Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft
File:                     l1u5QYJWgUoFLa9U9woa3FNv35s.mft (raw, json)
Hash identifier:          xTFkNYfy0MQVDF/CeNMZG8oYNGrcdLiW3Mho+kvuHWs=
Subject key identifier:   74:5E:06:B0:A4:08:F1:D2:58:C7:2E:CC:7F:2D:DD:4A:6D:65:D4:43
Authority key identifier: 97:5B:B9:41:82:56:81:4A:05:2D:AF:54:F7:0A:1A:DC:53:6F:DF:9B
Certificate issuer:       /CN=A91A7842/serialNumber=975BB9418256814A052DAF54F70A1ADC536FDF9B
Certificate serial:       046F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft
Manifest number:          0462
Signing time:             Sat 04 Apr 2026 23:56:25 +0000
Manifest this update:     Sat 04 Apr 2026 23:56:25 +0000
Manifest next update:     Sat 11 Apr 2026 23:56:25 +0000
Files and hashes:         1: l1u5QYJWgUoFLa9U9woa3FNv35s.crl (hash: brKNYQUXva9DWVDWSpqDIvsCnQWilhpWgcMmjgSrAJ8=)
                          2: 615BA1B8D91411EF9940471AC4F9AE02.roa (hash: nbdgFqrvKPwj7OTKa8WeiCsPcy8PIB9YyhQhRJZGshM=)
                          3: 622B3AEAD91411EF9940471AC4F9AE02.roa (hash: cr8+DaXhHVaKphmcAd7tV537ArwtZQMiy53lf3sRJ+Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.crl
                          rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 23:56:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1135 (0x46f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7842, serialNumber=975BB9418256814A052DAF54F70A1ADC536FDF9B
        Validity
            Not Before: Apr  4 23:56:25 2026 GMT
            Not After : Apr 11 23:56:25 2026 GMT
        Subject: CN=69d1a529-3d80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:93:fb:9f:f5:dc:84:92:a6:1e:5b:64:2e:91:
                    51:c0:0d:e9:54:0e:0c:dc:85:98:fd:e2:d7:0a:db:
                    8d:77:d0:9b:a0:6f:ed:bd:2d:e4:67:9b:25:7d:d6:
                    3b:0e:60:9a:21:f4:64:32:2e:83:0b:35:d0:87:7f:
                    e4:ae:65:2d:b7:e9:ce:aa:b8:44:14:07:47:f7:b4:
                    02:5d:d3:72:5c:22:01:12:4b:a5:ab:d4:35:83:71:
                    d3:5f:2e:9f:37:cd:80:75:3d:b3:72:16:9c:96:2e:
                    52:84:bc:e8:8d:6d:51:12:ee:61:35:16:7a:8e:89:
                    df:46:2d:48:cf:ac:87:49:74:c2:34:b7:3b:6d:53:
                    19:1d:c2:67:1e:ab:c6:91:a7:99:31:a3:de:5d:bf:
                    47:e6:cc:ae:aa:b4:47:fe:e0:be:73:d6:e6:ae:62:
                    d8:86:c4:cf:34:85:8d:24:29:8c:f3:75:95:32:ee:
                    db:e3:62:dc:ff:ef:c3:94:c1:60:58:e8:bc:2e:04:
                    e2:53:c4:e6:dd:93:fb:ce:db:46:56:40:a7:a8:ec:
                    98:4e:03:4e:af:08:a4:6e:c1:a5:ce:3c:28:ca:c2:
                    22:d6:3b:f9:2a:1c:94:4c:ad:84:8b:7c:e0:14:4c:
                    00:db:8a:49:ef:9b:29:93:7a:42:78:44:59:f4:f5:
