Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft
File:                     ABXboDjLzLFS7RcROqCo1ddIjSE.mft (raw, json)
Hash identifier:          KWnAvX72oHgf7/9izyIoz+hUT7V79neWZAH6OVVt4Jk=
Subject key identifier:   DF:C3:78:DD:92:03:2F:FD:E7:37:42:47:8B:2E:72:C0:69:59:2F:5A
Authority key identifier: 00:15:DB:A0:38:CB:CC:B1:52:ED:17:11:3A:A0:A8:D5:D7:48:8D:21
Certificate issuer:       /CN=A91CC564/serialNumber=0015DBA038CBCCB152ED17113AA0A8D5D7488D21
Certificate serial:       0934
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABXboDjLzLFS7RcROqCo1ddIjSE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft
Manifest number:          092B
Signing time:             Wed 20 May 2026 20:15:27 +0000
Manifest this update:     Wed 20 May 2026 20:15:26 +0000
Manifest next update:     Wed 27 May 2026 20:15:26 +0000
Files and hashes:         1: ABXboDjLzLFS7RcROqCo1ddIjSE.crl (hash: ywim854ysWFnOjZJxWQRKDz6WfNfaGsp5UrzyDnORpA=)
                          2: 74CCA13ADBE811EA8D063B7DC4F9AE02.roa (hash: Z/q3Sn+bG/2MqO5zayEdrpBR4UkNKUijCjfuQZVUaYw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.crl
                          rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABXboDjLzLFS7RcROqCo1ddIjSE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 20:15:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2356 (0x934)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC564, serialNumber=0015DBA038CBCCB152ED17113AA0A8D5D7488D21
        Validity
            Not Before: May 20 20:15:26 2026 GMT
            Not After : May 27 20:15:26 2026 GMT
        Subject: CN=6a0e165e-1aa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:da:b4:7f:56:75:1a:51:a9:d1:5c:f8:e3:7b:
                    b1:54:ae:1f:c1:c3:74:41:02:67:78:cc:c6:52:af:
                    1b:11:b9:b6:90:3d:f9:04:5d:66:4a:b4:f0:f3:5b:
                    83:61:37:f1:ba:ee:ce:14:31:f8:45:70:04:fd:e3:
                    28:83:76:4c:27:a9:9a:9a:90:3d:53:8d:fd:f0:fa:
                    fb:d2:da:20:d6:0f:8e:a8:d4:ad:b5:f2:a5:d5:88:
                    65:f8:0f:e5:46:bb:96:54:11:dc:6e:e1:54:70:de:
                    92:d6:8f:7c:87:2e:65:d7:3b:81:65:0c:63:0c:f6:
                    9d:36:11:d9:f4:86:ef:cf:22:96:78:89:30:3a:1d:
                    9f:0c:51:1f:12:47:25:58:22:42:df:f8:49:18:c3:
                    d1:07:21:bb:b1:70:df:54:91:c0:3d:4c:20:a6:0e:
                    30:aa:9c:ff:96:4a:7e:1f:11:15:53:6a:0e:0b:b4:
                    9e:c0:67:ca:00:ce:98:eb:39:48:16:7c:d1:fd:97:
                    d9:77:6c:a1:3c:d5:4e:da:aa:f6:55:05:e4:cf:08:
                    42:b9:3f:22:68:95:0f:4d:1a:75:d4:8e:68:a3:8e:
                    34:29:e6:b2:f2:57:5e:40:e3:37:b9:22:82:df:82:
                    a3:f9:01:07:40:c4:7e:1e:81:bf:1f:2a:24:a3:21:
                    a9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:C3:78:DD:92:03:2F:FD:E7:37:42:47:8B:2E:72:C0:69:59:2F:5A
