Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft
File:                     CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft (raw, json)
Hash identifier:          dStDjq3rSv68x8A2snJcNFImrzyT1LWofsiEkIw1qKU=
Subject key identifier:   BE:6F:B8:01:34:57:03:3F:9D:53:59:79:04:89:B6:2A:83:AA:8D:CA
Authority key identifier: 0B:02:2B:1E:A3:4C:03:7C:51:F6:57:FC:3E:0D:84:A3:C6:18:68:22
Certificate issuer:       /CN=A91D890E/serialNumber=0B022B1EA34C037C51F657FC3E0D84A3C6186822
Certificate serial:       09E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft
Manifest number:          09DB
Signing time:             Wed 20 May 2026 19:54:00 +0000
Manifest this update:     Wed 20 May 2026 19:53:59 +0000
Manifest next update:     Wed 27 May 2026 19:53:59 +0000
Files and hashes:         1: CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl (hash: 9NIk09gbLdbVn1lE7WmL7zZZPmz22sGMafXN0zsF4ZI=)
                          2: FDAEEFB0A12A11EAB063A548C4F9AE02.roa (hash: cNrjBilbrF0h5gqh8r2I8xpeSdxfHL1i6pc3sR9uCdw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl
                          rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 19:53:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2532 (0x9e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D890E, serialNumber=0B022B1EA34C037C51F657FC3E0D84A3C6186822
        Validity
            Not Before: May 20 19:53:59 2026 GMT
            Not After : May 27 19:53:59 2026 GMT
        Subject: CN=6a0e1158-4262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:22:50:39:9d:6a:18:bb:d3:60:7a:b6:d9:b4:
                    63:ee:d9:87:5e:5f:08:56:dc:df:59:01:b9:d3:ca:
                    a0:ef:77:dd:33:85:2e:d8:bc:8e:9c:be:ac:40:71:
                    82:7c:e1:1d:6a:07:98:49:a7:f9:59:a6:43:15:8f:
                    33:e5:6f:a5:f9:8f:3a:c6:d8:bb:58:6f:42:69:c0:
                    22:01:68:a6:bc:9a:0c:9a:05:7f:5c:8d:da:5a:55:
                    bd:af:3e:3d:2d:5f:90:05:6f:c5:c7:cb:fd:83:59:
                    ae:13:36:e9:c2:76:81:53:6b:40:63:5b:6b:70:75:
                    a2:83:93:7d:07:a3:ad:e0:4b:0e:ab:53:bf:59:01:
                    4c:3b:01:cb:5c:88:c2:2e:14:0a:5c:b2:91:69:ed:
                    60:d5:4f:f4:fc:7d:78:5f:2d:a4:b7:f7:fa:b2:43:
                    0f:fe:4d:83:ad:73:6b:45:e0:78:8d:68:eb:af:4a:
                    5e:73:2c:aa:55:31:77:12:31:3c:a7:25:f8:fd:4e:
                    8b:97:b1:fe:8d:61:81:b4:b8:6b:da:f6:91:1c:99:
                    c7:81:49:d7:8e:29:9b:7e:cc:d0:c6:5b:33:ae:21:
                    2f:44:4e:3d:e7:a4:00:5a:32:a2:4d:61:e0:71:bd:
                    7b:67:68:90:fa:f4:dc:66:4c:03:74:8d:ca:e6:5e:
                    ee:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:6F:B8:01:34:57:03:3F:9D:53:59:79:04:89:B6:2A:83:AA:8D:CA
