Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft
File:                     pOaGeeZ7phon9Pib0JKu5cH3ITk.mft (raw, json)
Hash identifier:          IQ23O37RfWfOL4VzF8crZJLMfk6fpRv1Uc6sZ+Kyx7Q=
Subject key identifier:   30:BE:4A:10:6D:04:1C:5F:F5:74:F6:89:DF:6C:D2:95:80:A8:52:E0
Authority key identifier: A4:E6:86:79:E6:7B:A6:1A:27:F4:F8:9B:D0:92:AE:E5:C1:F7:21:39
Certificate issuer:       /CN=A91E1B48/serialNumber=A4E68679E67BA61A27F4F89BD092AEE5C1F72139
Certificate serial:       0119
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft
Manifest number:          0111
Signing time:             Sun 05 Apr 2026 05:21:36 +0000
Manifest this update:     Sun 05 Apr 2026 05:21:35 +0000
Manifest next update:     Sun 12 Apr 2026 05:21:35 +0000
Files and hashes:         1: pOaGeeZ7phon9Pib0JKu5cH3ITk.crl (hash: zLfNSHXYn+1Pva8qX3H/hGooSca/uaRxiizfdcE/noM=)
                          2: FB03B42C927411EF870E655AC4F9AE02.roa (hash: IoNbkBQReyDzJViXMom8CAS5Le63oVygKwA1bc/GSEM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.crl
                          rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:21:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 281 (0x119)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1B48, serialNumber=A4E68679E67BA61A27F4F89BD092AEE5C1F72139
        Validity
            Not Before: Apr  5 05:21:35 2026 GMT
            Not After : Apr 12 05:21:35 2026 GMT
        Subject: CN=69d1f160-b3d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:82:7b:ee:39:b4:c7:a1:21:fe:11:4d:3b:0c:
                    ae:74:20:9f:74:86:de:7d:40:1f:ec:c3:31:d9:0a:
                    4c:18:2f:ac:19:a5:c7:cf:1e:88:98:7d:04:c7:da:
                    87:84:91:8c:8f:9c:c0:02:9a:2a:c2:e9:6e:4c:6e:
                    71:7a:0e:0c:29:37:f5:ac:eb:69:7c:d9:34:88:c2:
                    a3:4b:24:25:5b:a1:05:b8:73:46:96:5a:18:9e:2d:
                    0c:43:84:4b:b7:7f:61:18:b9:5f:ae:ff:1f:03:62:
                    92:b4:46:e3:04:46:dd:8f:2f:ce:4c:70:69:d1:7a:
                    08:14:f1:59:88:7b:39:ea:ad:70:16:87:b0:d9:81:
                    9c:d9:65:47:62:71:fe:e1:55:44:ac:be:8b:09:05:
                    dc:18:ea:71:f3:a5:b8:7f:81:80:a2:ce:93:e2:40:
                    f8:0d:f1:e2:34:54:49:f7:85:b0:48:1b:a4:d9:44:
                    b4:0f:1f:e6:e2:5c:f5:13:07:0b:92:f9:c6:6a:93:
                    9f:b6:e8:ba:5d:95:5e:8f:da:43:f1:b7:6a:24:f7:
                    11:67:3f:1d:e9:ce:15:00:ea:e3:76:a4:62:b7:ba:
                    2e:72:ae:21:4f:d6:10:8b:2a:04:42:bc:3a:f4:75:
                    39:e6:ff:8b:a2:a2:09:5b:ed:cc:e6:f4:4b:49:de:
                    e7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:BE:4A:10:6D:04:1C:5F:F5:74:F6:89:DF:6C:D2:95:80:A8:52:E0
