Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.mft
File:                     906Wyp7pNgdFZCkpYPvB-c80hU0.mft (raw, json)
Hash identifier:          B4zqQXQ4rTwSEsJJNJbxdtMWM0/9ax0RmmPIH/DhUXo=
Subject key identifier:   58:F8:30:27:0C:D1:68:ED:FD:29:FA:66:62:24:1A:50:61:E2:7A:4D
Authority key identifier: F7:4E:96:CA:9E:E9:36:07:45:64:29:29:60:FB:C1:F9:CF:34:85:4D
Certificate issuer:       /CN=A91E0329/serialNumber=F74E96CA9EE936074564292960FBC1F9CF34854D
Certificate serial:       025A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.mft
Manifest number:          024A
Signing time:             Fri 15 May 2026 02:28:39 +0000
Manifest this update:     Fri 15 May 2026 02:28:39 +0000
Manifest next update:     Fri 22 May 2026 02:28:39 +0000
Files and hashes:         1: 906Wyp7pNgdFZCkpYPvB-c80hU0.crl (hash: svoDuvfmaxkzmouLkkkKG+Pi9PjOnbLDBKFf1GUCPoU=)
                          2: 0C43C6FE115A11F1BB244A79283D8C67.roa (hash: Q/YfIcqrSZiciqVoS9OhxVjIof57yNZ2yOyuN3OM0D8=)
                          3: 1DA961ACEE8911EDBFAE4177C4F9AE02.roa (hash: gQUVaw/nhF8h8635Ih14SNFIvxFTmLQhVEdhPIBn6g4=)
                          4: F26B14C4EE8B11ED95BCBB13C4F9AE02.roa (hash: gkuXL8yT7fP8UeDUjTY9zb94PE0+asidk2/nHeB3xgM=)
                          5: 1C99BCBCEE8911EDBFAE4177C4F9AE02.roa (hash: +46LKZYz8qHEfX4xAXpsHndLtnPAkVUeuEgTM+PY298=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.crl
                          rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 May 2026 02:28:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 602 (0x25a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0329, serialNumber=F74E96CA9EE936074564292960FBC1F9CF34854D
        Validity
            Not Before: May 15 02:28:39 2026 GMT
            Not After : May 22 02:28:39 2026 GMT
        Subject: CN=6a0684d7-3365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:43:31:bc:68:f3:0c:35:5e:bf:cf:f0:84:77:
                    76:a4:cb:09:3f:54:61:ba:84:d6:bf:b8:74:a2:37:
                    7d:f1:b2:54:40:c0:c3:78:9f:40:70:d2:92:ba:2c:
                    b0:b5:67:60:78:2c:da:4b:be:b9:5e:94:ce:d8:64:
                    68:3d:fb:1c:44:28:1e:c8:18:54:0e:88:08:bc:87:
                    95:f0:e2:31:dc:9d:fa:ac:65:e3:72:45:ac:bb:d1:
                    3b:a7:f6:7a:9a:3b:8e:a8:80:c0:33:64:2e:e6:6a:
                    65:3b:bb:ef:69:73:a6:c3:75:29:99:28:72:75:51:
                    9c:5f:a1:95:22:fb:81:35:a6:27:e8:b0:a3:c7:9a:
                    59:10:b7:17:66:5b:5b:ac:ec:cd:e3:c9:f9:0e:d3:
                    17:1d:62:f4:60:72:db:e0:88:f2:6e:dc:36:55:0c:
                    53:22:82:fa:07:37:bc:39:93:db:56:b0:a6:e7:42:
                    51:97:fb:4f:7c:63:12:6f:32:6e:34:27:6b:94:4d:
                    5b:05:a9:75:dd:60:ee:c3:08:ad:c9:2e:70:b9:92:
                    67:f3:4b:cc:2a:6f:da:7d:02:58:a8:0c:69:f0:87:
                    3f:97:69:53:2b:5c:6a:a9:b3:0a:da:14:db:25:0a:
                    2d:da:49:06:61:cf:8d:9d:49:3e:b0:3d:f6:47:62:
                    c9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F8:30:27:0C:D1:68:ED:FD:29:FA:66:62:24:1A:50:61:E2:7A:4D
            X509v3 Authority Key Identifier:
                keyid:F7:4E:96:CA:9E:E9:36:07:45:64:29:29:60:FB:C1:F9:CF:34:85:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:71:e7:34:eb:f1:9b:d0:5e:cc:3c:4b:3f:e3:81:3e:72:91:
         e1:aa:f7:f6:24:4d:e5:3d:1c:71:8e:ed:48:e1:2a:0d:b6:74:
         18:fc:77:05:75:9e:22:6c:8e:20:c6:ed:e2:35:67:19:8d:8b:
         de:f9:68:49:40:d5:47:06:80:b1:67:8c:68:14:c6:ef:ed:b5:
         64:84:8a:cb:24:8c:59:32:d2:e2:b6:7d:82:f8:d0:17:02:7a:
         4f:2a:35:ff:ca:5b:01:bb:98:1c:ef:03:85:cd:cc:ef:30:eb:
         63:93:42:dc:22:b9:5c:ba:ed:64:1c:04:fc:1d:82:8b:ca:4e:
         36:d7:f3:c2:ce:ed:cd:f3:0c:22:43:14:0d:5c:e5:9c:e4:a2:
         38:60:3b:db:79:8a:d0:d6:08:96:db:b5:84:ef:93:0e:ed:bc:
         08:87:80:0f:5f:6b:0f:96:64:d5:f5:c3:5b:45:14:2f:78:09:
         fa:f9:a3:6a:5d:cc:3e:50:34:9b:a5:76:7c:7c:35:88:20:27:
         ac:95:67:65:f5:71:10:09:dc:11:f5:1e:a0:00:6a:76:11:fa:
         11:ce:91:ac:65:ac:98:56:41:84:51:92:ba:fc:78:30:68:4f:
         a6:5b:fc:de:08:2a:98:91:c5:d1:71:27:98:e7:b7:cb:54:0d:
         c2:34:b5:8b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTAzMjkxMTAvBgNVBAUTKEY3NEU5NkNBOUVFOTM2MDc0NTY0MjkyOTYwRkJDMUY5
Q0YzNDg1NEQwHhcNMjYwNTE1MDIyODM5WhcNMjYwNTIyMDIyODM5WjAYMRYwFAYD
VQQDEw02YTA2ODRkNy0zMzY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzkMxvGjzDDVev8/whHd2pMsJP1RhuoTWv7h0ojd98bJUQMDDeJ9AcNKSuiyw
tWdgeCzaS765XpTO2GRoPfscRCgeyBhUDogIvIeV8OIx3J36rGXjckWsu9E7p/Z6
mjuOqIDAM2Qu5mplO7vvaXOmw3UpmShydVGcX6GVIvuBNaYn6LCjx5pZELcXZltb
rOzN48n5DtMXHWL0YHLb4Ijybtw2VQxTIoL6Bze8OZPbVrCm50JRl/tPfGMSbzJu
NCdrlE1bBal13WDuwwityS5wuZJn80vMKm/afQJYqAxp8Ic/l2lTK1xqqbMK2hTb
JQot2kkGYc+NnUk+sD32R2LJOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFj4MCcM
0Wjt/Sn6ZmIkGlBh4npNMB8GA1UdIwQYMBaAFPdOlsqe6TYHRWQpKWD7wfnPNIVN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDMyOS80NUQ2RUZGQ0Qz
OUQxMUVEQkJDQjI4MEZDNEY5QUUwMi85MDZXeXA3cE5nZEZaQ2twWVB2Qi1jODBo
VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzkwNld5cDdwTmdkRlpDa3BZUHZCLWM4MGhVMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MDMyOS80NUQ2RUZGQ0QzOUQxMUVEQkJDQjI4MEZDNEY5QUUwMi85MDZXeXA3cE5n
ZEZaQ2twWVB2Qi1jODBoVTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAW3HnNOvxm9BezDxLP+OBPnKR4ar39iRN5T0ccY7tSOEqDbZ0GPx3BXWeImyO
IMbt4jVnGY2L3vloSUDVRwaAsWeMaBTG7+21ZISKyySMWTLS4rZ9gvjQFwJ6Tyo1
/8pbAbuYHO8Dhc3M7zDrY5NC3CK5XLrtZBwE/B2Ci8pONtfzws7tzfMMIkMUDVzl
nOSiOGA723mK0NYIltu1hO+TDu28CIeAD19rD5Zk1fXDW0UUL3gJ+vmjal3MPlA0
m6V2fHw1iCAnrJVnZfVxEAncEfUeoABqdhH6Ec6RrGWsmFZBhFGSuvx4MGhPplv8
3ggqmJHF0XEnmOe3y1QNwjS1iw==
-----END CERTIFICATE-----
Generated at Sat May 16 00:52:40 2026 by rpki-client