Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft
File:                     h1tC98YnJXePVtlRtxLriHk0ikU.mft (raw, json)
Hash identifier:          MF4w1S1FCUg80VnyWVH0/z3gPtP4gzOHuwpvzyiGgp0=
Subject key identifier:   6C:F5:6E:76:C4:EC:9A:44:4C:B5:BD:28:84:50:75:23:D9:70:94:C1
Authority key identifier: 87:5B:42:F7:C6:27:25:77:8F:56:D9:51:B7:12:EB:88:79:34:8A:45
Certificate issuer:       /CN=A91A532D/serialNumber=875B42F7C62725778F56D951B712EB8879348A45
Certificate serial:       084D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft
Manifest number:          083E
Signing time:             Sat 04 Apr 2026 20:43:27 +0000
Manifest this update:     Sat 04 Apr 2026 20:43:26 +0000
Manifest next update:     Sat 11 Apr 2026 20:43:26 +0000
Files and hashes:         1: h1tC98YnJXePVtlRtxLriHk0ikU.crl (hash: gqb29zHCCsSh4PAhELeEbxq8Giz4wEu8cc8C5kXnpJk=)
                          2: 190BF77EF45111F0A4BBE8C5636F56BC.roa (hash: Hs6ib3TffUGsbUHjDLM2h7Z/Rvg89YIH0XLcITVd2Fk=)
                          3: 382BB29EF45011F0AF80EBA1636F56BC.roa (hash: qKtjyRx0lLlv/KwvG7LBwoOnxK1cXnW5MTg39ctLvtM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.crl
                          rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 20:43:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2125 (0x84d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A532D, serialNumber=875B42F7C62725778F56D951B712EB8879348A45
        Validity
            Not Before: Apr  4 20:43:26 2026 GMT
            Not After : Apr 11 20:43:26 2026 GMT
        Subject: CN=69d177ef-0e4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:64:0a:b9:58:a0:ea:6b:09:b8:5f:4d:e1:a0:
                    e6:25:94:db:ca:ed:19:0a:81:c7:f7:65:3f:43:c2:
                    77:f3:98:35:b0:45:51:58:b5:c6:d0:a7:f1:21:60:
                    4d:90:87:5d:9c:f1:b2:c8:fd:9b:c5:31:3b:48:13:
                    d0:58:54:c5:b1:5c:5e:6a:3a:55:1a:85:fb:0a:35:
                    fd:23:24:f0:68:4b:31:12:d1:35:f5:b8:43:7c:87:
                    f1:40:08:04:b1:67:94:eb:f6:65:f7:b1:2d:3a:a1:
                    28:f1:c3:2f:08:23:84:38:d5:05:0e:a3:9d:db:66:
                    13:71:42:4e:dc:71:cc:79:f6:91:21:1d:fc:1b:02:
                    3b:ac:68:ed:15:fc:ee:19:60:20:d8:23:2b:3c:f2:
                    7d:23:bf:eb:2c:58:34:11:3d:6c:32:bd:bc:e0:e2:
                    be:49:9c:e7:0e:f9:7d:58:ed:bc:d9:35:2d:52:99:
                    d6:ae:f3:28:d7:78:4b:6e:d1:6a:0f:1b:2c:bd:04:
                    2c:34:58:ca:fc:48:77:e2:14:83:b9:f8:a8:ad:06:
                    c4:03:03:f3:77:db:39:da:0c:59:3c:f3:fc:66:cc:
                    88:e5:59:67:f4:a3:d9:bf:46:10:ef:06:73:d8:e0:
                    46:30:b0:a2:8f:19:3f:3c:40:4e:19:01:fa:61:9b:
                    a1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F5:6E:76:C4:EC:9A:44:4C:B5:BD:28:84:50:75:23:D9:70:94:C1
            X509v3 Authority Key Identifier:
                keyid:87:5B:42:F7:C6:27:25:77:8F:56:D9:51:B7:12:EB:88:79:34:8A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:ee:4b:1c:a4:9f:33:3d:73:26:ad:19:55:15:3d:97:10:5a:
         dc:31:b2:d6:8f:c8:14:92:06:67:f7:f1:ad:6e:aa:85:2f:6c:
         68:09:37:8f:38:df:1c:98:9d:d9:5d:46:99:7d:dc:21:c1:c6:
         d5:3f:bc:7d:9d:00:cf:42:20:05:fb:ae:2f:b2:e4:a3:6a:0b:
         5e:2b:c1:e3:a9:7d:de:02:34:81:32:31:85:9d:55:10:6b:69:
         bb:1f:38:1e:75:06:c3:12:ab:ff:91:d0:d5:2b:92:90:67:21:
         c7:cc:aa:9d:c5:46:2d:99:07:8a:19:64:b1:78:8c:dd:f2:8a:
         87:93:03:5f:c3:5a:d2:49:4d:b2:9c:b6:49:5a:70:be:89:7f:
         19:31:0a:b8:ab:4a:8e:0d:50:ec:2a:2e:e4:84:be:fe:9a:aa:
         91:cf:c9:b6:c4:61:93:06:e7:20:d2:c9:4c:2a:b2:a4:6e:35:
         a1:7b:85:7b:9b:1b:cb:fb:37:89:0b:3c:77:0b:7e:43:a4:fd:
         39:5c:ee:f0:ec:46:6a:cf:ee:4f:26:d1:dd:92:ca:f5:0f:17:
         53:6b:a3:8c:ee:4b:07:f4:97:28:7b:8e:05:9b:5e:b2:4d:93:
         74:43:f5:c1:b9:73:e2:5a:6c:98:e1:e0:70:50:89:4a:db:44:
         52:16:5e:b6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCE0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTUzMkQxMTAvBgNVBAUTKDg3NUI0MkY3QzYyNzI1Nzc4RjU2RDk1MUI3MTJFQjg4
NzkzNDhBNDUwHhcNMjYwNDA0MjA0MzI2WhcNMjYwNDExMjA0MzI2WjAYMRYwFAYD
VQQDEw02OWQxNzdlZi0wZTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnGQKuVig6msJuF9N4aDmJZTbyu0ZCoHH92U/Q8J385g1sEVRWLXG0KfxIWBN
kIddnPGyyP2bxTE7SBPQWFTFsVxeajpVGoX7CjX9IyTwaEsxEtE19bhDfIfxQAgE
sWeU6/Zl97EtOqEo8cMvCCOEONUFDqOd22YTcUJO3HHMefaRIR38GwI7rGjtFfzu
GWAg2CMrPPJ9I7/rLFg0ET1sMr284OK+SZznDvl9WO282TUtUpnWrvMo13hLbtFq
DxssvQQsNFjK/Eh34hSDufiorQbEAwPzd9s52gxZPPP8ZsyI5Vln9KPZv0YQ7wZz
2OBGMLCijxk/PEBOGQH6YZuhUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGz1bnbE
7JpETLW9KIRQdSPZcJTBMB8GA1UdIwQYMBaAFIdbQvfGJyV3j1bZUbcS64h5NIpF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTMyRC9FQUE5NzlGQTBB
QzMxMUVCOTY0QTg5MjRDNEY5QUUwMi9oMXRDOThZbkpYZVBWdGxSdHhMcmlIazBp
a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2gxdEM5OFluSlhlUFZ0bFJ0eExyaUhrMGlrVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NTMyRC9FQUE5NzlGQTBBQzMxMUVCOTY0QTg5MjRDNEY5QUUwMi9oMXRDOThZbkpY
ZVBWdGxSdHhMcmlIazBpa1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGe5LHKSfMz1zJq0ZVRU9lxBa3DGy1o/IFJIGZ/fxrW6qhS9saAk3jzjfHJid
2V1GmX3cIcHG1T+8fZ0Az0IgBfuuL7Lko2oLXivB46l93gI0gTIxhZ1VEGtpux84
HnUGwxKr/5HQ1SuSkGchx8yqncVGLZkHihlksXiM3fKKh5MDX8Na0klNspy2SVpw
vol/GTEKuKtKjg1Q7Cou5IS+/pqqkc/JtsRhkwbnINLJTCqypG41oXuFe5sby/s3
iQs8dwt+Q6T9OVzu8OxGas/uTybR3ZLK9Q8XU2ujjO5LB/SXKHuOBZtesk2TdEP1
wblz4lpsmOHgcFCJSttEUhZetg==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:45 2026 by rpki-client