:42:53:9b:41:c7:30:86:c0:
                    6f:5b:1d:6b:33:db:ae:cf:53:5a:84:5b:7f:00:19:
                    91:0f:4a:53:f4:8b:4f:de:af:c0:78:07:2a:67:9c:
                    e6:83:bd:60:0e:67:03:c9:9f:e0:a8:17:d3:78:13:
                    30:23:da:0e:49:15:65:69:8b:84:2a:03:50:1a:a5:
                    f5:ad:b1:07:64:56:f6:3e:4d:a1:16:10:fc:99:c9:
                    76:93:6a:b6:5f:38:31:f7:08:89:f1:c4:dc:95:5a:
                    b6:53:89:dd:78:09:21:7a:9c:ab:20:ea:9a:0b:81:
                    10:77:d5:e0:86:53:5c:5a:2c:26:4b:ee:e1:e4:ba:
                    80:0a:1d:ad:16:70:da:a1:86:f2:b7:a8:c4:fe:80:
                    09:33:b6:df:77:fb:cf:82:a4:43:36:2a:10:c8:fe:
                    3c:c4:1f:d3:eb:4e:2a:2a:8c:f5:ff:4a:df:9d:66:
                    a7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:8C:E8:77:D1:82:F2:B3:AD:C3:88:C2:E7:1A:6F:C1:99:43:9A:9E
            X509v3 Authority Key Identifier:
                keyid:33:97:B8:89:0E:33:7D:A0:94:8D:69:7D:42:30:D6:FE:46:33:D0:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:6c:bf:7c:d9:30:14:fd:79:ff:32:02:46:b4:12:f0:25:0b:
         88:00:d1:74:c9:ec:8a:cc:9e:46:f6:f3:f6:0a:83:09:ae:67:
         46:ab:ed:98:77:5b:06:6f:93:65:cd:96:0d:cd:9a:24:28:e0:
         7b:d4:70:27:26:8f:72:dc:3e:a9:d6:f2:1d:6b:91:3a:bc:d9:
         f8:9e:89:31:b3:49:0d:74:c7:3f:fe:4b:f9:d0:42:30:bb:e6:
         6e:12:61:ca:3c:26:9b:3e:6f:a4:6e:c1:02:aa:b3:45:77:d6:
         a1:06:40:75:3a:56:a9:e1:8d:54:a4:37:af:a7:e6:89:59:17:
         86:87:bd:18:a7:95:e0:46:07:c3:6a:d4:91:56:58:11:56:7c:
         1b:ae:ea:3e:59:ca:2f:c4:0a:a1:58:9a:fa:1d:8c:39:df:09:
         d4:24:b0:21:1b:ef:ba:98:d6:07:a1:e6:a8:88:fa:0b:7c:1a:
         71:e4:ab:1b:59:71:ba:03:53:04:e2:64:b1:a7:f0:f5:42:76:
         07:4c:76:e1:b1:31:52:10:a8:05:bf:69:73:6c:b7:7f:ee:9a:
         29:da:76:ab:3d:a7:d9:4c:f1:f8:e0:1f:07:ae:dd:6c:8a:66:
         3c:c4:86:da:5d:04:44:3e:2b:21:dd:d4:40:a3:45:c1:e5:1e:
         01:78:96:a4
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
NDAzMDExMC8GA1UEBRMoMzM5N0I4ODkwRTMzN0RBMDk0OEQ2OTdENDIzMEQ2RkU0
NjMzRDBEMDAeFw0yNjA1MjEwNzU0MTdaFw0yNjA1MjgwNzU0MTdaMBgxFjAUBgNV
BAMTDTZhMGViYTI5LTIyMGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDQw5dzg5vaf4DXFoVFAgHsdgcCFxZ4kZnLaJ0xIRMSrtUt/Vmg25wJz77F6sSW
65kxIMvIEng0apbBJoceH0iUnfrdjllR09YCfckz57yHujZCU5tBxzCGwG9bHWsz
267PU1qEW38AGZEPSlP0i0/er8B4BypnnOaDvWAOZwPJn+CoF9N4EzAj2g5JFWVp
i4QqA1AapfWtsQdkVvY+TaEWEPyZyXaTarZfODH3CInxxNyVWrZTid14CSF6nKsg
6poLgRB31eCGU1xaLCZL7uHkuoAKHa0WcNqhhvK3qMT+gAkztt93+8+CpEM2KhDI
/jzEH9PrTioqjPX/St+dZqf9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUq4zod9GC
8rOtw4jC5xpvwZlDmp4wHwYDVR0jBBgwFoAUM5e4iQ4zfaCUjWl9QjDW/kYz0NAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0MDMwLzIwMDYzQzYwQUIx
MzExRjA5NzZDOUIxRUM0RjlBRTAyL001ZTRpUTR6ZmFDVWpXbDlRakRXX2tZejBO
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvTTVlNGlRNHpmYUNValdsOVFqRFdfa1l6ME5BLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0
MDMwLzIwMDYzQzYwQUIxMzExRjA5NzZDOUIxRUM0RjlBRTAyL001ZTRpUTR6ZmFD
VWpXbDlRakRXX2tZejBOQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBgbL982TAU/Xn/MgJGtBLwJQuIANF0yeyKzJ5G9vP2CoMJrmdGq+2Yd1sGb5Nl
zZYNzZokKOB71HAnJo9y3D6p1vIda5E6vNn4nokxs0kNdMc//kv50EIwu+ZuEmHK
PCabPm+kbsECqrNFd9ahBkB1Olap4Y1UpDevp+aJWReGh70Yp5XgRgfDatSRVlgR
Vnwbruo+WcovxAqhWJr6HYw53wnUJLAhG++6mNYHoeaoiPoLfBpx5KsbWXG6A1ME
4mSxp/D1QnYHTHbhsTFSEKgFv2lzbLd/7pop2narPafZTPH44B8Hrt1simY8xIba
XQREPish3dRAo0XB5R4BeJak
-----END CERTIFICATE-----
Generated at Thu May 21 10:14:45 2026 by rpki-client