Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.mft
File:                     83GJVwUMS84UpOw46qzunHQkTE8.mft (raw, json)
Hash identifier:          EH/3ta2sHnBwwlQTniBCRLX+e/kNi8NLLqyr1b3Vg7Y=
Subject key identifier:   04:AA:88:C9:4F:00:38:41:EE:21:64:D4:59:4A:74:25:C4:49:5C:B4
Authority key identifier: F3:71:89:57:05:0C:4B:CE:14:A4:EC:38:EA:AC:EE:9C:74:24:4C:4F
Certificate issuer:       /CN=A91426E8/serialNumber=F3718957050C4BCE14A4EC38EAACEE9C74244C4F
Certificate serial:       A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83GJVwUMS84UpOw46qzunHQkTE8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.mft
Manifest number:          A0
Signing time:             Wed 01 Apr 2026 07:18:54 +0000
Manifest this update:     Wed 01 Apr 2026 07:18:53 +0000
Manifest next update:     Wed 08 Apr 2026 07:18:53 +0000
Files and hashes:         1: 83GJVwUMS84UpOw46qzunHQkTE8.crl (hash: oSrr6XxOxVT2NROqJDTWqnm0nHFAOwwnJ00K5uIJpPc=)
                          2: B240CFC23F8A11F0B3F03A67C4F9AE02.roa (hash: 1jd/x+c/FOgCs+jTMrNMeNYXR2ODxGAIH6mfN2rcKo4=)
                          3: F34C44FC3F7511F0A963EE11C4F9AE02.roa (hash: esjeBUskXeiuKK+21nCPNNCLp5PBYsrkVGWW22aTj9g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.crl
                          rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83GJVwUMS84UpOw46qzunHQkTE8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165 (0xa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91426E8, serialNumber=F3718957050C4BCE14A4EC38EAACEE9C74244C4F
        Validity
            Not Before: Apr  1 07:18:53 2026 GMT
            Not After : Apr  8 07:18:53 2026 GMT
        Subject: CN=69ccc6de-b00b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5e:34:7d:2f:34:37:6e:a0:95:93:1d:ed:ea:
                    dd:33:bb:3d:89:dc:9d:1b:6a:bb:a3:ee:c0:4c:9f:
                    84:77:fd:73:1c:28:4f:31:60:fc:a1:65:40:ce:d4:
                    bd:cc:22:bc:2d:af:38:a2:38:41:a3:51:e1:11:68:
                    d9:30:d9:60:39:d0:62:9f:88:50:da:93:04:9a:53:
                    0b:54:f9:ad:8f:f0:4c:1e:ba:42:3e:75:38:81:56:
                    00:6e:97:7b:e2:b5:87:05:8d:45:99:6f:0c:2d:ea:
                    2b:78:62:d6:4b:92:9e:6b:5f:9c:9a:56:4f:7a:40:
                    a7:03:2c:3f:0c:ae:77:73:fd:d0:76:74:cf:ab:e4:
                    e7:d8:e4:d5:1d:b0:b4:19:08:a4:b5:57:f4:21:1a:
                    53:bd:90:c1:54:80:00:16:e2:1f:0e:40:c5:d0:95:
                    49:4f:c6:68:48:6a:83:48:98:b2:43:f7:f3:39:e8:
                    26:2e:e6:cc:e2:af:d7:21:47:ae:dd:e3:21:e9:2c:
                    56:6e:ed:2d:6c:d8:b9:25:a3:c7:d7:0a:8d:39:d9:
                    ae:b3:a0:3a:e6:f8:4c:41:69:15:ef:f9:91:09:13:
                    32:25:57:39:e2:75:15:aa:68:10:1f:8b:f3:08:3d:
                    2a:cd:fe:b4:b9:62:f2:10:5e:17:0a:0e:54:f6:45:
                    8a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:AA:88:C9:4F:00:38:41:EE:21:64:D4:59:4A:74:25:C4:49:5C:B4
            X509v3 Authority Key Identifier:
                keyid:F3:71:89:57:05:0C:4B:CE:14:A4:EC:38:EA:AC:EE:9C:74:24:4C:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83GJVwUMS84UpOw46qzunHQkTE8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:a6:38:31:a8:f9:b9:2c:5c:2c:e3:b9:ba:93:2b:88:e6:f0:
         f1:93:9d:04:b8:6c:56:7d:60:d8:c3:b4:74:77:cb:2f:d4:29:
         3a:fc:50:9d:4c:db:9b:b1:23:cb:15:b8:fa:fd:27:1e:2e:71:
         e3:d9:a5:b7:f6:62:a4:97:51:1e:b2:d0:f4:cf:77:ad:04:11:
         e5:b9:bd:9b:c0:19:51:b6:43:52:24:f2:b0:b8:46:53:d3:ef:
         87:9d:27:b0:e4:40:a6:3e:a2:7c:b2:c7:2d:97:54:d4:14:2d:
         c9:9e:6a:92:e1:a2:b9:6e:d1:8b:ce:aa:be:e9:4d:4a:6f:a2:
         2b:75:3c:26:04:57:6a:fb:2c:73:81:3e:a8:23:f7:b5:de:40:
         6d:bc:f7:28:c8:3d:6e:1c:2f:7b:06:04:56:27:07:6f:f1:6d:
         5a:fd:5d:04:7f:73:19:04:42:0b:9d:e2:c9:db:73:ec:08:7b:
         1d:05:90:e0:fb:c8:ba:64:c4:c4:2d:36:93:a3:a8:5c:73:28:
         49:97:0a:99:e2:e1:4f:ba:08:26:1f:86:9e:56:93:f8:58:2e:
         1d:9e:19:9a:5d:8c:77:50:17:08:88:7d:a5:6c:ed:7b:d3:38:
         6f:84:37:9c:ed:eb:28:65:ee:22:97:df:9d:47:ea:3b:c8:b9:
         3e:26:76:19
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDI2RTgxMTAvBgNVBAUTKEYzNzE4OTU3MDUwQzRCQ0UxNEE0RUMzOEVBQUNFRTlD
NzQyNDRDNEYwHhcNMjYwNDAxMDcxODUzWhcNMjYwNDA4MDcxODUzWjAYMRYwFAYD
VQQDEw02OWNjYzZkZS1iMDBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyF40fS80N26glZMd7erdM7s9idydG2q7o+7ATJ+Ed/1zHChPMWD8oWVAztS9
zCK8La84ojhBo1HhEWjZMNlgOdBin4hQ2pMEmlMLVPmtj/BMHrpCPnU4gVYAbpd7
4rWHBY1FmW8MLeoreGLWS5Kea1+cmlZPekCnAyw/DK53c/3QdnTPq+Tn2OTVHbC0
GQiktVf0IRpTvZDBVIAAFuIfDkDF0JVJT8ZoSGqDSJiyQ/fzOegmLubM4q/XIUeu
3eMh6SxWbu0tbNi5JaPH1wqNOdmus6A65vhMQWkV7/mRCRMyJVc54nUVqmgQH4vz
CD0qzf60uWLyEF4XCg5U9kWKswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFASqiMlP
ADhB7iFk1FlKdCXESVy0MB8GA1UdIwQYMBaAFPNxiVcFDEvOFKTsOOqs7px0JExP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjZFOC84RDVBQTE3QTNG
NzUxMUYwOTYyMzJBMTFDNEY5QUUwMi84M0dKVndVTVM4NFVwT3c0NnF6dW5IUWtU
RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzgzR0pWd1VNUzg0VXBPdzQ2cXp1bkhRa1RFOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MjZFOC84RDVBQTE3QTNGNzUxMUYwOTYyMzJBMTFDNEY5QUUwMi84M0dKVndVTVM4
NFVwT3c0NnF6dW5IUWtURTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPKY4Maj5uSxcLOO5upMriObw8ZOdBLhsVn1g2MO0dHfLL9QpOvxQnUzbm7Ej
yxW4+v0nHi5x49mlt/ZipJdRHrLQ9M93rQQR5bm9m8AZUbZDUiTysLhGU9Pvh50n
sORApj6ifLLHLZdU1BQtyZ5qkuGiuW7Ri86qvulNSm+iK3U8JgRXavssc4E+qCP3
td5Abbz3KMg9bhwvewYEVicHb/FtWv1dBH9zGQRCC53iydtz7Ah7HQWQ4PvIumTE
xC02k6OoXHMoSZcKmeLhT7oIJh+GnlaT+FguHZ4Zml2Md1AXCIh9pWzte9M4b4Q3
nO3rKGXuIpffnUfqO8i5PiZ2GQ==
-----END CERTIFICATE-----
Generated at Wed Apr 1 17:11:21 2026 by rpki-client