Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft
File:                     ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft (raw, json)
Hash identifier:          VP2urfqhvqbMGaPM7cuplWOK+e8cfkOr56Msc9JI2d4=
Subject key identifier:   02:78:02:86:10:F9:FA:34:69:45:71:32:2E:58:BC:B7:82:E8:E1:23
Authority key identifier: 21:26:1B:89:74:98:93:C3:B3:18:41:B9:6F:E3:FB:63:23:03:2F:18
Certificate issuer:       /CN=A913F2E2/serialNumber=21261B89749893C3B31841B96FE3FB6323032F18
Certificate serial:       0151
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ISYbiXSYk8OzGEG5b-P7YyMDLxg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft
Manifest number:          0148
Signing time:             Sun 05 Apr 2026 04:41:15 +0000
Manifest this update:     Sun 05 Apr 2026 04:41:14 +0000
Manifest next update:     Sun 12 Apr 2026 04:41:14 +0000
Files and hashes:         1: ISYbiXSYk8OzGEG5b-P7YyMDLxg.crl (hash: pztxfc/vTmZ21Qego/pxtt60f6mT3Jqvwg1tcWDjyPQ=)
                          2: A8051CC4508011EF81053074C4F9AE02.roa (hash: gEOQ4Shko9Ffhb3sUw/V54wk1wOVzUKZiGrhJDBT6Fs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.crl
                          rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ISYbiXSYk8OzGEG5b-P7YyMDLxg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 04:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 337 (0x151)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F2E2, serialNumber=21261B89749893C3B31841B96FE3FB6323032F18
        Validity
            Not Before: Apr  5 04:41:14 2026 GMT
            Not After : Apr 12 04:41:14 2026 GMT
        Subject: CN=69d1e7eb-19ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:36:d2:90:4c:d3:41:04:f4:ab:38:fb:30:cd:
                    fa:92:92:6d:49:bb:af:b0:cb:0e:90:96:03:0c:21:
                    59:51:bb:d7:bd:d1:2a:39:0d:d2:97:91:65:73:36:
                    b0:f1:c2:64:40:65:a1:30:a9:a5:15:18:ea:0c:e6:
                    d9:a7:a4:a4:0a:ae:9b:1e:37:b9:af:f4:6f:52:c8:
                    2a:30:27:10:63:56:01:53:a2:67:00:95:c2:33:4b:
                    4b:b8:92:e5:c6:bc:67:dd:5d:a0:25:02:67:ed:0d:
                    a6:69:3e:9d:2b:ac:22:9a:a7:42:04:b0:14:f0:1f:
                    16:a8:f5:80:80:44:61:b5:b8:5f:95:c8:65:6d:a1:
                    b7:65:b5:81:10:1a:c9:14:00:61:34:e8:d2:b4:d5:
                    e7:08:55:9a:cd:94:7f:36:8a:44:98:b6:cf:eb:f6:
                    0c:28:2d:6b:f9:29:5f:3d:ff:ca:e6:d9:e9:48:ce:
                    46:1e:de:2a:4d:28:2b:c6:ac:18:d8:b6:1c:a3:bd:
                    5a:d4:e0:4d:06:d2:8b:d0:e1:c9:c2:fa:a1:c1:1f:
                    2f:a9:0d:51:73:69:94:d8:5c:c9:b9:3d:d6:0e:c4:
                    2d:cf:8c:43:92:50:2e:43:44:60:76:15:86:72:4e:
                    05:bb:7e:6e:ab:c2:d4:84:14:ae:5b:5e:2e:ff:88:
                    2d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:78:02:86:10:F9:FA:34:69:45:71:32:2E:58:BC:B7:82:E8:E1:23
            X509v3 Authority Key Identifier:
                keyid:21:26:1B:89:74:98:93:C3:B3:18:41:B9:6F:E3:FB:63:23:03:2F:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ISYbiXSYk8OzGEG5b-P7YyMDLxg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:ca:b4:65:a6:9a:f8:32:25:07:ba:b8:ed:c4:e2:8d:3e:26:
         10:4e:fb:90:5e:6f:bb:af:bf:64:44:dd:c3:c2:3f:0a:5c:e8:
         03:40:8f:9c:17:9b:79:48:fa:f7:1f:28:25:33:6d:35:48:d7:
         5b:90:39:38:09:4d:1f:c2:8a:a5:69:25:67:b9:2b:b5:3e:ff:
         25:d8:31:67:4b:19:b6:66:c8:2d:35:d6:5b:a3:62:02:70:2c:
         35:6e:e8:39:b5:4c:cb:a2:38:36:b0:e0:a4:28:a2:85:a7:36:
         4d:6f:f0:1f:74:7d:c2:9c:26:24:67:b9:47:7e:1d:bc:61:00:
         a3:99:cf:5f:b2:e5:6b:01:26:b7:b8:34:25:f2:28:00:62:2b:
         93:54:85:ef:51:92:a1:97:92:77:3c:80:ae:9a:aa:6d:86:08:
         38:f0:57:13:10:13:7c:4a:b0:eb:d6:10:d4:f1:9e:34:bd:99:
         19:bb:79:23:b5:ed:07:32:6c:e0:59:bf:ae:87:a7:5c:81:72:
         28:8f:c8:47:15:af:9f:dc:2e:7e:7c:b8:81:e6:69:59:5d:70:
         c1:f5:34:e2:1e:12:1a:cd:e4:54:6c:a8:17:50:33:87:ea:5b:
         ce:2c:2f:c0:f5:9d:4a:c1:4a:7c:df:ac:41:06:62:39:74:44:
         bc:00:33:ef
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0YyRTIxMTAvBgNVBAUTKDIxMjYxQjg5NzQ5ODkzQzNCMzE4NDFCOTZGRTNGQjYz
MjMwMzJGMTgwHhcNMjYwNDA1MDQ0MTE0WhcNMjYwNDEyMDQ0MTE0WjAYMRYwFAYD
VQQDEw02OWQxZTdlYi0xOWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArDbSkEzTQQT0qzj7MM36kpJtSbuvsMsOkJYDDCFZUbvXvdEqOQ3Sl5Flczaw
8cJkQGWhMKmlFRjqDObZp6SkCq6bHje5r/RvUsgqMCcQY1YBU6JnAJXCM0tLuJLl
xrxn3V2gJQJn7Q2maT6dK6wimqdCBLAU8B8WqPWAgERhtbhflchlbaG3ZbWBEBrJ
FABhNOjStNXnCFWazZR/NopEmLbP6/YMKC1r+SlfPf/K5tnpSM5GHt4qTSgrxqwY
2LYco71a1OBNBtKL0OHJwvqhwR8vqQ1Rc2mU2FzJuT3WDsQtz4xDklAuQ0RgdhWG
ck4Fu35uq8LUhBSuW14u/4gt5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAJ4AoYQ
+fo0aUVxMi5YvLeC6OEjMB8GA1UdIwQYMBaAFCEmG4l0mJPDsxhBuW/j+2MjAy8Y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjJFMi9DNUI2QjkzNjQ0
MDQxMUVGQjlBNjJDMERDNEY5QUUwMi9JU1liaVhTWWs4T3pHRUc1Yi1QN1l5TURM
eGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lTWWJpWFNZazhPekdFRzViLVA3WXlNREx4Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RjJFMi9DNUI2QjkzNjQ0MDQxMUVGQjlBNjJDMERDNEY5QUUwMi9JU1liaVhTWWs4
T3pHRUc1Yi1QN1l5TURMeGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAs8q0Zaaa+DIlB7q47cTijT4mEE77kF5vu6+/ZETdw8I/ClzoA0CPnBebeUj6
9x8oJTNtNUjXW5A5OAlNH8KKpWklZ7krtT7/JdgxZ0sZtmbILTXWW6NiAnAsNW7o
ObVMy6I4NrDgpCiihac2TW/wH3R9wpwmJGe5R34dvGEAo5nPX7LlawEmt7g0JfIo
AGIrk1SF71GSoZeSdzyArpqqbYYIOPBXExATfEqw69YQ1PGeNL2ZGbt5I7XtBzJs
4Fm/roenXIFyKI/IRxWvn9wufny4geZpWV1wwfU04h4SGs3kVGyoF1Azh+pbziwv
wPWdSsFKfN+sQQZiOXREvAAz7w==
-----END CERTIFICATE-----
Generated at Mon Apr 6 10:10:04 2026 by rpki-client