            X509v3 Authority Key Identifier:
                keyid:A4:E6:86:79:E6:7B:A6:1A:27:F4:F8:9B:D0:92:AE:E5:C1:F7:21:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:3a:73:5b:90:5d:07:76:38:eb:d3:f1:58:b9:e8:07:bc:c5:
         8f:64:83:06:4f:67:6b:1f:55:de:0b:ed:5a:0e:c1:41:3a:18:
         a5:b8:97:be:22:82:86:ad:3f:7c:17:7b:fd:40:91:f6:ff:9d:
         07:ec:1f:40:58:08:af:f9:69:3c:4a:1e:b3:fa:2e:75:bb:a9:
         8a:4a:ac:a5:b1:a6:bb:4a:2f:99:92:e0:8e:70:44:ce:87:25:
         0b:db:f8:80:3e:92:70:bd:e6:0c:9b:c8:80:0b:5c:2a:f9:45:
         96:d6:58:64:22:7d:7d:c8:fa:18:a3:8d:3f:82:b9:20:e8:b0:
         3c:8a:22:17:6d:9c:0c:c3:25:e3:90:99:69:23:c9:ab:d1:4a:
         c3:53:52:3f:d4:13:a7:54:cd:7e:40:13:a7:af:af:58:45:d4:
         b8:09:f2:14:c2:71:7f:93:66:ca:14:4a:3e:8d:92:c2:d5:57:
         f1:01:a3:c3:c4:09:8f:15:8e:11:df:69:cc:a3:45:d5:05:e6:
         1d:f1:a7:d7:4b:72:fe:33:35:1c:a8:97:18:fe:92:d1:5c:ec:
         3f:92:2b:0c:35:5f:ca:87:a1:ca:dc:86:2a:64:15:b3:94:cf:
         af:e2:95:fd:ae:79:d9:ad:86:ab:b8:fc:43:33:17:da:c9:4d:
         99:44:3e:00
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTFCNDgxMTAvBgNVBAUTKEE0RTY4Njc5RTY3QkE2MUEyN0Y0Rjg5QkQwOTJBRUU1
QzFGNzIxMzkwHhcNMjYwNDA1MDUyMTM1WhcNMjYwNDEyMDUyMTM1WjAYMRYwFAYD
VQQDEw02OWQxZjE2MC1iM2QzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA84J77jm0x6Eh/hFNOwyudCCfdIbefUAf7MMx2QpMGC+sGaXHzx6ImH0Ex9qH
hJGMj5zAApoqwuluTG5xeg4MKTf1rOtpfNk0iMKjSyQlW6EFuHNGlloYni0MQ4RL
t39hGLlfrv8fA2KStEbjBEbdjy/OTHBp0XoIFPFZiHs56q1wFoew2YGc2WVHYnH+
4VVErL6LCQXcGOpx86W4f4GAos6T4kD4DfHiNFRJ94WwSBuk2US0Dx/m4lz1EwcL
kvnGapOftui6XZVej9pD8bdqJPcRZz8d6c4VAOrjdqRit7oucq4hT9YQiyoEQrw6
9HU55v+LoqIJW+3M5vRLSd7nTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDC+ShBt
BBxf9XT2id9s0pWAqFLgMB8GA1UdIwQYMBaAFKTmhnnme6YaJ/T4m9CSruXB9yE5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUI0OC82NkY1NzY0NDky
NzQxMUVGQkY4NjRBM0RDNEY5QUUwMi9wT2FHZWVaN3Bob245UGliMEpLdTVjSDNJ
VGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BPYUdlZVo3cGhvbjlQaWIwSkt1NWNIM0lUay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MUI0OC82NkY1NzY0NDkyNzQxMUVGQkY4NjRBM0RDNEY5QUUwMi9wT2FHZWVaN3Bo
b245UGliMEpLdTVjSDNJVGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAczpzW5BdB3Y469PxWLnoB7zFj2SDBk9nax9V3gvtWg7BQToYpbiXviKChq0/
fBd7/UCR9v+dB+wfQFgIr/lpPEoes/oudbupikqspbGmu0ovmZLgjnBEzoclC9v4
gD6ScL3mDJvIgAtcKvlFltZYZCJ9fcj6GKONP4K5IOiwPIoiF22cDMMl45CZaSPJ
q9FKw1NSP9QTp1TNfkATp6+vWEXUuAnyFMJxf5NmyhRKPo2SwtVX8QGjw8QJjxWO
Ed9pzKNF1QXmHfGn10ty/jM1HKiXGP6S0VzsP5IrDDVfyoehytyGKmQVs5TPr+KV
/a552a2Gq7j8QzMX2slNmUQ+AA==
-----END CERTIFICATE-----
Generated at Sun Apr 5 22:24:24 2026 by rpki-client