Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft
File:                     ABXboDjLzLFS7RcROqCo1ddIjSE.mft (raw, json)
Hash identifier:          1G2FALWlFABkORMdN4e54YFVZ02Coi4xFXRoP7fPVYw=
Subject key identifier:   67:50:BE:C4:DE:47:A4:44:D8:95:D1:5D:55:9D:B7:30:22:61:33:FF
Authority key identifier: 00:15:DB:A0:38:CB:CC:B1:52:ED:17:11:3A:A0:A8:D5:D7:48:8D:21
Certificate issuer:       /CN=A91CC564/serialNumber=0015DBA038CBCCB152ED17113AA0A8D5D7488D21
Certificate serial:       091D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABXboDjLzLFS7RcROqCo1ddIjSE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft
Manifest number:          0914
Signing time:             Sat 04 Apr 2026 20:04:34 +0000
Manifest this update:     Sat 04 Apr 2026 20:04:33 +0000
Manifest next update:     Sat 11 Apr 2026 20:04:33 +0000
Files and hashes:         1: ABXboDjLzLFS7RcROqCo1ddIjSE.crl (hash: 3byOcj5AnQ8u1L+yQl2fOfMlqUjff2RMGa1Q+Unm11A=)
                          2: 74CCA13ADBE811EA8D063B7DC4F9AE02.roa (hash: Z/q3Sn+bG/2MqO5zayEdrpBR4UkNKUijCjfuQZVUaYw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.crl
                          rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABXboDjLzLFS7RcROqCo1ddIjSE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 20:04:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2333 (0x91d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC564, serialNumber=0015DBA038CBCCB152ED17113AA0A8D5D7488D21
        Validity
            Not Before: Apr  4 20:04:33 2026 GMT
            Not After : Apr 11 20:04:33 2026 GMT
        Subject: CN=69d16ed1-9084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d4:1c:73:85:3e:eb:64:63:9f:2a:30:04:23:
                    b4:8d:26:13:1f:77:d3:93:81:ff:10:2e:13:84:67:
                    e2:b0:86:7f:c6:1f:03:64:68:08:69:0f:d4:c4:91:
                    f0:d6:a1:39:5a:25:99:32:75:82:a8:e5:52:e1:67:
                    24:ff:b6:e9:1a:0f:bf:1e:79:af:34:5e:e8:7d:04:
                    8a:83:3e:e7:fe:34:38:17:a7:de:0d:fe:d8:27:84:
                    f2:ee:54:0b:d6:ab:82:01:81:c0:f3:3c:18:e5:dd:
                    26:26:85:fc:6b:1d:03:a9:94:44:bd:4a:bb:bd:94:
                    09:7a:73:6f:e5:69:39:92:b7:63:20:15:02:b8:a4:
                    79:d8:6f:5d:ce:fc:29:bf:bf:0b:65:4f:ba:04:32:
                    ad:e7:e1:e6:01:72:bb:36:7a:8c:40:e6:61:3a:cd:
                    87:f2:c6:11:8d:43:41:a8:b7:e7:1b:b5:91:dd:1a:
                    1f:f6:8c:df:6f:59:36:e5:f9:60:de:d3:c5:d7:d0:
                    3a:c3:18:d3:72:ab:f9:48:70:e3:0c:ea:83:80:ba:
                    9b:c5:60:7b:80:61:e8:0c:05:4d:d1:79:03:b5:ea:
                    92:ee:d1:a9:ed:3e:99:b1:17:30:38:75:c4:6a:93:
                    e1:06:17:bc:04:96:38:2c:81:50:1c:d0:f9:86:84:
                    4c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:50:BE:C4:DE:47:A4:44:D8:95:D1:5D:55:9D:B7:30:22:61:33:FF
            X509v3 Authority Key Identifier:
                keyid:00:15:DB:A0:38:CB:CC:B1:52:ED:17:11:3A:A0:A8:D5:D7:48:8D:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABXboDjLzLFS7RcROqCo1ddIjSE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:1f:46:b5:d4:00:b9:04:2a:ef:d3:ae:3a:1a:95:1d:23:58:
         e7:93:67:28:4c:60:34:5d:05:c5:72:a4:8c:c7:d1:ff:e1:88:
         ed:7d:06:44:39:0f:77:cd:5e:84:79:b6:84:d0:d6:6a:4d:22:
         31:2b:df:1e:9e:9f:79:7b:77:b6:db:0b:b6:e3:47:e8:50:48:
         67:22:f0:c9:a3:38:3b:fb:d4:05:2b:9a:4f:4b:c6:92:c6:52:
         46:71:81:8e:96:2c:fc:a8:a8:5f:d0:7f:04:0e:af:9a:77:14:
         8a:f9:2b:8c:d1:fe:90:01:76:f2:0b:05:33:72:33:2e:71:e5:
         e5:8f:50:85:ce:b8:c6:c1:bc:40:87:30:54:3d:51:1f:27:64:
         e3:31:73:9b:4a:3d:19:74:47:5c:67:db:4f:02:0b:aa:cf:c1:
         3b:14:1f:59:87:e9:3b:1f:55:2c:5d:f3:71:47:f0:c1:df:7c:
         05:7c:bb:76:8e:b1:4f:47:95:15:cb:6d:3a:cf:e5:7a:23:85:
         b3:31:d6:d0:ea:71:fc:7d:df:0f:56:57:f8:af:62:11:f3:82:
         4a:f9:20:00:04:42:64:56:fd:80:cd:a3:e9:1f:99:15:ff:b5:
         80:71:c3:34:4a:68:5e:76:ea:dd:82:b4:fa:cc:e0:ea:29:2d:
         ae:9d:56:fc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0M1NjQxMTAvBgNVBAUTKDAwMTVEQkEwMzhDQkNDQjE1MkVEMTcxMTNBQTBBOEQ1
RDc0ODhEMjEwHhcNMjYwNDA0MjAwNDMzWhcNMjYwNDExMjAwNDMzWjAYMRYwFAYD
VQQDEw02OWQxNmVkMS05MDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqdQcc4U+62RjnyowBCO0jSYTH3fTk4H/EC4ThGfisIZ/xh8DZGgIaQ/UxJHw
1qE5WiWZMnWCqOVS4Wck/7bpGg+/HnmvNF7ofQSKgz7n/jQ4F6feDf7YJ4Ty7lQL
1quCAYHA8zwY5d0mJoX8ax0DqZREvUq7vZQJenNv5Wk5krdjIBUCuKR52G9dzvwp
v78LZU+6BDKt5+HmAXK7NnqMQOZhOs2H8sYRjUNBqLfnG7WR3Rof9ozfb1k25flg
3tPF19A6wxjTcqv5SHDjDOqDgLqbxWB7gGHoDAVN0XkDteqS7tGp7T6ZsRcwOHXE
apPhBhe8BJY4LIFQHND5hoRMCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGdQvsTe
R6RE2JXRXVWdtzAiYTP/MB8GA1UdIwQYMBaAFAAV26A4y8yxUu0XETqgqNXXSI0h
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzU2NC80RjI5RDBDNEM0
MEYxMUVBOUMxNUI0NzBDNEY5QUUwMi9BQlhib0RqTHpMRlM3UmNST3FDbzFkZElq
U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FCWGJvRGpMekxGUzdSY1JPcUNvMWRkSWpTRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QzU2NC80RjI5RDBDNEM0MEYxMUVBOUMxNUI0NzBDNEY5QUUwMi9BQlhib0RqTHpM
RlM3UmNST3FDbzFkZElqU0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFh9GtdQAuQQq79OuOhqVHSNY55NnKExgNF0FxXKkjMfR/+GI7X0GRDkPd81e
hHm2hNDWak0iMSvfHp6feXt3ttsLtuNH6FBIZyLwyaM4O/vUBSuaT0vGksZSRnGB
jpYs/KioX9B/BA6vmncUivkrjNH+kAF28gsFM3IzLnHl5Y9Qhc64xsG8QIcwVD1R
Hydk4zFzm0o9GXRHXGfbTwILqs/BOxQfWYfpOx9VLF3zcUfwwd98BXy7do6xT0eV
FcttOs/leiOFszHW0Opx/H3fD1ZX+K9iEfOCSvkgAARCZFb9gM2j6R+ZFf+1gHHD
NEpoXnbq3YK0+szg6iktrp1W/A==
-----END CERTIFICATE-----
Generated at Sun Apr 5 20:58:47 2026 by rpki-client