Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft
File:                     Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft (raw, json)
Hash identifier:          pHv5EVfnQz4fUc1Og1guA0VRzt8/uuaTIKCZ//SvYBs=
Subject key identifier:   1C:31:A3:E2:61:F3:29:59:AD:FE:EE:31:5F:67:16:38:C7:50:38:7F
Authority key identifier: 63:59:30:9E:F4:9B:44:5F:6E:B5:33:1B:DF:0A:94:C5:C6:EF:C3:7B
Certificate issuer:       /CN=A91A935D/serialNumber=6359309EF49B445F6EB5331BDF0A94C5C6EFC37B
Certificate serial:       06F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1kwnvSbRF9utTMb3wqUxcbvw3s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft
Manifest number:          06ED
Signing time:             Sat 04 Apr 2026 21:53:30 +0000
Manifest this update:     Sat 04 Apr 2026 21:53:29 +0000
Manifest next update:     Sat 11 Apr 2026 21:53:29 +0000
Files and hashes:         1: Y1kwnvSbRF9utTMb3wqUxcbvw3s.crl (hash: 6I4EC4ldI6Xh3BehtjCOP3bcFUPs6OaQB8twwfKsfJY=)
                          2: 47EB76428ABA11EB8A85C01BC4F9AE02.roa (hash: GddQF0kXZAYcATo7qq+gH7xwi2gME5La/lz+podnzrI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.crl
                          rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1kwnvSbRF9utTMb3wqUxcbvw3s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 21:53:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1783 (0x6f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A935D, serialNumber=6359309EF49B445F6EB5331BDF0A94C5C6EFC37B
        Validity
            Not Before: Apr  4 21:53:29 2026 GMT
            Not After : Apr 11 21:53:29 2026 GMT
        Subject: CN=69d18859-dbec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:3d:fa:a6:a4:43:47:11:26:99:ca:c9:c7:eb:
                    71:2d:d4:74:21:90:64:f6:e3:ca:65:7f:b1:34:65:
                    3c:42:67:b5:ad:5a:4e:43:24:19:7a:fb:bc:bb:c2:
                    18:cc:df:f7:c8:93:e5:8a:20:a7:f4:e8:29:2b:40:
                    c9:67:f1:59:2b:76:d5:2b:9d:ec:d1:73:86:de:c2:
                    95:9c:92:1b:a8:7a:63:50:ed:d3:67:70:39:9c:0a:
                    35:92:8f:18:8f:9e:ce:f2:4b:02:99:c4:20:94:e3:
                    bd:81:8e:fe:a6:9f:24:da:9d:b4:a7:e2:98:2c:ac:
                    5d:32:ff:9a:cc:27:88:75:95:ba:ff:f0:c0:01:27:
                    ff:72:2a:5e:8e:64:ec:0e:2c:4d:26:33:9b:a6:5d:
                    83:e3:a8:c6:d6:a5:29:98:65:45:da:72:88:df:bd:
                    8f:f4:90:67:03:d6:36:94:82:0c:a2:66:15:c8:55:
                    c7:b9:93:93:0f:8d:f3:c2:e6:38:9e:17:7f:73:40:
                    e8:92:79:6f:db:fc:bb:aa:96:d6:4d:3a:eb:44:e9:
                    fc:23:b2:e0:d7:c9:7e:aa:cb:65:d8:48:b2:17:16:
                    38:a9:ac:c7:47:2d:a6:8f:5c:04:43:f6:bc:84:e7:
                    1e:e7:7b:93:57:3f:52:1e:56:c1:2e:fc:98:ba:cd:
                    93:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:31:A3:E2:61:F3:29:59:AD:FE:EE:31:5F:67:16:38:C7:50:38:7F
