Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.mft
File:                     PLw5Tr9aIgmw6yx0fD_wBratGds.mft (raw, json)
Hash identifier:          ZRD0TMx2wCw7FA4L8PLuVhojxs9Ks/mt2QqC/eUHYDQ=
Subject key identifier:   F4:7D:FB:A2:78:24:D0:45:D0:C0:9A:04:C2:DE:F7:A4:44:9C:2D:92
Authority key identifier: 3C:BC:39:4E:BF:5A:22:09:B0:EB:2C:74:7C:3F:F0:06:B6:AD:19:DB
Certificate issuer:       /CN=A91B8E1F/serialNumber=3CBC394EBF5A2209B0EB2C747C3FF006B6AD19DB
Certificate serial:       021A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PLw5Tr9aIgmw6yx0fD_wBratGds.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.mft
Manifest number:          0215
Signing time:             Thu 21 May 2026 02:55:22 +0000
Manifest this update:     Thu 21 May 2026 02:55:22 +0000
Manifest next update:     Thu 28 May 2026 02:55:22 +0000
Files and hashes:         1: PLw5Tr9aIgmw6yx0fD_wBratGds.crl (hash: UXRiILiKRSDiMzjxaYM5Ja2sgqbEVuvpyzHFaLI+uMk=)
                          2: 98B1A08E256211EEB175EF31C4F9AE02.roa (hash: QJ4e16NsI/dZu1qX0OimYIx1FzqVNlcCmqCrTv8ABDU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.crl
                          rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PLw5Tr9aIgmw6yx0fD_wBratGds.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 02:55:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 538 (0x21a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8E1F, serialNumber=3CBC394EBF5A2209B0EB2C747C3FF006B6AD19DB
        Validity
            Not Before: May 21 02:55:22 2026 GMT
            Not After : May 28 02:55:22 2026 GMT
        Subject: CN=6a0e741a-81eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:b0:76:5b:cb:68:58:a5:50:03:51:f6:12:41:
                    9a:8a:45:fe:09:82:fc:67:25:e5:94:a5:d6:ff:7a:
                    61:27:78:05:b3:81:6f:29:58:a8:0a:ef:6e:bd:6a:
                    96:65:95:d3:01:37:0b:3c:ac:0d:4b:02:f6:39:c9:
                    9e:32:44:2f:7b:31:93:88:9a:c2:38:83:1f:68:90:
                    ad:bd:37:6d:5f:7c:c1:2b:97:81:5b:88:76:29:3f:
                    cb:03:d0:61:4d:53:af:de:2c:bb:9a:cd:65:2b:a4:
                    55:fc:f7:91:15:4f:c0:3b:23:f3:e8:36:bd:09:25:
                    cf:71:1b:9d:4e:95:6c:17:56:6d:4c:60:a8:ef:96:
                    1a:2a:1d:70:0d:34:0c:60:5d:91:69:fd:0d:bb:13:
                    26:e2:69:57:ce:c3:8f:b3:48:76:da:83:29:b5:cf:
                    56:08:ee:03:db:95:f1:5e:dd:ab:d1:e8:ad:67:e1:
                    42:2e:b2:b7:a6:79:2f:ba:f0:1d:c9:32:77:41:7e:
                    e1:7e:7f:91:55:a9:4f:bb:e8:03:c0:69:57:7b:7a:
                    ba:9d:e6:3c:35:b0:c7:66:cf:ff:40:22:e4:9e:f7:
                    8f:8b:df:74:cd:43:4e:4a:9e:70:ab:8f:b4:3b:cf:
                    b3:99:44:73:bc:7d:22:08:27:a2:f1:1a:89:39:8a:
                    5a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:7D:FB:A2:78:24:D0:45:D0:C0:9A:04:C2:DE:F7:A4:44:9C:2D:92
            X509v3 Authority Key Identifier:
                keyid:3C:BC:39:4E:BF:5A:22:09:B0:EB:2C:74:7C:3F:F0:06:B6:AD:19:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PLw5Tr9aIgmw6yx0fD_wBratGds.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:78:e8:25:fe:0b:fd:51:d4:4c:ef:3d:bf:ef:fa:3d:37:e8:
         88:95:2a:57:ea:13:12:12:84:a1:c9:aa:3d:ea:96:72:a7:5f:
         aa:7c:e1:92:20:f8:a6:de:78:71:c1:59:ef:90:9e:fc:df:1e:
         0c:ff:2e:13:2d:2e:cf:14:14:d1:e5:80:65:84:c8:ed:8b:2c:
         2c:0f:c4:37:8e:a5:74:f7:86:4a:57:32:70:8f:6d:dc:b4:2d:
         e3:7d:36:6b:a8:b8:bf:27:39:ba:4d:f9:17:f2:f3:2d:b7:37:
         1e:b1:49:ff:f1:7b:36:71:e1:ec:6b:b9:6f:73:63:c1:26:f2:
         b1:8a:0a:08:53:20:40:3e:25:8a:a3:e4:af:9f:c5:b1:19:64:
         ef:4f:85:e2:7e:13:bc:12:bb:8a:6e:96:da:8b:f9:83:62:ef:
         68:fa:94:17:82:ba:b9:30:2b:aa:d4:a8:fd:89:d2:40:71:cc:
         38:3b:d8:9b:bb:02:5b:84:3e:18:4a:7a:46:b1:a6:ce:d3:e2:
         fc:47:c4:30:8b:08:57:09:60:96:ae:5c:5b:0a:c9:ae:9f:97:
         b7:45:b4:ea:33:12:cf:44:2b:f0:ad:4a:76:d4:ed:ab:ee:65:
         51:e6:0f:8f:a5:d4:90:45:27:b3:23:9f:97:22:97:fc:1d:6a:
         01:a8:0c:fa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjhFMUYxMTAvBgNVBAUTKDNDQkMzOTRFQkY1QTIyMDlCMEVCMkM3NDdDM0ZGMDA2
QjZBRDE5REIwHhcNMjYwNTIxMDI1NTIyWhcNMjYwNTI4MDI1NTIyWjAYMRYwFAYD
VQQDEw02YTBlNzQxYS04MWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+bB2W8toWKVQA1H2EkGaikX+CYL8ZyXllKXW/3phJ3gFs4FvKVioCu9uvWqW
ZZXTATcLPKwNSwL2OcmeMkQvezGTiJrCOIMfaJCtvTdtX3zBK5eBW4h2KT/LA9Bh
TVOv3iy7ms1lK6RV/PeRFU/AOyPz6Da9CSXPcRudTpVsF1ZtTGCo75YaKh1wDTQM
YF2Raf0NuxMm4mlXzsOPs0h22oMptc9WCO4D25XxXt2r0eitZ+FCLrK3pnkvuvAd
yTJ3QX7hfn+RValPu+gDwGlXe3q6neY8NbDHZs//QCLknvePi990zUNOSp5wq4+0
O8+zmURzvH0iCCei8RqJOYpazwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPR9+6J4
JNBF0MCaBMLe96REnC2SMB8GA1UdIwQYMBaAFDy8OU6/WiIJsOssdHw/8Aa2rRnb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEUxRi8xNjkyRDQ4ODI1
NjIxMUVFODEyMjJFMzFDNEY5QUUwMi9QTHc1VHI5YUlnbXc2eXgwZkRfd0JyYXRH
ZHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BMdzVUcjlhSWdtdzZ5eDBmRF93QnJhdEdkcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OEUxRi8xNjkyRDQ4ODI1NjIxMUVFODEyMjJFMzFDNEY5QUUwMi9QTHc1VHI5YUln
bXc2eXgwZkRfd0JyYXRHZHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAK3joJf4L/VHUTO89v+/6PTfoiJUqV+oTEhKEocmqPeqWcqdfqnzhkiD4pt54
ccFZ75Ce/N8eDP8uEy0uzxQU0eWAZYTI7YssLA/EN46ldPeGSlcycI9t3LQt4302
a6i4vyc5uk35F/LzLbc3HrFJ//F7NnHh7Gu5b3NjwSbysYoKCFMgQD4liqPkr5/F
sRlk70+F4n4TvBK7im6W2ov5g2LvaPqUF4K6uTArqtSo/YnSQHHMODvYm7sCW4Q+
GEp6RrGmztPi/EfEMIsIVwlglq5cWwrJrp+Xt0W06jMSz0Qr8K1KdtTtq+5lUeYP
j6XUkEUnsyOflyKX/B1qAagM+g==
-----END CERTIFICATE-----
Generated at Thu May 21 09:39:12 2026 by rpki-client