Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft
File:                     0Eyx4nFXho90821weRXZ1_CXyQg.mft (raw, json)
Hash identifier:          RVuCrOSeGl6VI4YeOYqvumrd7Rk9vAdjpOLN2T1Engg=
Subject key identifier:   DB:E4:2F:93:0A:0D:63:5D:CD:F7:8B:45:60:87:EE:12:32:EA:01:D6
Authority key identifier: D0:4C:B1:E2:71:57:86:8F:74:F3:6D:70:79:15:D9:D7:F0:97:C9:08
Certificate issuer:       /CN=A91D5AA8/serialNumber=D04CB1E27157868F74F36D707915D9D7F097C908
Certificate serial:       0294
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft
Manifest number:          0289
Signing time:             Sat 13 Jun 2026 01:55:28 +0000
Manifest this update:     Sat 13 Jun 2026 01:55:27 +0000
Manifest next update:     Sat 20 Jun 2026 01:55:27 +0000
Files and hashes:         1: 0Eyx4nFXho90821weRXZ1_CXyQg.crl (hash: UL8jrxpUqMX/GuZ8wX6KfJB5aX6UEaGRP1SdtwtWLoE=)
                          2: 994AC0903E1E11EFB5BBDD3BC4F9AE02.roa (hash: kbZVkD6jRKFqNBUgIZMNtq7Y+KDfzPzcA1djWWgpFT4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.crl
                          rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 01:55:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 660 (0x294)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5AA8, serialNumber=D04CB1E27157868F74F36D707915D9D7F097C908
        Validity
            Not Before: Jun 13 01:55:27 2026 GMT
            Not After : Jun 20 01:55:27 2026 GMT
        Subject: CN=6a2cb88f-9db3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fe:06:08:6f:4e:2e:43:b2:3d:d6:e1:ab:3d:
                    75:9d:28:3f:e6:d0:c3:89:e0:7a:bf:3c:90:b5:bf:
                    9b:bd:7f:df:0d:7f:8e:7c:b9:fc:d4:7b:aa:5f:08:
                    b2:2c:5a:20:33:9e:87:3d:20:6b:c8:80:6f:fd:cf:
                    09:85:5b:57:da:84:51:35:62:01:e0:da:66:32:17:
                    a8:7d:59:2c:c2:92:ab:b6:34:7f:fb:f9:2d:44:51:
                    d6:c0:32:71:8b:be:89:d4:a1:3a:15:30:4c:03:b1:
                    89:a0:84:c7:6c:0b:bc:f2:a3:ed:65:ec:37:e6:0a:
                    85:18:fa:f1:97:5b:2c:16:20:29:42:e6:81:6a:88:
                    18:cc:8c:04:36:b0:71:7f:bb:e7:c2:9c:a7:0d:8a:
                    06:d8:33:8a:19:97:0c:49:7c:b9:f7:8a:e0:f7:8c:
                    0f:69:0b:ab:05:c7:15:b5:f8:47:df:8d:1f:bc:36:
                    2c:5b:b0:99:38:9e:68:66:63:4a:65:ff:d6:28:ef:
                    94:d4:13:e5:54:69:13:3f:bf:58:fa:a2:77:74:6d:
                    26:fc:24:26:ae:68:28:b7:d3:cc:95:88:21:58:73:
                    ee:db:c3:09:a1:6f:ab:f3:72:43:50:84:82:d1:59:
                    bd:df:b1:62:2d:eb:ac:bf:20:3e:77:6d:3f:87:42:
                    0f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E4:2F:93:0A:0D:63:5D:CD:F7:8B:45:60:87:EE:12:32:EA:01:D6