                    93:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:5E:06:B0:A4:08:F1:D2:58:C7:2E:CC:7F:2D:DD:4A:6D:65:D4:43
            X509v3 Authority Key Identifier:
                keyid:97:5B:B9:41:82:56:81:4A:05:2D:AF:54:F7:0A:1A:DC:53:6F:DF:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:8f:12:12:64:28:e6:6a:f3:0b:97:e6:0d:c8:a4:d0:7d:47:
         f5:79:3f:59:e4:c8:75:80:5d:b4:ac:d4:cd:b8:27:5d:9d:cc:
         f8:b4:25:35:a8:eb:fb:f8:bb:97:46:68:25:ba:f1:70:67:84:
         c5:17:e1:9f:fe:a9:d8:a2:2d:f8:af:e8:b3:1c:3c:c4:ae:34:
         a0:a8:f7:66:d5:3b:b8:e9:6a:d8:27:21:6f:fb:86:ac:c7:f5:
         9f:e1:a4:ed:40:74:98:5f:21:f1:15:d4:55:16:f3:94:52:8b:
         2f:5f:10:32:93:a5:4c:c9:ad:6a:bc:d5:c8:92:4d:97:39:3e:
         e9:75:90:94:4c:a3:b5:84:41:ce:67:66:81:4e:5a:a1:f5:2a:
         4f:23:02:cb:00:05:32:31:7f:f3:a9:60:37:5a:c6:1e:b7:4e:
         b7:65:59:ad:f3:7d:e9:3d:24:40:f1:bb:5c:d0:03:c4:a9:be:
         d2:47:ee:6d:7d:ff:bd:4f:fe:d6:e2:b6:67:61:af:83:ce:7a:
         3e:d3:da:2b:8d:d0:2d:31:ee:4f:e0:ab:19:af:c0:ee:b1:69:
         bb:28:2e:67:13:f9:21:46:a6:1b:a0:17:67:ec:62:ef:5a:da:
         b8:97:3f:b7:71:31:8c:6c:19:38:f5:ad:41:1d:3c:af:19:da:
         63:4f:dd:ef
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTc4NDIxMTAvBgNVBAUTKDk3NUJCOTQxODI1NjgxNEEwNTJEQUY1NEY3MEExQURD
NTM2RkRGOUIwHhcNMjYwNDA0MjM1NjI1WhcNMjYwNDExMjM1NjI1WjAYMRYwFAYD
VQQDEw02OWQxYTUyOS0zZDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp5P7n/XchJKmHltkLpFRwA3pVA4M3IWY/eLXCtuNd9CboG/tvS3kZ5slfdY7
DmCaIfRkMi6DCzXQh3/krmUtt+nOqrhEFAdH97QCXdNyXCIBEkulq9Q1g3HTXy6f
N82AdT2zchacli5ShLzojW1REu5hNRZ6jonfRi1Iz6yHSXTCNLc7bVMZHcJnHqvG
kaeZMaPeXb9H5syuqrRH/uC+c9bmrmLYhsTPNIWNJCmM83WVMu7b42Lc/+/DlMFg
WOi8LgTiU8Tm3ZP7zttGVkCnqOyYTgNOrwikbsGlzjwoysIi1jv5KhyUTK2Ei3zg
FEwA24pJ75spk3pCeERZ9PWTsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHReBrCk
CPHSWMcuzH8t3UptZdRDMB8GA1UdIwQYMBaAFJdbuUGCVoFKBS2vVPcKGtxTb9+b
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzg0Mi83NkE4QzZCQThF
NjUxMUVDQTZFRUVCNzBDNEY5QUUwMi9sMXU1UVlKV2dVb0ZMYTlVOXdvYTNGTnYz
NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2wxdTVRWUpXZ1VvRkxhOVU5d29hM0ZOdjM1cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
Nzg0Mi83NkE4QzZCQThFNjUxMUVDQTZFRUVCNzBDNEY5QUUwMi9sMXU1UVlKV2dV
b0ZMYTlVOXdvYTNGTnYzNXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAzY8SEmQo5mrzC5fmDcik0H1H9Xk/WeTIdYBdtKzUzbgnXZ3M+LQlNajr+/i7
l0ZoJbrxcGeExRfhn/6p2KIt+K/osxw8xK40oKj3ZtU7uOlq2Cchb/uGrMf1n+Gk
7UB0mF8h8RXUVRbzlFKLL18QMpOlTMmtarzVyJJNlzk+6XWQlEyjtYRBzmdmgU5a
ofUqTyMCywAFMjF/86lgN1rGHrdOt2VZrfN96T0kQPG7XNADxKm+0kfubX3/vU/+
1uK2Z2Gvg856PtPaK43QLTHuT+CrGa/A7rFpuyguZxP5IUamG6AXZ+xi71rauJc/
t3ExjGwZOPWtQR08rxnaY0/d7w==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:50:31 2026 by rpki-client