Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
File:                     NttE1MFZiGc4IVpWELEQwkSGylY.mft (raw, json)
Hash identifier:          R39W+OH4sDaBqkEJL/JkGY116+KLmKBTbafKA0Ivifo=
Subject key identifier:   71:D6:6A:C5:17:EE:1E:12:B5:A0:A7:F5:9B:85:41:49:16:05:C0:2C
Authority key identifier: 36:DB:44:D4:C1:59:88:67:38:21:5A:56:10:B1:10:C2:44:86:CA:56
Certificate issuer:       /CN=A91C6515/serialNumber=36DB44D4C159886738215A5610B110C24486CA56
Certificate serial:       AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
Manifest number:          A2
Signing time:             Thu 21 May 2026 07:24:50 +0000
Manifest this update:     Thu 21 May 2026 07:24:49 +0000
Manifest next update:     Thu 28 May 2026 07:24:49 +0000
Files and hashes:         1: NttE1MFZiGc4IVpWELEQwkSGylY.crl (hash: dkkIUwsSz5KSFpXQOyJ4gygOMinwrcjfYex8D+GoJW8=)
                          2: E5723CA260C111F0A9EB0333C4F9AE02.roa (hash: cYt+KD2Qk+BlMRrfFar8wLBaPDEtviMRQH8N+k8Q4G4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.crl
                          rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 07:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 170 (0xaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6515, serialNumber=36DB44D4C159886738215A5610B110C24486CA56
        Validity
            Not Before: May 21 07:24:49 2026 GMT
            Not After : May 28 07:24:49 2026 GMT
        Subject: CN=6a0eb342-1a7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a6:07:3e:4f:7b:00:8b:b1:d6:cd:18:0a:5c:
                    ef:de:46:28:11:ee:ab:d6:8d:82:60:33:6c:3e:f1:
                    a2:f5:4e:02:74:bb:7b:55:c7:dd:11:47:86:90:a5:
                    ab:01:a2:06:96:57:a6:4d:a4:05:21:e3:53:0d:d3:
                    97:27:13:0c:66:16:9b:8a:98:fb:db:aa:92:d5:c7:
                    01:88:07:3d:27:51:59:80:75:c5:4d:d6:1c:13:8a:
                    e6:7c:95:1e:b2:91:44:03:2e:8f:85:b3:df:29:fe:
                    c1:55:74:02:39:ab:78:c3:6f:9e:d5:af:9b:1e:21:
                    7a:1d:b4:6f:09:f4:59:6a:25:43:89:2c:24:90:a7:
                    95:f8:35:50:97:00:93:45:bc:2b:d3:cd:55:6e:99:
                    e9:26:a4:f8:ba:dc:1c:27:22:e7:fe:95:3e:ae:69:
                    8d:df:be:95:aa:fd:e7:04:5c:5a:a1:c2:41:7b:3b:
                    bf:19:ae:d1:b0:de:06:fd:34:2c:79:dc:73:2b:c7:
                    59:77:44:2d:3b:8c:85:29:02:8b:a8:b0:96:90:b4:
                    e2:ac:d7:c3:f1:50:1a:6c:5f:a7:23:df:06:3d:8a:
                    43:70:ca:a7:d3:b4:2e:9c:60:ef:93:87:03:b1:4c:
                    e2:ab:3e:62:58:44:81:86:09:8a:3a:c2:94:94:1d:
                    ee:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:D6:6A:C5:17:EE:1E:12:B5:A0:A7:F5:9B:85:41:49:16:05:C0:2C
            X509v3 Authority Key Identifier:
                keyid:36:DB:44:D4:C1:59:88:67:38:21:5A:56:10:B1:10:C2:44:86:CA:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NttE1MFZiGc4IVpWELEQwkSGylY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6515/84C4674A60C111F08BD5B82EC4F9AE02/NttE1MFZiGc4IVpWELEQwkSGylY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:1f:07:05:78:69:aa:8c:9f:ad:a5:2a:76:c0:4c:d9:1d:ca:
         bc:8d:f0:4b:05:19:aa:94:7d:2d:be:60:86:a6:3b:06:a7:72:
         12:fe:c7:a6:af:c3:d8:6b:80:7d:04:b5:9e:a1:81:42:9a:a5:
         f8:21:72:85:7b:b4:45:ff:60:58:5e:33:a5:df:a4:c9:7a:32:
         95:d4:b8:04:b0:78:71:cd:70:fc:51:da:53:d7:9e:83:5b:81:
         8d:fa:79:c5:93:f9:70:f8:15:08:31:86:10:ff:a4:a6:90:2f:
         49:4d:bf:fa:22:19:20:6e:fc:74:30:1e:29:a6:70:3e:de:15:
         0e:e1:a1:0d:dc:e6:65:e0:c2:03:fb:6e:d5:e4:ca:65:23:56:
         3b:c4:cb:f8:05:f1:db:78:6b:15:2a:4b:34:09:60:e5:42:1e:
         90:ce:51:db:fa:30:23:2c:83:ee:c5:28:e6:b7:9c:c2:a3:25:
         92:5a:25:6e:33:af:da:dc:8a:51:43:62:83:26:ad:2c:84:4c:
         d0:31:35:5b:2f:f5:95:e8:82:71:ea:6e:aa:3f:b0:6d:71:33:
         cb:b1:23:46:12:0b:52:0e:d9:c0:0e:6c:68:2a:01:c2:7e:eb:
         aa:81:20:f0:d0:a5:8d:4b:0c:7e:e8:5b:fe:9e:c7:8e:08:4b:
         e7:3f:52:33
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzY1MTUxMTAvBgNVBAUTKDM2REI0NEQ0QzE1OTg4NjczODIxNUE1NjEwQjExMEMy
NDQ4NkNBNTYwHhcNMjYwNTIxMDcyNDQ5WhcNMjYwNTI4MDcyNDQ5WjAYMRYwFAYD
VQQDEw02YTBlYjM0Mi0xYTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs6YHPk97AIux1s0YClzv3kYoEe6r1o2CYDNsPvGi9U4CdLt7VcfdEUeGkKWr
AaIGllemTaQFIeNTDdOXJxMMZhabipj726qS1ccBiAc9J1FZgHXFTdYcE4rmfJUe
spFEAy6PhbPfKf7BVXQCOat4w2+e1a+bHiF6HbRvCfRZaiVDiSwkkKeV+DVQlwCT
Rbwr081VbpnpJqT4utwcJyLn/pU+rmmN376Vqv3nBFxaocJBezu/Ga7RsN4G/TQs
edxzK8dZd0QtO4yFKQKLqLCWkLTirNfD8VAabF+nI98GPYpDcMqn07QunGDvk4cD
sUziqz5iWESBhgmKOsKUlB3u/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHHWasUX
7h4StaCn9ZuFQUkWBcAsMB8GA1UdIwQYMBaAFDbbRNTBWYhnOCFaVhCxEMJEhspW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjUxNS84NEM0Njc0QTYw
QzExMUYwOEJENUI4MkVDNEY5QUUwMi9OdHRFMU1GWmlHYzRJVnBXRUxFUXdrU0d5
bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL050dEUxTUZaaUdjNElWcFdFTEVRd2tTR3lsWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NjUxNS84NEM0Njc0QTYwQzExMUYwOEJENUI4MkVDNEY5QUUwMi9OdHRFMU1GWmlH
YzRJVnBXRUxFUXdrU0d5bFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgh8HBXhpqoyfraUqdsBM2R3KvI3wSwUZqpR9Lb5ghqY7BqdyEv7Hpq/D2GuA
fQS1nqGBQpql+CFyhXu0Rf9gWF4zpd+kyXoyldS4BLB4cc1w/FHaU9eeg1uBjfp5
xZP5cPgVCDGGEP+kppAvSU2/+iIZIG78dDAeKaZwPt4VDuGhDdzmZeDCA/tu1eTK
ZSNWO8TL+AXx23hrFSpLNAlg5UIekM5R2/owIyyD7sUo5recwqMlklolbjOv2tyK
UUNigyatLIRM0DE1Wy/1leiCcepuqj+wbXEzy7EjRhILUg7ZwA5saCoBwn7rqoEg
8NCljUsMfuhb/p7HjghL5z9SMw==
-----END CERTIFICATE-----
Generated at Thu May 21 10:19:46 2026 by rpki-client