Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.mft
File:                     MkzIe8yExoFRzDczpQjHilxbSYo.mft (raw, json)
Hash identifier:          OyOLlGrVYgOXgCKafSGp1tgvfQBYmJfdu40UKeHJsfE=
Subject key identifier:   2F:2C:63:70:29:F7:70:28:2F:E7:F2:92:98:B8:08:A1:B1:84:69:81
Authority key identifier: 32:4C:C8:7B:CC:84:C6:81:51:CC:37:33:A5:08:C7:8A:5C:5B:49:8A
Certificate issuer:       /CN=A91116E6/serialNumber=324CC87BCC84C68151CC3733A508C78A5C5B498A
Certificate serial:       015A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkzIe8yExoFRzDczpQjHilxbSYo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.mft
Manifest number:          0151
Signing time:             Sun 05 Apr 2026 04:31:52 +0000
Manifest this update:     Sun 05 Apr 2026 04:31:52 +0000
Manifest next update:     Sun 12 Apr 2026 04:31:52 +0000
Files and hashes:         1: MkzIe8yExoFRzDczpQjHilxbSYo.crl (hash: wMOt9sRbdaOmF8/A1mInlgH/8dpRghZeibXIzPjghbE=)
                          2: 9CE0AEFA31F711EFA9A9A54AC4F9AE02.roa (hash: VkwFL/OI8A+B6vWC8BoIWVksESaaV5yZy0BJNLEHdwI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.crl
                          rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkzIe8yExoFRzDczpQjHilxbSYo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 04:31:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 346 (0x15a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91116E6, serialNumber=324CC87BCC84C68151CC3733A508C78A5C5B498A
        Validity
            Not Before: Apr  5 04:31:52 2026 GMT
            Not After : Apr 12 04:31:52 2026 GMT
        Subject: CN=69d1e5b8-f147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6d:27:ea:e3:f6:ea:21:78:a4:f0:6e:99:0c:
                    5b:8a:08:bf:67:8e:9d:46:17:c3:86:a4:58:2d:fb:
                    e7:35:92:58:bc:f9:3d:d7:13:fd:55:3f:79:22:2f:
                    99:f9:05:1b:e3:ba:50:59:71:b6:92:19:e5:47:60:
                    a3:47:f5:d8:ad:24:cf:d7:5c:0d:08:6b:14:90:16:
                    16:a6:0a:77:9b:0c:0e:a0:fc:b4:36:e8:40:37:e1:
                    99:ef:21:b9:ee:61:4c:1c:02:6b:40:17:c2:60:cf:
                    f5:d6:33:22:f0:1f:0f:4e:75:cf:27:0e:8a:2d:8a:
                    70:ea:01:22:17:54:2f:79:1b:99:d9:d0:a5:9a:d5:
                    d0:52:be:a6:d7:5d:9e:b6:c2:85:41:f8:1a:e5:8b:
                    ff:be:28:2d:ad:64:0b:57:01:08:92:17:16:e2:5a:
                    f8:82:fe:04:7a:38:ca:0b:02:eb:48:14:db:a4:f7:
                    61:79:25:b9:21:2b:53:6e:f9:d9:0b:00:cf:e0:aa:
                    33:31:5c:a8:96:2c:8b:2b:9d:b6:e5:06:6d:58:76:
                    a7:5a:1b:e7:1d:4e:b5:8d:8b:5e:c1:f7:0d:30:e6:
                    d0:f3:54:58:e8:d1:ee:85:bc:7c:38:20:ba:a3:c7:
                    71:7c:73:54:16:60:fb:b8:8c:e3:79:6c:0c:66:63:
                    a2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:2C:63:70:29:F7:70:28:2F:E7:F2:92:98:B8:08:A1:B1:84:69:81
            X509v3 Authority Key Identifier:
                keyid:32:4C:C8:7B:CC:84:C6:81:51:CC:37:33:A5:08:C7:8A:5C:5B:49:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkzIe8yExoFRzDczpQjHilxbSYo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:93:27:88:67:d9:a6:68:17:22:ec:dc:74:d5:f1:33:f7:01:
         57:5c:7d:fe:d3:c7:37:98:dd:41:08:c7:f3:30:fe:ba:1b:a7:
         da:dc:19:9a:98:21:07:53:68:cc:ef:ac:0f:8b:36:a0:ad:9d:
         16:53:3b:86:bb:04:fd:50:f8:e1:25:a3:24:c3:16:2e:e5:5a:
         1f:78:97:e4:4e:f2:36:f3:1f:ea:69:c9:4d:64:ae:f7:b3:c9:
         23:85:2f:5c:f2:7b:7c:ee:f2:39:7f:6b:e2:20:5d:0a:97:7c:
         53:f9:8b:f1:15:42:b6:bb:fe:06:f8:37:9e:91:a6:9e:5b:c7:
         ef:37:e0:98:02:1a:36:11:6c:eb:35:39:c8:ac:9f:a0:0c:76:
         4d:99:47:3e:a1:52:63:1a:6b:e2:fd:9f:26:9c:36:3a:cb:75:
         65:3c:2f:48:a6:db:47:f8:5e:c2:4e:a6:41:60:d3:4e:be:48:
         41:0e:97:49:47:93:c7:a8:91:ac:c9:44:43:48:b2:75:aa:4b:
         4c:ad:f7:43:ba:94:51:4d:c6:0d:40:cb:c1:da:c5:35:d2:55:
         fb:80:d6:70:35:7e:f8:17:2c:f1:0e:82:5a:5c:20:22:60:44:
         d8:bb:6b:05:8c:b1:3f:4d:af:7e:08:b5:ae:cd:3f:6b:ca:7a:
         2e:a8:76:97
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTE2RTYxMTAvBgNVBAUTKDMyNENDODdCQ0M4NEM2ODE1MUNDMzczM0E1MDhDNzhB
NUM1QjQ5OEEwHhcNMjYwNDA1MDQzMTUyWhcNMjYwNDEyMDQzMTUyWjAYMRYwFAYD
VQQDEw02OWQxZTViOC1mMTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqW0n6uP26iF4pPBumQxbigi/Z46dRhfDhqRYLfvnNZJYvPk91xP9VT95Ii+Z
+QUb47pQWXG2khnlR2CjR/XYrSTP11wNCGsUkBYWpgp3mwwOoPy0NuhAN+GZ7yG5
7mFMHAJrQBfCYM/11jMi8B8PTnXPJw6KLYpw6gEiF1QveRuZ2dClmtXQUr6m112e
tsKFQfga5Yv/vigtrWQLVwEIkhcW4lr4gv4EejjKCwLrSBTbpPdheSW5IStTbvnZ
CwDP4KozMVyoliyLK5225QZtWHanWhvnHU61jYtewfcNMObQ81RY6NHuhbx8OCC6
o8dxfHNUFmD7uIzjeWwMZmOifQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC8sY3Ap
93AoL+fykpi4CKGxhGmBMB8GA1UdIwQYMBaAFDJMyHvMhMaBUcw3M6UIx4pcW0mK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTZFNi9EN0QzNjIzODMx
RjYxMUVGOTJBRDhEMTBDNEY5QUUwMi9Na3pJZTh5RXhvRlJ6RGN6cFFqSGlseGJT
WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01rekllOHlFeG9GUnpEY3pwUWpIaWx4YlNZby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MTZFNi9EN0QzNjIzODMxRjYxMUVGOTJBRDhEMTBDNEY5QUUwMi9Na3pJZTh5RXhv
RlJ6RGN6cFFqSGlseGJTWW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAk5MniGfZpmgXIuzcdNXxM/cBV1x9/tPHN5jdQQjH8zD+uhun2twZmpghB1No
zO+sD4s2oK2dFlM7hrsE/VD44SWjJMMWLuVaH3iX5E7yNvMf6mnJTWSu97PJI4Uv
XPJ7fO7yOX9r4iBdCpd8U/mL8RVCtrv+Bvg3npGmnlvH7zfgmAIaNhFs6zU5yKyf
oAx2TZlHPqFSYxpr4v2fJpw2Ost1ZTwvSKbbR/hewk6mQWDTTr5IQQ6XSUeTx6iR
rMlEQ0iydapLTK33Q7qUUU3GDUDLwdrFNdJV+4DWcDV++Bcs8Q6CWlwgImBE2Ltr
BYyxP02vfgi1rs0/a8p6Lqh2lw==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:47 2026 by rpki-client