Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.mft
File:                     AP0x_Qa0IEw93LY1BxiVM3eMzPg.mft (raw, json)
Hash identifier:          q35DZK1sigdtUxygscpxqTKWgn25nJzAG68TFdb/aTk=
Subject key identifier:   27:4D:76:AB:E6:71:D9:A6:A4:0D:66:2B:3D:14:41:48:5B:20:16:F4
Authority key identifier: 00:FD:31:FD:06:B4:20:4C:3D:DC:B6:35:07:18:95:33:77:8C:CC:F8
Certificate issuer:       /CN=A91C09EA/serialNumber=00FD31FD06B4204C3DDCB63507189533778CCCF8
Certificate serial:       F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AP0x_Qa0IEw93LY1BxiVM3eMzPg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.mft
Manifest number:          EE
Signing time:             Tue 05 May 2026 06:23:39 +0000
Manifest this update:     Tue 05 May 2026 06:23:39 +0000
Manifest next update:     Tue 12 May 2026 06:23:39 +0000
Files and hashes:         1: AP0x_Qa0IEw93LY1BxiVM3eMzPg.crl (hash: OXWPm69rameu91IyEWP5wnoBZqc046bbIdObcRhAeeQ=)
                          2: 7970EAA266DA11F084325D42C4F9AE02.roa (hash: h1LWEJUQvaATUOdZkytyIfaI4klq2FxoFoCocLW2Bpc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.crl
                          rsync://rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AP0x_Qa0IEw93LY1BxiVM3eMzPg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 12 May 2026 06:23:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 242 (0xf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C09EA, serialNumber=00FD31FD06B4204C3DDCB63507189533778CCCF8
        Validity
            Not Before: May  5 06:23:39 2026 GMT
            Not After : May 12 06:23:39 2026 GMT
        Subject: CN=69f98ceb-a9c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a2:44:7a:99:e0:35:fd:f4:ef:66:85:22:b2:
                    0d:3b:29:6d:b1:43:6e:b5:f7:25:48:2c:d9:9b:13:
                    2a:7c:ea:f1:14:1e:9d:9d:68:57:a7:46:34:17:ee:
                    f0:c0:90:04:92:31:17:66:19:21:45:a6:ab:e2:21:
                    16:8f:3d:9b:25:c9:5c:7b:33:56:e2:79:5e:f3:8f:
                    92:1c:0c:bf:f2:6f:09:9b:59:45:94:64:ec:a6:9e:
                    f1:1e:65:44:23:c7:81:f7:70:b4:80:91:ff:f7:05:
                    c5:eb:55:96:60:fe:0c:c0:32:2f:9a:3d:78:b3:f1:
                    27:66:82:28:e9:b8:55:b0:cb:a9:af:6e:95:3d:8e:
                    42:e9:f6:89:16:9c:7c:6e:bb:bc:84:7c:ff:2a:1d:
                    56:98:cd:2e:ab:4c:18:dc:5a:97:f9:7d:a9:e3:cb:
                    1d:f3:99:b1:de:5b:f3:51:18:94:43:a5:a6:8f:3a:
                    e9:7f:a0:5c:a7:75:bf:9e:f8:8c:e5:14:4f:67:b7:
                    79:07:bc:c9:57:4f:09:7c:cf:77:71:0d:27:54:81:
                    eb:71:ca:48:6b:57:88:9e:fe:5c:cf:f9:e9:ff:1c:
                    59:43:97:08:3f:51:b2:1d:b8:25:c2:77:c3:8f:17:
                    af:a4:55:f4:85:8f:91:77:7a:be:75:7f:0d:81:31:
                    17:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:4D:76:AB:E6:71:D9:A6:A4:0D:66:2B:3D:14:41:48:5B:20:16:F4
            X509v3 Authority Key Identifier:
                keyid:00:FD:31:FD:06:B4:20:4C:3D:DC:B6:35:07:18:95:33:77:8C:CC:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AP0x_Qa0IEw93LY1BxiVM3eMzPg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:47:0c:89:14:96:79:24:d5:61:1e:ab:83:27:ab:02:23:53:
         a3:9c:86:d0:d1:31:93:29:02:fc:3a:af:f3:b6:1b:79:ad:fc:
         ec:68:0b:34:2c:85:7d:c5:73:1c:8e:11:d5:2b:4f:ae:a8:d9:
         e3:90:68:4b:82:9c:96:a3:23:88:5c:39:5d:d9:50:40:29:5b:
         44:51:38:5d:69:20:89:d3:62:ca:05:53:48:20:7a:0a:1e:6f:
         66:9b:7e:c8:89:ce:91:9e:15:2f:44:97:9e:a5:63:79:6e:ba:
         e7:e2:78:ec:7b:fc:c4:34:4c:e1:0b:fe:ed:86:32:5b:c0:ba:
         1f:8c:3e:3e:42:81:14:93:32:95:57:43:30:99:ee:4b:21:f7:
         46:08:c6:64:7a:c1:9f:6c:ba:c5:33:b2:70:c6:5e:5a:dd:b4:
         26:9d:b5:b1:1d:91:0c:12:83:0e:b4:19:ab:d5:d4:44:12:f1:
         c5:d2:93:a9:d5:84:de:1e:fd:13:7a:32:e1:00:91:7b:15:2d:
         d5:60:ef:04:63:2d:09:06:1b:f6:01:6e:6d:45:16:59:e8:e8:
         06:2d:26:06:a4:d4:29:b5:0b:e9:f4:05:43:1a:01:81:5c:18:
         80:1c:86:54:5b:0b:2c:c8:a6:e3:a3:54:1a:d8:57:aa:15:ee:
         0a:ef:59:f8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzA5RUExMTAvBgNVBAUTKDAwRkQzMUZEMDZCNDIwNEMzRERDQjYzNTA3MTg5NTMz
Nzc4Q0NDRjgwHhcNMjYwNTA1MDYyMzM5WhcNMjYwNTEyMDYyMzM5WjAYMRYwFAYD
VQQDEw02OWY5OGNlYi1hOWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1aJEepngNf3072aFIrINOyltsUNutfclSCzZmxMqfOrxFB6dnWhXp0Y0F+7w
wJAEkjEXZhkhRaar4iEWjz2bJclcezNW4nle84+SHAy/8m8Jm1lFlGTspp7xHmVE
I8eB93C0gJH/9wXF61WWYP4MwDIvmj14s/EnZoIo6bhVsMupr26VPY5C6faJFpx8
bru8hHz/Kh1WmM0uq0wY3FqX+X2p48sd85mx3lvzURiUQ6Wmjzrpf6Bcp3W/nviM
5RRPZ7d5B7zJV08JfM93cQ0nVIHrccpIa1eInv5cz/np/xxZQ5cIP1GyHbglwnfD
jxevpFX0hY+Rd3q+dX8NgTEXKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCdNdqvm
cdmmpA1mKz0UQUhbIBb0MB8GA1UdIwQYMBaAFAD9Mf0GtCBMPdy2NQcYlTN3jMz4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDlFQS84QzU5MTJGRUUx
M0IxMUVGQkE3QkRGM0JDNEY5QUUwMi9BUDB4X1FhMElFdzkzTFkxQnhpVk0zZU16
UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FQMHhfUWEwSUV3OTNMWTFCeGlWTTNlTXpQZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MDlFQS84QzU5MTJGRUUxM0IxMUVGQkE3QkRGM0JDNEY5QUUwMi9BUDB4X1FhMElF
dzkzTFkxQnhpVk0zZU16UGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfUcMiRSWeSTVYR6rgyerAiNTo5yG0NExkykC/Dqv87Ybea387GgLNCyFfcVz
HI4R1StPrqjZ45BoS4KclqMjiFw5XdlQQClbRFE4XWkgidNiygVTSCB6Ch5vZpt+
yInOkZ4VL0SXnqVjeW665+J47Hv8xDRM4Qv+7YYyW8C6H4w+PkKBFJMylVdDMJnu
SyH3RgjGZHrBn2y6xTOycMZeWt20Jp21sR2RDBKDDrQZq9XURBLxxdKTqdWE3h79
E3oy4QCRexUt1WDvBGMtCQYb9gFubUUWWejoBi0mBqTUKbUL6fQFQxoBgVwYgByG
VFsLLMim46NUGthXqhXuCu9Z+A==
-----END CERTIFICATE-----
Generated at Thu May 7 03:35:15 2026 by rpki-client