            X509v3 Authority Key Identifier:
                keyid:00:15:DB:A0:38:CB:CC:B1:52:ED:17:11:3A:A0:A8:D5:D7:48:8D:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABXboDjLzLFS7RcROqCo1ddIjSE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:f6:bc:b5:cf:15:89:d4:ff:a9:39:39:de:80:78:40:1f:98:
         a0:14:62:b6:00:d1:94:91:34:cb:0c:85:7a:de:09:f0:de:3b:
         4b:c6:ba:41:83:24:b5:ab:eb:47:b6:4f:59:9c:db:d1:89:bc:
         bf:04:ce:a0:60:cb:98:64:3b:4f:ce:7a:73:de:00:8b:07:fb:
         ca:a4:fa:3c:fc:c3:8c:ee:f5:77:9a:4f:ba:c7:b7:3d:d9:81:
         a5:2d:ec:e8:fb:e4:a9:90:f5:e2:14:bd:05:d8:35:03:46:6b:
         68:bb:24:4d:6f:72:65:2b:8e:88:19:ba:b2:b0:80:92:99:a1:
         40:4d:34:98:6e:5c:7f:d1:44:2c:f3:2b:d4:3e:03:e4:b2:60:
         6a:51:6a:35:3f:c0:4c:6d:14:fe:f8:28:6b:b9:55:cf:30:ad:
         bb:27:18:73:bf:42:83:76:37:86:4d:b5:43:e9:31:41:94:24:
         dd:1b:7b:64:4f:0a:18:70:5d:1f:a5:6d:5d:14:6d:6c:b0:05:
         54:41:e6:97:62:09:19:b2:6c:a5:ea:a5:2b:16:cc:94:e1:d4:
         a6:01:bf:df:4f:96:f3:dd:07:aa:69:73:23:64:47:0d:82:0a:
         e4:fe:4c:cf:f7:8f:3b:83:86:e2:7e:a1:1a:16:d3:52:a0:39:
         bf:ff:bc:46
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCTQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0M1NjQxMTAvBgNVBAUTKDAwMTVEQkEwMzhDQkNDQjE1MkVEMTcxMTNBQTBBOEQ1
RDc0ODhEMjEwHhcNMjYwNTIwMjAxNTI2WhcNMjYwNTI3MjAxNTI2WjAYMRYwFAYD
VQQDEw02YTBlMTY1ZS0xYWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvdq0f1Z1GlGp0Vz443uxVK4fwcN0QQJneMzGUq8bEbm2kD35BF1mSrTw81uD
YTfxuu7OFDH4RXAE/eMog3ZMJ6mampA9U4398Pr70tog1g+OqNSttfKl1Yhl+A/l
RruWVBHcbuFUcN6S1o98hy5l1zuBZQxjDPadNhHZ9IbvzyKWeIkwOh2fDFEfEkcl
WCJC3/hJGMPRByG7sXDfVJHAPUwgpg4wqpz/lkp+HxEVU2oOC7SewGfKAM6Y6zlI
FnzR/ZfZd2yhPNVO2qr2VQXkzwhCuT8iaJUPTRp11I5oo440Keay8ldeQOM3uSKC
34Kj+QEHQMR+HoG/HyokoyGpCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN/DeN2S
Ay/95zdCR4sucsBpWS9aMB8GA1UdIwQYMBaAFAAV26A4y8yxUu0XETqgqNXXSI0h
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzU2NC80RjI5RDBDNEM0
MEYxMUVBOUMxNUI0NzBDNEY5QUUwMi9BQlhib0RqTHpMRlM3UmNST3FDbzFkZElq
U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FCWGJvRGpMekxGUzdSY1JPcUNvMWRkSWpTRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QzU2NC80RjI5RDBDNEM0MEYxMUVBOUMxNUI0NzBDNEY5QUUwMi9BQlhib0RqTHpM
RlM3UmNST3FDbzFkZElqU0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAe/a8tc8VidT/qTk53oB4QB+YoBRitgDRlJE0ywyFet4J8N47S8a6QYMktavr
R7ZPWZzb0Ym8vwTOoGDLmGQ7T856c94Aiwf7yqT6PPzDjO71d5pPuse3PdmBpS3s
6PvkqZD14hS9Bdg1A0ZraLskTW9yZSuOiBm6srCAkpmhQE00mG5cf9FELPMr1D4D
5LJgalFqNT/ATG0U/vgoa7lVzzCtuycYc79Cg3Y3hk21Q+kxQZQk3Rt7ZE8KGHBd
H6VtXRRtbLAFVEHml2IJGbJspeqlKxbMlOHUpgG/30+W890HqmlzI2RHDYIK5P5M
z/ePO4OG4n6hGhbTUqA5v/+8Rg==
-----END CERTIFICATE-----
Generated at Thu May 21 09:30:21 2026 by rpki-client