Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6E49/B33AA7A6538111ED8AA98F77C4F9AE02/B7Y7XcFse0rper0AhqMVbV10Rlk.mft
File:                     B7Y7XcFse0rper0AhqMVbV10Rlk.mft (raw, json)
Hash identifier:          Cfm6yOI+kDhys4x3TRNKHWqEQmim+DhgIvuWkNiRbEA=
Subject key identifier:   6A:56:4A:CA:6B:74:89:BE:DA:E5:05:03:B8:73:C1:98:FE:F4:73:46
Authority key identifier: 07:B6:3B:5D:C1:6C:7B:4A:E9:7A:BD:00:86:A3:15:6D:5D:74:46:59
Certificate issuer:       /CN=A91C6E49/serialNumber=07B63B5DC16C7B4AE97ABD0086A3156D5D744659
Certificate serial:       02A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7Y7XcFse0rper0AhqMVbV10Rlk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6E49/B33AA7A6538111ED8AA98F77C4F9AE02/B7Y7XcFse0rper0AhqMVbV10Rlk.mft
Manifest number:          02A0
Signing time:             Thu 21 May 2026 01:37:34 +0000
Manifest this update:     Thu 21 May 2026 01:37:34 +0000
Manifest next update:     Thu 28 May 2026 01:37:34 +0000
Files and hashes:         1: B7Y7XcFse0rper0AhqMVbV10Rlk.crl (hash: AxfdMprg10TWYWsudQ8aeBoOLeANZTBrdFSmAZFRiDg=)
                          2: 98FD8A0E538411ED8D781C7CC4F9AE02.roa (hash: Px3OKRnbjIZ1iy6FbmsZnaMGY5apJ6himL6niD0r3kI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6E49/B33AA7A6538111ED8AA98F77C4F9AE02/B7Y7XcFse0rper0AhqMVbV10Rlk.crl
                          rsync://rpki.apnic.net/member_repository/A91C6E49/B33AA7A6538111ED8AA98F77C4F9AE02/B7Y7XcFse0rper0AhqMVbV10Rlk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7Y7XcFse0rper0AhqMVbV10Rlk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 01:37:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 679 (0x2a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6E49, serialNumber=07B63B5DC16C7B4AE97ABD0086A3156D5D744659
        Validity
            Not Before: May 21 01:37:34 2026 GMT
            Not After : May 28 01:37:34 2026 GMT
        Subject: CN=6a0e61de-9112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f3:de:9e:70:b5:79:cc:13:55:bc:30:4c:13:
                    60:d5:69:4d:46:20:9e:5e:9d:ba:39:98:e6:06:34:
                    0e:44:ab:71:a6:f4:68:ad:c7:be:da:39:10:9c:2b:
                    4b:18:55:7a:c2:ae:eb:93:d8:24:6a:71:94:3b:e1:
                    bd:4c:32:90:72:8d:d1:45:9b:11:61:da:d4:e0:55:
                    e5:36:2a:3f:30:4e:c2:c3:40:cc:1b:68:b8:81:c0:
                    b5:0c:02:4e:4f:df:26:bc:0f:dc:36:70:67:ea:17:
                    8d:4b:19:cb:1e:17:41:1d:65:a5:f7:15:ae:3c:78:
                    60:9d:1a:f8:5d:d5:89:eb:a4:89:9d:c1:e8:cd:5b:
                    7b:b6:5b:d5:61:84:f9:71:e7:92:3a:5c:1c:d5:50:
                    a8:11:c6:ec:4f:a2:9c:dc:cf:35:1d:86:79:73:23:
                    ef:2a:45:6b:a0:cb:34:b9:b6:76:69:9f:9b:3f:43:
                    0d:b8:b7:ba:31:eb:88:72:03:1a:17:40:75:56:7c:
                    ff:60:43:08:08:e0:2d:1c:12:0d:91:88:77:59:cf:
                    c4:ae:a6:e8:47:34:48:f4:a7:d4:48:ac:45:aa:b1:
                    b7:53:7d:11:02:56:d8:51:60:9b:f0:4d:48:fd:38:
                    b0:bf:15:30:23:14:0f:ad:28:be:ee:68:98:be:bc:
                    d4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:56:4A:CA:6B:74:89:BE:DA:E5:05:03:B8:73:C1:98:FE:F4:73:46
            X509v3 Authority Key Identifier:
                keyid:07:B6:3B:5D:C1:6C:7B:4A:E9:7A:BD:00:86:A3:15:6D:5D:74:46:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6E49/B33AA7A6538111ED8AA98F77C4F9AE02/B7Y7XcFse0rper0AhqMVbV10Rlk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7Y7XcFse0rper0AhqMVbV10Rlk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6E49/B33AA7A6538111ED8AA98F77C4F9AE02/B7Y7XcFse0rper0AhqMVbV10Rlk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:6a:28:54:81:99:e7:98:34:b5:d7:ca:73:e5:6b:0a:5f:65:
         3d:a8:6c:85:37:48:6d:36:37:03:53:d4:ab:0e:c7:6c:1d:19:
         21:91:6f:09:cf:de:16:15:c5:0c:23:11:8f:ec:ac:52:18:67:
         c5:f9:e6:bf:a1:d3:8c:18:80:a0:36:c3:c7:bb:54:68:4e:13:
         c2:7c:c0:c8:62:34:e5:54:b2:33:0c:93:37:f2:c8:00:1c:5f:
         75:ec:a1:22:b3:7b:e1:22:0d:bc:12:bc:56:27:f3:d6:61:93:
         2a:8f:29:cd:2f:f6:34:da:42:40:1c:c3:06:22:2d:1b:9b:8c:
         89:fb:b1:57:c4:a2:ec:7e:ac:cf:18:e3:7d:4b:3a:0c:74:80:
         51:a9:dc:1c:b0:7b:76:28:a0:6b:ae:ab:65:1b:40:2c:6e:2e:
         cf:86:75:3d:5d:57:70:5e:17:94:b2:fe:13:df:ba:bb:8b:d5:
         a1:89:61:c5:b0:a2:24:4e:4c:f1:09:40:a2:89:03:a7:c4:b3:
         e7:95:1d:04:8d:d6:0e:20:73:83:a1:2c:55:b1:57:c4:e0:92:
         45:4b:84:80:1c:f1:79:aa:52:62:47:c5:22:91:a8:9b:a7:4c:
         41:da:53:e8:8a:56:63:42:ef:c7:02:b8:ca:1e:fe:ba:04:15:
         ef:e1:25:49
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzZFNDkxMTAvBgNVBAUTKDA3QjYzQjVEQzE2QzdCNEFFOTdBQkQwMDg2QTMxNTZE
NUQ3NDQ2NTkwHhcNMjYwNTIxMDEzNzM0WhcNMjYwNTI4MDEzNzM0WjAYMRYwFAYD
VQQDEw02YTBlNjFkZS05MTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr/PennC1ecwTVbwwTBNg1WlNRiCeXp26OZjmBjQORKtxpvRorce+2jkQnCtL
GFV6wq7rk9gkanGUO+G9TDKQco3RRZsRYdrU4FXlNio/ME7Cw0DMG2i4gcC1DAJO
T98mvA/cNnBn6heNSxnLHhdBHWWl9xWuPHhgnRr4XdWJ66SJncHozVt7tlvVYYT5
ceeSOlwc1VCoEcbsT6Kc3M81HYZ5cyPvKkVroMs0ubZ2aZ+bP0MNuLe6MeuIcgMa
F0B1Vnz/YEMICOAtHBINkYh3Wc/ErqboRzRI9KfUSKxFqrG3U30RAlbYUWCb8E1I
/TiwvxUwIxQPrSi+7miYvrzUeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGpWSspr
dIm+2uUFA7hzwZj+9HNGMB8GA1UdIwQYMBaAFAe2O13BbHtK6Xq9AIajFW1ddEZZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkU0OS9CMzNBQTdBNjUz
ODExMUVEOEFBOThGNzdDNEY5QUUwMi9CN1k3WGNGc2UwcnBlcjBBaHFNVmJWMTBS
bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0I3WTdYY0ZzZTBycGVyMEFocU1WYlYxMFJsay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NkU0OS9CMzNBQTdBNjUzODExMUVEOEFBOThGNzdDNEY5QUUwMi9CN1k3WGNGc2Uw
cnBlcjBBaHFNVmJWMTBSbGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnWooVIGZ55g0tdfKc+VrCl9lPahshTdIbTY3A1PUqw7HbB0ZIZFvCc/eFhXF
DCMRj+ysUhhnxfnmv6HTjBiAoDbDx7tUaE4TwnzAyGI05VSyMwyTN/LIABxfdeyh
IrN74SINvBK8Vifz1mGTKo8pzS/2NNpCQBzDBiItG5uMifuxV8Si7H6szxjjfUs6
DHSAUancHLB7diiga66rZRtALG4uz4Z1PV1XcF4XlLL+E9+6u4vVoYlhxbCiJE5M
8QlAookDp8Sz55UdBI3WDiBzg6EsVbFXxOCSRUuEgBzxeapSYkfFIpGom6dMQdpT
6IpWY0LvxwK4yh7+ugQV7+ElSQ==
-----END CERTIFICATE-----
Generated at Thu May 21 10:15:55 2026 by rpki-client