Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft
File:                     i0b6Eepu4jUJnkhDPIJJehl7nXw.mft (raw, json)
Hash identifier:          /lzS0G6ieScYw+V4F5vDjonWZTANBWqoL+UAy3kJsvA=
Subject key identifier:   2D:CA:41:E8:90:8D:3B:8A:F7:EF:4F:AF:9C:7B:9D:91:2D:C4:37:6F
Authority key identifier: 8B:46:FA:11:EA:6E:E2:35:09:9E:48:43:3C:82:49:7A:19:7B:9D:7C
Certificate issuer:       /CN=A91FB03A/serialNumber=8B46FA11EA6EE235099E48433C82497A197B9D7C
Certificate serial:       02B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft
Manifest number:          02AA
Signing time:             Sun 05 Apr 2026 01:13:26 +0000
Manifest this update:     Sun 05 Apr 2026 01:13:25 +0000
Manifest next update:     Sun 12 Apr 2026 01:13:25 +0000
Files and hashes:         1: i0b6Eepu4jUJnkhDPIJJehl7nXw.crl (hash: gWxsJl9yQzQCGfkO8MaSkrJjyWXHj/f4mULOwZlgziY=)
                          2: 0B3B85D63A1B11EDAE662B14C4F9AE02.roa (hash: vysf+JOpL7OvntYiYikMIsDz8nEsAs8IBD8OzimL+Fg=)
                          3: 0BF33B7C3A1B11EDAE662B14C4F9AE02.roa (hash: QQORdPKkCBGXWBMZkno+T8u87+gp990frsFu1rUngIM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.crl
                          rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 01:13:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 696 (0x2b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB03A, serialNumber=8B46FA11EA6EE235099E48433C82497A197B9D7C
        Validity
            Not Before: Apr  5 01:13:25 2026 GMT
            Not After : Apr 12 01:13:25 2026 GMT
        Subject: CN=69d1b736-4d20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:02:09:42:0f:0a:9f:35:58:58:d2:cb:39:ab:
                    6b:16:c1:ad:6f:0d:cd:df:63:c8:73:96:a4:4e:e3:
                    17:72:e8:cb:e6:a7:80:63:e5:6c:b1:d7:18:9f:86:
                    4d:61:e0:51:ce:76:1e:b2:b2:c5:fc:74:b8:6e:95:
                    2b:66:cc:75:92:5b:6c:93:f0:ed:63:93:4e:43:61:
                    94:8c:a0:5d:e5:0c:a6:f5:b8:b4:aa:37:bb:c2:f2:
                    ba:61:3d:85:7f:d9:b2:ae:1a:d5:3e:76:0c:86:56:
                    95:94:49:84:c3:2c:33:35:e9:2c:64:e6:28:11:61:
                    52:d8:16:9b:ad:3b:e0:88:da:7b:68:9d:04:51:a9:
                    23:f3:ed:8f:df:f0:eb:3a:41:65:b4:74:37:33:92:
                    52:b1:0f:2b:51:a2:65:52:3b:17:18:74:5e:a8:f7:
                    75:aa:e8:5a:80:7a:4a:e8:f7:2f:09:37:de:bc:15:
                    b8:52:aa:64:be:df:26:59:46:1c:f0:f0:50:51:90:
                    5e:59:3e:8e:5a:1f:38:7e:1b:02:3d:30:66:d1:e4:
                    93:a6:bc:11:91:c4:0c:0f:f0:67:97:69:00:0a:53:
                    df:f0:5b:98:66:26:09:90:d4:9b:a8:6f:71:33:05:
                    91:12:c8:e5:1d:d7:36:f6:49:9d:d6:fc:12:0c:f8:
                    86:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:CA:41:E8:90:8D:3B:8A:F7:EF:4F:AF:9C:7B:9D:91:2D:C4:37:6F