            X509v3 Authority Key Identifier:
                keyid:63:59:30:9E:F4:9B:44:5F:6E:B5:33:1B:DF:0A:94:C5:C6:EF:C3:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1kwnvSbRF9utTMb3wqUxcbvw3s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:f3:af:22:d6:cd:e4:89:db:9c:c4:7f:9c:6f:56:5b:11:6c:
         45:c4:24:ce:83:06:8d:e4:44:b9:75:74:c4:b3:c1:87:b1:9e:
         43:2f:4b:5c:a2:ea:5d:ae:d4:78:19:c9:6e:1b:8d:13:4e:28:
         e1:2c:81:48:78:82:64:e5:9e:5f:4e:06:12:3f:d2:13:c7:93:
         0e:20:fc:5c:81:6a:e4:fb:93:72:2d:13:66:1f:f2:28:ae:d8:
         47:c3:2a:b3:0f:87:13:ae:17:88:ea:72:12:2b:53:82:b4:8f:
         9a:cb:75:72:0d:c6:fc:c7:ef:88:be:23:5b:ee:41:6a:4e:fd:
         17:ef:6b:6e:b2:d2:30:eb:32:55:ac:56:d4:3d:6d:95:ae:b7:
         93:c0:c2:58:c4:95:ea:35:97:2f:e9:f5:51:d6:2d:11:18:3b:
         81:77:eb:2d:33:68:5b:5e:d6:98:d5:2d:8a:b4:e5:1d:6b:94:
         90:bd:10:11:41:f3:c3:b5:90:f0:04:e9:1f:d9:7e:e0:e9:20:
         d5:df:e4:11:69:4d:88:6e:dd:d4:9f:e4:5e:d0:3a:83:5b:68:
         e1:b6:d7:32:31:3e:25:27:93:07:78:b3:42:76:08:06:59:09:
         37:f3:0a:90:9a:69:10:f5:70:8a:43:e7:55:4b:1b:72:92:b1:
         3f:38:15:f3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBvcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTkzNUQxMTAvBgNVBAUTKDYzNTkzMDlFRjQ5QjQ0NUY2RUI1MzMxQkRGMEE5NEM1
QzZFRkMzN0IwHhcNMjYwNDA0MjE1MzI5WhcNMjYwNDExMjE1MzI5WjAYMRYwFAYD
VQQDEw02OWQxODg1OS1kYmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8z36pqRDRxEmmcrJx+txLdR0IZBk9uPKZX+xNGU8Qme1rVpOQyQZevu8u8IY
zN/3yJPliiCn9OgpK0DJZ/FZK3bVK53s0XOG3sKVnJIbqHpjUO3TZ3A5nAo1ko8Y
j57O8ksCmcQglOO9gY7+pp8k2p20p+KYLKxdMv+azCeIdZW6//DAASf/cipejmTs
DixNJjObpl2D46jG1qUpmGVF2nKI372P9JBnA9Y2lIIMomYVyFXHuZOTD43zwuY4
nhd/c0Doknlv2/y7qpbWTTrrROn8I7Lg18l+qstl2EiyFxY4qazHRy2mj1wEQ/a8
hOce53uTVz9SHlbBLvyYus2TKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBwxo+Jh
8ylZrf7uMV9nFjjHUDh/MB8GA1UdIwQYMBaAFGNZMJ70m0RfbrUzG98KlMXG78N7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTM1RC9GNTAwRjcyODhB
QjgxMUVCODcwN0UxMUFDNEY5QUUwMi9ZMWt3bnZTYlJGOXV0VE1iM3dxVXhjYnZ3
M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1kxa3dudlNiUkY5dXRUTWIzd3FVeGNidnczcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OTM1RC9GNTAwRjcyODhBQjgxMUVCODcwN0UxMUFDNEY5QUUwMi9ZMWt3bnZTYlJG
OXV0VE1iM3dxVXhjYnZ3M3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiPOvItbN5InbnMR/nG9WWxFsRcQkzoMGjeREuXV0xLPBh7GeQy9LXKLqXa7U
eBnJbhuNE04o4SyBSHiCZOWeX04GEj/SE8eTDiD8XIFq5PuTci0TZh/yKK7YR8Mq
sw+HE64XiOpyEitTgrSPmst1cg3G/MfviL4jW+5Bak79F+9rbrLSMOsyVaxW1D1t
la63k8DCWMSV6jWXL+n1UdYtERg7gXfrLTNoW17WmNUtirTlHWuUkL0QEUHzw7WQ
8ATpH9l+4Okg1d/kEWlNiG7d1J/kXtA6g1to4bbXMjE+JSeTB3izQnYIBlkJN/MK
kJppEPVwikPnVUsbcpKxPzgV8w==
-----END CERTIFICATE-----
Generated at Sun Apr 5 19:42:52 2026 by rpki-client