Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.mft
File:                     grMfodzgxL8vZjl3hqbAjkfGuP4.mft (raw, json)
Hash identifier:          bcThMNJ+6DRoTtQEm7iHA2jRs5HiNOrZ7J+3ksRMn+Y=
Subject key identifier:   9A:03:40:8B:1D:B0:52:1B:3D:13:04:E3:42:03:F0:40:9C:3C:0E:B4
Authority key identifier: 82:B3:1F:A1:DC:E0:C4:BF:2F:66:39:77:86:A6:C0:8E:47:C6:B8:FE
Certificate issuer:       /CN=A91294F7/serialNumber=82B31FA1DCE0C4BF2F66397786A6C08E47C6B8FE
Certificate serial:       05CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grMfodzgxL8vZjl3hqbAjkfGuP4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.mft
Manifest number:          05C4
Signing time:             Sat 04 Apr 2026 22:51:21 +0000
Manifest this update:     Sat 04 Apr 2026 22:51:20 +0000
Manifest next update:     Sat 11 Apr 2026 22:51:20 +0000
Files and hashes:         1: grMfodzgxL8vZjl3hqbAjkfGuP4.crl (hash: a863rQuQ9cBP+QBY93LZoSNSEGpNYoAAiQuUCJr2EBM=)
                          2: F7307C08FFCA11EB93268E6DC4F9AE02.roa (hash: WQIaqVFoy/1CzV1kGTg4Ebk30VYXx/UfKWebBcWk7kk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.crl
                          rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grMfodzgxL8vZjl3hqbAjkfGuP4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 22:51:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1482 (0x5ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91294F7, serialNumber=82B31FA1DCE0C4BF2F66397786A6C08E47C6B8FE
        Validity
            Not Before: Apr  4 22:51:20 2026 GMT
            Not After : Apr 11 22:51:20 2026 GMT
        Subject: CN=69d195e9-cd64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:33:19:42:2f:f3:e4:07:0b:93:9e:b9:96:63:
                    85:df:bc:68:98:0e:69:59:c0:df:44:ca:46:fd:cc:
                    f9:af:8e:79:36:00:ea:23:07:3e:38:3f:fc:df:d1:
                    bf:f6:c4:6f:e4:eb:6d:4e:c9:46:13:19:4e:13:8d:
                    9a:82:6a:fd:e8:ab:8a:b3:42:92:c2:a9:8b:f8:4d:
                    d0:6a:af:30:8d:c9:42:3c:ad:05:26:8e:ba:71:16:
                    bb:0d:05:eb:96:06:94:ac:da:0e:17:38:7d:b5:39:
                    e3:3b:6f:e8:90:24:28:f4:78:a6:19:b7:4b:0e:d6:
                    d1:e5:28:02:48:c6:80:93:12:2b:bd:12:01:eb:34:
                    ff:ef:ae:39:36:0f:28:1c:47:cd:70:58:72:48:23:
                    76:0e:e2:55:2b:02:ac:1e:de:1d:d5:0e:82:5b:f1:
                    d5:8f:01:ab:85:04:fd:cc:8e:56:29:82:2b:8e:fc:
                    7a:65:93:28:b2:ae:57:95:27:47:6a:e3:4a:18:75:
                    de:92:14:ff:28:13:66:f9:3c:b4:df:09:95:45:d9:
                    fd:c7:9c:7a:82:1e:b2:44:1a:c7:3c:34:82:6e:04:
                    bd:3a:5a:a4:89:2c:e2:c0:5f:a0:7c:8f:f4:da:d9:
                    a2:50:b9:6d:b5:27:16:34:a3:38:c0:4c:ac:04:cf:
                    98:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:03:40:8B:1D:B0:52:1B:3D:13:04:E3:42:03:F0:40:9C:3C:0E:B4
            X509v3 Authority Key Identifier:
                keyid:82:B3:1F:A1:DC:E0:C4:BF:2F:66:39:77:86:A6:C0:8E:47:C6:B8:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grMfodzgxL8vZjl3hqbAjkfGuP4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:db:6e:39:02:ad:4e:54:72:05:17:4a:b7:2e:bc:d0:c5:01:
         a4:16:33:67:d0:1f:78:b9:ca:14:8d:01:ff:70:de:46:22:9c:
         b2:f6:0e:a2:34:92:e2:c0:07:8d:bb:5d:e4:96:7a:bd:c8:e8:
         ef:21:c5:10:f0:84:36:b0:97:bf:af:80:d6:62:ed:0d:a0:9d:
         12:53:7b:e2:b5:8c:a6:81:a2:fa:1d:b1:2b:2f:35:5f:fb:f4:
         46:01:ed:f6:52:93:64:5c:5b:49:01:f1:aa:7d:5b:5b:1b:b7:
         9f:96:2c:47:89:11:86:b3:39:cf:9b:bc:47:2f:cf:30:3e:45:
         8c:d0:77:16:17:db:d4:d4:b9:24:96:46:fb:b8:b8:28:bb:63:
         c3:82:45:6b:6f:ec:72:6f:9c:69:a5:8d:14:90:8c:4b:a8:2f:
         58:54:47:1c:4c:e1:6d:47:48:37:34:0c:b8:3e:ab:fc:79:cb:
         5b:c3:91:16:c1:b8:af:e1:fc:b6:e8:94:3d:cc:b8:f1:0f:3e:
         d4:13:07:88:23:43:5a:a7:bd:d5:c3:6b:5b:ec:93:42:d3:13:
         94:a1:6d:bc:08:2d:26:7c:5a:af:3c:fb:e8:60:ec:a6:bf:6d:
         aa:6d:e3:d8:b1:6a:5f:1b:8f:aa:db:4a:0e:11:c5:fe:26:af:
         c2:4e:22:aa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjk0RjcxMTAvBgNVBAUTKDgyQjMxRkExRENFMEM0QkYyRjY2Mzk3Nzg2QTZDMDhF
NDdDNkI4RkUwHhcNMjYwNDA0MjI1MTIwWhcNMjYwNDExMjI1MTIwWjAYMRYwFAYD
VQQDEw02OWQxOTVlOS1jZDY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtjMZQi/z5AcLk565lmOF37xomA5pWcDfRMpG/cz5r455NgDqIwc+OD/839G/
9sRv5OttTslGExlOE42agmr96KuKs0KSwqmL+E3Qaq8wjclCPK0FJo66cRa7DQXr
lgaUrNoOFzh9tTnjO2/okCQo9HimGbdLDtbR5SgCSMaAkxIrvRIB6zT/7645Ng8o
HEfNcFhySCN2DuJVKwKsHt4d1Q6CW/HVjwGrhQT9zI5WKYIrjvx6ZZMosq5XlSdH
auNKGHXekhT/KBNm+Ty03wmVRdn9x5x6gh6yRBrHPDSCbgS9OlqkiSziwF+gfI/0
2tmiULlttScWNKM4wEysBM+YqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJoDQIsd
sFIbPRME40ID8ECcPA60MB8GA1UdIwQYMBaAFIKzH6Hc4MS/L2Y5d4amwI5Hxrj+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTRGNy81OUZGMDVBQUZG
QzgxMUVCQThBNEEwNTdDNEY5QUUwMi9nck1mb2R6Z3hMOHZaamwzaHFiQWprZkd1
UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dyTWZvZHpneEw4dlpqbDNocWJBamtmR3VQNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
OTRGNy81OUZGMDVBQUZGQzgxMUVCQThBNEEwNTdDNEY5QUUwMi9nck1mb2R6Z3hM
OHZaamwzaHFiQWprZkd1UDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqttuOQKtTlRyBRdKty680MUBpBYzZ9AfeLnKFI0B/3DeRiKcsvYOojSS4sAH
jbtd5JZ6vcjo7yHFEPCENrCXv6+A1mLtDaCdElN74rWMpoGi+h2xKy81X/v0RgHt
9lKTZFxbSQHxqn1bWxu3n5YsR4kRhrM5z5u8Ry/PMD5FjNB3Fhfb1NS5JJZG+7i4
KLtjw4JFa2/scm+caaWNFJCMS6gvWFRHHEzhbUdINzQMuD6r/HnLW8ORFsG4r+H8
tuiUPcy48Q8+1BMHiCNDWqe91cNrW+yTQtMTlKFtvAgtJnxarzz76GDspr9tqm3j
2LFqXxuPqttKDhHF/iavwk4iqg==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:33:36 2026 by rpki-client