Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5A93/C01AF5F415C511EFAA338236C4F9AE02/eAtbxs5eRpg3res2hXTtSDBIAcs.mft
File:                     eAtbxs5eRpg3res2hXTtSDBIAcs.mft (raw, json)
Hash identifier:          my2ciEbQ1OPOSqQyV4uhPU7pVBQ+FNqLwvY2MqC+7gc=
Subject key identifier:   32:BB:2A:D4:A2:CB:92:14:DE:12:8D:81:91:49:35:26:03:C3:9F:4D
Authority key identifier: 78:0B:5B:C6:CE:5E:46:98:37:AD:EB:36:85:74:ED:48:30:48:01:CB
Certificate issuer:       /CN=A91A5A93/serialNumber=780B5BC6CE5E469837ADEB368574ED48304801CB
Certificate serial:       0191
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eAtbxs5eRpg3res2hXTtSDBIAcs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5A93/C01AF5F415C511EFAA338236C4F9AE02/eAtbxs5eRpg3res2hXTtSDBIAcs.mft
Manifest number:          0189
Signing time:             Sat 13 Jun 2026 04:29:13 +0000
Manifest this update:     Sat 13 Jun 2026 04:29:12 +0000
Manifest next update:     Sat 20 Jun 2026 04:29:12 +0000
Files and hashes:         1: eAtbxs5eRpg3res2hXTtSDBIAcs.crl (hash: S7jQI5Qef9dwQKZgmxbH7JGp+R0fL8y10/i2Uh/NGeA=)
                          2: 521500EE15C611EF88C07237C4F9AE02.roa (hash: rDpMkPCV540+7w+gq1O0qgoOaapf4RCwUWpus7wDt9M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5A93/C01AF5F415C511EFAA338236C4F9AE02/eAtbxs5eRpg3res2hXTtSDBIAcs.crl
                          rsync://rpki.apnic.net/member_repository/A91A5A93/C01AF5F415C511EFAA338236C4F9AE02/eAtbxs5eRpg3res2hXTtSDBIAcs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eAtbxs5eRpg3res2hXTtSDBIAcs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 401 (0x191)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5A93, serialNumber=780B5BC6CE5E469837ADEB368574ED48304801CB
        Validity
            Not Before: Jun 13 04:29:12 2026 GMT
            Not After : Jun 20 04:29:12 2026 GMT
        Subject: CN=6a2cdc99-9c04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:75:24:56:3f:62:67:40:39:f0:e0:39:b6:6a:
                    56:b0:20:23:ca:ba:43:02:7d:b2:6f:53:8e:03:ff:
                    41:dd:dc:2c:86:cf:4b:7b:fd:7c:79:84:5f:57:ea:
                    4a:62:a3:c3:da:a7:e2:38:fd:a0:6a:2e:2f:0e:6c:
                    bf:7b:db:c8:11:61:66:3c:ee:38:59:38:7d:fc:21:
                    5a:d9:be:b6:a1:c6:f0:fd:8b:ae:72:ac:f0:90:29:
                    c0:ba:06:8f:87:2e:32:b7:7c:1f:12:1a:ad:23:a1:
                    02:e0:92:21:ef:22:4e:53:05:ec:80:c0:27:de:f7:
                    0d:21:3c:aa:a1:78:b0:d0:9d:1d:b5:74:72:c6:fe:
                    b0:3b:43:20:a4:0f:9c:df:bf:2d:cf:aa:98:d5:8e:
                    b9:17:cd:74:b4:ee:30:59:7e:f6:e8:fe:9c:a7:4b:
                    ab:23:f1:da:3a:c5:1c:e6:aa:3d:02:63:0c:0c:10:
                    9b:00:34:ee:c5:c2:c5:e7:91:05:b7:74:1a:27:2c:
                    a0:f7:1b:de:6b:a8:66:c3:11:02:0f:11:43:2d:ea:
                    eb:8f:4a:d0:64:66:e3:b3:b9:34:ec:39:8d:2c:85:
                    dd:23:85:a5:83:a9:1d:d2:4d:41:89:80:5c:8f:31:
                    0b:15:c5:22:2c:d1:25:35:db:05:1d:d0:3d:ff:26:
                    3b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:BB:2A:D4:A2:CB:92:14:DE:12:8D:81:91:49:35:26:03:C3:9F:4D
            X509v3 Authority Key Identifier:
                keyid:78:0B:5B:C6:CE:5E:46:98:37:AD:EB:36:85:74:ED:48:30:48:01:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5A93/C01AF5F415C511EFAA338236C4F9AE02/eAtbxs5eRpg3res2hXTtSDBIAcs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eAtbxs5eRpg3res2hXTtSDBIAcs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5A93/C01AF5F415C511EFAA338236C4F9AE02/eAtbxs5eRpg3res2hXTtSDBIAcs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:4b:d1:28:37:01:fc:8a:4f:97:b3:7b:09:82:88:1e:d6:e1:
         20:0a:67:04:43:73:04:4a:a1:8c:6b:91:7a:18:a3:53:85:6d:
         aa:d7:24:01:4b:66:8a:9a:b4:54:50:ad:9e:70:cd:3e:6c:40:
         b0:62:be:d8:9e:55:52:b0:c3:f6:2a:8f:85:8e:ae:4e:a7:c5:
         f5:e5:8c:a1:fd:af:ce:5a:ff:85:41:ca:6b:1a:0f:bb:b9:1c:
         87:cf:4f:d0:d6:b4:ee:d8:4c:46:e8:20:a0:f8:99:ba:3f:20:
         a1:5f:5a:3c:ed:77:51:99:40:f9:18:70:51:84:6a:3a:b4:74:
         75:54:b8:3f:05:ea:d9:a9:c2:13:f2:b2:a6:1f:77:81:c8:d4:
         ce:01:f4:ee:1e:50:ee:2f:23:e6:3b:87:85:ea:9e:63:61:be:
         56:94:a0:3b:27:f9:c9:d5:55:1e:fa:07:77:c0:d5:bf:d2:9c:
         71:7d:74:8c:dc:17:4c:3a:76:6b:ef:91:c8:21:49:be:a7:8c:
         6a:aa:b0:b5:45:cd:d5:f8:a1:73:53:07:cc:75:2c:83:b7:f0:
         40:eb:eb:b7:14:76:b2:be:b1:c9:6f:f5:e6:3f:e8:3c:70:5c:
         f0:ad:a7:9d:f6:6f:47:34:66:d4:33:75:a2:15:7c:ee:39:eb:
         72:6f:22:ce
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTVBOTMxMTAvBgNVBAUTKDc4MEI1QkM2Q0U1RTQ2OTgzN0FERUIzNjg1NzRFRDQ4
MzA0ODAxQ0IwHhcNMjYwNjEzMDQyOTEyWhcNMjYwNjIwMDQyOTEyWjAYMRYwFAYD
VQQDEw02YTJjZGM5OS05YzA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsnUkVj9iZ0A58OA5tmpWsCAjyrpDAn2yb1OOA/9B3dwshs9Le/18eYRfV+pK
YqPD2qfiOP2gai4vDmy/e9vIEWFmPO44WTh9/CFa2b62ocbw/YuucqzwkCnAugaP
hy4yt3wfEhqtI6EC4JIh7yJOUwXsgMAn3vcNITyqoXiw0J0dtXRyxv6wO0MgpA+c
378tz6qY1Y65F810tO4wWX726P6cp0urI/HaOsUc5qo9AmMMDBCbADTuxcLF55EF
t3QaJyyg9xvea6hmwxECDxFDLerrj0rQZGbjs7k07DmNLIXdI4Wlg6kd0k1BiYBc
jzELFcUiLNElNdsFHdA9/yY7JQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDK7KtSi
y5IU3hKNgZFJNSYDw59NMB8GA1UdIwQYMBaAFHgLW8bOXkaYN63rNoV07UgwSAHL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUE5My9DMDFBRjVGNDE1
QzUxMUVGQUEzMzgyMzZDNEY5QUUwMi9lQXRieHM1ZVJwZzNyZXMyaFhUdFNEQklB
Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VBdGJ4czVlUnBnM3JlczJoWFR0U0RCSUFjcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NUE5My9DMDFBRjVGNDE1QzUxMUVGQUEzMzgyMzZDNEY5QUUwMi9lQXRieHM1ZVJw
ZzNyZXMyaFhUdFNEQklBY3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZkvRKDcB/IpPl7N7CYKIHtbhIApnBENzBEqhjGuRehijU4VtqtckAUtmipq0
VFCtnnDNPmxAsGK+2J5VUrDD9iqPhY6uTqfF9eWMof2vzlr/hUHKaxoPu7kch89P
0Na07thMRuggoPiZuj8goV9aPO13UZlA+RhwUYRqOrR0dVS4PwXq2anCE/Kyph93
gcjUzgH07h5Q7i8j5juHheqeY2G+VpSgOyf5ydVVHvoHd8DVv9KccX10jNwXTDp2
a++RyCFJvqeMaqqwtUXN1fihc1MHzHUsg7fwQOvrtxR2sr6xyW/15j/oPHBc8K2n
nfZvRzRm1DN1ohV87jnrcm8izg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:01:54 2026 by rpki-client