Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft
File:                     FYg0tWOnwztJgzS8-jD41rZ03J4.mft (raw, json)
Hash identifier:          6AT9VwOxTlwSS2UCyQYK0XOL/xLFNJadDADcHzhBno0=
Subject key identifier:   95:34:B6:0E:69:FA:17:7B:45:97:57:A9:C1:4A:30:FE:76:5E:F5:0B
Authority key identifier: 15:88:34:B5:63:A7:C3:3B:49:83:34:BC:FA:30:F8:D6:B6:74:DC:9E
Certificate issuer:       /CN=A91CDB75/serialNumber=158834B563A7C33B498334BCFA30F8D6B674DC9E
Certificate serial:       01C5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYg0tWOnwztJgzS8-jD41rZ03J4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft
Manifest number:          01BE
Signing time:             Mon 01 Jun 2026 04:40:50 +0000
Manifest this update:     Mon 01 Jun 2026 04:40:49 +0000
Manifest next update:     Mon 08 Jun 2026 04:40:49 +0000
Files and hashes:         1: FYg0tWOnwztJgzS8-jD41rZ03J4.crl (hash: IJz7aV3sXj+UL+9KU69MPx7Qs4nO1GWfOFe8RtQh4BI=)
                          2: C5589FB4BF9C11EEAAE7743EC4F9AE02.roa (hash: oVA7A9xbq/3XzKnToy39T95rB3d7qRIRIGsB5By2kNI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.crl
                          rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYg0tWOnwztJgzS8-jD41rZ03J4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 04:40:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 453 (0x1c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDB75, serialNumber=158834B563A7C33B498334BCFA30F8D6B674DC9E
        Validity
            Not Before: Jun  1 04:40:49 2026 GMT
            Not After : Jun  8 04:40:49 2026 GMT
        Subject: CN=6a1d0d52-9b14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7c:2b:e8:08:ad:e9:46:04:c5:03:ee:44:5a:
                    1a:ff:c0:55:c0:4d:9a:43:ab:05:18:6b:61:e6:6f:
                    1c:44:32:c9:7a:05:3d:b4:5d:3e:3e:af:a2:8d:84:
                    57:11:dc:e4:4c:74:a6:a1:9d:0f:37:f7:af:77:aa:
                    4f:8d:ae:64:5a:cb:b8:83:3d:ba:67:3d:8a:93:bd:
                    99:98:24:a6:de:90:c3:98:b0:d3:fc:4d:11:c9:30:
                    29:06:41:f2:51:d5:92:00:cc:11:5b:19:98:52:83:
                    6a:df:ac:5b:27:03:ee:b1:d6:53:5f:34:c2:ea:a0:
                    f6:f9:7d:b1:81:a3:6f:73:64:43:7a:0f:0f:b2:17:
                    1b:38:d7:f1:f0:cf:e1:1b:f0:05:dc:17:af:6b:f3:
                    43:f5:a8:10:7f:3f:c6:a0:83:ba:d2:d8:e2:4b:88:
                    68:49:43:fd:d2:ca:c1:b8:26:b6:57:7a:47:a5:a4:
                    95:b0:3f:a4:e2:b9:18:0e:4a:62:16:2a:fd:fc:f6:
                    e6:8b:16:1c:bd:fd:70:78:a1:a5:20:6b:ee:eb:b8:
                    90:a5:0d:3f:6e:4e:02:b3:88:53:12:28:5b:93:89:
                    6a:8e:42:92:8e:de:bf:30:de:70:bb:72:89:52:62:
                    35:4c:ec:28:c9:73:a6:47:d0:03:1a:33:02:db:58:
