Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft
File:                     eX36GIOfh9ExDpypw0EKvraDnnQ.mft (raw, json)
Hash identifier:          /QSsRpdJq0S4mxyEBjEOlYfPKqYyQET9EtqxOSIewp4=
Subject key identifier:   5C:25:BF:89:05:0C:C8:61:0D:39:66:DC:CE:47:ED:37:F0:3E:26:A5
Authority key identifier: 79:7D:FA:18:83:9F:87:D1:31:0E:9C:A9:C3:41:0A:BE:B6:83:9E:74
Certificate issuer:       /CN=A9167F52/serialNumber=797DFA18839F87D1310E9CA9C3410ABEB6839E74
Certificate serial:       04C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eX36GIOfh9ExDpypw0EKvraDnnQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft
Manifest number:          04C1
Signing time:             Sat 04 Apr 2026 23:40:59 +0000
Manifest this update:     Sat 04 Apr 2026 23:40:59 +0000
Manifest next update:     Sat 11 Apr 2026 23:40:59 +0000
Files and hashes:         1: eX36GIOfh9ExDpypw0EKvraDnnQ.crl (hash: NtEGXmLRsSwWsgd4np/5V/MXiiHl4rGjzjSh1kzpn18=)
                          2: ED6CA80868B211EC9974F51FC4F9AE02.roa (hash: 7dmcjwf3qKkvWDXhJJ0yFS4Iw9ffbjP8rVUkXu2XNOE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.crl
                          rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eX36GIOfh9ExDpypw0EKvraDnnQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 23:40:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1225 (0x4c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167F52, serialNumber=797DFA18839F87D1310E9CA9C3410ABEB6839E74
        Validity
            Not Before: Apr  4 23:40:59 2026 GMT
            Not After : Apr 11 23:40:59 2026 GMT
        Subject: CN=69d1a18b-5836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ad:68:16:d2:9e:0f:a0:7f:16:9d:7d:12:b2:
                    2e:7f:83:99:c2:ac:9f:b6:4b:21:b4:ff:46:42:82:
                    e8:d1:ea:52:b2:a1:b6:8e:f6:a4:d5:11:fc:55:7a:
                    d9:dd:0a:ac:39:42:f6:60:28:45:d1:50:8e:25:73:
                    7b:e8:a0:f6:e7:c4:d3:16:0b:bb:2c:b1:79:54:ac:
                    57:75:df:dc:ac:d1:01:61:db:81:16:70:d2:e8:d5:
                    9b:91:14:a5:f1:15:ad:c5:3c:2f:5e:3b:5a:d9:5a:
                    69:51:b3:59:34:61:d1:17:82:f6:1b:11:3f:f2:9f:
                    1b:16:0e:28:38:c2:2e:31:9e:9e:4f:9e:fe:f9:0d:
                    7c:46:f7:b4:b8:e7:b7:11:4a:65:53:83:99:d1:cf:
                    61:9f:25:fc:00:3a:07:24:85:e4:8a:2c:0e:23:44:
                    e5:c1:60:47:e3:73:7c:39:c2:60:4f:1f:31:40:91:
                    f0:3e:66:ee:fd:5e:8b:46:5f:45:6e:44:bb:f8:8b:
                    b8:f0:4e:75:e5:46:da:58:e3:31:a3:77:74:80:ff:
                    fe:b5:e5:d1:e3:d4:a2:63:8c:c4:e7:23:75:51:be:
                    0d:3e:0e:63:fe:18:8a:de:8d:4d:2d:19:7f:1b:03:
                    29:43:f9:28:63:2c:e1:bb:0c:02:27:30:7b:2f:b7:
                    b1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:25:BF:89:05:0C:C8:61:0D:39:66:DC:CE:47:ED:37:F0:3E:26:A5
            X509v3 Authority Key Identifier:
                keyid:79:7D:FA:18:83:9F:87:D1:31:0E:9C:A9:C3:41:0A:BE:B6:83:9E:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eX36GIOfh9ExDpypw0EKvraDnnQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:5a:ae:17:f5:6b:89:03:aa:3b:9b:bd:8a:f0:2a:03:d9:45:
         c6:af:a3:7b:01:15:70:b1:b9:c8:74:b1:71:d7:b9:15:15:c8:
         f1:bb:80:4b:61:a0:b1:4f:90:21:ee:cb:9b:28:1e:2f:c7:31:
         d6:b4:c8:7d:d3:e3:08:6b:ee:a4:07:eb:9a:23:60:2e:97:1e:
         9a:eb:58:d9:2b:76:e3:bb:cf:36:45:13:d9:bb:5d:41:fe:4a:
         ae:d1:bf:88:b8:a6:ba:34:f7:f9:0d:71:8c:20:30:40:16:81:
         ff:9c:68:f8:d4:d6:25:8f:19:45:e5:cd:8a:13:6d:6b:11:56:
         c4:60:cf:69:9c:16:13:aa:cb:31:64:f2:ae:56:c5:76:4e:48:
         a6:c5:08:7d:22:83:b6:42:82:0d:3a:84:d6:c9:36:01:85:de:
         98:02:8a:96:e3:37:8c:25:9e:72:2f:38:da:cc:35:d7:0e:b5:
         1e:9f:39:8d:23:f2:20:43:be:2d:64:d2:60:9d:51:09:f9:95:
         06:8b:75:a3:fc:ee:f9:f6:62:ea:d9:94:aa:60:b5:41:30:5d:
         f8:21:1d:aa:6b:b7:cb:e8:33:44:20:28:03:fd:67:f0:86:53:
         e4:44:e4:78:84:29:e1:bf:3b:2e:ab:8b:f9:20:31:78:3e:be:
         d4:3a:21:9a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjdGNTIxMTAvBgNVBAUTKDc5N0RGQTE4ODM5Rjg3RDEzMTBFOUNBOUMzNDEwQUJF
QjY4MzlFNzQwHhcNMjYwNDA0MjM0MDU5WhcNMjYwNDExMjM0MDU5WjAYMRYwFAYD
VQQDEw02OWQxYTE4Yi01ODM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApK1oFtKeD6B/Fp19ErIuf4OZwqyftkshtP9GQoLo0epSsqG2jvak1RH8VXrZ
3QqsOUL2YChF0VCOJXN76KD258TTFgu7LLF5VKxXdd/crNEBYduBFnDS6NWbkRSl
8RWtxTwvXjta2VppUbNZNGHRF4L2GxE/8p8bFg4oOMIuMZ6eT57++Q18Rve0uOe3
EUplU4OZ0c9hnyX8ADoHJIXkiiwOI0TlwWBH43N8OcJgTx8xQJHwPmbu/V6LRl9F
bkS7+Iu48E515UbaWOMxo3d0gP/+teXR49SiY4zE5yN1Ub4NPg5j/hiK3o1NLRl/
GwMpQ/koYyzhuwwCJzB7L7exAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFwlv4kF
DMhhDTlm3M5H7TfwPialMB8GA1UdIwQYMBaAFHl9+hiDn4fRMQ6cqcNBCr62g550
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0Y1Mi9FOTQ2NjZDQzY4
QUYxMUVDQURENkI1NkZDNEY5QUUwMi9lWDM2R0lPZmg5RXhEcHlwdzBFS3ZyYURu
blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VYMzZHSU9maDlFeERweXB3MEVLdnJhRG5uUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
N0Y1Mi9FOTQ2NjZDQzY4QUYxMUVDQURENkI1NkZDNEY5QUUwMi9lWDM2R0lPZmg5
RXhEcHlwdzBFS3ZyYURublEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhVquF/VriQOqO5u9ivAqA9lFxq+jewEVcLG5yHSxcde5FRXI8buAS2GgsU+Q
Ie7LmygeL8cx1rTIfdPjCGvupAfrmiNgLpcemutY2St247vPNkUT2btdQf5KrtG/
iLimujT3+Q1xjCAwQBaB/5xo+NTWJY8ZReXNihNtaxFWxGDPaZwWE6rLMWTyrlbF
dk5IpsUIfSKDtkKCDTqE1sk2AYXemAKKluM3jCWeci842sw11w61Hp85jSPyIEO+
LWTSYJ1RCfmVBot1o/zu+fZi6tmUqmC1QTBd+CEdqmu3y+gzRCAoA/1n8IZT5ETk
eIQp4b87LquL+SAxeD6+1Dohmg==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:29:05 2026 by rpki-client