            X509v3 Authority Key Identifier:
                keyid:8B:46:FA:11:EA:6E:E2:35:09:9E:48:43:3C:82:49:7A:19:7B:9D:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:33:ac:f8:83:2b:5f:34:c2:e5:fd:16:dc:5d:22:0e:5a:3d:
         5d:cc:70:0d:bf:3f:02:3a:30:9c:2d:09:f7:01:26:54:83:7b:
         86:33:b4:19:c1:cb:d3:89:7f:df:5b:70:6f:12:6f:91:84:cc:
         3b:32:61:a4:33:a8:ab:ee:b2:06:99:e5:ca:bf:45:e7:df:e0:
         7f:b6:a7:0c:a1:37:b2:93:1c:31:d9:3d:bb:e3:ed:5f:dc:56:
         7b:41:8d:b3:73:6b:36:8f:3e:44:6f:d6:30:d5:83:a2:f9:16:
         e2:a5:6a:b7:78:17:22:26:1e:f1:ca:de:89:ce:99:02:a1:07:
         23:42:b0:cb:c4:04:8d:bf:38:15:66:12:3d:6e:8e:38:15:c5:
         58:04:8e:98:a1:8c:38:00:19:f1:f8:41:7e:ee:f5:01:92:7a:
         a9:fa:4d:f7:1c:a3:44:44:2b:44:4b:9b:3c:e7:db:c1:31:16:
         fb:f8:33:ea:5b:5e:ea:4a:22:38:2c:ad:0a:f1:80:74:35:0e:
         f5:7e:df:7c:f6:0a:62:92:7e:fc:7e:0b:16:60:b7:a0:d2:bf:
         2c:06:35:b5:bd:f2:8f:0e:ac:68:db:96:66:1a:3f:03:93:2e:
         81:2c:34:66:4a:d0:5a:bd:bf:35:fb:c8:73:4e:a2:d5:ba:08:
         d6:b1:d9:37
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICArgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkIwM0ExMTAvBgNVBAUTKDhCNDZGQTExRUE2RUUyMzUwOTlFNDg0MzNDODI0OTdB
MTk3QjlEN0MwHhcNMjYwNDA1MDExMzI1WhcNMjYwNDEyMDExMzI1WjAYMRYwFAYD
VQQDEw02OWQxYjczNi00ZDIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlwIJQg8KnzVYWNLLOatrFsGtbw3N32PIc5akTuMXcujL5qeAY+VssdcYn4ZN
YeBRznYesrLF/HS4bpUrZsx1kltsk/DtY5NOQ2GUjKBd5Qym9bi0qje7wvK6YT2F
f9myrhrVPnYMhlaVlEmEwywzNeksZOYoEWFS2BabrTvgiNp7aJ0EUakj8+2P3/Dr
OkFltHQ3M5JSsQ8rUaJlUjsXGHReqPd1quhagHpK6PcvCTfevBW4Uqpkvt8mWUYc
8PBQUZBeWT6OWh84fhsCPTBm0eSTprwRkcQMD/Bnl2kAClPf8FuYZiYJkNSbqG9x
MwWREsjlHdc29kmd1vwSDPiGoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC3KQeiQ
jTuK9+9Pr5x7nZEtxDdvMB8GA1UdIwQYMBaAFItG+hHqbuI1CZ5IQzyCSXoZe518
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjAzQS9ERkM2OEQ2NDNB
MTYxMUVEOTE1MkJGMEVDNEY5QUUwMi9pMGI2RWVwdTRqVUpua2hEUElKSmVobDdu
WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2kwYjZFZXB1NGpVSm5raERQSUpKZWhsN25Ydy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QjAzQS9ERkM2OEQ2NDNBMTYxMUVEOTE1MkJGMEVDNEY5QUUwMi9pMGI2RWVwdTRq
VUpua2hEUElKSmVobDduWHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvjOs+IMrXzTC5f0W3F0iDlo9XcxwDb8/AjownC0J9wEmVIN7hjO0GcHL04l/
31twbxJvkYTMOzJhpDOoq+6yBpnlyr9F59/gf7anDKE3spMcMdk9u+PtX9xWe0GN
s3NrNo8+RG/WMNWDovkW4qVqt3gXIiYe8creic6ZAqEHI0Kwy8QEjb84FWYSPW6O
OBXFWASOmKGMOAAZ8fhBfu71AZJ6qfpN9xyjREQrREubPOfbwTEW+/gz6lte6koi
OCytCvGAdDUO9X7ffPYKYpJ+/H4LFmC3oNK/LAY1tb3yjw6saNuWZho/A5MugSw0
ZkrQWr2/NfvIc06i1boI1rHZNw==
-----END CERTIFICATE-----
Generated at Sun Apr 5 19:42:45 2026 by rpki-client