Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.mft
File:                     e8dWLzeFS9JjniQQ1nPld8v7MR8.mft (raw, json)
Hash identifier:          /XW9c/9audcgY/zqLQPKHMvVW9pVUqvkn2OOo3ljx1k=
Subject key identifier:   19:68:1B:B5:59:70:31:6A:09:F5:6B:7B:0E:E9:85:7F:1F:02:5B:6C
Authority key identifier: 7B:C7:56:2F:37:85:4B:D2:63:9E:24:10:D6:73:E5:77:CB:FB:31:1F
Certificate issuer:       /CN=A91C36C2/serialNumber=7BC7562F37854BD2639E2410D673E577CBFB311F
Certificate serial:       FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e8dWLzeFS9JjniQQ1nPld8v7MR8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.mft
Manifest number:          EE
Signing time:             Sun 05 Apr 2026 06:04:26 +0000
Manifest this update:     Sun 05 Apr 2026 06:04:26 +0000
Manifest next update:     Sun 12 Apr 2026 06:04:26 +0000
Files and hashes:         1: e8dWLzeFS9JjniQQ1nPld8v7MR8.crl (hash: Q4GTRyEnWEkBfgkFSIFzkmENhiFldobKVOOW2aWrfY0=)
                          2: 83BE8BCCCB2F11F0B833997FC4F9AE02.roa (hash: XeDob7lDouGN+oftcpyAIScczXGI+rfoOZe4OX4fQIc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.crl
                          rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e8dWLzeFS9JjniQQ1nPld8v7MR8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 06:04:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 255 (0xff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C36C2, serialNumber=7BC7562F37854BD2639E2410D673E577CBFB311F
        Validity
            Not Before: Apr  5 06:04:26 2026 GMT
            Not After : Apr 12 06:04:26 2026 GMT
        Subject: CN=69d1fb6a-1e8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:20:97:c6:e0:a6:8f:e1:5e:6c:2d:4e:34:4b:
                    5f:6e:cf:6a:35:2e:af:94:00:73:f7:e2:6f:86:49:
                    66:48:93:81:2b:52:dc:0e:90:18:00:bb:56:9a:0a:
                    a4:ce:13:ce:92:59:a5:c3:cf:99:7b:54:ae:97:87:
                    2b:a6:03:6b:67:95:b4:9d:70:52:9b:84:64:66:31:
                    b4:57:b2:fe:52:d3:99:ba:94:5d:cc:81:ea:e9:db:
                    64:eb:c8:97:70:fd:cc:f1:4c:02:02:4e:33:66:85:
                    6e:69:9c:64:33:c8:e8:c7:0f:25:a6:c7:96:0e:17:
                    c0:8c:a5:17:aa:3a:87:05:4b:68:2f:ec:0b:24:f9:
                    6a:18:bc:9b:92:f9:6f:cc:17:f7:c8:aa:cb:0d:13:
                    fd:df:ec:15:d5:38:38:d2:23:aa:3f:f6:e6:23:e5:
                    db:f5:5f:c1:1c:55:18:0c:6b:4c:e5:09:99:b7:7e:
                    3b:bd:9a:97:f7:62:95:67:f4:35:cb:3c:60:2b:42:
                    d8:94:82:e6:cc:8b:ea:f5:80:30:4f:76:61:c6:c7:
                    25:e5:3b:5b:9a:8c:7f:1f:84:71:99:d4:a8:cb:bc:
                    3a:f2:7c:cf:b5:9e:73:4f:08:cc:47:d1:73:9a:bf:
                    b7:3c:e0:85:19:c4:27:c7:80:b0:f1:66:32:08:76:
                    9c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:68:1B:B5:59:70:31:6A:09:F5:6B:7B:0E:E9:85:7F:1F:02:5B:6C
            X509v3 Authority Key Identifier:
                keyid:7B:C7:56:2F:37:85:4B:D2:63:9E:24:10:D6:73:E5:77:CB:FB:31:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e8dWLzeFS9JjniQQ1nPld8v7MR8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:d6:1b:a8:2a:fd:04:30:70:fc:e4:67:44:a1:36:71:9a:c7:
         de:21:0d:e6:0a:b1:ce:f7:59:7e:c0:0a:91:bd:cc:66:93:1f:
         c9:44:06:c8:7f:88:0d:5a:3b:b3:ea:99:bf:c1:54:10:c3:c0:
         4c:25:a2:26:fd:87:27:bd:ac:01:f3:e4:00:89:ae:24:91:12:
         4b:7f:f5:81:f9:fa:2c:83:e3:fd:b5:d7:de:b7:6e:bf:b2:dc:
         7b:a8:f5:68:1c:a4:f2:d6:03:61:c4:fe:d5:af:27:62:c3:c6:
         e4:f2:fc:63:20:a2:b8:99:44:b1:e1:e2:05:0a:8f:7a:ec:1e:
         48:1d:89:7a:50:1f:66:80:0e:e0:5e:65:99:ed:1d:eb:c5:17:
         57:50:38:c2:25:c5:ab:f5:60:14:0c:73:6f:55:a1:a8:93:74:
         d3:68:01:7d:e8:ef:ea:3d:9f:58:64:39:3f:78:7f:56:12:a3:
         a8:c8:f8:da:42:33:19:fe:15:2f:cd:66:61:66:49:02:f2:76:
         94:36:5b:38:4a:a1:cd:ac:14:fb:3e:a8:1a:b6:dc:fc:ff:6c:
         0b:bb:61:1d:42:12:0d:59:69:2a:56:34:e6:20:2a:7b:94:cd:
         56:09:46:03:a7:71:38:3b:57:66:26:50:bf:86:ab:66:27:a1:
         c8:bb:85:8a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzM2QzIxMTAvBgNVBAUTKDdCQzc1NjJGMzc4NTRCRDI2MzlFMjQxMEQ2NzNFNTc3
Q0JGQjMxMUYwHhcNMjYwNDA1MDYwNDI2WhcNMjYwNDEyMDYwNDI2WjAYMRYwFAYD
VQQDEw02OWQxZmI2YS0xZThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1yCXxuCmj+FebC1ONEtfbs9qNS6vlABz9+JvhklmSJOBK1LcDpAYALtWmgqk
zhPOklmlw8+Ze1Sul4crpgNrZ5W0nXBSm4RkZjG0V7L+UtOZupRdzIHq6dtk68iX
cP3M8UwCAk4zZoVuaZxkM8joxw8lpseWDhfAjKUXqjqHBUtoL+wLJPlqGLybkvlv
zBf3yKrLDRP93+wV1Tg40iOqP/bmI+Xb9V/BHFUYDGtM5QmZt347vZqX92KVZ/Q1
yzxgK0LYlILmzIvq9YAwT3Zhxscl5Ttbmox/H4RxmdSoy7w68nzPtZ5zTwjMR9Fz
mr+3POCFGcQnx4Cw8WYyCHacvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBloG7VZ
cDFqCfVrew7phX8fAltsMB8GA1UdIwQYMBaAFHvHVi83hUvSY54kENZz5XfL+zEf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzZDMi81MEZCOTA3MEVD
MzkxMUVGODFFMDA5ODZDNEY5QUUwMi9lOGRXTHplRlM5SmpuaVFRMW5QbGQ4djdN
UjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2U4ZFdMemVGUzlKam5pUVExblBsZDh2N01SOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MzZDMi81MEZCOTA3MEVDMzkxMUVGODFFMDA5ODZDNEY5QUUwMi9lOGRXTHplRlM5
SmpuaVFRMW5QbGQ4djdNUjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA2tYbqCr9BDBw/ORnRKE2cZrH3iEN5gqxzvdZfsAKkb3MZpMfyUQGyH+IDVo7
s+qZv8FUEMPATCWiJv2HJ72sAfPkAImuJJESS3/1gfn6LIPj/bXX3rduv7Lce6j1
aByk8tYDYcT+1a8nYsPG5PL8YyCiuJlEseHiBQqPeuweSB2JelAfZoAO4F5lme0d
68UXV1A4wiXFq/VgFAxzb1WhqJN002gBfejv6j2fWGQ5P3h/VhKjqMj42kIzGf4V
L81mYWZJAvJ2lDZbOEqhzawU+z6oGrbc/P9sC7thHUISDVlpKlY05iAqe5TNVglG
A6dxODtXZiZQv4arZiehyLuFig==
-----END CERTIFICATE-----
Generated at Sun Apr 5 19:41:02 2026 by rpki-client