Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.mft
File:                     g7x91dFCfoM0DS32wztiPUPX7KQ.mft (raw, json)
Hash identifier:          cjx82Q2mkg3mpjP1kkKw00RXGY7xDiQEkQfW1gkEY5w=
Subject key identifier:   57:23:30:59:82:C2:8E:84:95:90:AA:BD:4E:BB:10:B1:62:57:05:FC
Authority key identifier: 83:BC:7D:D5:D1:42:7E:83:34:0D:2D:F6:C3:3B:62:3D:43:D7:EC:A4
Certificate issuer:       /CN=A911B468/serialNumber=83BC7DD5D1427E83340D2DF6C33B623D43D7ECA4
Certificate serial:       0F5E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7x91dFCfoM0DS32wztiPUPX7KQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.mft
Manifest number:          0F48
Signing time:             Mon 20 Apr 2026 17:30:50 +0000
Manifest this update:     Mon 20 Apr 2026 17:30:50 +0000
Manifest next update:     Mon 27 Apr 2026 17:30:50 +0000
Files and hashes:         1: g7x91dFCfoM0DS32wztiPUPX7KQ.crl (hash: acxZtS3/d587xEI6vzD1rllAq6cq2MSpmFYxP/iXEEs=)
                          2: 16C329A4713B11F0A2354E78C4F9AE02.roa (hash: IL/E/nWcOLdpvY6kRKEbHNWbHgxGSummYUXsi86XlXA=)
                          3: E1769D329EF711EABE23195AC4F9AE02.roa (hash: t/D8IYKB/rM46dZgcTuJ/X2CfX2Uf2X0FQN7ZHOdxv8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.crl
                          rsync://rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7x91dFCfoM0DS32wztiPUPX7KQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Apr 2026 17:30:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3934 (0xf5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B468, serialNumber=83BC7DD5D1427E83340D2DF6C33B623D43D7ECA4
        Validity
            Not Before: Apr 20 17:30:50 2026 GMT
            Not After : Apr 27 17:30:50 2026 GMT
        Subject: CN=69e662ca-78c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:31:a0:0c:9c:45:22:d1:fb:af:88:64:fa:f2:
                    e4:d2:6a:f2:11:ad:bb:5f:52:cf:ad:dc:12:d3:bf:
                    71:d3:08:45:d4:bf:93:56:c7:a0:44:04:a8:1c:f8:
                    fd:61:03:9c:c6:5c:4e:7a:6d:37:a4:09:24:4e:cf:
                    4a:8f:27:a8:b6:f6:24:7a:f3:8e:8b:26:b1:9e:9d:
                    b0:c6:e0:71:ce:9c:46:c9:df:0d:41:18:cb:68:64:
                    c7:b6:b9:fa:e3:c5:11:15:e6:28:43:2f:9a:d6:5b:
                    cf:bd:bd:22:22:cf:a9:3e:15:98:6a:64:42:b8:1d:
                    8a:ee:8f:05:24:0d:a6:16:c8:12:6d:35:3f:af:02:
                    0e:61:ec:b3:b7:48:54:d1:7c:b6:96:54:8f:c0:74:
                    8c:41:90:08:fa:89:00:c8:7e:6f:ea:83:2b:23:1e:
                    81:a4:35:7b:f1:a2:7c:62:37:d5:af:3a:91:cb:46:
                    92:2e:1e:a2:66:05:e0:16:8c:98:98:74:bb:75:9d:
                    46:f0:cc:88:32:79:a4:e7:43:49:5e:a8:29:c9:d1:
                    41:f9:5b:c0:51:66:31:79:b4:ae:75:04:30:08:56:
                    f0:4f:32:bd:3d:21:37:af:cc:79:69:09:09:65:63:
                    ba:cc:59:70:bc:cb:97:33:92:bd:95:9e:d2:a8:e6:
                    7e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:23:30:59:82:C2:8E:84:95:90:AA:BD:4E:BB:10:B1:62:57:05:FC
            X509v3 Authority Key Identifier:
                keyid:83:BC:7D:D5:D1:42:7E:83:34:0D:2D:F6:C3:3B:62:3D:43:D7:EC:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7x91dFCfoM0DS32wztiPUPX7KQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:e0:a8:a7:a3:b8:5d:b3:f6:c1:1a:13:03:fd:9b:d6:b1:a3:
         15:8a:f2:df:26:a3:2a:3e:2d:4a:ea:68:de:bf:82:79:fb:5c:
         77:75:94:de:99:33:67:16:42:3a:68:08:6c:c8:20:e0:90:a7:
         81:8a:2e:fa:f4:39:36:97:64:11:91:fe:2a:92:48:f2:59:11:
         f9:5b:cf:77:66:52:37:c4:b5:c3:34:f4:74:d5:75:e3:19:41:
         11:89:99:2e:3c:40:c2:65:1c:27:e5:ef:81:d2:b7:58:0a:c7:
         5e:af:7e:46:7e:6f:08:87:82:2b:c2:1b:68:77:8b:f2:8b:b7:
         98:cf:a3:b9:e5:0c:60:46:46:cc:98:3a:22:78:e7:3c:eb:13:
         b3:f0:3f:6e:c5:13:9d:da:dd:2e:ae:47:62:ee:16:6b:17:45:
         d0:4a:b1:46:14:c1:27:53:ee:3c:9e:c0:59:6e:41:25:3b:71:
         e5:2d:27:a9:90:99:2a:13:29:6a:f9:20:1c:69:43:3e:47:d5:
         40:0d:b7:4c:3b:93:f4:20:c8:7a:1d:46:e8:b4:fb:ad:7e:fc:
         df:c3:ec:3a:2d:5f:35:ff:99:d5:3c:7b:ca:ba:ba:5f:29:06:
         b0:bc:32:d7:9c:3a:ff:ac:00:76:b5:a8:69:9e:2c:f0:10:7d:
         d5:16:57:20
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICD14wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUI0NjgxMTAvBgNVBAUTKDgzQkM3REQ1RDE0MjdFODMzNDBEMkRGNkMzM0I2MjNE
NDNEN0VDQTQwHhcNMjYwNDIwMTczMDUwWhcNMjYwNDI3MTczMDUwWjAYMRYwFAYD
VQQDEw02OWU2NjJjYS03OGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3jGgDJxFItH7r4hk+vLk0mryEa27X1LPrdwS079x0whF1L+TVsegRASoHPj9
YQOcxlxOem03pAkkTs9KjyeotvYkevOOiyaxnp2wxuBxzpxGyd8NQRjLaGTHtrn6
48URFeYoQy+a1lvPvb0iIs+pPhWYamRCuB2K7o8FJA2mFsgSbTU/rwIOYeyzt0hU
0Xy2llSPwHSMQZAI+okAyH5v6oMrIx6BpDV78aJ8YjfVrzqRy0aSLh6iZgXgFoyY
mHS7dZ1G8MyIMnmk50NJXqgpydFB+VvAUWYxebSudQQwCFbwTzK9PSE3r8x5aQkJ
ZWO6zFlwvMuXM5K9lZ7SqOZ+QQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFcjMFmC
wo6ElZCqvU67ELFiVwX8MB8GA1UdIwQYMBaAFIO8fdXRQn6DNA0t9sM7Yj1D1+yk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQ2OC84MTIyNjAyODkx
MUIxMUU5OTMwMEZFNTdDNEY5QUUwMi9nN3g5MWRGQ2ZvTTBEUzMyd3p0aVBVUFg3
S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2c3eDkxZEZDZm9NMERTMzJ3enRpUFVQWDdLUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QjQ2OC84MTIyNjAyODkxMUIxMUU5OTMwMEZFNTdDNEY5QUUwMi9nN3g5MWRGQ2Zv
TTBEUzMyd3p0aVBVUFg3S1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMOCop6O4XbP2wRoTA/2b1rGjFYry3yajKj4tSupo3r+Ceftcd3WU3pkzZxZC
OmgIbMgg4JCngYou+vQ5NpdkEZH+KpJI8lkR+VvPd2ZSN8S1wzT0dNV14xlBEYmZ
LjxAwmUcJ+XvgdK3WArHXq9+Rn5vCIeCK8IbaHeL8ou3mM+jueUMYEZGzJg6Injn
POsTs/A/bsUTndrdLq5HYu4WaxdF0EqxRhTBJ1PuPJ7AWW5BJTtx5S0nqZCZKhMp
avkgHGlDPkfVQA23TDuT9CDIeh1G6LT7rX7838PsOi1fNf+Z1Tx7yrq6XykGsLwy
15w6/6wAdrWoaZ4s8BB91RZXIA==
-----END CERTIFICATE-----
Generated at Wed Apr 22 11:44:16 2026 by rpki-client