Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.mft
File:                     dnhyvdDvgmpkldgSahOfxASTgA8.mft (raw, json)
Hash identifier:          Brd9WfRRmQ55gun52nZc7JxS9ahF2PbCx1XlVUPNMxs=
Subject key identifier:   04:9D:D3:EF:9D:E1:AA:27:63:57:29:69:F5:D7:A8:84:88:BE:07:AA
Authority key identifier: 76:78:72:BD:D0:EF:82:6A:64:95:D8:12:6A:13:9F:C4:04:93:80:0F
Certificate issuer:       /CN=A91B67D1/serialNumber=767872BDD0EF826A6495D8126A139FC40493800F
Certificate serial:       1076
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhyvdDvgmpkldgSahOfxASTgA8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.mft
Manifest number:          104B
Signing time:             Thu 28 May 2026 17:19:00 +0000
Manifest this update:     Thu 28 May 2026 17:19:00 +0000
Manifest next update:     Thu 04 Jun 2026 17:19:00 +0000
Files and hashes:         1: dnhyvdDvgmpkldgSahOfxASTgA8.crl (hash: 8RbNSlegZBLUABf2rU7Mp6i5ibfIKTccmfYeE+YgWQ8=)
                          2: 5B3CBC209BEA11EFBCB36227C4F9AE02.roa (hash: URL1ReTticLSrWgLn6MiNA2clbnttkHn48DN8d9RREQ=)
                          3: 5CCDCD7C9BEA11EFBCB36227C4F9AE02.roa (hash: lEGaA4sdvdJB9ZdOckx6GXw78zY9nH89g3CEg6GczLQ=)
                          4: 5C1DBC489BEA11EFBCB36227C4F9AE02.roa (hash: v5H4fJJFXDpxvnkvndLnuywB0eTLMDeUHDuPRNGLC1o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.crl
                          rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhyvdDvgmpkldgSahOfxASTgA8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Jun 2026 17:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4214 (0x1076)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B67D1, serialNumber=767872BDD0EF826A6495D8126A139FC40493800F
        Validity
            Not Before: May 28 17:19:00 2026 GMT
            Not After : Jun  4 17:19:00 2026 GMT
        Subject: CN=6a187904-bc40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7d:8d:f9:d2:4e:67:98:b4:02:cb:da:c0:93:
                    08:ec:b7:e2:c6:37:86:0e:17:f9:27:4e:84:0d:17:
                    44:ad:6f:78:f3:86:50:ac:83:9c:81:1a:1f:96:c3:
                    ed:07:4a:eb:c7:d6:6b:98:04:50:55:65:53:ab:03:
                    ae:84:76:6c:a4:12:66:ea:06:f1:6e:16:fe:19:c5:
                    9a:c5:fb:a9:51:3d:7b:40:7f:e8:1b:a6:a8:2a:93:
                    7a:8d:82:68:b6:34:ce:49:23:32:e6:51:1b:c4:6a:
                    7d:cf:36:9d:3d:0b:47:7c:b0:0d:28:e7:f2:b5:28:
                    db:33:6c:a3:21:4d:60:fa:5a:48:61:28:2f:bc:8d:
                    e6:39:45:af:b0:71:f1:ea:c1:a1:6c:34:ac:cf:df:
                    d5:f6:55:ce:98:46:e6:52:4e:48:54:cc:da:54:66:
                    9f:62:05:b1:5b:70:48:e6:10:3b:7b:8d:43:9c:d1:
                    0e:8b:76:fe:8f:4a:c5:7a:8a:83:e0:ba:30:f0:a6:
                    3d:0f:5d:0b:6d:4d:da:a5:e0:67:c8:7f:75:52:d3:
                    99:88:90:78:78:97:b2:3f:d4:53:54:68:65:8b:0a:
                    cd:2d:b0:67:53:f3:a6:bf:3b:2e:43:30:a5:a1:94:
                    ca:1a:93:c1:c4:c3:ac:9a:37:c4:1c:f4:9f:20:d8:
                    12:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:9D:D3:EF:9D:E1:AA:27:63:57:29:69:F5:D7:A8:84:88:BE:07:AA
            X509v3 Authority Key Identifier:
                keyid:76:78:72:BD:D0:EF:82:6A:64:95:D8:12:6A:13:9F:C4:04:93:80:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhyvdDvgmpkldgSahOfxASTgA8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:ef:a9:eb:d7:ed:2a:5c:b4:fd:90:4a:21:ea:e9:70:7f:6d:
         0c:75:b2:51:84:40:23:ed:08:9c:a5:d0:c2:19:a8:87:de:57:
         bb:ab:dd:00:df:09:4d:b6:0d:64:a4:d7:9e:ed:62:c1:00:28:
         ff:d2:f1:e3:94:d7:3c:37:c3:d4:9b:98:b4:cc:3b:7d:2e:20:
         77:b2:bd:61:70:c2:6a:54:ff:21:5f:4e:8f:0d:f2:c0:e9:e6:
         58:26:f1:70:e9:d5:c2:1c:58:58:54:e7:cb:ad:f6:06:ee:f1:
         93:87:af:5c:48:e1:07:fe:0f:28:7c:59:a6:0d:11:a4:8e:de:
         8a:7b:2f:ee:87:49:a3:b7:92:0a:96:26:f5:15:02:c3:fe:2d:
         68:4e:66:65:b0:86:a4:41:c3:a1:d0:15:78:15:b4:fc:11:bb:
         f4:f0:0a:03:31:d2:d7:4c:6d:92:a1:55:de:75:e9:29:2b:ad:
         52:b2:42:67:50:7b:a9:14:4b:3c:93:79:ea:44:4a:0c:c9:e5:
         86:2e:7d:2a:78:6a:b8:37:ed:25:83:f5:04:84:3c:87:fd:c0:
         8b:ad:26:1e:0c:46:d3:3b:ac:67:52:35:dd:5f:d4:2a:56:5f:
         3a:54:38:7d:a9:ab:01:34:72:18:26:11:ae:10:c5:35:b4:b7:
         48:d8:bb:3a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjY3RDExMTAvBgNVBAUTKDc2Nzg3MkJERDBFRjgyNkE2NDk1RDgxMjZBMTM5RkM0
MDQ5MzgwMEYwHhcNMjYwNTI4MTcxOTAwWhcNMjYwNjA0MTcxOTAwWjAYMRYwFAYD
VQQDEw02YTE4NzkwNC1iYzQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtH2N+dJOZ5i0AsvawJMI7LfixjeGDhf5J06EDRdErW9484ZQrIOcgRoflsPt
B0rrx9ZrmARQVWVTqwOuhHZspBJm6gbxbhb+GcWaxfupUT17QH/oG6aoKpN6jYJo
tjTOSSMy5lEbxGp9zzadPQtHfLANKOfytSjbM2yjIU1g+lpIYSgvvI3mOUWvsHHx
6sGhbDSsz9/V9lXOmEbmUk5IVMzaVGafYgWxW3BI5hA7e41DnNEOi3b+j0rFeoqD
4Low8KY9D10LbU3apeBnyH91UtOZiJB4eJeyP9RTVGhliwrNLbBnU/OmvzsuQzCl
oZTKGpPBxMOsmjfEHPSfINgSBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFASd0++d
4aonY1cpafXXqISIvgeqMB8GA1UdIwQYMBaAFHZ4cr3Q74JqZJXYEmoTn8QEk4AP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjdEMS82Q0JDOUI0MDYx
MUQxMUU5QjAxMkRCMzdDNEY5QUUwMi9kbmh5dmREdmdtcGtsZGdTYWhPZnhBU1Rn
QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RuaHl2ZER2Z21wa2xkZ1NhaE9meEFTVGdBOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NjdEMS82Q0JDOUI0MDYxMUQxMUU5QjAxMkRCMzdDNEY5QUUwMi9kbmh5dmREdmdt
cGtsZGdTYWhPZnhBU1RnQTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADO+p69ftKly0/ZBKIerpcH9tDHWyUYRAI+0InKXQwhmoh95Xu6vdAN8JTbYN
ZKTXnu1iwQAo/9Lx45TXPDfD1JuYtMw7fS4gd7K9YXDCalT/IV9Ojw3ywOnmWCbx
cOnVwhxYWFTny632Bu7xk4evXEjhB/4PKHxZpg0RpI7einsv7odJo7eSCpYm9RUC
w/4taE5mZbCGpEHDodAVeBW0/BG79PAKAzHS10xtkqFV3nXpKSutUrJCZ1B7qRRL
PJN56kRKDMnlhi59KnhquDftJYP1BIQ8h/3Ai60mHgxG0zusZ1I13V/UKlZfOlQ4
famrATRyGCYRrhDFNbS3SNi7Og==
-----END CERTIFICATE-----
Generated at Sat May 30 01:38:02 2026 by rpki-client