Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft
File:                     jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft (raw, json)
Hash identifier:          mnppVsQQ4bSBOPxyYiMacxcTH70kEdB6HHZ+LFqpKLw=
Subject key identifier:   93:1B:A2:07:54:75:C5:6A:09:4D:9B:F8:41:1A:8C:57:5C:FE:46:F1
Authority key identifier: 8C:5A:89:97:FC:A5:BF:02:70:EA:F8:6E:E8:C0:CB:65:51:AB:97:D1
Certificate issuer:       /CN=A91B2A6F/serialNumber=8C5A8997FCA5BF0270EAF86EE8C0CB6551AB97D1
Certificate serial:       0AE6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft
Manifest number:          0AD8
Signing time:             Mon 20 Apr 2026 19:21:37 +0000
Manifest this update:     Mon 20 Apr 2026 19:21:36 +0000
Manifest next update:     Mon 27 Apr 2026 19:21:36 +0000
Files and hashes:         1: jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl (hash: vXd9Y/HKm8cEzIN68xz3FbSmeNk1BRsTyKfeLGvBw6c=)
                          2: A59E2538BA0211F0892F7E0BC4F9AE02.roa (hash: U+jikQia2TmNT/0k3vINGgOcX5h8/2pprjsbUiUPbYk=)
                          3: BDC0899A1FF511ECAE74F266C4F9AE02.roa (hash: /3arRZXVLdrfm4u9cutgJAx+ZHiHzLIvVvAU7Zs/f38=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl
                          rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Apr 2026 19:21:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2790 (0xae6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2A6F, serialNumber=8C5A8997FCA5BF0270EAF86EE8C0CB6551AB97D1
        Validity
            Not Before: Apr 20 19:21:36 2026 GMT
            Not After : Apr 27 19:21:36 2026 GMT
        Subject: CN=69e67cc0-f10c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a8:e4:a9:64:aa:ae:43:1c:7d:f5:84:0b:a8:
                    c6:e4:58:55:92:17:84:fb:3d:ad:96:cb:74:31:ea:
                    14:36:97:95:f3:46:7b:fb:6b:f0:32:0f:a4:3f:aa:
                    14:89:5c:f8:a0:3d:58:39:ff:6c:0a:cb:a8:4a:6c:
                    ab:b9:d4:48:82:1e:a0:85:cd:cb:6c:16:75:fc:e4:
                    c1:7a:a0:9e:96:39:dc:45:84:2e:13:6f:9f:ec:2f:
                    cb:c5:51:b9:d0:99:f7:65:c8:6b:5b:cb:e9:d3:44:
                    30:e6:a9:78:c2:4f:fb:66:ae:e3:e9:cb:03:dc:6a:
                    ab:95:1f:c9:6e:51:e7:25:2f:e6:17:6f:28:28:eb:
                    66:0d:d2:4f:2e:96:0a:bd:0d:f8:4a:33:11:75:23:
                    f9:9c:95:ef:72:c1:42:21:8c:2c:90:e5:76:08:5d:
                    df:22:d6:42:31:d1:19:5e:83:9d:0b:82:02:b2:3f:
                    6b:c7:69:dd:fc:5b:20:40:43:a0:ae:c0:a0:66:2c:
                    9f:89:bb:a6:2a:e4:4c:34:0e:8e:cf:9e:a4:ed:f2:
                    c2:5b:5c:29:82:20:cb:67:60:46:d4:e9:24:59:8a:
                    be:6f:1b:cc:07:7e:9b:10:71:1d:07:4c:c6:f2:cc:
                    3a:fa:a4:93:72:51:6a:72:9c:4a:49:a1:8a:48:f6:
                    68:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:1B:A2:07:54:75:C5:6A:09:4D:9B:F8:41:1A:8C:57:5C:FE:46:F1
            X509v3 Authority Key Identifier:
                keyid:8C:5A:89:97:FC:A5:BF:02:70:EA:F8:6E:E8:C0:CB:65:51:AB:97:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:36:3f:41:09:7c:a1:58:b0:97:d3:59:c7:d1:c2:42:97:b1:
         88:6d:b9:99:c0:58:24:58:f4:96:b1:64:53:13:c6:3b:c7:0c:
         ec:d6:a2:99:81:b6:2d:e4:94:4d:f1:21:86:cd:9f:c9:3d:a2:
         c7:dd:e4:8f:55:b1:fa:4f:84:3b:70:93:1d:00:dd:39:4c:6f:
         2c:f0:d8:44:8a:67:d8:1a:f1:fd:fc:77:52:69:0e:94:b2:ce:
         86:91:6c:db:f0:6b:29:94:bf:53:43:f1:ef:de:55:6f:30:e7:
         6b:f7:68:1b:6d:23:c3:5e:02:19:6c:19:d3:06:d0:63:2a:85:
         50:c0:86:e0:2d:7e:67:52:ce:c8:8a:97:71:e4:fc:b0:f9:92:
         69:c7:4f:60:da:00:71:51:92:41:c2:08:1a:36:36:11:3e:8e:
         bb:4d:ba:72:e3:6a:85:6e:e0:4d:bf:79:4f:b0:c3:ab:0e:a5:
         95:1f:3b:d4:72:d9:64:92:40:47:7d:3f:eb:aa:1f:96:d6:22:
         5a:a9:23:6b:cb:04:71:82:0e:8e:17:6b:e3:bc:ea:61:11:77:
         7b:e2:a9:3b:bb:b0:ac:e8:e1:5f:07:a1:a9:b6:e7:1d:ef:fc:
         29:3d:8f:b3:c0:cb:b3:36:46:79:71:95:5f:54:bc:ef:4e:fd:
         db:30:71:94
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCuYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjJBNkYxMTAvBgNVBAUTKDhDNUE4OTk3RkNBNUJGMDI3MEVBRjg2RUU4QzBDQjY1
NTFBQjk3RDEwHhcNMjYwNDIwMTkyMTM2WhcNMjYwNDI3MTkyMTM2WjAYMRYwFAYD
VQQDEw02OWU2N2NjMC1mMTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwKjkqWSqrkMcffWEC6jG5FhVkheE+z2tlst0MeoUNpeV80Z7+2vwMg+kP6oU
iVz4oD1YOf9sCsuoSmyrudRIgh6ghc3LbBZ1/OTBeqCeljncRYQuE2+f7C/LxVG5
0Jn3ZchrW8vp00Qw5ql4wk/7Zq7j6csD3GqrlR/JblHnJS/mF28oKOtmDdJPLpYK
vQ34SjMRdSP5nJXvcsFCIYwskOV2CF3fItZCMdEZXoOdC4ICsj9rx2nd/FsgQEOg
rsCgZiyfibumKuRMNA6Oz56k7fLCW1wpgiDLZ2BG1OkkWYq+bxvMB36bEHEdB0zG
8sw6+qSTclFqcpxKSaGKSPZovwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJMbogdU
dcVqCU2b+EEajFdc/kbxMB8GA1UdIwQYMBaAFIxaiZf8pb8CcOr4bujAy2VRq5fR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkE2Ri9DQURGRjJGRTZF
MzYxMUVBQTEwRUZGNzZDNEY5QUUwMi9qRnFKbF95bHZ3Snc2dmh1Nk1ETFpWR3Js
OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pGcUpsX3lsdndKdzZ2aHU2TURMWlZHcmw5RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MkE2Ri9DQURGRjJGRTZFMzYxMUVBQTEwRUZGNzZDNEY5QUUwMi9qRnFKbF95bHZ3
Snc2dmh1Nk1ETFpWR3JsOUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASTY/QQl8oViwl9NZx9HCQpexiG25mcBYJFj0lrFkUxPGO8cM7NaimYG2LeSU
TfEhhs2fyT2ix93kj1Wx+k+EO3CTHQDdOUxvLPDYRIpn2Brx/fx3UmkOlLLOhpFs
2/BrKZS/U0Px795VbzDna/doG20jw14CGWwZ0wbQYyqFUMCG4C1+Z1LOyIqXceT8
sPmSacdPYNoAcVGSQcIIGjY2ET6Ou026cuNqhW7gTb95T7DDqw6llR871HLZZJJA
R30/66ofltYiWqkja8sEcYIOjhdr47zqYRF3e+KpO7uwrOjhXwehqbbnHe/8KT2P
s8DLszZGeXGVX1S870792zBxlA==
-----END CERTIFICATE-----
Generated at Wed Apr 22 09:03:58 2026 by rpki-client