Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft
File:                     0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft (raw, json)
Hash identifier:          tSy/IOHs9Pnq+2xSamFJZy7pn+3Kj/7V+OixZPnj1vc=
Subject key identifier:   77:FF:81:76:DA:FD:61:89:C1:32:76:AE:F0:42:F3:14:25:EB:AA:EB
Authority key identifier: D0:5A:C9:0A:20:7F:60:87:CE:02:ED:C2:31:88:E3:2A:AA:1B:1B:44
Certificate issuer:       /CN=A918C212/serialNumber=D05AC90A207F6087CE02EDC23188E32AAA1B1B44
Certificate serial:       01B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0FrJCiB_YIfOAu3CMYjjKqobG0Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft
Manifest number:          01AD
Signing time:             Sun 05 Apr 2026 03:31:54 +0000
Manifest this update:     Sun 05 Apr 2026 03:31:53 +0000
Manifest next update:     Sun 12 Apr 2026 03:31:53 +0000
Files and hashes:         1: 0FrJCiB_YIfOAu3CMYjjKqobG0Q.crl (hash: vyl4ozwHDVEnsrO3papB+1wIzBL6wEleIWcdQeF+jJE=)
                          2: BCBA699CA2D111EE89C12A4EC4F9AE02.roa (hash: KrxtGQ6yO11/02qFy5rXfTDmn9HLGbG+hCojfXNvsGU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.crl
                          rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0FrJCiB_YIfOAu3CMYjjKqobG0Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 03:31:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 434 (0x1b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C212, serialNumber=D05AC90A207F6087CE02EDC23188E32AAA1B1B44
        Validity
            Not Before: Apr  5 03:31:53 2026 GMT
            Not After : Apr 12 03:31:53 2026 GMT
        Subject: CN=69d1d7aa-8e6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:87:af:75:ca:20:da:40:22:01:2b:cc:32:bf:
                    b9:0c:3f:82:a1:1a:de:9f:be:db:3e:34:ca:df:3f:
                    5d:76:e0:06:90:9c:6b:bc:cb:8d:23:fb:0b:57:b9:
                    2a:d8:e4:fa:67:ba:af:e0:ae:48:fa:59:e1:37:16:
                    48:3a:f9:60:ac:8e:a1:3e:88:db:5f:98:af:27:56:
                    9c:7c:15:14:51:b9:d2:e8:79:82:e3:f2:4f:74:7f:
                    76:10:bb:e3:92:7f:40:16:44:87:8d:28:58:b4:3c:
                    1f:7a:dc:89:a6:5b:99:7d:47:57:c3:a7:8d:44:31:
                    16:2e:06:1a:83:f4:66:51:3f:72:1d:2b:9d:33:85:
                    19:58:dc:ac:d7:60:d0:4b:00:75:fc:9c:05:5e:3f:
                    5a:9f:85:1f:51:bb:87:19:b5:c2:ec:3c:d2:f1:ed:
                    00:ca:bc:39:b5:41:ae:7b:9d:97:35:23:cf:d7:3a:
                    8e:47:ec:06:8b:0e:8f:05:fb:78:09:d7:5a:15:c9:
                    f8:0b:c1:75:01:6f:ab:7d:b4:e4:16:13:2a:9f:ab:
                    82:0e:96:29:73:3f:d7:e1:ab:2a:5a:1e:fe:6d:1e:
                    fc:f7:eb:b3:c5:3e:0d:93:45:7c:f6:a8:ae:0b:dd:
                    94:c8:99:6e:49:bb:54:49:bf:73:5e:ed:ca:4a:ae:
