Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.mft
File:                     J6IiDxq_zcps_VIjbsEKERKog0U.mft (raw, json)
Hash identifier:          VI1GZfJwGWlisRPTQ6Dq3Jx7d+kcsjRrAMHXZXUJnFU=
Subject key identifier:   F2:BE:47:55:33:F2:BF:02:7E:6A:8B:C6:99:8D:3D:C2:5A:0A:12:43
Authority key identifier: 27:A2:22:0F:1A:BF:CD:CA:6C:FD:52:23:6E:C1:0A:11:12:A8:83:45
Certificate issuer:       /CN=A91CC7EA/serialNumber=27A2220F1ABFCDCA6CFD52236EC10A1112A88345
Certificate serial:       01C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J6IiDxq_zcps_VIjbsEKERKog0U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.mft
Manifest number:          01BB
Signing time:             Thu 21 May 2026 03:57:35 +0000
Manifest this update:     Thu 21 May 2026 03:57:34 +0000
Manifest next update:     Thu 28 May 2026 03:57:34 +0000
Files and hashes:         1: J6IiDxq_zcps_VIjbsEKERKog0U.crl (hash: RhFYx3fzOnO8nMKbhHWDrU+EE7beeZ3bjCR9fv3wKx4=)
                          2: 6734E4C4B57411EEBCB6B977C4F9AE02.roa (hash: TgMYHqpT35AG/xQs4xXSx+U4ZAkj/+uoW7uOAbe4gP4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.crl
                          rsync://rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J6IiDxq_zcps_VIjbsEKERKog0U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 03:57:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 449 (0x1c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC7EA, serialNumber=27A2220F1ABFCDCA6CFD52236EC10A1112A88345
        Validity
            Not Before: May 21 03:57:34 2026 GMT
            Not After : May 28 03:57:34 2026 GMT
        Subject: CN=6a0e82af-a410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:80:70:71:a8:d9:9c:50:90:cb:8e:a2:9a:e1:
                    d8:5e:b0:6e:d7:b4:56:c6:e3:8d:3d:07:09:3c:55:
                    6d:30:e1:d1:64:00:fc:cf:c1:a3:fa:f4:24:c5:6a:
                    87:4d:d3:74:8c:82:8c:2a:5f:7c:cc:d6:8a:0f:f9:
                    65:0d:28:e7:dc:52:f5:77:48:90:cf:c1:15:b9:1d:
                    c4:2b:34:04:08:2a:ab:a7:c1:b7:75:97:f6:d5:e4:
                    6a:f8:d9:22:8e:30:3b:76:d2:b1:1a:9a:9d:ef:61:
                    63:2a:76:22:32:b4:fa:a1:a3:86:4d:75:8f:29:bf:
                    6c:21:b7:96:39:fa:da:8b:62:9f:1e:26:d5:f2:f0:
                    e7:d0:25:17:17:9c:72:99:a4:5c:46:d9:0a:20:ce:
                    17:7d:3f:1c:68:66:7c:b9:38:e7:c7:13:80:97:56:
                    e3:9d:e0:99:7c:5f:3d:fd:d3:05:43:57:0c:e3:ee:
                    7c:d3:31:0b:2a:dd:c5:59:78:f4:6b:eb:bf:58:37:
                    5f:3e:0f:35:f5:8a:ed:70:02:24:ab:60:13:66:bc:
                    1d:47:c7:c4:b6:a1:e4:c9:35:0f:7e:9a:af:21:a9:
                    47:1d:8a:2c:cd:e3:f0:2a:f7:91:82:06:f8:bc:68:
                    14:e8:f5:c8:c5:fd:54:70:e4:0a:8b:86:46:2f:c9:
                    14:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:BE:47:55:33:F2:BF:02:7E:6A:8B:C6:99:8D:3D:C2:5A:0A:12:43
            X509v3 Authority Key Identifier:
                keyid:27:A2:22:0F:1A:BF:CD:CA:6C:FD:52:23:6E:C1:0A:11:12:A8:83:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J6IiDxq_zcps_VIjbsEKERKog0U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:e2:25:3b:83:d2:1d:f3:b5:fa:2d:39:1b:33:14:fe:25:35:
         91:28:48:9d:91:36:64:9d:22:1b:2f:6c:8f:b2:d6:3b:1c:34:
         8a:0f:1a:09:d2:4e:2a:dd:dd:16:ca:6b:f6:0e:7d:c7:ba:d4:
         bf:07:18:43:2f:26:96:b8:41:03:4a:13:ac:00:c0:89:04:c1:
         71:2b:b1:5e:de:9f:e5:b1:c1:d8:51:fe:a0:f6:de:09:0d:df:
         cb:6c:e4:fa:e8:3a:0d:26:1b:77:3a:81:58:c9:fe:7e:fc:1a:
         5f:f7:65:01:16:da:73:06:a9:ee:a3:b0:f9:a4:84:56:f2:38:
         6c:8c:19:5e:81:35:e0:a3:e3:5c:78:a5:33:66:24:51:77:97:
         bb:c0:0d:f7:c5:57:a5:01:21:d2:b6:3a:9b:e5:2f:05:c5:de:
         9a:7b:5c:d0:93:03:46:8c:37:5e:bd:8f:33:aa:d3:0f:1c:c5:
         ea:7e:fb:54:75:48:59:83:6b:42:b5:9e:d1:e6:0d:92:c6:8b:
         d1:a7:86:d6:70:e4:ec:81:cb:79:c5:81:ec:00:5a:ed:9b:74:
         69:d2:6c:7a:9c:54:da:aa:39:90:38:d0:ce:94:96:03:15:be:
         76:5e:20:fa:b7:37:ec:1e:4e:79:e5:c6:58:e1:7e:e5:22:5f:
         94:2f:0a:96
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0M3RUExMTAvBgNVBAUTKDI3QTIyMjBGMUFCRkNEQ0E2Q0ZENTIyMzZFQzEwQTEx
MTJBODgzNDUwHhcNMjYwNTIxMDM1NzM0WhcNMjYwNTI4MDM1NzM0WjAYMRYwFAYD
VQQDEw02YTBlODJhZi1hNDEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy4BwcajZnFCQy46imuHYXrBu17RWxuONPQcJPFVtMOHRZAD8z8Gj+vQkxWqH
TdN0jIKMKl98zNaKD/llDSjn3FL1d0iQz8EVuR3EKzQECCqrp8G3dZf21eRq+Nki
jjA7dtKxGpqd72FjKnYiMrT6oaOGTXWPKb9sIbeWOfrai2KfHibV8vDn0CUXF5xy
maRcRtkKIM4XfT8caGZ8uTjnxxOAl1bjneCZfF89/dMFQ1cM4+580zELKt3FWXj0
a+u/WDdfPg819YrtcAIkq2ATZrwdR8fEtqHkyTUPfpqvIalHHYoszePwKveRggb4
vGgU6PXIxf1UcOQKi4ZGL8kU/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPK+R1Uz
8r8CfmqLxpmNPcJaChJDMB8GA1UdIwQYMBaAFCeiIg8av83KbP1SI27BChESqINF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzdFQS9CNUM4N0Q2OEI1
NzMxMUVFOEY1MDg5NkNDNEY5QUUwMi9KNklpRHhxX3pjcHNfVklqYnNFS0VSS29n
MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0o2SWlEeHFfemNwc19WSWpic0VLRVJLb2cwVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QzdFQS9CNUM4N0Q2OEI1NzMxMUVFOEY1MDg5NkNDNEY5QUUwMi9KNklpRHhxX3pj
cHNfVklqYnNFS0VSS29nMFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAP+IlO4PSHfO1+i05GzMU/iU1kShInZE2ZJ0iGy9sj7LWOxw0ig8aCdJOKt3d
Fspr9g59x7rUvwcYQy8mlrhBA0oTrADAiQTBcSuxXt6f5bHB2FH+oPbeCQ3fy2zk
+ug6DSYbdzqBWMn+fvwaX/dlARbacwap7qOw+aSEVvI4bIwZXoE14KPjXHilM2Yk
UXeXu8AN98VXpQEh0rY6m+UvBcXemntc0JMDRow3Xr2PM6rTDxzF6n77VHVIWYNr
QrWe0eYNksaL0aeG1nDk7IHLecWB7ABa7Zt0adJsepxU2qo5kDjQzpSWAxW+dl4g
+rc37B5OeeXGWOF+5SJflC8Klg==
-----END CERTIFICATE-----
Generated at Thu May 21 11:15:23 2026 by rpki-client