Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft
File:                     1bScAI9ih18VJth200lAoJsOnW0.mft (raw, json)
Hash identifier:          4DB0cfMFfo264sr7+luzH49C8NtSZ3itDWgSe0Cusx8=
Subject key identifier:   AA:DE:DB:E1:80:E1:C3:ED:DB:7F:82:50:35:44:FB:9E:03:46:03:B9
Authority key identifier: D5:B4:9C:00:8F:62:87:5F:15:26:D8:76:D3:49:40:A0:9B:0E:9D:6D
Certificate issuer:       /CN=A91FB434/serialNumber=D5B49C008F62875F1526D876D34940A09B0E9D6D
Certificate serial:       15F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bScAI9ih18VJth200lAoJsOnW0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft
Manifest number:          15DD
Signing time:             Sat 04 Apr 2026 16:38:06 +0000
Manifest this update:     Sat 04 Apr 2026 16:38:06 +0000
Manifest next update:     Sat 11 Apr 2026 16:38:06 +0000
Files and hashes:         1: 1bScAI9ih18VJth200lAoJsOnW0.crl (hash: Wjty9Xp64va0hcYhwTPHWsN8hIY6JjhJOGKYqHW359A=)
                          2: EB843B92329A11EE89CD8544C4F9AE02.roa (hash: CLUWcZt+49NeH6K62G6A+1bRGb2EpGeJVNtijAJKCTI=)
                          3: EC796D6C42D411E88EC29742C4F9AE02.roa (hash: /XKpZWxHQtpMnU+ZHwwN48hOrY+K7y+jnl3ND5plgMo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.crl
                          rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bScAI9ih18VJth200lAoJsOnW0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 16:38:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5621 (0x15f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB434, serialNumber=D5B49C008F62875F1526D876D34940A09B0E9D6D
        Validity
            Not Before: Apr  4 16:38:06 2026 GMT
            Not After : Apr 11 16:38:06 2026 GMT
        Subject: CN=69d13e6e-06fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6e:2b:94:d7:8e:08:08:8a:08:19:ac:82:23:
                    0d:51:79:f5:13:07:69:f4:c0:e8:50:f2:df:fa:cc:
                    74:a1:a0:45:2b:0a:09:c1:7a:f3:84:55:a3:e2:a2:
                    e4:b5:0e:98:42:70:70:ea:3e:00:fe:aa:71:e6:c9:
                    d9:d2:49:30:6a:f0:eb:3e:a7:5c:b4:5d:72:a0:e9:
                    3c:82:79:7b:7a:76:1e:b6:11:68:15:9f:0e:29:a7:
                    24:b2:b8:12:bb:3c:0e:2f:ad:ec:f5:1f:31:81:f5:
                    fc:65:db:e7:7e:9f:e3:1b:6c:e5:92:1a:72:67:7d:
                    d3:fd:57:04:21:3f:b4:cd:d4:d1:5a:78:eb:61:75:
                    39:e0:c7:d6:e5:c6:81:f6:8c:68:7a:b8:c7:ed:f9:
                    6b:fc:ec:0f:4a:7b:49:64:09:40:29:92:17:e0:5f:
                    be:4a:8f:0a:99:ad:57:09:bf:1a:3c:18:76:a7:83:
                    0c:35:63:7b:80:65:5c:84:3e:bb:fc:2e:10:0b:8c:
                    94:b2:f9:5d:39:fb:1e:c6:37:ed:07:93:0b:35:b7:
                    e3:f8:5a:ef:eb:d7:ab:8b:2f:7e:2f:c9:45:23:a6:
                    a4:09:a2:f2:6c:e5:0b:49:64:e2:62:7b:80:a8:a6:
                    6b:38:b2:0a:23:50:ee:02:7a:31:08:cc:e4:aa:82:
                    35:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:DE:DB:E1:80:E1:C3:ED:DB:7F:82:50:35:44:FB:9E:03:46:03:B9
            X509v3 Authority Key Identifier:
                keyid:D5:B4:9C:00:8F:62:87:5F:15:26:D8:76:D3:49:40:A0:9B:0E:9D:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bScAI9ih18VJth200lAoJsOnW0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:03:8b:24:d8:d0:91:c0:01:3c:d3:1e:2f:15:51:bc:f5:6d:
         17:d0:41:65:d0:17:40:19:41:17:4a:ae:0a:21:da:12:1d:da:
         35:3f:37:86:af:96:fb:7d:64:34:cd:84:6a:5e:35:40:0e:e3:
         95:ee:ce:e4:1e:00:db:86:12:73:7f:12:93:be:33:28:f7:b1:
         4f:31:78:5e:e1:78:3e:d1:c5:ec:e7:38:86:23:14:65:73:35:
         7b:2a:40:e4:48:50:59:a0:ea:0c:cd:3e:92:94:93:3e:25:27:
         36:54:ae:64:7f:66:84:fd:8a:43:63:47:55:2d:04:7c:d9:22:
         14:a1:14:f4:81:3c:be:8b:95:9c:e3:42:90:17:91:4c:80:5c:
         18:36:85:40:7d:18:c0:b0:c2:31:cd:4a:c1:49:9d:64:3f:7b:
         9e:22:b6:d2:b3:aa:a3:db:c0:1e:87:50:9a:81:21:2b:3f:3d:
         9e:5a:2f:e7:2e:6b:b0:7e:06:eb:60:c5:d1:f0:b7:0d:6d:1b:
         7a:ec:ea:b4:55:a1:09:5c:ed:78:65:93:cb:9c:b4:36:6b:39:
         36:28:29:62:64:4c:96:ac:de:55:95:7b:10:61:c6:6c:b9:70:
         d1:85:2e:d6:46:16:c2:fb:d7:27:42:27:50:74:6c:d4:ef:81:
         80:a1:0a:2f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkI0MzQxMTAvBgNVBAUTKEQ1QjQ5QzAwOEY2Mjg3NUYxNTI2RDg3NkQzNDk0MEEw
OUIwRTlENkQwHhcNMjYwNDA0MTYzODA2WhcNMjYwNDExMTYzODA2WjAYMRYwFAYD
VQQDEw02OWQxM2U2ZS0wNmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtm4rlNeOCAiKCBmsgiMNUXn1Ewdp9MDoUPLf+sx0oaBFKwoJwXrzhFWj4qLk
tQ6YQnBw6j4A/qpx5snZ0kkwavDrPqdctF1yoOk8gnl7enYethFoFZ8OKacksrgS
uzwOL63s9R8xgfX8Zdvnfp/jG2zlkhpyZ33T/VcEIT+0zdTRWnjrYXU54MfW5caB
9oxoerjH7flr/OwPSntJZAlAKZIX4F++So8Kma1XCb8aPBh2p4MMNWN7gGVchD67
/C4QC4yUsvldOfsexjftB5MLNbfj+Frv69eriy9+L8lFI6akCaLybOULSWTiYnuA
qKZrOLIKI1DuAnoxCMzkqoI1uwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKre2+GA
4cPt23+CUDVE+54DRgO5MB8GA1UdIwQYMBaAFNW0nACPYodfFSbYdtNJQKCbDp1t
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjQzNC9FMkM2MjY3NjQy
RDMxMUU4QkJEQzA5NDFDNEY5QUUwMi8xYlNjQUk5aWgxOFZKdGgyMDBsQW9Kc09u
VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFiU2NBSTlpaDE4Vkp0aDIwMGxBb0pzT25XMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QjQzNC9FMkM2MjY3NjQyRDMxMUU4QkJEQzA5NDFDNEY5QUUwMi8xYlNjQUk5aWgx
OFZKdGgyMDBsQW9Kc09uVzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbgOLJNjQkcABPNMeLxVRvPVtF9BBZdAXQBlBF0quCiHaEh3aNT83hq+W+31k
NM2Eal41QA7jle7O5B4A24YSc38Sk74zKPexTzF4XuF4PtHF7Oc4hiMUZXM1eypA
5EhQWaDqDM0+kpSTPiUnNlSuZH9mhP2KQ2NHVS0EfNkiFKEU9IE8vouVnONCkBeR
TIBcGDaFQH0YwLDCMc1KwUmdZD97niK20rOqo9vAHodQmoEhKz89nlov5y5rsH4G
62DF0fC3DW0beuzqtFWhCVzteGWTy5y0Nms5NigpYmRMlqzeVZV7EGHGbLlw0YUu
1kYWwvvXJ0InUHRs1O+BgKEKLw==
-----END CERTIFICATE-----
Generated at Sun Apr 5 19:40:18 2026 by rpki-client