                    8d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:FF:81:76:DA:FD:61:89:C1:32:76:AE:F0:42:F3:14:25:EB:AA:EB
            X509v3 Authority Key Identifier:
                keyid:D0:5A:C9:0A:20:7F:60:87:CE:02:ED:C2:31:88:E3:2A:AA:1B:1B:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0FrJCiB_YIfOAu3CMYjjKqobG0Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:43:1e:fe:6e:21:16:17:11:ea:4a:c7:a7:0c:3d:6d:7b:0b:
         f5:20:7d:45:e6:f9:d2:a2:98:fc:1a:00:73:ad:0f:e1:ef:a6:
         b0:7d:48:bc:99:e9:bc:ad:eb:e4:c8:2c:55:71:d3:4e:36:06:
         ce:55:ad:d1:e8:54:1d:a9:91:17:a9:08:6c:c8:07:36:27:7b:
         e0:e5:ea:3b:36:f8:8c:bc:c4:e5:bb:b0:43:d9:bc:6a:d8:d6:
         cc:c6:07:d3:56:95:a3:21:93:27:71:2b:75:9d:2e:05:b7:be:
         cc:3a:c1:9c:8a:df:f1:0d:6a:c1:6c:d7:21:6f:a7:a8:71:47:
         3b:74:86:ce:21:fa:98:1d:c7:3d:53:8c:8a:29:72:a1:4f:80:
         ff:be:bf:95:7b:ff:46:75:1b:45:b1:d3:e4:6a:8e:42:18:63:
         d8:31:87:5f:aa:81:ef:1c:63:a9:87:65:57:6b:2c:cd:9d:53:
         b7:9f:71:b9:0b:f3:f5:6b:79:1d:da:ff:18:c3:d4:d9:0c:d8:
         93:b4:d7:64:dc:af:5b:6f:53:56:81:14:28:2b:62:a8:68:01:
         c0:96:49:ba:73:09:28:82:31:94:b7:b6:f3:83:cf:2b:05:2d:
         36:99:71:62:20:9d:02:81:80:14:27:4b:bb:a5:1e:a6:a8:f8:
         03:fa:3f:f3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEMyMTIxMTAvBgNVBAUTKEQwNUFDOTBBMjA3RjYwODdDRTAyRURDMjMxODhFMzJB
QUExQjFCNDQwHhcNMjYwNDA1MDMzMTUzWhcNMjYwNDEyMDMzMTUzWjAYMRYwFAYD
VQQDEw02OWQxZDdhYS04ZTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxIevdcog2kAiASvMMr+5DD+CoRren77bPjTK3z9dduAGkJxrvMuNI/sLV7kq
2OT6Z7qv4K5I+lnhNxZIOvlgrI6hPojbX5ivJ1acfBUUUbnS6HmC4/JPdH92ELvj
kn9AFkSHjShYtDwfetyJpluZfUdXw6eNRDEWLgYag/RmUT9yHSudM4UZWNys12DQ
SwB1/JwFXj9an4UfUbuHGbXC7DzS8e0Ayrw5tUGue52XNSPP1zqOR+wGiw6PBft4
CddaFcn4C8F1AW+rfbTkFhMqn6uCDpYpcz/X4asqWh7+bR789+uzxT4Nk0V89qiu
C92UyJluSbtUSb9zXu3KSq6NRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHf/gXba
/WGJwTJ2rvBC8xQl66rrMB8GA1UdIwQYMBaAFNBayQogf2CHzgLtwjGI4yqqGxtE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzIxMi80QjIzM0VFQUEy
RDAxMUVFOTNBODhGM0RDNEY5QUUwMi8wRnJKQ2lCX1lJZk9BdTNDTVlqaktxb2JH
MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBGckpDaUJfWUlmT0F1M0NNWWpqS3FvYkcwUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QzIxMi80QjIzM0VFQUEyRDAxMUVFOTNBODhGM0RDNEY5QUUwMi8wRnJKQ2lCX1lJ
Zk9BdTNDTVlqaktxb2JHMFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkkMe/m4hFhcR6krHpww9bXsL9SB9Reb50qKY/BoAc60P4e+msH1IvJnpvK3r
5MgsVXHTTjYGzlWt0ehUHamRF6kIbMgHNid74OXqOzb4jLzE5buwQ9m8atjWzMYH
01aVoyGTJ3ErdZ0uBbe+zDrBnIrf8Q1qwWzXIW+nqHFHO3SGziH6mB3HPVOMiily
oU+A/76/lXv/RnUbRbHT5GqOQhhj2DGHX6qB7xxjqYdlV2sszZ1Tt59xuQvz9Wt5
Hdr/GMPU2QzYk7TXZNyvW29TVoEUKCtiqGgBwJZJunMJKIIxlLe284PPKwUtNplx
YiCdAoGAFCdLu6Uepqj4A/o/8w==
-----END CERTIFICATE-----
Generated at Mon Apr 6 09:03:07 2026 by rpki-client