                    11:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:34:B6:0E:69:FA:17:7B:45:97:57:A9:C1:4A:30:FE:76:5E:F5:0B
            X509v3 Authority Key Identifier:
                keyid:15:88:34:B5:63:A7:C3:3B:49:83:34:BC:FA:30:F8:D6:B6:74:DC:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYg0tWOnwztJgzS8-jD41rZ03J4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:39:f0:ec:de:54:4f:01:7e:80:c8:65:5e:5c:77:2e:0b:4e:
         aa:06:f0:86:30:bc:28:8c:92:aa:9f:15:1f:ac:0e:6b:67:45:
         34:9a:41:f7:b2:7c:90:f4:cb:1f:73:86:0a:fd:6d:30:e6:d3:
         79:13:44:d4:7f:85:38:39:fd:1b:00:f9:c5:1e:3f:95:33:21:
         e1:ee:b2:2c:58:7f:a9:69:6c:e6:5a:8d:84:9d:f2:86:05:33:
         6a:b2:0f:4e:9a:e2:ef:e0:a6:c0:d7:0c:4c:ec:5e:2e:09:2a:
         15:2e:aa:89:98:c2:3a:18:ad:d8:fa:b9:82:37:0e:00:b9:8a:
         25:88:15:43:87:b1:e0:ee:90:eb:46:f3:59:1e:df:0d:8f:a4:
         30:6d:3a:6c:86:3e:d4:19:55:b8:f6:02:fc:7a:56:9b:06:67:
         06:7b:c1:bd:ce:b9:1b:f7:57:84:3c:4c:10:d9:a4:c5:43:33:
         1c:c5:a9:8b:4d:cf:6c:3a:a0:43:59:d9:b7:91:31:68:19:8f:
         44:66:15:f6:6b:03:93:5b:ce:e4:21:7b:f7:8d:bc:49:73:02:
         45:cd:eb:89:d1:06:e6:46:ea:fc:b3:86:10:a4:ad:3c:8c:4a:
         cf:9f:6f:0a:75:1f:60:1f:09:b6:d1:98:a3:21:4a:ad:a7:b8:
         7c:13:a0:80
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0RCNzUxMTAvBgNVBAUTKDE1ODgzNEI1NjNBN0MzM0I0OTgzMzRCQ0ZBMzBGOEQ2
QjY3NERDOUUwHhcNMjYwNjAxMDQ0MDQ5WhcNMjYwNjA4MDQ0MDQ5WjAYMRYwFAYD
VQQDEw02YTFkMGQ1Mi05YjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1Xwr6Ait6UYExQPuRFoa/8BVwE2aQ6sFGGth5m8cRDLJegU9tF0+Pq+ijYRX
EdzkTHSmoZ0PN/evd6pPja5kWsu4gz26Zz2Kk72ZmCSm3pDDmLDT/E0RyTApBkHy
UdWSAMwRWxmYUoNq36xbJwPusdZTXzTC6qD2+X2xgaNvc2RDeg8PshcbONfx8M/h
G/AF3Beva/ND9agQfz/GoIO60tjiS4hoSUP90srBuCa2V3pHpaSVsD+k4rkYDkpi
Fir9/PbmixYcvf1weKGlIGvu67iQpQ0/bk4Cs4hTEihbk4lqjkKSjt6/MN5wu3KJ
UmI1TOwoyXOmR9ADGjMC21gReQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJU0tg5p
+hd7RZdXqcFKMP52XvULMB8GA1UdIwQYMBaAFBWINLVjp8M7SYM0vPow+Na2dNye
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREI3NS9EQ0QyRDQ5NEJC
NzcxMUVFQUFEN0IyNDFDNEY5QUUwMi9GWWcwdFdPbnd6dEpnelM4LWpENDFyWjAz
SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0ZZZzB0V09ud3p0Smd6UzgtakQ0MXJaMDNKNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
REI3NS9EQ0QyRDQ5NEJCNzcxMUVFQUFEN0IyNDFDNEY5QUUwMi9GWWcwdFdPbnd6
dEpnelM4LWpENDFyWjAzSjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAyDnw7N5UTwF+gMhlXlx3LgtOqgbwhjC8KIySqp8VH6wOa2dFNJpB97J8kPTL
H3OGCv1tMObTeRNE1H+FODn9GwD5xR4/lTMh4e6yLFh/qWls5lqNhJ3yhgUzarIP
Tpri7+CmwNcMTOxeLgkqFS6qiZjCOhit2Pq5gjcOALmKJYgVQ4ex4O6Q60bzWR7f
DY+kMG06bIY+1BlVuPYC/HpWmwZnBnvBvc65G/dXhDxMENmkxUMzHMWpi03PbDqg
Q1nZt5ExaBmPRGYV9msDk1vO5CF79428SXMCRc3ridEG5kbq/LOGEKStPIxKz59v
CnUfYB8JttGYoyFKrae4fBOggA==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:23:41 2026 by rpki-client