Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft
File:                     -c1w52K-aV9LpJAqoguUD3cKBjg.mft (raw, json)
Hash identifier:          xXQElojky8ibYTIcF8Q1l9ywLklABIoMY7bdOdYBFDc=
Subject key identifier:   B9:49:A9:8C:2F:DE:71:C8:3E:5C:AD:87:E7:B7:31:8C:2E:58:E5:EC
Authority key identifier: F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38
Certificate issuer:       /CN=A91B9AB9/serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638
Certificate serial:       0166
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft
Manifest number:          0145
Signing time:             Mon 25 May 2026 05:21:35 +0000
Manifest this update:     Mon 25 May 2026 05:21:35 +0000
Manifest next update:     Mon 01 Jun 2026 05:21:35 +0000
Files and hashes:         1: -c1w52K-aV9LpJAqoguUD3cKBjg.crl (hash: Pc+CGW2F75IAQbD5CGE1I3ABAip6sMhM206g/pJK3sY=)
                          2: 723EACFE6E8511EF83048D43C4F9AE02.roa (hash: QHT2EqJHyPujaDEriJMd/9h9fPZLETh+MJuliPGlg9k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl
                          rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 01 Jun 2026 05:21:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 358 (0x166)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9AB9, serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638
        Validity
            Not Before: May 25 05:21:35 2026 GMT
            Not After : Jun  1 05:21:35 2026 GMT
        Subject: CN=6a13dc5f-b7d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:55:7f:ed:8a:22:63:55:cb:cf:6d:90:ae:b1:
                    67:52:37:67:fd:c3:22:c8:d0:14:11:dd:8f:85:02:
                    fc:01:ff:a3:16:66:5d:15:e7:81:77:08:36:ad:d6:
                    90:ff:6d:73:ec:67:2d:08:88:97:9d:7c:48:14:54:
                    c3:60:60:71:7f:f8:7b:20:86:5d:10:2c:76:7d:ba:
                    2b:22:9e:9e:f9:71:de:13:49:82:86:04:3b:e0:18:
                    ab:9a:45:89:0b:2e:70:34:6c:c1:f7:0f:dd:93:58:
                    9b:e0:d7:18:41:99:9f:54:41:01:39:87:d5:c7:e7:
                    ff:fd:83:6a:fb:09:27:44:88:2e:3a:19:1d:75:57:
                    b7:62:8d:bd:e6:e0:37:b2:36:8b:52:de:5f:d6:83:
                    64:8d:69:91:a6:94:5e:b1:30:78:86:d6:ec:ab:1c:
                    f7:06:c9:c2:af:8c:67:08:d9:fc:be:4a:e3:45:84:
                    a2:39:4e:29:21:dc:ba:ca:d0:30:d4:01:8d:b8:1f:
                    54:13:76:4a:84:41:1f:0b:35:4a:3b:8d:f9:19:79:
                    1e:d7:67:f8:04:c6:4a:7d:a3:dc:83:b0:11:68:fc:
                    44:12:cf:06:06:d9:fd:43:1b:a5:39:40:77:bd:08:
                    be:db:3e:c9:16:01:a3:0f:73:fe:af:47:1c:f5:c5:
                    3b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:49:A9:8C:2F:DE:71:C8:3E:5C:AD:87:E7:B7:31:8C:2E:58:E5:EC
            X509v3 Authority Key Identifier:
                keyid:F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:f9:38:21:5e:15:a4:cd:18:91:6f:6f:84:e2:47:54:56:a9:
         d1:85:df:ba:54:06:bd:74:51:f1:8b:75:b5:44:4c:ef:2c:59:
         c7:74:e4:3f:9c:64:16:6a:1c:c8:c6:e2:99:32:bf:f4:eb:7c:
         25:2c:6a:35:4a:4e:c3:7b:f0:b7:b2:8c:68:03:62:f2:97:ba:
         58:18:0f:98:da:c9:01:2f:e8:17:f0:31:1c:c1:da:cb:3e:73:
         e0:1a:c4:38:94:b4:a9:aa:79:51:1f:ee:f8:83:48:ee:f7:76:
         2d:e3:b8:a0:b8:6f:68:58:79:0c:57:9b:95:6d:db:61:0f:75:
         25:cb:93:87:02:ca:88:dd:0b:bd:1a:f8:74:a4:65:4d:77:cf:
         fb:f7:87:c0:00:50:85:3d:c7:48:9c:f1:eb:c2:ef:30:59:d5:
         b0:e1:b0:5f:db:f4:28:6b:3a:67:9d:49:6e:7d:c2:45:ab:d1:
         c9:50:31:ec:bf:5d:36:c5:88:ad:6e:95:62:28:22:c8:bc:e4:
         63:78:72:8e:4f:1c:21:39:4b:f8:4f:0b:45:63:20:6a:95:4f:
         fe:23:55:f8:ad:a6:72:62:4d:be:7d:69:9c:d1:05:d8:a3:7f:
         8c:78:ff:fe:1a:8f:5a:d1:0b:12:6d:83:59:20:1b:a9:00:ac:
         66:c5:18:05
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjlBQjkxMTAvBgNVBAUTKEY5Q0Q3MEU3NjJCRTY5NUY0QkE0OTAyQUEyMEI5NDBG
NzcwQTA2MzgwHhcNMjYwNTI1MDUyMTM1WhcNMjYwNjAxMDUyMTM1WjAYMRYwFAYD
VQQDEw02YTEzZGM1Zi1iN2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA21V/7YoiY1XLz22QrrFnUjdn/cMiyNAUEd2PhQL8Af+jFmZdFeeBdwg2rdaQ
/21z7GctCIiXnXxIFFTDYGBxf/h7IIZdECx2fborIp6e+XHeE0mChgQ74BirmkWJ
Cy5wNGzB9w/dk1ib4NcYQZmfVEEBOYfVx+f//YNq+wknRIguOhkddVe3Yo295uA3
sjaLUt5f1oNkjWmRppResTB4htbsqxz3BsnCr4xnCNn8vkrjRYSiOU4pIdy6ytAw
1AGNuB9UE3ZKhEEfCzVKO435GXke12f4BMZKfaPcg7ARaPxEEs8GBtn9QxulOUB3
vQi+2z7JFgGjD3P+r0cc9cU7twIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLlJqYwv
3nHIPlyth+e3MYwuWOXsMB8GA1UdIwQYMBaAFPnNcOdivmlfS6SQKqILlA93CgY4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUFCOS9DNzZGOTJDMDZF
ODQxMUVGQTNDRDk4M0ZDNEY5QUUwMi8tYzF3NTJLLWFWOUxwSkFxb2d1VUQzY0tC
amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLy1jMXc1MkstYVY5THBKQXFvZ3VVRDNjS0JqZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OUFCOS9DNzZGOTJDMDZFODQxMUVGQTNDRDk4M0ZDNEY5QUUwMi8tYzF3NTJLLWFW
OUxwSkFxb2d1VUQzY0tCamcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgvk4IV4VpM0YkW9vhOJHVFap0YXfulQGvXRR8Yt1tURM7yxZx3TkP5xkFmoc
yMbimTK/9Ot8JSxqNUpOw3vwt7KMaANi8pe6WBgPmNrJAS/oF/AxHMHayz5z4BrE
OJS0qap5UR/u+INI7vd2LeO4oLhvaFh5DFeblW3bYQ91JcuThwLKiN0LvRr4dKRl
TXfP+/eHwABQhT3HSJzx68LvMFnVsOGwX9v0KGs6Z51Jbn3CRavRyVAx7L9dNsWI
rW6VYigiyLzkY3hyjk8cITlL+E8LRWMgapVP/iNV+K2mcmJNvn1pnNEF2KN/jHj/
/hqPWtELEm2DWSAbqQCsZsUYBQ==
-----END CERTIFICATE-----
Generated at Mon May 25 17:14:56 2026 by rpki-client