Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft
File:                     fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft (raw, json)
Hash identifier:          1fFgisoCdhPI/sEdG9iBqTm2vkbK48lU4Migwb+s61M=
Subject key identifier:   AA:9D:EE:C1:82:C6:78:7C:01:1B:E8:81:D9:4B:97:C8:37:5C:37:95
Authority key identifier: 7E:65:C5:8F:A3:43:A1:0C:53:43:50:AB:49:7F:D0:90:CE:EF:BF:BB
Certificate issuer:       /CN=A91380B5/serialNumber=7E65C58FA343A10C534350AB497FD090CEEFBFBB
Certificate serial:       03E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft
Manifest number:          03CE
Signing time:             Sun 05 Apr 2026 00:23:49 +0000
Manifest this update:     Sun 05 Apr 2026 00:23:48 +0000
Manifest next update:     Sun 12 Apr 2026 00:23:48 +0000
Files and hashes:         1: fmXFj6NDoQxTQ1CrSX_QkM7vv7s.crl (hash: UGtpveYM9dmsVS8Shn43BRlypsPZYadZBr8wuN3G/2w=)
                          2: 121437B45ABB11EF8C696E58C4F9AE02.roa (hash: 5qVS8yAP9geafMCui47y2bneVvGFNSs25MQvHFvL3Q0=)
                          3: 245B417CADD411EE95FF6C6DC4F9AE02.roa (hash: gLOFNsHejik+yQKsEBrjAw7cANoRp3jJQV4pA0a+JR4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.crl
                          rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 00:23:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 992 (0x3e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91380B5, serialNumber=7E65C58FA343A10C534350AB497FD090CEEFBFBB
        Validity
            Not Before: Apr  5 00:23:48 2026 GMT
            Not After : Apr 12 00:23:48 2026 GMT
        Subject: CN=69d1ab95-9de5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a6:68:a7:86:89:6e:70:3a:a1:c7:32:22:b2:
                    23:a8:80:c4:ac:2d:ab:00:b7:25:f5:a7:5b:9b:0d:
                    69:7c:ac:db:ff:d6:e7:e0:e5:fc:d7:5d:84:0b:ef:
                    f1:75:1a:1b:7d:2f:99:e5:7b:02:3e:0b:21:0d:88:
                    2d:9e:af:d7:af:64:74:6d:de:26:c3:46:df:d6:45:
                    68:b3:52:e5:41:08:59:69:35:96:70:f5:9f:e2:25:
                    44:2e:79:0a:c3:9d:ba:03:df:9e:38:92:2c:99:96:
                    bc:9a:50:37:3c:49:64:3e:a1:50:25:72:29:66:93:
                    55:d3:d3:14:09:c6:dd:4f:37:35:39:0e:a6:21:5d:
                    75:78:05:45:99:b2:0d:44:e8:2d:52:5e:1e:9e:78:
                    84:52:26:23:86:11:a5:63:e6:4f:3d:e7:2b:0f:21:
                    94:e0:19:f5:91:42:c6:35:fa:8e:69:1e:f8:e5:cb:
                    8c:00:31:41:0d:79:f1:3b:5f:22:f5:aa:73:9f:7a:
                    86:a6:f1:80:55:cb:a5:fc:1c:5a:5d:36:4c:0e:b5:
                    03:4a:96:0b:53:7f:a2:ee:eb:6c:e6:19:d2:0f:6d:
                    e1:e5:02:c0:f7:bf:f7:b5:9c:df:87:35:68:0c:5c:
                    70:37:54:df:bc:24:0c:98:99:c9:60:f4:27:01:65:
                    bf:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:9D:EE:C1:82:C6:78:7C:01:1B:E8:81:D9:4B:97:C8:37:5C:37:95
            X509v3 Authority Key Identifier:
                keyid:7E:65:C5:8F:A3:43:A1:0C:53:43:50:AB:49:7F:D0:90:CE:EF:BF:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:d0:ad:d0:6c:60:2b:a6:2f:49:eb:8b:c7:33:6a:59:dc:6b:
         16:c4:6c:c7:5e:8d:47:20:7b:24:b7:68:8c:89:42:6f:e6:b2:
         71:c0:50:18:2b:ef:57:63:ed:8f:92:52:7e:26:89:48:80:f0:
         ef:ce:be:5c:80:62:bb:62:da:69:2e:b0:dd:ca:55:82:87:df:
         3c:21:32:d8:41:30:69:20:f5:d8:d2:19:a1:74:3d:e3:e3:91:
         22:93:a4:d6:fd:8b:61:c1:53:d3:5b:7f:96:c7:04:e9:31:14:
         e6:a0:c8:27:56:0c:cb:23:4a:c5:39:3d:90:6d:11:44:26:2f:
         fc:e9:8e:cf:d6:0e:d2:d9:90:76:35:46:e1:12:9e:8c:8b:89:
         8d:dc:65:5c:37:84:97:97:48:fe:46:69:46:d8:0e:08:bb:13:
         9d:bd:05:b6:8d:97:b9:f5:c0:64:8d:c1:98:c7:c8:79:21:1d:
         56:1d:8d:aa:74:e3:bb:23:08:7a:ae:64:31:3a:74:1d:3c:d0:
         51:35:b3:4c:74:b9:67:7e:db:29:60:9d:3a:08:d7:46:20:d5:
         b6:dd:5e:4d:17:4f:5f:f5:8e:50:9c:df:90:31:b5:9d:2b:54:
         7a:2b:ce:c7:90:c6:58:05:7e:35:86:02:61:71:d4:2a:4b:19:
         83:65:aa:94
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA+AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzgwQjUxMTAvBgNVBAUTKDdFNjVDNThGQTM0M0ExMEM1MzQzNTBBQjQ5N0ZEMDkw
Q0VFRkJGQkIwHhcNMjYwNDA1MDAyMzQ4WhcNMjYwNDEyMDAyMzQ4WjAYMRYwFAYD
VQQDEw02OWQxYWI5NS05ZGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuKZop4aJbnA6occyIrIjqIDErC2rALcl9adbmw1pfKzb/9bn4OX8112EC+/x
dRobfS+Z5XsCPgshDYgtnq/Xr2R0bd4mw0bf1kVos1LlQQhZaTWWcPWf4iVELnkK
w526A9+eOJIsmZa8mlA3PElkPqFQJXIpZpNV09MUCcbdTzc1OQ6mIV11eAVFmbIN
ROgtUl4enniEUiYjhhGlY+ZPPecrDyGU4Bn1kULGNfqOaR745cuMADFBDXnxO18i
9apzn3qGpvGAVcul/BxaXTZMDrUDSpYLU3+i7uts5hnSD23h5QLA97/3tZzfhzVo
DFxwN1TfvCQMmJnJYPQnAWW/mQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKqd7sGC
xnh8ARvogdlLl8g3XDeVMB8GA1UdIwQYMBaAFH5lxY+jQ6EMU0NQq0l/0JDO77+7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODBCNS82OTQ2M0QwNENB
M0QxMUVDOTFBQzQyNkRDNEY5QUUwMi9mbVhGajZORG9ReFRRMUNyU1hfUWtNN3Z2
N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZtWEZqNk5Eb1F4VFExQ3JTWF9Ra003dnY3cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
ODBCNS82OTQ2M0QwNENBM0QxMUVDOTFBQzQyNkRDNEY5QUUwMi9mbVhGajZORG9R
eFRRMUNyU1hfUWtNN3Z2N3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAg9Ct0GxgK6YvSeuLxzNqWdxrFsRsx16NRyB7JLdojIlCb+ayccBQGCvvV2Pt
j5JSfiaJSIDw786+XIBiu2LaaS6w3cpVgoffPCEy2EEwaSD12NIZoXQ94+ORIpOk
1v2LYcFT01t/lscE6TEU5qDIJ1YMyyNKxTk9kG0RRCYv/OmOz9YO0tmQdjVG4RKe
jIuJjdxlXDeEl5dI/kZpRtgOCLsTnb0Fto2XufXAZI3BmMfIeSEdVh2NqnTjuyMI
eq5kMTp0HTzQUTWzTHS5Z37bKWCdOgjXRiDVtt1eTRdPX/WOUJzfkDG1nStUeivO
x5DGWAV+NYYCYXHUKksZg2WqlA==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:51:04 2026 by rpki-client