            X509v3 Authority Key Identifier:
                keyid:0B:02:2B:1E:A3:4C:03:7C:51:F6:57:FC:3E:0D:84:A3:C6:18:68:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:26:33:ea:00:b1:c4:ae:5b:82:bb:be:d7:c6:ba:20:a0:9c:
         5f:b1:1f:10:27:2b:fd:c9:ee:73:ad:7a:6c:78:c8:1f:43:2d:
         89:8c:c8:b0:72:04:b6:a3:96:40:f3:9c:00:21:9e:ea:94:b4:
         d6:08:04:71:dd:92:45:ea:ce:57:e4:b2:5f:2e:fb:f5:f9:14:
         07:35:e6:ac:f9:60:31:ba:66:ea:14:31:57:bf:e5:c3:2b:c7:
         05:88:68:47:94:64:8e:16:7c:25:2a:b6:c5:6a:e4:a7:4c:42:
         be:ee:e7:38:e1:9b:41:61:14:06:46:f2:49:c8:38:b5:0d:84:
         48:01:fd:cc:15:15:d6:ab:d3:4a:e6:e2:1a:4c:04:73:ca:3c:
         48:50:ed:b3:0b:38:e4:44:15:f0:4d:5c:e6:ac:45:79:4b:dd:
         f5:05:1d:71:16:6d:d6:d1:4a:d4:ef:c8:63:0c:f6:af:0a:4f:
         84:d5:ad:63:df:5a:b9:2e:1d:79:fa:4d:3a:73:83:b5:f0:c5:
         c6:f6:98:4d:23:e9:6f:ba:d0:c5:52:60:62:db:a5:fc:5f:4b:
         43:52:c5:c7:d4:ed:4d:70:ac:85:58:f3:ff:70:8c:f8:a3:e7:
         f5:b8:78:ac:3b:14:ef:89:4a:99:8d:81:1b:29:62:1d:90:c3:
         1b:57:cc:e7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDg5MEUxMTAvBgNVBAUTKDBCMDIyQjFFQTM0QzAzN0M1MUY2NTdGQzNFMEQ4NEEz
QzYxODY4MjIwHhcNMjYwNTIwMTk1MzU5WhcNMjYwNTI3MTk1MzU5WjAYMRYwFAYD
VQQDEw02YTBlMTE1OC00MjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtiJQOZ1qGLvTYHq22bRj7tmHXl8IVtzfWQG508qg73fdM4Uu2LyOnL6sQHGC
fOEdageYSaf5WaZDFY8z5W+l+Y86xti7WG9CacAiAWimvJoMmgV/XI3aWlW9rz49
LV+QBW/Fx8v9g1muEzbpwnaBU2tAY1trcHWig5N9B6Ot4EsOq1O/WQFMOwHLXIjC
LhQKXLKRae1g1U/0/H14Xy2kt/f6skMP/k2DrXNrReB4jWjrr0pecyyqVTF3EjE8
pyX4/U6Ll7H+jWGBtLhr2vaRHJnHgUnXjimbfszQxlszriEvRE4956QAWjKiTWHg
cb17Z2iQ+vTcZkwDdI3K5l7uoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL5vuAE0
VwM/nVNZeQSJtiqDqo3KMB8GA1UdIwQYMBaAFAsCKx6jTAN8UfZX/D4NhKPGGGgi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODkwRS84RDQxMzVGRUEx
MjkxMUVBQTAyMjc3NDZDNEY5QUUwMi9Dd0lySHFOTUEzeFI5bGY4UGcyRW84WVlh
Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0N3SXJIcU5NQTN4UjlsZjhQZzJFbzhZWWFDSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
ODkwRS84RDQxMzVGRUExMjkxMUVBQTAyMjc3NDZDNEY5QUUwMi9Dd0lySHFOTUEz
eFI5bGY4UGcyRW84WVlhQ0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFSYz6gCxxK5bgru+18a6IKCcX7EfECcr/cnuc616bHjIH0MtiYzIsHIEtqOW
QPOcACGe6pS01ggEcd2SRerOV+SyXy779fkUBzXmrPlgMbpm6hQxV7/lwyvHBYho
R5RkjhZ8JSq2xWrkp0xCvu7nOOGbQWEUBkbyScg4tQ2ESAH9zBUV1qvTSubiGkwE
c8o8SFDtsws45EQV8E1c5qxFeUvd9QUdcRZt1tFK1O/IYwz2rwpPhNWtY99auS4d
efpNOnODtfDFxvaYTSPpb7rQxVJgYtul/F9LQ1LFx9TtTXCshVjz/3CM+KPn9bh4
rDsU74lKmY2BGyliHZDDG1fM5w==
-----END CERTIFICATE-----
Generated at Thu May 21 09:30:44 2026 by rpki-client