Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft
File:                     72i9vAcsq0VbbaMWDt-PtsSI3RU.mft (raw, json)
Hash identifier:          PIXmcbUdY5VjroIaR/tAZLIqGV4Jlyu+sHy1Xbfa6C8=
Subject key identifier:   74:2C:6E:44:A0:8C:F1:7F:D6:03:CC:F7:82:03:89:41:85:9D:DA:0B
Authority key identifier: EF:68:BD:BC:07:2C:AB:45:5B:6D:A3:16:0E:DF:8F:B6:C4:88:DD:15
Certificate issuer:       /CN=A91A4B9D/serialNumber=EF68BDBC072CAB455B6DA3160EDF8FB6C488DD15
Certificate serial:       3572
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft
Manifest number:          3563
Signing time:             Wed 20 May 2026 15:01:05 +0000
Manifest this update:     Wed 20 May 2026 15:01:05 +0000
Manifest next update:     Wed 27 May 2026 15:01:05 +0000
Files and hashes:         1: 72i9vAcsq0VbbaMWDt-PtsSI3RU.crl (hash: Z7+oxoCIDv7qmfwIOy5LHkpz9HcweXACUTVDdU1qRhs=)
                          2: C6BCEF8ECF2311F09BE9DF62C4F9AE02.roa (hash: ub2UwmJHfTSxoavuI6+2HDPbk/zf32PQjhZJmlUwhnE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.crl
                          rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 15:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13682 (0x3572)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4B9D, serialNumber=EF68BDBC072CAB455B6DA3160EDF8FB6C488DD15
        Validity
            Not Before: May 20 15:01:05 2026 GMT
            Not After : May 27 15:01:05 2026 GMT
        Subject: CN=6a0dccb1-07ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:5b:23:d2:cd:8a:a3:43:7f:81:f3:7f:4e:4a:
                    64:32:d8:6f:9c:76:fc:06:d4:35:e1:9a:e8:56:e6:
                    6e:c4:12:ee:3c:2d:2b:64:5b:db:40:b0:04:a5:cc:
                    fc:85:c1:4c:c5:53:a4:43:1f:40:61:ea:db:76:a3:
                    40:09:fa:27:37:92:e7:a8:33:2d:fe:82:56:66:1c:
                    de:91:3d:c2:18:3e:e4:b3:fa:dc:b3:b0:6f:06:db:
                    e0:f2:bf:c9:7a:b7:1a:3d:4f:f3:54:4c:25:34:55:
                    c9:c2:35:8e:20:5b:3e:45:bb:68:f6:56:ae:65:f3:
                    b2:08:bf:2e:c0:4a:b6:db:9d:36:f2:c8:af:a2:4e:
                    ec:f0:d3:3c:cf:40:50:45:6f:43:bc:47:e2:47:c4:
                    2d:98:5d:09:0a:69:8d:51:14:8b:61:50:1a:e1:2f:
                    10:46:41:4c:6f:7d:47:dd:f8:bd:99:03:a7:87:29:
                    2e:0f:4d:c7:df:85:16:fc:da:8c:89:de:ac:4d:e0:
                    e9:25:42:49:cb:a6:79:dc:bc:ad:71:63:c9:d7:01:
                    1e:b1:f0:8c:b7:0f:09:83:a9:ae:99:72:56:07:c3:
                    18:63:6e:c0:a9:bd:50:1b:67:78:2b:58:ef:d6:c9:
                    0a:0e:75:0c:3e:8f:38:f8:18:a8:3d:df:ed:55:92:
                    bd:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:2C:6E:44:A0:8C:F1:7F:D6:03:CC:F7:82:03:89:41:85:9D:DA:0B
