Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft
File:                     dFPYgTvI73KQsRAjI1iJTHfE2zc.mft (raw, json)
Hash identifier:          htNwqSbCiKWiFeXHpGwQOiQy3bNirJXYPO8pL9NbaIo=
Subject key identifier:   27:12:81:53:BA:85:BF:87:AF:EE:50:13:27:D2:F4:89:C0:EF:46:60
Authority key identifier: 74:53:D8:81:3B:C8:EF:72:90:B1:10:23:23:58:89:4C:77:C4:DB:37
Certificate issuer:       /CN=A91BC64F/serialNumber=7453D8813BC8EF7290B110232358894C77C4DB37
Certificate serial:       94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft
Manifest number:          90
Signing time:             Thu 21 May 2026 07:34:51 +0000
Manifest this update:     Thu 21 May 2026 07:34:50 +0000
Manifest next update:     Thu 28 May 2026 07:34:50 +0000
Files and hashes:         1: dFPYgTvI73KQsRAjI1iJTHfE2zc.crl (hash: tBUdslQ6/f3ZD9E6Fv/9GLapwJm9GTuIIITODlP7AMI=)
                          2: BAC878D0799511F098E98265C4F9AE02.roa (hash: JxVeh5Wcyk9ehIe8rUu++w1AOb/XCsqY0oC40z9B14A=)
                          3: BB3F5AAE799511F098E98265C4F9AE02.roa (hash: 7+6x+nkCOZ5eJCqABcReNt2hBYcHFj9EJZ35TbWhwnc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.crl
                          rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 07:34:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148 (0x94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC64F, serialNumber=7453D8813BC8EF7290B110232358894C77C4DB37
        Validity
            Not Before: May 21 07:34:50 2026 GMT
            Not After : May 28 07:34:50 2026 GMT
        Subject: CN=6a0eb59a-a732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:52:66:0d:29:8d:d6:b4:50:aa:1c:26:87:2c:
                    5e:95:63:32:30:e6:d8:cc:a6:1c:53:a1:5c:1e:d8:
                    42:91:ba:07:89:a1:65:81:1f:f5:db:4d:75:d8:e5:
                    40:88:39:f5:92:85:2b:4b:39:df:5a:cc:27:9a:4c:
                    6c:2d:00:28:92:fa:bd:c0:ed:d8:b9:ba:3c:01:a2:
                    28:6b:c6:df:36:cf:12:d4:a7:ca:36:2c:9f:1a:f6:
                    49:2e:20:49:09:9a:66:ff:07:25:aa:ab:26:7f:c6:
                    d4:78:5e:89:87:ef:12:e0:91:e7:fa:8e:9e:a5:38:
                    35:ee:04:95:08:1e:e8:72:16:5f:6a:fe:05:74:e1:
                    13:c7:d6:fd:bc:c2:6d:ec:c0:3d:fe:09:47:9b:49:
                    2d:42:4e:0a:ef:95:8a:6e:43:ba:79:b4:9c:8d:af:
                    5f:6a:92:7e:a3:95:77:d1:d9:74:d4:04:1c:1f:ff:
                    5b:1f:a2:d9:ad:c9:f8:70:6c:da:3d:a6:78:e2:b7:
                    08:79:cc:60:23:fd:ea:a2:74:99:2d:3d:4e:1c:e1:
                    c2:92:4d:aa:d2:c5:5b:73:aa:d7:6d:b6:93:ca:bf:
                    fd:f8:ad:01:5d:e6:6a:3e:2a:c6:09:57:2e:d0:4e:
                    1f:96:f9:7f:e5:b0:56:82:66:c8:6a:60:48:14:4d:
