Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.mft
File:                     7MBefFuSR4uMxDst35ql9slCnyE.mft (raw, json)
Hash identifier:          zejQM/8ia6gceqL5xAc3IeRTzvtPI0kE9X8J0w2u2CE=
Subject key identifier:   2B:00:F1:1F:65:1D:04:7C:F5:E1:74:C5:23:A3:12:9A:98:48:35:00
Authority key identifier: EC:C0:5E:7C:5B:92:47:8B:8C:C4:3B:2D:DF:9A:A5:F6:C9:42:9F:21
Certificate issuer:       /CN=A9190D0D/serialNumber=ECC05E7C5B92478B8CC43B2DDF9AA5F6C9429F21
Certificate serial:       0BCC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MBefFuSR4uMxDst35ql9slCnyE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.mft
Manifest number:          0BA1
Signing time:             Sat 04 Apr 2026 18:55:47 +0000
Manifest this update:     Sat 04 Apr 2026 18:55:47 +0000
Manifest next update:     Sat 11 Apr 2026 18:55:47 +0000
Files and hashes:         1: 7MBefFuSR4uMxDst35ql9slCnyE.crl (hash: txfTlRol7r1Py6OyZxDhLmmUPV7ITCPF17OObzqDTVc=)
                          2: 81B5E70C18B511F1AC11CD310A3D8C67.roa (hash: 5Ie3ZIxlQpY2pGzYYtHErJYraDQp8xSopPGehYawBBk=)
                          3: B7F0310EBCB911F08FEDBF33C4F9AE02.roa (hash: iBHWKuOva34+z/8UqtOgV0qkI2D/34heB6aVlSgkcj4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.crl
                          rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MBefFuSR4uMxDst35ql9slCnyE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 18:55:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3020 (0xbcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190D0D, serialNumber=ECC05E7C5B92478B8CC43B2DDF9AA5F6C9429F21
        Validity
            Not Before: Apr  4 18:55:47 2026 GMT
            Not After : Apr 11 18:55:47 2026 GMT
        Subject: CN=69d15eb3-9847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cb:63:a7:bf:a6:c2:6c:34:bb:a1:18:bb:b3:
                    cd:64:2b:12:45:eb:f2:64:2a:0a:65:70:6f:3e:13:
                    8d:8c:e4:fa:27:c4:d8:a3:bf:f8:ba:ff:62:8f:65:
                    e7:10:ac:db:bd:b4:ef:a2:92:1f:ca:5d:4e:9c:b5:
                    9a:bb:4b:68:30:a9:77:f9:20:2e:d3:b4:29:ba:8c:
                    79:8d:9d:e7:9a:70:92:80:95:10:ff:ca:62:94:1d:
                    39:3c:9f:4e:51:ea:19:f2:21:11:1e:59:92:18:52:
                    14:2b:bb:47:23:93:3f:85:41:b7:12:26:16:41:cf:
                    20:76:f4:a9:a7:5f:91:67:c7:1b:d6:20:83:6d:45:
                    21:b6:fc:17:24:07:44:08:aa:63:8d:e4:d2:13:1f:
                    4b:53:5b:2e:4e:9c:eb:d3:c3:87:2e:9b:96:70:79:
                    47:00:08:da:33:fb:7e:af:f3:79:7c:57:07:07:9d:
                    0a:51:ef:6c:d5:3a:98:c3:53:db:58:4c:d9:c6:8a:
                    b3:5d:33:3d:a9:11:c9:97:03:59:d8:4b:09:34:05:
                    9a:e5:5c:9f:ab:32:79:25:db:89:fd:b7:92:7e:66:
                    08:fd:d8:e8:61:69:35:d1:42:20:88:c2:14:14:a4:
                    27:8c:6f:4f:0d:6f:ef:cf:23:75:2b:62:b6:4a:84:
                    99:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:00:F1:1F:65:1D:04:7C:F5:E1:74:C5:23:A3:12:9A:98:48:35:00
            X509v3 Authority Key Identifier:
                keyid:EC:C0:5E:7C:5B:92:47:8B:8C:C4:3B:2D:DF:9A:A5:F6:C9:42:9F:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MBefFuSR4uMxDst35ql9slCnyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:73:fe:c7:cf:f6:5b:c5:6d:62:c3:37:9e:a2:54:73:16:3c:
         e7:40:65:69:f5:b3:22:96:d7:52:c5:fd:72:22:23:b0:5c:aa:
         e7:52:b5:a0:d8:de:1e:a4:49:97:eb:e0:e4:9f:a3:88:db:81:
         6c:fa:72:ed:4e:d2:7b:97:5b:46:47:07:32:1d:bb:f0:2b:5a:
         3a:cb:02:78:54:12:f7:41:39:cf:e4:05:68:27:72:46:87:22:
         6d:a1:5e:bb:cf:93:a7:57:f9:ee:fa:bf:4b:7a:93:a1:3f:64:
         f3:51:67:d3:8f:f8:54:9c:03:2f:73:59:db:4d:eb:51:3f:5f:
         7d:24:5a:0f:27:82:9f:c8:15:03:20:cf:36:63:23:7e:09:46:
         6b:05:10:d6:48:f1:82:b6:f6:d4:0d:78:2e:6d:19:8e:33:92:
         05:63:d5:c9:d4:ce:bd:1f:a5:c4:63:b3:60:8c:59:36:18:b8:
         b9:ab:dc:cc:d5:35:00:21:32:60:9b:61:ea:cf:cc:e8:0a:7f:
         77:21:40:d9:17:a8:91:68:1f:a9:25:a2:7b:98:83:22:7c:ce:
         9b:c5:78:62:ee:56:d9:95:be:98:10:3c:52:1a:7a:f5:08:4a:
         76:ff:56:99:b0:83:11:51:de:98:88:12:a6:ed:a4:71:28:f6:
         a2:29:55:c3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTBEMEQxMTAvBgNVBAUTKEVDQzA1RTdDNUI5MjQ3OEI4Q0M0M0IyRERGOUFBNUY2
Qzk0MjlGMjEwHhcNMjYwNDA0MTg1NTQ3WhcNMjYwNDExMTg1NTQ3WjAYMRYwFAYD
VQQDEw02OWQxNWViMy05ODQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqMtjp7+mwmw0u6EYu7PNZCsSRevyZCoKZXBvPhONjOT6J8TYo7/4uv9ij2Xn
EKzbvbTvopIfyl1OnLWau0toMKl3+SAu07Qpuox5jZ3nmnCSgJUQ/8pilB05PJ9O
UeoZ8iERHlmSGFIUK7tHI5M/hUG3EiYWQc8gdvSpp1+RZ8cb1iCDbUUhtvwXJAdE
CKpjjeTSEx9LU1suTpzr08OHLpuWcHlHAAjaM/t+r/N5fFcHB50KUe9s1TqYw1Pb
WEzZxoqzXTM9qRHJlwNZ2EsJNAWa5VyfqzJ5JduJ/beSfmYI/djoYWk10UIgiMIU
FKQnjG9PDW/vzyN1K2K2SoSZDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCsA8R9l
HQR89eF0xSOjEpqYSDUAMB8GA1UdIwQYMBaAFOzAXnxbkkeLjMQ7Ld+apfbJQp8h
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEQwRC9GMDM3QkQwODQ3
NjYxMUVBQUJCMTFBNjVDNEY5QUUwMi83TUJlZkZ1U1I0dU14RHN0MzVxbDlzbENu
eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdNQmVmRnVTUjR1TXhEc3QzNXFsOXNsQ255RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MEQwRC9GMDM3QkQwODQ3NjYxMUVBQUJCMTFBNjVDNEY5QUUwMi83TUJlZkZ1U1I0
dU14RHN0MzVxbDlzbENueUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANHP+x8/2W8VtYsM3nqJUcxY850BlafWzIpbXUsX9ciIjsFyq51K1oNjeHqRJ
l+vg5J+jiNuBbPpy7U7Se5dbRkcHMh278CtaOssCeFQS90E5z+QFaCdyRocibaFe
u8+Tp1f57vq/S3qToT9k81Fn04/4VJwDL3NZ203rUT9ffSRaDyeCn8gVAyDPNmMj
fglGawUQ1kjxgrb21A14Lm0ZjjOSBWPVydTOvR+lxGOzYIxZNhi4uavczNU1ACEy
YJth6s/M6Ap/dyFA2ReokWgfqSWie5iDInzOm8V4Yu5W2ZW+mBA8Uhp69QhKdv9W
mbCDEVHemIgSpu2kcSj2oilVww==
-----END CERTIFICATE-----
Generated at Sun Apr 5 19:42:58 2026 by rpki-client