            X509v3 Authority Key Identifier:
                keyid:EF:68:BD:BC:07:2C:AB:45:5B:6D:A3:16:0E:DF:8F:B6:C4:88:DD:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:2d:02:13:7b:64:87:a6:0e:09:d6:40:72:74:72:24:f4:de:
         5c:43:fa:e2:0d:91:77:dc:3f:d6:13:e6:54:23:68:b0:43:07:
         24:7a:a8:70:22:f8:ab:0d:7e:40:d3:7e:34:68:d4:da:6e:10:
         7a:e9:a0:fc:e3:4d:f3:86:f8:09:0d:65:95:dd:9b:c3:9a:c6:
         42:ae:a7:e2:e2:6e:b3:56:b8:45:4d:88:37:63:68:0d:a0:f1:
         2e:40:36:65:00:0d:c8:3b:00:74:ad:ee:20:29:41:e9:f4:d7:
         cf:ff:a3:e6:b6:f1:8b:1c:9d:dc:5f:c4:27:d7:71:05:5d:13:
         1e:e3:b6:76:37:38:97:4d:76:de:c9:66:4a:99:22:06:a7:67:
         2a:45:47:3e:36:7c:08:82:5c:dc:e8:56:84:4d:ad:da:df:64:
         8a:15:c7:53:3f:53:08:ed:2b:e7:57:4f:dc:d3:77:38:51:ed:
         d2:3d:28:c3:c6:61:3a:ac:98:b6:d7:6d:bf:28:04:83:a4:3b:
         7d:65:1d:51:6c:91:e1:39:ee:7a:4a:b3:b1:2b:d6:8a:36:ec:
         93:2a:3b:ab:da:17:6e:fb:94:6e:3f:b3:ec:c3:d8:52:16:b5:
         c5:8b:cb:9a:4c:82:60:44:12:b6:79:c1:3c:d0:3b:8a:fe:e6:
         13:a1:44:a3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTRCOUQxMTAvBgNVBAUTKEVGNjhCREJDMDcyQ0FCNDU1QjZEQTMxNjBFREY4RkI2
QzQ4OEREMTUwHhcNMjYwNTIwMTUwMTA1WhcNMjYwNTI3MTUwMTA1WjAYMRYwFAYD
VQQDEw02YTBkY2NiMS0wN2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7Fsj0s2Ko0N/gfN/TkpkMthvnHb8BtQ14ZroVuZuxBLuPC0rZFvbQLAEpcz8
hcFMxVOkQx9AYerbdqNACfonN5LnqDMt/oJWZhzekT3CGD7ks/rcs7BvBtvg8r/J
ercaPU/zVEwlNFXJwjWOIFs+Rbto9lauZfOyCL8uwEq225028sivok7s8NM8z0BQ
RW9DvEfiR8QtmF0JCmmNURSLYVAa4S8QRkFMb31H3fi9mQOnhykuD03H34UW/NqM
id6sTeDpJUJJy6Z53LytcWPJ1wEesfCMtw8Jg6mumXJWB8MYY27Aqb1QG2d4K1jv
1skKDnUMPo84+BioPd/tVZK9mQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHQsbkSg
jPF/1gPM94IDiUGFndoLMB8GA1UdIwQYMBaAFO9ovbwHLKtFW22jFg7fj7bEiN0V
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEI5RC85NUFEMDM4ODFE
OUUxMUUyODgwRTg2OEUwOEIwMkNEMi83Mmk5dkFjc3EwVmJiYU1XRHQtUHRzU0kz
UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzcyaTl2QWNzcTBWYmJhTVdEdC1QdHNTSTNSVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NEI5RC85NUFEMDM4ODFEOUUxMUUyODgwRTg2OEUwOEIwMkNEMi83Mmk5dkFjc3Ew
VmJiYU1XRHQtUHRzU0kzUlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA0i0CE3tkh6YOCdZAcnRyJPTeXEP64g2Rd9w/1hPmVCNosEMHJHqocCL4qw1+
QNN+NGjU2m4Qeumg/ONN84b4CQ1lld2bw5rGQq6n4uJus1a4RU2IN2NoDaDxLkA2
ZQANyDsAdK3uIClB6fTXz/+j5rbxixyd3F/EJ9dxBV0THuO2djc4l0123slmSpki
BqdnKkVHPjZ8CIJc3OhWhE2t2t9kihXHUz9TCO0r51dP3NN3OFHt0j0ow8ZhOqyY
ttdtvygEg6Q7fWUdUWyR4TnuekqzsSvWijbskyo7q9oXbvuUbj+z7MPYUha1xYvL
mkyCYEQStnnBPNA7iv7mE6FEow==
-----END CERTIFICATE-----
Generated at Thu May 21 10:22:55 2026 by rpki-client