Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/0PiwBllsfAN8tUkwWzlpAACq6KQ.mft
File:                     0PiwBllsfAN8tUkwWzlpAACq6KQ.mft (raw, json)
Hash identifier:          nzBfCnRAKQxXMejjsWXf/o3XNusBcoVTLSZlGXB8ufY=
Subject key identifier:   8D:26:5B:CF:3E:2B:9D:6F:2E:B4:CD:73:F0:FA:23:18:EE:8C:D1:28
Authority key identifier: D0:F8:B0:06:59:6C:7C:03:7C:B5:49:30:5B:39:69:00:00:AA:E8:A4
Certificate issuer:       /CN=A91754C0/serialNumber=D0F8B006596C7C037CB549305B39690000AAE8A4
Certificate serial:       019E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0PiwBllsfAN8tUkwWzlpAACq6KQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/0PiwBllsfAN8tUkwWzlpAACq6KQ.mft
Manifest number:          0192
Signing time:             Sun 05 Apr 2026 03:50:38 +0000
Manifest this update:     Sun 05 Apr 2026 03:50:38 +0000
Manifest next update:     Sun 12 Apr 2026 03:50:38 +0000
Files and hashes:         1: 0PiwBllsfAN8tUkwWzlpAACq6KQ.crl (hash: OS0zD9g23nzNELd+BGI1RbqGaCJbumxeV/PEuqMXMrI=)
                          2: D0CB00D4CCBD11EEAC4BCD4BC4F9AE02.roa (hash: CHmfasvIFMB8cvnVplF2VU1d1UcvTiGGkiQVF3TlMl8=)
                          3: 6BA3FEA4CCBD11EEBADDFC4AC4F9AE02.roa (hash: tbhcExPyMdasBxcbE73h7b5HlPi0div8uaJX4sMb5Ow=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/0PiwBllsfAN8tUkwWzlpAACq6KQ.crl
                          rsync://rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/0PiwBllsfAN8tUkwWzlpAACq6KQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0PiwBllsfAN8tUkwWzlpAACq6KQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 03:50:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 414 (0x19e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91754C0, serialNumber=D0F8B006596C7C037CB549305B39690000AAE8A4
        Validity
            Not Before: Apr  5 03:50:38 2026 GMT
            Not After : Apr 12 03:50:38 2026 GMT
        Subject: CN=69d1dc0e-cf16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:76:67:6f:2e:1d:d2:94:99:95:8b:4a:ab:cc:
                    70:32:a4:8c:fa:e4:3c:5c:07:60:6b:ae:81:09:24:
                    f2:85:d9:2c:e7:01:d0:f3:48:72:61:a0:ef:57:da:
                    62:96:c1:97:9c:80:2e:39:e6:62:a7:6d:c5:71:dc:
                    a9:18:58:5c:36:60:0b:8c:3a:71:46:7b:75:80:80:
                    95:07:ae:01:26:1c:0f:38:da:10:1c:19:a2:a8:5c:
                    77:e2:03:a9:50:23:be:d1:1a:51:c7:97:24:af:d7:
                    ba:d8:a9:00:86:c3:7c:0e:d8:99:98:ba:ea:9a:cc:
                    c0:f0:63:fe:1b:43:03:4c:92:e4:c9:db:0f:b7:7b:
                    d7:70:d9:44:0e:59:b8:b1:39:b8:0a:5f:56:3d:2b:
                    cb:1f:4e:43:66:e2:7e:60:cd:57:df:ac:12:b7:e4:
                    31:b6:08:2c:b5:d8:f9:cd:61:da:98:c4:63:66:d0:
                    a3:bf:61:6a:7f:a1:3c:e5:7d:ee:a8:3d:f8:5f:f0:
                    fd:fd:e2:5e:2e:b1:fc:f3:1e:00:ce:93:fe:53:c1:
                    ea:f2:4e:b6:1d:11:40:7d:a2:81:09:6a:f2:a1:04:
                    4e:26:31:1a:ec:1b:10:de:a5:f3:89:54:3d:59:52:
                    91:f6:5a:c1:d9:9a:46:fb:1f:07:00:56:cd:b2:9e:
                    78:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:26:5B:CF:3E:2B:9D:6F:2E:B4:CD:73:F0:FA:23:18:EE:8C:D1:28
            X509v3 Authority Key Identifier:
                keyid:D0:F8:B0:06:59:6C:7C:03:7C:B5:49:30:5B:39:69:00:00:AA:E8:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/0PiwBllsfAN8tUkwWzlpAACq6KQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0PiwBllsfAN8tUkwWzlpAACq6KQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/0PiwBllsfAN8tUkwWzlpAACq6KQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:99:f3:9f:75:87:4d:17:12:8c:9e:8f:99:c2:a6:7b:58:28:
         3f:90:64:0b:59:ff:f7:8a:3a:3b:ea:74:8d:25:51:1c:b4:74:
         43:44:a2:3d:07:8d:0b:d7:41:5a:be:a7:c2:c3:14:81:e4:8a:
         97:84:ea:4c:f3:d8:be:f0:0b:3b:a4:20:fe:c1:08:b8:4e:fe:
         c5:51:18:55:bb:f8:bc:f5:1c:bd:60:89:2e:95:d1:90:ac:e8:
         1b:60:5d:a9:32:5c:2d:4b:41:5e:98:24:07:cc:b2:6e:c1:f0:
         42:b9:5d:e2:16:9e:3a:ea:4c:20:fd:6e:06:26:21:77:54:48:
         62:4f:18:50:28:b6:49:fa:e4:81:38:05:e9:01:f9:5b:41:64:
         78:29:b3:72:0e:e8:79:80:97:80:c0:5c:7e:09:90:13:7d:55:
         79:fe:b2:2a:84:cc:71:47:25:75:8e:45:e8:a0:a3:35:e3:48:
         d7:76:7a:02:eb:36:fa:2d:4a:2b:d6:fb:8d:e1:8d:a7:00:ad:
         56:fe:25:a6:23:fa:87:24:24:0d:7d:e1:51:8c:bd:cf:bd:a0:
         11:68:28:89:d4:fc:7e:e1:a9:27:36:3c:6d:dd:0f:93:ab:76:
         1e:2b:f1:01:10:e3:88:93:3d:38:60:9c:9d:72:f5:df:55:b8:
         be:ac:7e:f2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzU0QzAxMTAvBgNVBAUTKEQwRjhCMDA2NTk2QzdDMDM3Q0I1NDkzMDVCMzk2OTAw
MDBBQUU4QTQwHhcNMjYwNDA1MDM1MDM4WhcNMjYwNDEyMDM1MDM4WjAYMRYwFAYD
VQQDEw02OWQxZGMwZS1jZjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvHZnby4d0pSZlYtKq8xwMqSM+uQ8XAdga66BCSTyhdks5wHQ80hyYaDvV9pi
lsGXnIAuOeZip23FcdypGFhcNmALjDpxRnt1gICVB64BJhwPONoQHBmiqFx34gOp
UCO+0RpRx5ckr9e62KkAhsN8DtiZmLrqmszA8GP+G0MDTJLkydsPt3vXcNlEDlm4
sTm4Cl9WPSvLH05DZuJ+YM1X36wSt+Qxtggstdj5zWHamMRjZtCjv2Fqf6E85X3u
qD34X/D9/eJeLrH88x4AzpP+U8Hq8k62HRFAfaKBCWryoQROJjEa7BsQ3qXziVQ9
WVKR9lrB2ZpG+x8HAFbNsp54xQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI0mW88+
K51vLrTNc/D6IxjujNEoMB8GA1UdIwQYMBaAFND4sAZZbHwDfLVJMFs5aQAAquik
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTRDMC9GRURGNTcyRUND
QkIxMUVFOEEwRjc3NDhDNEY5QUUwMi8wUGl3Qmxsc2ZBTjh0VWt3V3pscEFBQ3E2
S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzBQaXdCbGxzZkFOOHRVa3dXemxwQUFDcTZLUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NTRDMC9GRURGNTcyRUNDQkIxMUVFOEEwRjc3NDhDNEY5QUUwMi8wUGl3Qmxsc2ZB
Tjh0VWt3V3pscEFBQ3E2S1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHZnzn3WHTRcSjJ6PmcKme1goP5BkC1n/94o6O+p0jSVRHLR0Q0SiPQeNC9dB
Wr6nwsMUgeSKl4TqTPPYvvALO6Qg/sEIuE7+xVEYVbv4vPUcvWCJLpXRkKzoG2Bd
qTJcLUtBXpgkB8yybsHwQrld4haeOupMIP1uBiYhd1RIYk8YUCi2SfrkgTgF6QH5
W0FkeCmzcg7oeYCXgMBcfgmQE31Vef6yKoTMcUcldY5F6KCjNeNI13Z6Aus2+i1K
K9b7jeGNpwCtVv4lpiP6hyQkDX3hUYy9z72gEWgoidT8fuGpJzY8bd0Pk6t2Hivx
ARDjiJM9OGCcnXL131W4vqx+8g==
-----END CERTIFICATE-----
Generated at Mon Apr 6 13:39:56 2026 by rpki-client