Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft
File:                     L4dzyVEFOxQ4vCfsxV45KvteK7I.mft (raw, json)
Hash identifier:          EsXDW3SlG3k4liBUbofHvrZIfyWMOeSySoHnJQYCn04=
Subject key identifier:   99:00:63:2C:02:1E:DC:66:20:5D:27:0B:4E:32:9E:3A:04:0B:13:D6
Authority key identifier: 2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2
Certificate issuer:       /CN=A91B56F0/serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2
Certificate serial:       0C08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft
Manifest number:          0BE8
Signing time:             Sat 04 Apr 2026 18:43:44 +0000
Manifest this update:     Sat 04 Apr 2026 18:43:43 +0000
Manifest next update:     Sat 11 Apr 2026 18:43:43 +0000
Files and hashes:         1: L4dzyVEFOxQ4vCfsxV45KvteK7I.crl (hash: 2voF+vl46yo3i3eYnH5GWoh4FkmmeOnK6jyvhAYaTU8=)
                          2: 84AC17989B0811EDB5FDAF75C4F9AE02.roa (hash: ZdWgxsTDmp2SCgpKV/pUzjdMnUTtasFIwHsMjvPLzoQ=)
                          3: 60CAF672CAC211F08083F41BC4F9AE02.roa (hash: kq7sx+cXw+m9S0qiyAa+VcKr/WKvuChbXwIbeJRy3rg=)
                          4: F90AE9C413AB11F1B2F915E2033D8C67.roa (hash: qP73CAez9BA/Kxf0LXcrxOa4cBuTk6ek4TGHHpeWEII=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl
                          rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 18:43:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3080 (0xc08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B56F0, serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2
        Validity
            Not Before: Apr  4 18:43:43 2026 GMT
            Not After : Apr 11 18:43:43 2026 GMT
        Subject: CN=69d15be0-51d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c0:d8:94:1d:18:3b:f9:9a:52:a1:87:7f:8d:
                    6b:51:df:8f:06:b3:16:ff:24:7a:9a:6f:68:fa:db:
                    34:ba:be:f6:4e:66:81:31:5b:ff:7e:3e:d5:55:1d:
                    99:eb:6b:3d:37:56:dc:ee:d2:8a:49:4c:33:e4:82:
                    dd:31:0b:7c:69:06:fd:4e:9c:ed:1d:13:00:7b:f0:
                    bb:f3:85:c0:23:a9:ad:c6:bb:39:8d:84:e8:a7:23:
                    d2:20:82:48:95:ef:41:03:bc:7e:be:de:6b:ca:9c:
                    fe:b3:ce:9f:7d:dd:a0:d8:ef:f7:33:28:af:4e:6f:
                    65:07:87:63:e4:2a:86:c1:d3:45:06:0d:42:0f:bd:
                    2e:ff:43:36:78:7c:73:c0:e1:4d:d0:42:10:ca:03:
                    46:c4:e3:7d:b1:08:91:57:b4:7e:85:c3:59:d1:85:
                    f6:f2:5a:53:2e:a5:ff:91:d1:49:90:66:83:a9:31:
                    f9:71:9c:4a:06:fc:80:05:47:48:a0:63:8a:ca:ff:
                    dc:fc:cc:65:62:97:17:ff:d2:1c:44:fc:44:fc:73:
                    50:ef:25:76:b1:e7:12:66:37:36:a3:65:50:67:61:
                    20:9a:e6:78:fb:b4:7e:0c:60:b3:cd:fc:a9:67:91:
                    e9:64:d6:aa:41:25:bb:ac:04:48:01:0b:65:7c:16:
                    e8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:00:63:2C:02:1E:DC:66:20:5D:27:0B:4E:32:9E:3A:04:0B:13:D6
            X509v3 Authority Key Identifier:
                keyid:2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:04:f8:d2:b1:62:46:d5:77:45:0d:e2:03:54:65:15:05:1b:
         60:04:96:b9:e0:70:14:ce:0f:c6:68:5f:0c:2b:06:be:f1:54:
         4a:ed:1a:c3:5e:03:d4:74:11:99:92:2c:86:b4:32:66:c6:e2:
         59:bd:76:d7:b6:53:35:cf:6a:1a:d3:9f:1e:f4:b2:18:52:ee:
         a1:e8:d4:38:b8:b8:50:3f:f1:d6:f9:33:ba:cf:60:05:1d:de:
         df:17:9b:bc:4d:ba:d9:06:d0:cb:73:5c:41:8a:0d:49:0f:08:
         13:bd:61:2b:88:2f:a3:57:8a:30:c1:64:5d:f9:8b:9b:eb:de:
         59:07:15:57:cf:4a:54:92:b6:f1:19:f9:7e:66:31:27:16:35:
         a7:29:ad:9c:b6:9e:48:29:cf:f1:ba:f5:06:96:f4:97:6d:c0:
         fc:79:91:38:13:23:ba:24:97:53:a4:a3:7f:33:c9:e4:7d:72:
         7b:76:e5:b7:f3:a5:98:35:cd:ec:02:db:80:96:3b:9f:7d:77:
         94:ad:7c:67:07:46:22:a6:5a:38:48:bd:60:fd:4e:7e:fa:48:
         14:c4:fa:8d:82:96:7c:b4:60:5f:f5:7d:f3:73:02:8f:3c:b1:
         e7:4f:bb:47:03:01:be:af:ee:41:9c:88:bb:21:22:7c:3a:e2:
         a7:38:2e:68
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDAgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjU2RjAxMTAvBgNVBAUTKDJGODc3M0M5NTEwNTNCMTQzOEJDMjdFQ0M1NUUzOTJB
RkI1RTJCQjIwHhcNMjYwNDA0MTg0MzQzWhcNMjYwNDExMTg0MzQzWjAYMRYwFAYD
VQQDEw02OWQxNWJlMC01MWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo8DYlB0YO/maUqGHf41rUd+PBrMW/yR6mm9o+ts0ur72TmaBMVv/fj7VVR2Z
62s9N1bc7tKKSUwz5ILdMQt8aQb9TpztHRMAe/C784XAI6mtxrs5jYTopyPSIIJI
le9BA7x+vt5rypz+s86ffd2g2O/3MyivTm9lB4dj5CqGwdNFBg1CD70u/0M2eHxz
wOFN0EIQygNGxON9sQiRV7R+hcNZ0YX28lpTLqX/kdFJkGaDqTH5cZxKBvyABUdI
oGOKyv/c/MxlYpcX/9IcRPxE/HNQ7yV2secSZjc2o2VQZ2EgmuZ4+7R+DGCzzfyp
Z5HpZNaqQSW7rARIAQtlfBboRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJkAYywC
HtxmIF0nC04ynjoECxPWMB8GA1UdIwQYMBaAFC+Hc8lRBTsUOLwn7MVeOSr7Xiuy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTZGMC83RDY3RTRENDM4
NEMxMUVBQkVBMkRCNzFDNEY5QUUwMi9MNGR6eVZFRk94UTR2Q2ZzeFY0NUt2dGVL
N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0w0ZHp5VkVGT3hRNHZDZnN4VjQ1S3Z0ZUs3SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NTZGMC83RDY3RTRENDM4NEMxMUVBQkVBMkRCNzFDNEY5QUUwMi9MNGR6eVZFRk94
UTR2Q2ZzeFY0NUt2dGVLN0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEAT40rFiRtV3RQ3iA1RlFQUbYASWueBwFM4PxmhfDCsGvvFUSu0aw14D1HQR
mZIshrQyZsbiWb1217ZTNc9qGtOfHvSyGFLuoejUOLi4UD/x1vkzus9gBR3e3xeb
vE262QbQy3NcQYoNSQ8IE71hK4gvo1eKMMFkXfmLm+veWQcVV89KVJK28Rn5fmYx
JxY1pymtnLaeSCnP8br1Bpb0l23A/HmROBMjuiSXU6SjfzPJ5H1ye3blt/OlmDXN
7ALbgJY7n313lK18ZwdGIqZaOEi9YP1OfvpIFMT6jYKWfLRgX/V983MCjzyx50+7
RwMBvq/uQZyIuyEifDripzguaA==
-----END CERTIFICATE-----
Generated at Sun Apr 5 19:41:21 2026 by rpki-client