            X509v3 Authority Key Identifier:
                keyid:D0:4C:B1:E2:71:57:86:8F:74:F3:6D:70:79:15:D9:D7:F0:97:C9:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:79:cd:f7:e0:13:dc:58:ef:2b:94:64:ba:d0:f6:a4:34:03:
         d2:c3:c6:5c:84:c4:d2:f3:a8:fa:a5:d3:d8:b6:95:30:4a:14:
         fc:3e:81:3b:88:92:df:5b:e2:52:8a:72:6a:d7:cf:a9:91:28:
         12:30:b4:3b:88:36:5f:13:d2:d2:21:9d:8e:ca:ea:da:a6:4c:
         e2:eb:fb:e7:c6:20:61:03:12:78:a2:5c:fd:0b:1b:5a:f2:c9:
         af:6d:1d:af:ab:c7:01:1b:cc:71:30:cd:b7:20:51:c8:b5:0e:
         30:59:18:b5:9c:e7:5c:ce:db:c5:07:ef:83:cc:4f:a1:5e:13:
         7e:73:80:5a:a6:da:3b:63:ef:fd:6e:c9:01:5c:a9:63:7f:45:
         f7:fb:7e:6d:75:5d:6d:b3:0f:fd:14:97:e3:d9:4d:84:9a:c3:
         93:0b:c6:d6:16:51:3a:f6:be:c8:76:67:d5:43:0f:cc:82:ee:
         10:30:2d:3e:0a:0c:97:7f:d5:6a:26:91:c6:66:ed:ef:57:bd:
         52:cf:e9:22:15:34:c3:47:9e:2b:80:0d:a0:aa:6c:91:5b:e1:
         1a:28:6e:73:33:a6:c4:db:d7:be:38:69:8f:b6:05:bb:7b:fe:
         77:ee:2f:62:17:80:49:32:87:d1:d6:5b:60:e6:f0:b9:ea:e9:
         be:e2:2d:95
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICApQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDVBQTgxMTAvBgNVBAUTKEQwNENCMUUyNzE1Nzg2OEY3NEYzNkQ3MDc5MTVEOUQ3
RjA5N0M5MDgwHhcNMjYwNjEzMDE1NTI3WhcNMjYwNjIwMDE1NTI3WjAYMRYwFAYD
VQQDEw02YTJjYjg4Zi05ZGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzP4GCG9OLkOyPdbhqz11nSg/5tDDieB6vzyQtb+bvX/fDX+OfLn81HuqXwiy
LFogM56HPSBryIBv/c8JhVtX2oRRNWIB4NpmMheofVkswpKrtjR/+/ktRFHWwDJx
i76J1KE6FTBMA7GJoITHbAu88qPtZew35gqFGPrxl1ssFiApQuaBaogYzIwENrBx
f7vnwpynDYoG2DOKGZcMSXy594rg94wPaQurBccVtfhH340fvDYsW7CZOJ5oZmNK
Zf/WKO+U1BPlVGkTP79Y+qJ3dG0m/CQmrmgot9PMlYghWHPu28MJoW+r83JDUISC
0Vm937FiLeusvyA+d20/h0IP0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNvkL5MK
DWNdzfeLRWCH7hIy6gHWMB8GA1UdIwQYMBaAFNBMseJxV4aPdPNtcHkV2dfwl8kI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUFBOC8yNzg1OTkxMjkx
RUYxMUVEQjA2QkFEMUZDNEY5QUUwMi8wRXl4NG5GWGhvOTA4MjF3ZVJYWjFfQ1h5
UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBFeXg0bkZYaG85MDgyMXdlUlhaMV9DWHlRZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NUFBOC8yNzg1OTkxMjkxRUYxMUVEQjA2QkFEMUZDNEY5QUUwMi8wRXl4NG5GWGhv
OTA4MjF3ZVJYWjFfQ1h5UWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhXnN9+AT3FjvK5RkutD2pDQD0sPGXITE0vOo+qXT2LaVMEoU/D6BO4iS31vi
UopyatfPqZEoEjC0O4g2XxPS0iGdjsrq2qZM4uv758YgYQMSeKJc/QsbWvLJr20d
r6vHARvMcTDNtyBRyLUOMFkYtZznXM7bxQfvg8xPoV4TfnOAWqbaO2Pv/W7JAVyp
Y39F9/t+bXVdbbMP/RSX49lNhJrDkwvG1hZROva+yHZn1UMPzILuEDAtPgoMl3/V
aiaRxmbt71e9Us/pIhU0w0eeK4ANoKpskVvhGihuczOmxNvXvjhpj7YFu3v+d+4v
YheASTKH0dZbYObwuerpvuItlQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:32:52 2026 by rpki-client