Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.mft
File:                     Q1TVz6Vk7nGzToh07rG5ho-IB90.mft (raw, json)
Hash identifier:          vJmZNH+mx78TOGYwVyJpT12BdPr+TYFnI8Gm+xFfcEg=
Subject key identifier:   3C:4C:7F:13:38:65:24:6D:9D:2D:CC:58:7D:61:65:86:0B:9F:15:C8
Authority key identifier: 43:54:D5:CF:A5:64:EE:71:B3:4E:88:74:EE:B1:B9:86:8F:88:07:DD
Certificate issuer:       /CN=A91EBC50/serialNumber=4354D5CFA564EE71B34E8874EEB1B9868F8807DD
Certificate serial:       0869
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1TVz6Vk7nGzToh07rG5ho-IB90.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.mft
Manifest number:          0856
Signing time:             Thu 04 Jun 2026 20:55:39 +0000
Manifest this update:     Thu 04 Jun 2026 20:55:39 +0000
Manifest next update:     Thu 11 Jun 2026 20:55:39 +0000
Files and hashes:         1: Q1TVz6Vk7nGzToh07rG5ho-IB90.crl (hash: sy/bRDFFc9cozgvznPPYJhnhkCowVdzjD2sZwM4QykM=)
                          2: 638149B88C2C11EBBB3B260BC4F9AE02.roa (hash: Gz3paIMkIc2ePietK++Ou+oRymIz2aw9Ky+sSIACdH4=)
                          3: A10812CA0CD511EB9433AE69C4F9AE02.roa (hash: RY9RHnG9wjHyR1xu0R68Q4Yq6vJnjZQW1jZtbJsZ41Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.crl
                          rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1TVz6Vk7nGzToh07rG5ho-IB90.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 20:55:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2153 (0x869)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBC50, serialNumber=4354D5CFA564EE71B34E8874EEB1B9868F8807DD
        Validity
            Not Before: Jun  4 20:55:39 2026 GMT
            Not After : Jun 11 20:55:39 2026 GMT
        Subject: CN=6a21e64b-004b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4b:52:4c:f5:d9:91:d1:36:89:16:b0:85:39:
                    d9:a2:a5:b3:26:1b:79:df:c1:01:4f:8f:b7:4e:9d:
                    25:51:6f:b4:7a:fe:ef:13:98:f4:99:f1:2d:b4:05:
                    89:a6:17:0d:ae:2f:1e:57:d5:a1:e6:d5:cf:92:41:
                    00:5d:e5:9e:4b:c5:4a:ed:0e:e5:0d:b8:23:28:f3:
                    05:f8:4f:20:b3:d0:32:70:33:26:97:70:24:1f:62:
                    71:11:48:95:d7:c3:df:66:13:bc:df:9f:9f:74:0c:
                    25:93:d2:8f:e1:38:6a:40:af:00:17:9c:3c:42:c6:
                    2f:40:4b:89:00:ca:84:cd:03:f1:8c:06:df:51:c6:
                    61:0c:32:a8:8a:ab:ea:08:b6:37:0e:32:21:d6:6e:
                    b8:1f:88:63:9a:e9:5e:11:8e:8a:c0:58:09:b3:04:
                    a0:c2:7c:55:c0:04:ce:4f:52:f8:91:1c:e7:79:ec:
                    db:be:9c:b5:cd:9a:bb:c0:1e:8a:6d:96:ea:f7:db:
                    db:1f:fd:fa:d7:c6:1e:2a:84:08:24:c7:2c:58:b1:
                    d5:73:fd:a9:5c:b3:29:4d:bf:44:70:04:6b:b9:39:
                    31:2f:aa:fa:d0:e0:c2:7c:af:8f:b2:cf:ba:84:08:
                    49:41:af:f8:29:af:ac:f0:10:a7:e4:7d:a0:af:94:
                    12:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:4C:7F:13:38:65:24:6D:9D:2D:CC:58:7D:61:65:86:0B:9F:15:C8
            X509v3 Authority Key Identifier:
                keyid:43:54:D5:CF:A5:64:EE:71:B3:4E:88:74:EE:B1:B9:86:8F:88:07:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1TVz6Vk7nGzToh07rG5ho-IB90.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:0c:09:9a:ba:e5:23:ac:5a:c9:b1:c3:5d:fb:68:c9:d6:bf:
         49:21:ce:20:1c:21:ae:21:af:1a:45:d2:87:23:d2:5e:14:39:
         c1:d8:62:28:2e:d0:16:f0:63:41:91:af:11:07:50:6a:49:b0:
         89:67:8f:2e:c7:e8:5a:d7:0c:82:89:88:60:57:2a:e5:f6:31:
         72:cc:df:ca:9a:20:90:67:ed:6a:3b:e8:75:36:32:b6:56:71:
         68:8b:92:3b:50:4b:e5:7a:5a:24:2c:ac:84:1a:8e:0d:41:ca:
         79:d9:c3:74:ae:5c:08:d1:7c:d7:fe:72:68:17:2c:69:36:87:
         45:dc:f3:31:30:41:db:40:fc:a1:b2:3d:ca:08:98:fb:0d:8c:
         d3:4e:3b:3b:22:f7:bf:4e:23:37:5b:3f:18:4b:63:2d:c8:94:
         f2:57:15:eb:10:41:f8:3c:01:36:43:9c:68:b3:f6:33:ef:ba:
         4d:29:19:42:96:1b:28:92:98:fe:4b:7e:ea:f0:0d:b7:a9:c0:
         16:f4:af:a4:29:72:76:86:95:f0:8f:70:7c:32:06:99:79:c4:
         dc:f8:d2:49:dc:7d:d9:b7:b2:8c:b7:1b:42:91:2e:2f:f4:41:
         ed:f4:78:47:06:4c:c5:1a:6d:99:1a:4e:8a:6c:52:0a:a3:f4:
         f7:3d:82:72
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUJDNTAxMTAvBgNVBAUTKDQzNTRENUNGQTU2NEVFNzFCMzRFODg3NEVFQjFCOTg2
OEY4ODA3REQwHhcNMjYwNjA0MjA1NTM5WhcNMjYwNjExMjA1NTM5WjAYMRYwFAYD
VQQDEw02YTIxZTY0Yi0wMDRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq0tSTPXZkdE2iRawhTnZoqWzJht538EBT4+3Tp0lUW+0ev7vE5j0mfEttAWJ
phcNri8eV9Wh5tXPkkEAXeWeS8VK7Q7lDbgjKPMF+E8gs9AycDMml3AkH2JxEUiV
18PfZhO835+fdAwlk9KP4ThqQK8AF5w8QsYvQEuJAMqEzQPxjAbfUcZhDDKoiqvq
CLY3DjIh1m64H4hjmuleEY6KwFgJswSgwnxVwATOT1L4kRzneezbvpy1zZq7wB6K
bZbq99vbH/3618YeKoQIJMcsWLHVc/2pXLMpTb9EcARruTkxL6r60ODCfK+Pss+6
hAhJQa/4Ka+s8BCn5H2gr5QSQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDxMfxM4
ZSRtnS3MWH1hZYYLnxXIMB8GA1UdIwQYMBaAFENU1c+lZO5xs06IdO6xuYaPiAfd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkM1MC9FNDg1OEFDNDBD
RDQxMUVCQkNENzlDNjlDNEY5QUUwMi9RMVRWejZWazduR3pUb2gwN3JHNWhvLUlC
OTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ExVFZ6NlZrN25HelRvaDA3ckc1aG8tSUI5MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QkM1MC9FNDg1OEFDNDBDRDQxMUVCQkNENzlDNjlDNEY5QUUwMi9RMVRWejZWazdu
R3pUb2gwN3JHNWhvLUlCOTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKwwJmrrlI6xaybHDXftoyda/SSHOIBwhriGvGkXShyPSXhQ5wdhiKC7QFvBj
QZGvEQdQakmwiWePLsfoWtcMgomIYFcq5fYxcszfypogkGftajvodTYytlZxaIuS
O1BL5XpaJCyshBqODUHKednDdK5cCNF81/5yaBcsaTaHRdzzMTBB20D8obI9ygiY
+w2M0047OyL3v04jN1s/GEtjLciU8lcV6xBB+DwBNkOcaLP2M++6TSkZQpYbKJKY
/kt+6vANt6nAFvSvpClydoaV8I9wfDIGmXnE3PjSSdx92beyjLcbQpEuL/RB7fR4
RwZMxRptmRpOimxSCqP09z2Ccg==
-----END CERTIFICATE-----
Generated at Sat Jun 6 13:25:13 2026 by rpki-client