Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft
File:                     F4AJbMkKtq6vCNeasYxUx7d6U6A.mft (raw, json)
Hash identifier:          hdyL2xfxOGdLm11VJbfBkGzwjmlrb24e4YvcTTT4emM=
Subject key identifier:   F1:4B:C4:A9:11:3B:6E:D6:2C:8B:C7:97:78:A3:28:7F:68:75:7D:1A
Authority key identifier: 17:80:09:6C:C9:0A:B6:AE:AF:08:D7:9A:B1:8C:54:C7:B7:7A:53:A0
Certificate issuer:       /CN=A91A4543/serialNumber=1780096CC90AB6AEAF08D79AB18C54C7B77A53A0
Certificate serial:       AF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft
Manifest number:          AD
Signing time:             Sat 18 Apr 2026 20:21:05 +0000
Manifest this update:     Sat 18 Apr 2026 20:21:04 +0000
Manifest next update:     Sat 25 Apr 2026 20:21:04 +0000
Files and hashes:         1: F4AJbMkKtq6vCNeasYxUx7d6U6A.crl (hash: sSZqIu7EpyTCB2IeH13OGpaSOaKlGJjHtJG/wfb77Ko=)
                          2: 458F65E8572511F0BE0E492AC4F9AE02.roa (hash: Rx4vAlWyTLV0daFrUy6DuCo/+UjTzyGK5tVT0zVpxsA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.crl
                          rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175 (0xaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4543, serialNumber=1780096CC90AB6AEAF08D79AB18C54C7B77A53A0
        Validity
            Not Before: Apr 18 20:21:04 2026 GMT
            Not After : Apr 25 20:21:04 2026 GMT
        Subject: CN=69e3e7b1-394c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5c:3d:80:0c:c9:96:37:41:cb:c4:79:24:03:
                    8b:ff:0c:c5:83:b7:a8:a1:ef:53:8c:96:e4:ce:aa:
                    aa:82:fb:63:1c:78:fb:22:39:62:73:c4:f4:d9:c1:
                    67:d2:9a:dd:3a:ed:51:7b:ad:6e:e4:80:28:09:57:
                    5f:34:9d:36:81:95:73:91:a1:90:7d:16:56:bb:cd:
                    2e:b9:5f:c8:c8:3e:16:fe:f2:6e:05:4d:d3:b7:c9:
                    88:10:c3:0a:ae:ac:66:07:ac:d8:5e:b6:4c:c7:1f:
                    ae:a1:61:58:65:88:1a:e6:65:73:8d:bd:f6:52:6c:
                    40:08:6b:db:6e:25:3c:9c:32:9e:76:25:22:40:8f:
                    e0:f0:b5:33:7c:7c:77:a4:e2:25:44:29:70:c7:02:
                    ef:5a:dc:88:cf:b4:19:a2:70:b8:ce:b5:ab:ee:16:
                    3a:2f:9a:bd:e9:72:86:15:c0:61:f3:22:19:05:79:
                    4a:54:c8:18:27:39:5a:12:94:cb:35:7b:7f:88:54:
                    97:4e:53:b5:b7:61:60:a2:21:c6:db:0e:64:a6:ec:
                    87:d8:18:95:31:e1:b5:ee:f5:22:16:99:0a:d5:1a:
                    0b:48:9f:cf:1d:45:a9:c7:29:3d:66:e5:12:d3:36:
                    63:9e:68:e0:fe:8f:fe:0e:a7:c0:b2:cd:99:e3:85:
                    53:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:4B:C4:A9:11:3B:6E:D6:2C:8B:C7:97:78:A3:28:7F:68:75:7D:1A
