Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft
File:                     PoReqE4RAwvCoQYTCJefeYoSET8.mft (raw, json)
Hash identifier:          PYrEX/YDXIUA41f+HUOVTS0QiWSWqJ3AKqmx7tTQFd8=
Subject key identifier:   F4:5F:7A:DB:CD:5E:1E:42:B8:47:30:8B:1D:E9:49:CC:42:E1:D8:2F
Authority key identifier: 3E:84:5E:A8:4E:11:03:0B:C2:A1:06:13:08:97:9F:79:8A:12:11:3F
Certificate issuer:       /CN=A91A6BF5/serialNumber=3E845EA84E11030BC2A1061308979F798A12113F
Certificate serial:       0CA4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PoReqE4RAwvCoQYTCJefeYoSET8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft
Manifest number:          0C99
Signing time:             Sat 04 Apr 2026 18:22:20 +0000
Manifest this update:     Sat 04 Apr 2026 18:22:20 +0000
Manifest next update:     Sat 11 Apr 2026 18:22:20 +0000
Files and hashes:         1: PoReqE4RAwvCoQYTCJefeYoSET8.crl (hash: yqhLqrJdDPg1uMx+lKLVN7vUcwTbyR+M/ATm+GRyhsM=)
                          2: 03EE880413F511EA8D120C65C4F9AE02.roa (hash: 2QGfkxbn7M0/GCnbZiSq9uZzzvvClpW7C4zygip+ABU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.crl
                          rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PoReqE4RAwvCoQYTCJefeYoSET8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 18:22:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3236 (0xca4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6BF5, serialNumber=3E845EA84E11030BC2A1061308979F798A12113F
        Validity
            Not Before: Apr  4 18:22:20 2026 GMT
            Not After : Apr 11 18:22:20 2026 GMT
        Subject: CN=69d156dc-f3c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:25:5b:72:30:84:ec:25:1d:aa:d9:4b:cb:e7:
                    32:c0:72:17:c1:b8:f0:ef:ac:94:b4:d1:bc:84:4e:
                    bf:6d:1f:31:0c:e8:80:aa:10:85:2a:b5:9e:5f:4c:
                    3c:0a:38:c9:3e:75:10:11:83:9d:bf:09:8f:b6:71:
                    94:99:12:17:63:c3:36:92:52:cb:5b:8b:55:38:35:
                    a5:75:df:08:1f:6c:ad:f9:7d:ca:a1:8e:ed:9b:1a:
                    a3:f9:26:7c:13:83:90:57:fd:9f:84:b7:00:1f:36:
                    59:dd:d6:68:38:51:bd:48:72:b6:ab:76:9d:64:a9:
                    53:62:98:df:fc:66:48:32:ba:35:74:30:e9:d5:58:
                    85:d7:d6:92:5d:c6:1d:d5:80:db:62:d3:ed:1e:31:
                    56:1e:35:61:f2:84:b2:68:c6:74:8d:68:52:2a:c3:
                    c5:c6:60:ba:cd:4f:d9:e2:e2:57:79:64:5a:3f:74:
                    f8:3b:6c:16:66:65:34:90:ce:16:df:49:c7:ae:71:
                    af:33:11:f2:24:d2:c3:fa:6d:ce:ca:b1:98:47:55:
                    1d:6a:2a:0e:a6:90:1a:d9:ab:0e:1d:0f:b7:fc:4c:
                    05:12:d9:65:0a:7d:cd:b1:ad:52:a9:44:7e:b4:0b:
                    22:94:26:26:0d:5f:0c:70:1c:f0:00:43:07:b9:4c:
                    be:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:5F:7A:DB:CD:5E:1E:42:B8:47:30:8B:1D:E9:49:CC:42:E1:D8:2F
            X509v3 Authority Key Identifier:
                keyid:3E:84:5E:A8:4E:11:03:0B:C2:A1:06:13:08:97:9F:79:8A:12:11:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PoReqE4RAwvCoQYTCJefeYoSET8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:5d:2e:2a:56:7f:b2:e1:a9:80:05:c9:fb:cc:c5:ea:e7:30:
         ed:cc:58:66:3c:79:60:4d:07:fe:de:f8:27:b9:da:09:c5:de:
         2a:9e:b5:e8:f6:37:ac:5d:72:9a:67:e5:45:e8:17:ae:88:58:
         71:45:f4:41:4f:4f:5a:a9:fc:81:d3:73:91:92:2d:57:23:7a:
         fe:c0:b7:40:24:d1:46:d2:ed:7e:d1:a8:14:e4:5a:ff:07:35:
         09:08:b6:59:30:d4:d8:39:02:ab:12:97:36:47:15:1d:50:53:
         47:10:77:e6:19:f6:2a:1a:d2:d0:f5:60:fb:6a:f0:39:a9:d8:
         c2:83:1e:2b:65:d4:af:b0:5c:07:08:d8:1c:e6:ac:b1:43:d2:
         63:2a:6b:a5:1b:27:18:1f:58:60:2b:5d:58:e3:2a:f6:49:05:
         39:95:39:17:bf:d7:1f:d9:c0:e9:57:24:cf:7a:7e:7e:96:19:
         fb:58:5b:58:92:fd:88:32:75:5e:a5:db:ee:0f:1b:8f:da:b2:
         9a:f6:f1:67:ca:ee:6e:43:8e:a8:36:fb:01:6a:72:ac:db:c3:
         37:6c:99:53:33:24:d0:a8:70:02:64:9d:70:f1:df:59:e0:85:
         5a:e1:88:ef:10:08:87:83:00:16:e5:76:ec:23:b9:c0:fc:50:
         7b:1f:a7:e3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTZCRjUxMTAvBgNVBAUTKDNFODQ1RUE4NEUxMTAzMEJDMkExMDYxMzA4OTc5Rjc5
OEExMjExM0YwHhcNMjYwNDA0MTgyMjIwWhcNMjYwNDExMTgyMjIwWjAYMRYwFAYD
VQQDEw02OWQxNTZkYy1mM2MzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAviVbcjCE7CUdqtlLy+cywHIXwbjw76yUtNG8hE6/bR8xDOiAqhCFKrWeX0w8
CjjJPnUQEYOdvwmPtnGUmRIXY8M2klLLW4tVODWldd8IH2yt+X3KoY7tmxqj+SZ8
E4OQV/2fhLcAHzZZ3dZoOFG9SHK2q3adZKlTYpjf/GZIMro1dDDp1ViF19aSXcYd
1YDbYtPtHjFWHjVh8oSyaMZ0jWhSKsPFxmC6zU/Z4uJXeWRaP3T4O2wWZmU0kM4W
30nHrnGvMxHyJNLD+m3OyrGYR1UdaioOppAa2asOHQ+3/EwFEtllCn3Nsa1SqUR+
tAsilCYmDV8McBzwAEMHuUy+NQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPRfetvN
Xh5CuEcwix3pScxC4dgvMB8GA1UdIwQYMBaAFD6EXqhOEQMLwqEGEwiXn3mKEhE/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkJGNS85RDBCNDIyMjEz
RjMxMUVBODBCMzc0NUZDNEY5QUUwMi9Qb1JlcUU0UkF3dkNvUVlUQ0plZmVZb1NF
VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BvUmVxRTRSQXd2Q29RWVRDSmVmZVlvU0VUOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NkJGNS85RDBCNDIyMjEzRjMxMUVBODBCMzc0NUZDNEY5QUUwMi9Qb1JlcUU0UkF3
dkNvUVlUQ0plZmVZb1NFVDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAf10uKlZ/suGpgAXJ+8zF6ucw7cxYZjx5YE0H/t74J7naCcXeKp616PY3rF1y
mmflRegXrohYcUX0QU9PWqn8gdNzkZItVyN6/sC3QCTRRtLtftGoFORa/wc1CQi2
WTDU2DkCqxKXNkcVHVBTRxB35hn2KhrS0PVg+2rwOanYwoMeK2XUr7BcBwjYHOas
sUPSYyprpRsnGB9YYCtdWOMq9kkFOZU5F7/XH9nA6Vckz3p+fpYZ+1hbWJL9iDJ1
XqXb7g8bj9qymvbxZ8rubkOOqDb7AWpyrNvDN2yZUzMk0KhwAmSdcPHfWeCFWuGI
7xAIh4MAFuV27CO5wPxQex+n4w==
-----END CERTIFICATE-----
Generated at Sun Apr 5 19:43:08 2026 by rpki-client