                    89:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:12:81:53:BA:85:BF:87:AF:EE:50:13:27:D2:F4:89:C0:EF:46:60
            X509v3 Authority Key Identifier:
                keyid:74:53:D8:81:3B:C8:EF:72:90:B1:10:23:23:58:89:4C:77:C4:DB:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:41:37:07:7a:e1:91:ad:9b:6b:ed:ce:2a:43:44:ea:d2:be:
         13:b2:e5:26:aa:8d:ed:ec:20:6e:8a:c3:6f:60:6d:e7:05:ff:
         83:73:0e:2b:83:f3:35:32:88:69:a8:09:ab:0f:33:08:ab:e1:
         4c:fa:79:80:18:ab:9e:5a:f0:53:00:93:83:0c:97:ea:d3:54:
         9e:09:e0:e9:82:94:63:c0:ac:d6:16:b9:92:ad:e8:33:36:2d:
         9f:63:06:2e:6d:61:6d:f1:aa:3b:88:8e:93:d2:81:ca:6d:0d:
         6c:f9:72:76:17:1b:f8:1c:97:1b:4a:d2:b2:6e:84:10:df:b1:
         f7:51:3c:36:c7:48:ae:9c:89:ee:5d:61:5a:f6:c1:fc:56:bb:
         0f:74:91:5a:02:af:45:25:1e:95:03:ce:ba:a0:85:d7:8d:12:
         ff:cb:27:c0:71:93:26:69:e5:bb:2c:93:f8:82:83:e8:76:25:
         2a:bd:ae:0e:51:6d:56:c8:f4:7a:8b:24:da:b2:59:ff:aa:48:
         d1:44:8f:37:72:2d:a3:04:37:1b:2a:9e:13:a3:24:37:a0:2e:
         a3:06:fb:f0:66:00:e5:40:32:1a:ad:49:16:8a:4f:dd:b7:e5:
         c2:f1:3a:72:72:f8:35:5d:82:61:c1:dd:3d:8c:63:50:1b:cb:
         b6:42:a0:09
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkM2NEYxMTAvBgNVBAUTKDc0NTNEODgxM0JDOEVGNzI5MEIxMTAyMzIzNTg4OTRD
NzdDNERCMzcwHhcNMjYwNTIxMDczNDUwWhcNMjYwNTI4MDczNDUwWjAYMRYwFAYD
VQQDEw02YTBlYjU5YS1hNzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4lJmDSmN1rRQqhwmhyxelWMyMObYzKYcU6FcHthCkboHiaFlgR/120112OVA
iDn1koUrSznfWswnmkxsLQAokvq9wO3Yubo8AaIoa8bfNs8S1KfKNiyfGvZJLiBJ
CZpm/wclqqsmf8bUeF6Jh+8S4JHn+o6epTg17gSVCB7ochZfav4FdOETx9b9vMJt
7MA9/glHm0ktQk4K75WKbkO6ebScja9fapJ+o5V30dl01AQcH/9bH6LZrcn4cGza
PaZ44rcIecxgI/3qonSZLT1OHOHCkk2q0sVbc6rXbbaTyr/9+K0BXeZqPirGCVcu
0E4flvl/5bBWgmbIamBIFE2J9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCcSgVO6
hb+Hr+5QEyfS9InA70ZgMB8GA1UdIwQYMBaAFHRT2IE7yO9ykLEQIyNYiUx3xNs3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzY0Ri8zNjBDQTE3QTc5
OTUxMUYwQkVDRjJENDBDNEY5QUUwMi9kRlBZZ1R2STczS1FzUkFqSTFpSlRIZkUy
emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RGUFlnVHZJNzNLUXNSQWpJMWlKVEhmRTJ6Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QzY0Ri8zNjBDQTE3QTc5OTUxMUYwQkVDRjJENDBDNEY5QUUwMi9kRlBZZ1R2STcz
S1FzUkFqSTFpSlRIZkUyemMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqEE3B3rhka2ba+3OKkNE6tK+E7LlJqqN7ewgborDb2Bt5wX/g3MOK4PzNTKI
aagJqw8zCKvhTPp5gBirnlrwUwCTgwyX6tNUngng6YKUY8Cs1ha5kq3oMzYtn2MG
Lm1hbfGqO4iOk9KBym0NbPlydhcb+ByXG0rSsm6EEN+x91E8NsdIrpyJ7l1hWvbB
/Fa7D3SRWgKvRSUelQPOuqCF140S/8snwHGTJmnluyyT+IKD6HYlKr2uDlFtVsj0
eosk2rJZ/6pI0USPN3ItowQ3GyqeE6MkN6Auowb78GYA5UAyGq1JFopP3bflwvE6
cnL4NV2CYcHdPYxjUBvLtkKgCQ==
-----END CERTIFICATE-----
Generated at Thu May 21 09:37:50 2026 by rpki-client