            X509v3 Authority Key Identifier:
                keyid:17:80:09:6C:C9:0A:B6:AE:AF:08:D7:9A:B1:8C:54:C7:B7:7A:53:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:51:d3:df:ba:a1:db:8d:e8:28:f3:6e:13:2b:b0:e4:1a:ba:
         7b:c5:11:b7:9f:70:a7:38:27:fe:35:1c:e8:5d:23:bf:3d:dd:
         15:a2:e7:6e:6d:fe:e7:dc:f0:cb:65:be:6c:b1:6f:2e:11:25:
         9d:0c:7d:35:e0:7f:5b:88:fd:fd:7d:7a:a9:b1:12:14:b7:35:
         b0:12:68:03:1c:c1:f7:12:6b:e9:81:11:37:a0:3e:e0:2e:53:
         73:b2:b5:d0:3f:ef:71:d7:38:e2:25:8f:fe:49:67:ea:12:94:
         0b:4f:d8:5e:ef:2c:44:76:71:17:16:d5:70:80:f1:36:be:81:
         b8:a9:3a:6d:f1:f9:f5:32:a1:e6:74:1e:f5:bc:de:99:1e:9b:
         44:14:32:1c:ae:b0:e6:f5:69:d7:e5:99:5e:f0:4a:43:44:bc:
         ce:7d:7a:fa:7b:ad:ba:7f:68:fc:bf:38:b5:30:a1:58:d4:43:
         bf:80:d8:e7:e0:f0:7d:c4:59:4f:d3:9c:2e:5c:c6:cc:a3:3f:
         5f:29:09:50:ca:c7:1f:88:1c:14:a4:34:38:83:21:d5:45:94:
         d8:e2:64:ee:e7:f4:69:2a:bf:23:87:4d:d1:25:90:a4:9f:a5:
         7b:c2:8a:44:19:9b:e1:9f:68:e7:2c:02:0a:38:fe:a6:b9:cf:
         57:73:f4:16
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTQ1NDMxMTAvBgNVBAUTKDE3ODAwOTZDQzkwQUI2QUVBRjA4RDc5QUIxOEM1NEM3
Qjc3QTUzQTAwHhcNMjYwNDE4MjAyMTA0WhcNMjYwNDI1MjAyMTA0WjAYMRYwFAYD
VQQDEw02OWUzZTdiMS0zOTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArVw9gAzJljdBy8R5JAOL/wzFg7eooe9TjJbkzqqqgvtjHHj7Ijlic8T02cFn
0prdOu1Re61u5IAoCVdfNJ02gZVzkaGQfRZWu80uuV/IyD4W/vJuBU3Tt8mIEMMK
rqxmB6zYXrZMxx+uoWFYZYga5mVzjb32UmxACGvbbiU8nDKediUiQI/g8LUzfHx3
pOIlRClwxwLvWtyIz7QZonC4zrWr7hY6L5q96XKGFcBh8yIZBXlKVMgYJzlaEpTL
NXt/iFSXTlO1t2FgoiHG2w5kpuyH2BiVMeG17vUiFpkK1RoLSJ/PHUWpxyk9ZuUS
0zZjnmjg/o/+DqfAss2Z44VTFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPFLxKkR
O27WLIvHl3ijKH9odX0aMB8GA1UdIwQYMBaAFBeACWzJCraurwjXmrGMVMe3elOg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDU0My9BQjcxOUZDRTNC
NjUxMUYwODc0MkRBMzlDNEY5QUUwMi9GNEFKYk1rS3RxNnZDTmVhc1l4VXg3ZDZV
NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0Y0QUpiTWtLdHE2dkNOZWFzWXhVeDdkNlU2QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NDU0My9BQjcxOUZDRTNCNjUxMUYwODc0MkRBMzlDNEY5QUUwMi9GNEFKYk1rS3Rx
NnZDTmVhc1l4VXg3ZDZVNkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAuVHT37qh243oKPNuEyuw5Bq6e8URt59wpzgn/jUc6F0jvz3dFaLnbm3+59zw
y2W+bLFvLhElnQx9NeB/W4j9/X16qbESFLc1sBJoAxzB9xJr6YERN6A+4C5Tc7K1
0D/vcdc44iWP/kln6hKUC0/YXu8sRHZxFxbVcIDxNr6BuKk6bfH59TKh5nQe9bze
mR6bRBQyHK6w5vVp1+WZXvBKQ0S8zn16+nutun9o/L84tTChWNRDv4DY5+DwfcRZ
T9OcLlzGzKM/XykJUMrHH4gcFKQ0OIMh1UWU2OJk7uf0aSq/I4dN0SWQpJ+le8KK
RBmb4Z9o5ywCCjj+prnPV3P0Fg==
-----END CERTIFICATE-----
Generated at Sat Apr 18 22:23:53 2026 by rpki-client