Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft
File:                     ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft (raw, json)
Hash identifier:          YMPjNK5pZMHa0pXSEmhsmDAEIH0qp+XpRXoEdpx9mso=
Subject key identifier:   0D:75:2C:99:1E:B6:BC:81:72:ED:F7:B7:8A:A1:F9:34:25:63:81:61
Authority key identifier: 8A:F7:D8:B8:64:FD:90:45:2F:FD:6D:E9:3B:51:45:6C:79:EF:B3:C7
Certificate issuer:       /CN=A91AC4FA/serialNumber=8AF7D8B864FD90452FFD6DE93B51456C79EFB3C7
Certificate serial:       02A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft
Manifest number:          0293
Signing time:             Sat 23 May 2026 01:46:37 +0000
Manifest this update:     Sat 23 May 2026 01:46:36 +0000
Manifest next update:     Sat 30 May 2026 01:46:36 +0000
Files and hashes:         1: ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl (hash: mfVQPAhFQHwOFifXQqLyOFwgOFIKBQUUS/EHGRzrvkI=)
                          2: 0B1C46B26C8E11EDA1402673C4F9AE02.roa (hash: UWH1x8giA5CUDbuKn5hiEaz+aWmWPo/dG0Iot9P77PQ=)
                          3: 2A40C41C6EC511ED9672CB40C4F9AE02.roa (hash: Unh6vvgI1wlU5PdNLje9/sZrH6mvqXrjcdflctfvmwM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl
                          rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 01:46:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 675 (0x2a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC4FA, serialNumber=8AF7D8B864FD90452FFD6DE93B51456C79EFB3C7
        Validity
            Not Before: May 23 01:46:36 2026 GMT
            Not After : May 30 01:46:36 2026 GMT
        Subject: CN=6a1106fd-61a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c4:d0:b4:08:b1:20:bd:a6:8f:f7:bf:ea:96:
                    bb:e7:9b:28:01:49:fd:90:80:63:b1:82:64:2d:25:
                    aa:75:ae:c9:72:34:86:d9:a4:15:de:0a:c2:fb:e4:
                    6a:b1:40:c9:51:2b:b3:63:2e:1f:ae:a3:3e:18:10:
                    9d:e5:48:40:11:a9:b3:98:fc:01:a4:b5:45:c3:d3:
                    83:2a:74:87:4c:6c:4f:a0:de:f2:07:75:c6:f5:64:
                    4e:ad:f6:ab:a5:5d:d5:a3:18:90:e1:96:33:f5:9a:
                    8e:89:b9:84:ce:6c:ae:29:e0:60:49:ed:f5:87:94:
                    2b:35:91:95:7e:db:ba:d5:c6:a2:fe:cb:56:c7:0d:
                    56:52:4f:96:97:e5:04:53:b3:21:e0:d0:cf:a9:34:
                    5d:bf:88:e0:e7:36:63:a3:5c:5d:d9:3c:d6:49:08:
                    9f:42:f7:28:f3:1c:e6:e3:9e:c7:13:7c:47:85:6e:
                    df:1b:c1:b1:63:42:ab:1e:5c:d3:cd:6c:fc:e3:19:
                    64:20:0b:43:86:7e:27:82:3b:3a:36:d8:b1:40:51:
                    1c:d5:4f:90:9b:e8:fd:76:da:19:ce:5a:aa:cc:75:
                    7e:27:fb:23:84:aa:ec:4d:fd:47:90:5a:f6:4b:f2:
                    3d:35:c6:af:36:7a:e2:12:06:34:06:c0:c7:77:62:
                    38:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:75:2C:99:1E:B6:BC:81:72:ED:F7:B7:8A:A1:F9:34:25:63:81:61
            X509v3 Authority Key Identifier:
                keyid:8A:F7:D8:B8:64:FD:90:45:2F:FD:6D:E9:3B:51:45:6C:79:EF:B3:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:b4:e4:c7:07:47:b1:c4:b1:61:26:75:93:6b:af:0d:f7:9b:
         4b:cb:51:c7:cf:6b:1c:fa:f8:80:8b:64:b1:e9:fc:b0:8b:57:
         a7:be:7e:b4:6e:96:ff:03:8d:8a:0b:4e:ea:56:5b:3b:bb:88:
         f8:67:81:1e:ae:89:da:ce:e5:ef:41:ce:6e:9c:8d:24:7b:2c:
         a9:19:fb:62:a8:ae:89:57:b7:f9:74:01:61:0d:30:1d:4d:01:
         3d:2e:75:22:01:15:74:55:63:e9:7f:5c:ad:18:77:fb:97:56:
         15:d2:08:43:92:d3:b1:ae:b9:01:1f:a2:36:a5:a9:8a:7a:8f:
         7b:0b:32:b3:cc:32:38:16:ca:28:f2:76:37:6a:45:f6:f2:76:
         73:99:4c:cf:35:da:b2:d6:63:60:cb:4d:32:32:da:a4:f1:26:
         dc:88:22:0b:1f:5b:60:d0:c0:41:ab:e9:b9:1c:d6:c2:0c:8e:
         d4:34:71:a2:b3:60:4e:6d:eb:57:06:14:11:b4:9e:b6:65:d7:
         fa:69:4a:7c:b6:00:34:91:69:0d:88:18:94:8e:c9:cf:9a:7f:
         e6:cd:05:ea:2a:ae:be:53:9b:0d:fe:05:d5:27:27:85:19:61:
         49:b1:7d:64:39:c9:7a:eb:a6:ca:2a:33:e6:81:45:95:c6:27:
         af:77:4f:47
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUM0RkExMTAvBgNVBAUTKDhBRjdEOEI4NjRGRDkwNDUyRkZENkRFOTNCNTE0NTZD
NzlFRkIzQzcwHhcNMjYwNTIzMDE0NjM2WhcNMjYwNTMwMDE0NjM2WjAYMRYwFAYD
VQQDEw02YTExMDZmZC02MWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyMTQtAixIL2mj/e/6pa755soAUn9kIBjsYJkLSWqda7JcjSG2aQV3grC++Rq
sUDJUSuzYy4frqM+GBCd5UhAEamzmPwBpLVFw9ODKnSHTGxPoN7yB3XG9WROrfar
pV3VoxiQ4ZYz9ZqOibmEzmyuKeBgSe31h5QrNZGVftu61cai/stWxw1WUk+Wl+UE
U7Mh4NDPqTRdv4jg5zZjo1xd2TzWSQifQvco8xzm457HE3xHhW7fG8GxY0KrHlzT
zWz84xlkIAtDhn4ngjs6NtixQFEc1U+Qm+j9dtoZzlqqzHV+J/sjhKrsTf1HkFr2
S/I9NcavNnriEgY0BsDHd2I44wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA11LJke
tryBcu33t4qh+TQlY4FhMB8GA1UdIwQYMBaAFIr32Lhk/ZBFL/1t6TtRRWx577PH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzRGQS8zN0NCODc5ODZD
OEIxMUVEODdBRkY1NzFDNEY5QUUwMi9pdmZZdUdUOWtFVXZfVzNwTzFGRmJIbnZz
OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2l2Zll1R1Q5a0VVdl9XM3BPMUZGYkhudnM4Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QzRGQS8zN0NCODc5ODZDOEIxMUVEODdBRkY1NzFDNEY5QUUwMi9pdmZZdUdUOWtF
VXZfVzNwTzFGRmJIbnZzOGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcLTkxwdHscSxYSZ1k2uvDfebS8tRx89rHPr4gItksen8sItXp75+tG6W/wON
igtO6lZbO7uI+GeBHq6J2s7l70HObpyNJHssqRn7YqiuiVe3+XQBYQ0wHU0BPS51
IgEVdFVj6X9crRh3+5dWFdIIQ5LTsa65AR+iNqWpinqPewsys8wyOBbKKPJ2N2pF
9vJ2c5lMzzXastZjYMtNMjLapPEm3IgiCx9bYNDAQavpuRzWwgyO1DRxorNgTm3r
VwYUEbSetmXX+mlKfLYANJFpDYgYlI7Jz5p/5s0F6iquvlObDf4F1ScnhRlhSbF9
ZDnJeuumyioz5oFFlcYnr3dPRw==
-----END CERTIFICATE-----
Generated at Sun May 24 04:37:56 2026 by rpki-client