Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft
File:                     p1cNzzcgqNWohWpLtlg_G66uAJM.mft (raw, json)
Hash identifier:          wSXDIiWLziZ9JUnXViWWMHCAIelIWC32NsCn4fu9jUU=
Subject key identifier:   17:DE:CC:43:81:22:11:4D:23:2F:18:E4:D9:23:0C:4D:28:F6:9E:20
Authority key identifier: A7:57:0D:CF:37:20:A8:D5:A8:85:6A:4B:B6:58:3F:1B:AE:AE:00:93
Certificate issuer:       /CN=A91B37E3/serialNumber=A7570DCF3720A8D5A8856A4BB6583F1BAEAE0093
Certificate serial:       0D4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft
Manifest number:          0D13
Signing time:             Sat 04 Apr 2026 18:02:54 +0000
Manifest this update:     Sat 04 Apr 2026 18:02:53 +0000
Manifest next update:     Sat 11 Apr 2026 18:02:53 +0000
Files and hashes:         1: p1cNzzcgqNWohWpLtlg_G66uAJM.crl (hash: LPUrU/kKy5E07M0bmaGtq4gQ099iPOC4nrayyKziBzc=)
                          2: 24252532B84711EA8A7F036DC4F9AE02.roa (hash: i9uCa/jnhktxFdjqViYAybuthNUR7oD6rAf8exjN1kI=)
                          3: 4DC07014161411F1B995070A2E3D8C67.roa (hash: H0Jb9txtazlliAU6uAWUSrabDYFIpiBg6C2fr7jj4yU=)
                          4: 4F6721CEB84B11EAB6247B7AC4F9AE02.roa (hash: rZrIOdq3ol6lcEAYXeq2DsJFaFbmt+O1xVdoQjKA9Ic=)
                          5: 5B47C2265D8411F0BBB04858C4F9AE02.roa (hash: 5Gz1em/PdO/Bv/3TCy3czbXrmcPfmWaq1s4vYyqJQmE=)
                          6: 1994900403CE11EAA10C6A84C4F9AE02.roa (hash: +v702T+ecCOjmmS56vuMtDJ6RGqPmaswdGe/Ps9k7F8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.crl
                          rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 18:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3403 (0xd4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B37E3, serialNumber=A7570DCF3720A8D5A8856A4BB6583F1BAEAE0093
        Validity
            Not Before: Apr  4 18:02:53 2026 GMT
            Not After : Apr 11 18:02:53 2026 GMT
        Subject: CN=69d1524e-757e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c2:c7:ce:37:dd:31:9c:87:78:dd:1b:d6:42:
                    47:52:2e:a1:e4:f9:ba:9c:45:72:d0:89:18:02:e8:
                    da:68:90:2a:d6:58:09:f3:e0:c3:81:7e:eb:50:14:
                    f7:9d:b8:06:4c:e8:ca:66:f9:04:f2:0e:60:8a:32:
                    39:5b:16:8c:b8:6e:86:20:bb:f7:56:60:58:a5:c1:
                    2b:a0:fc:8e:9b:a4:b5:d3:55:5d:22:10:b9:72:4f:
                    2e:07:99:5b:84:6d:3a:3a:3b:78:0a:14:39:4f:50:
                    47:07:62:17:17:3c:ba:37:14:7c:ae:c0:60:bf:fc:
                    a2:16:ad:d2:ef:17:ec:b4:ab:bb:76:20:66:b1:76:
                    20:30:24:ed:0d:f5:81:6b:35:24:7c:f9:c9:f9:33:
                    5f:bb:ec:79:9b:29:c4:79:4c:b9:93:c0:16:c6:a4:
                    e9:19:a8:4a:d8:99:c6:3c:62:85:e1:4f:46:99:be:
                    a6:87:de:2b:0e:09:a8:38:16:ce:c5:43:c8:a8:fc:
                    0c:a0:7e:be:80:89:e5:6c:83:55:14:84:86:4d:97:
                    54:fa:46:e3:df:0a:55:6f:75:7b:03:46:28:2f:cd:
                    56:5d:a3:96:4e:27:c9:96:e9:c4:5b:d7:d8:8d:d0:
                    bc:f1:4e:45:45:c1:2a:2f:f1:fc:5f:70:10:32:4f:
                    51:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:DE:CC:43:81:22:11:4D:23:2F:18:E4:D9:23:0C:4D:28:F6:9E:20
            X509v3 Authority Key Identifier:
                keyid:A7:57:0D:CF:37:20:A8:D5:A8:85:6A:4B:B6:58:3F:1B:AE:AE:00:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:a6:ed:18:69:ca:34:d6:95:ef:8a:54:74:d9:4a:30:38:41:
         8d:05:62:0c:61:57:67:34:34:15:90:6c:19:9a:00:77:57:58:
         3d:de:28:94:b1:b1:3c:b5:09:d1:86:d0:b8:f8:6b:af:98:f4:
         5b:43:27:9c:d8:8e:eb:9d:8f:15:84:2e:71:8e:a2:39:11:1e:
         ea:df:87:70:82:8c:d0:70:ae:b3:0c:e3:75:c8:5c:47:bb:4d:
         b0:1d:0e:47:54:1e:b9:5d:30:c5:11:54:7b:f3:1d:8b:b2:22:
         7e:34:bf:76:3a:56:46:62:46:6b:7d:18:b4:ce:1d:b6:67:65:
         c0:61:d4:2b:3f:c8:ed:a2:5a:f4:37:8c:0e:44:c5:f5:5d:4a:
         f3:f7:f4:ea:7c:41:22:cc:8e:65:2d:ed:bd:0a:35:a8:c9:b4:
         e0:35:28:c9:c0:be:99:ba:ed:0e:89:b2:3b:4b:45:3d:ec:c5:
         06:e4:f2:fe:a8:f6:29:b6:02:43:b4:f3:0f:f7:07:b4:cc:16:
         dd:72:dc:a5:46:4d:eb:f9:93:be:c5:12:7e:01:d4:95:9f:50:
         71:6f:9e:a4:3f:ad:82:3a:c0:63:45:65:ec:68:63:9a:e6:6e:
         87:fc:a3:61:1e:47:f6:3e:3d:50:bf:ec:5d:b0:7c:79:55:22:
         8c:2d:aa:75
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjM3RTMxMTAvBgNVBAUTKEE3NTcwRENGMzcyMEE4RDVBODg1NkE0QkI2NTgzRjFC
QUVBRTAwOTMwHhcNMjYwNDA0MTgwMjUzWhcNMjYwNDExMTgwMjUzWjAYMRYwFAYD
VQQDEw02OWQxNTI0ZS03NTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAncLHzjfdMZyHeN0b1kJHUi6h5Pm6nEVy0IkYAujaaJAq1lgJ8+DDgX7rUBT3
nbgGTOjKZvkE8g5gijI5WxaMuG6GILv3VmBYpcEroPyOm6S101VdIhC5ck8uB5lb
hG06Ojt4ChQ5T1BHB2IXFzy6NxR8rsBgv/yiFq3S7xfstKu7diBmsXYgMCTtDfWB
azUkfPnJ+TNfu+x5mynEeUy5k8AWxqTpGahK2JnGPGKF4U9Gmb6mh94rDgmoOBbO
xUPIqPwMoH6+gInlbINVFISGTZdU+kbj3wpVb3V7A0YoL81WXaOWTifJlunEW9fY
jdC88U5FRcEqL/H8X3AQMk9RAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBfezEOB
IhFNIy8Y5NkjDE0o9p4gMB8GA1UdIwQYMBaAFKdXDc83IKjVqIVqS7ZYPxuurgCT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzdFMy8wQUZFQTdDRTAz
QTAxMUVBQjRDNUQyN0NDNEY5QUUwMi9wMWNOenpjZ3FOV29oV3BMdGxnX0c2NnVB
Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3AxY056emNncU5Xb2hXcEx0bGdfRzY2dUFKTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MzdFMy8wQUZFQTdDRTAzQTAxMUVBQjRDNUQyN0NDNEY5QUUwMi9wMWNOenpjZ3FO
V29oV3BMdGxnX0c2NnVBSk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALabtGGnKNNaV74pUdNlKMDhBjQViDGFXZzQ0FZBsGZoAd1dYPd4olLGxPLUJ
0YbQuPhrr5j0W0MnnNiO652PFYQucY6iOREe6t+HcIKM0HCuswzjdchcR7tNsB0O
R1QeuV0wxRFUe/Mdi7IifjS/djpWRmJGa30YtM4dtmdlwGHUKz/I7aJa9DeMDkTF
9V1K8/f06nxBIsyOZS3tvQo1qMm04DUoycC+mbrtDomyO0tFPezFBuTy/qj2KbYC
Q7TzD/cHtMwW3XLcpUZN6/mTvsUSfgHUlZ9QcW+epD+tgjrAY0Vl7GhjmuZuh/yj
YR5H9j49UL/sXbB8eVUijC2qdQ==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:54:13 2026 by rpki-client