Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.mft
File:                     _i41K0L3TxDVdoNTA6LpeOHEN7Y.mft (raw, json)
Hash identifier:          fWFYa9beVICxgbJcMHtCzzVCUdxTwgBLYd9zFHDrgUg=
Subject key identifier:   81:1F:AD:AD:B1:C4:03:7C:DE:44:C8:4A:EF:67:B5:9A:5D:71:5D:12
Authority key identifier: FE:2E:35:2B:42:F7:4F:10:D5:76:83:53:03:A2:E9:78:E1:C4:37:B6
Certificate issuer:       /CN=A91B5CC0/serialNumber=FE2E352B42F74F10D576835303A2E978E1C437B6
Certificate serial:       029E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_i41K0L3TxDVdoNTA6LpeOHEN7Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.mft
Manifest number:          028C
Signing time:             Sun 05 Apr 2026 01:20:44 +0000
Manifest this update:     Sun 05 Apr 2026 01:20:44 +0000
Manifest next update:     Sun 12 Apr 2026 01:20:44 +0000
Files and hashes:         1: _i41K0L3TxDVdoNTA6LpeOHEN7Y.crl (hash: nwoPkCDv80CbUGJs93repnP6DiTzaBjpmm8PriVn1QI=)
                          2: FA13BAAC504611ED9AE40711C4F9AE02.roa (hash: NXGbpmoMOzAZwcgSz2AYwCb8kwzGpslvQ3JE0B3JbOg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.crl
                          rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_i41K0L3TxDVdoNTA6LpeOHEN7Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 01:20:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 670 (0x29e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5CC0, serialNumber=FE2E352B42F74F10D576835303A2E978E1C437B6
        Validity
            Not Before: Apr  5 01:20:44 2026 GMT
            Not After : Apr 12 01:20:44 2026 GMT
        Subject: CN=69d1b8ec-c5d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:24:30:94:9c:3d:b6:31:b4:17:d0:fd:44:c8:
                    b7:26:1b:37:4e:5f:a2:d3:43:ef:c2:ec:b7:e6:76:
                    64:19:19:fa:42:f4:b4:5a:eb:65:52:88:3e:2c:48:
                    f0:d3:95:8e:54:f3:fe:45:81:ef:75:04:3d:10:8f:
                    a8:40:7c:d4:0a:a1:18:3d:55:42:2b:04:66:db:68:
                    2e:d3:41:24:2e:cc:9c:88:5d:53:5c:54:f1:d5:e2:
                    49:26:f4:5e:04:04:0c:d5:51:70:f7:c8:9b:d8:97:
                    87:ff:0f:4d:6c:b0:86:ab:2f:21:93:76:c9:3e:a8:
                    77:1c:86:ae:ac:ae:f2:8d:c5:20:fb:e6:d8:7d:dd:
                    26:a5:12:2c:7d:89:ab:76:91:f7:3f:44:53:c4:d8:
                    6d:a5:25:7a:b2:c5:d3:8c:fb:ec:b4:be:4c:07:c1:
                    c5:7d:43:2a:14:c0:b9:5a:92:39:15:be:cf:b4:17:
                    3f:71:2a:52:da:0e:b8:d8:94:e9:81:6d:ba:83:92:
                    7c:46:58:4c:3f:53:da:84:59:ef:46:ad:ae:a9:cc:
                    7b:37:39:10:bf:7b:45:90:ff:a6:9f:75:58:a0:20:
                    92:a6:7c:f4:71:60:04:25:b4:9e:31:12:47:67:84:
                    19:38:b3:33:3e:f9:50:e7:a9:3d:0f:17:54:d2:55:
                    d3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:1F:AD:AD:B1:C4:03:7C:DE:44:C8:4A:EF:67:B5:9A:5D:71:5D:12
            X509v3 Authority Key Identifier:
                keyid:FE:2E:35:2B:42:F7:4F:10:D5:76:83:53:03:A2:E9:78:E1:C4:37:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_i41K0L3TxDVdoNTA6LpeOHEN7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:7d:34:86:b4:47:af:ff:d7:c9:55:1b:e4:68:48:c4:f4:fa:
         9c:90:73:c4:b6:21:80:a0:b9:ba:f5:ed:09:d1:1e:7e:ec:92:
         ce:d3:30:f7:ed:6a:f2:06:da:d6:8c:41:6c:14:85:c8:63:3c:
         ca:9d:74:6d:8c:80:16:fc:7d:44:11:4b:0d:cc:57:e9:d2:37:
         92:0f:8e:0e:09:dc:51:58:39:e1:95:fc:22:c2:21:de:c0:63:
         b9:04:69:a1:fe:ef:60:a5:cf:71:31:9e:f3:2b:fb:0e:9b:3e:
         4e:26:a5:2b:ff:05:ab:98:45:56:4e:33:cb:b4:16:32:11:69:
         86:96:9c:3b:c7:7e:52:46:67:07:af:a6:4c:d3:cb:5a:c1:df:
         19:19:ab:92:44:bc:0d:8a:b5:d3:4d:42:3e:a4:3d:8a:a8:b0:
         e4:40:1b:4a:df:67:55:15:ea:96:7b:24:fb:46:78:a5:64:4c:
         4a:85:cd:8c:06:01:e9:5e:fc:29:19:a3:08:e2:9c:38:16:b7:
         78:d7:0d:61:63:3a:3c:f8:6d:7f:e1:50:44:13:6e:36:4e:9c:
         7f:5e:06:3b:8c:07:3b:29:4d:14:e2:77:44:e3:49:66:d8:59:
         ac:4b:0c:06:40:73:16:0a:91:6a:3a:0e:6e:b0:09:b0:af:40:
         5b:63:06:e6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjVDQzAxMTAvBgNVBAUTKEZFMkUzNTJCNDJGNzRGMTBENTc2ODM1MzAzQTJFOTc4
RTFDNDM3QjYwHhcNMjYwNDA1MDEyMDQ0WhcNMjYwNDEyMDEyMDQ0WjAYMRYwFAYD
VQQDEw02OWQxYjhlYy1jNWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuiQwlJw9tjG0F9D9RMi3Jhs3Tl+i00Pvwuy35nZkGRn6QvS0WutlUog+LEjw
05WOVPP+RYHvdQQ9EI+oQHzUCqEYPVVCKwRm22gu00EkLsyciF1TXFTx1eJJJvRe
BAQM1VFw98ib2JeH/w9NbLCGqy8hk3bJPqh3HIaurK7yjcUg++bYfd0mpRIsfYmr
dpH3P0RTxNhtpSV6ssXTjPvstL5MB8HFfUMqFMC5WpI5Fb7PtBc/cSpS2g642JTp
gW26g5J8RlhMP1PahFnvRq2uqcx7NzkQv3tFkP+mn3VYoCCSpnz0cWAEJbSeMRJH
Z4QZOLMzPvlQ56k9DxdU0lXTRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIEfra2x
xAN83kTISu9ntZpdcV0SMB8GA1UdIwQYMBaAFP4uNStC908Q1XaDUwOi6XjhxDe2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUNDMC9DRkE3OUYxQTUw
M0YxMUVEODFEMDc1NkJDNEY5QUUwMi9faTQxSzBMM1R4RFZkb05UQTZMcGVPSEVO
N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19pNDFLMEwzVHhEVmRvTlRBNkxwZU9IRU43WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NUNDMC9DRkE3OUYxQTUwM0YxMUVEODFEMDc1NkJDNEY5QUUwMi9faTQxSzBMM1R4
RFZkb05UQTZMcGVPSEVON1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkX00hrRHr//XyVUb5GhIxPT6nJBzxLYhgKC5uvXtCdEefuySztMw9+1q8gba
1oxBbBSFyGM8yp10bYyAFvx9RBFLDcxX6dI3kg+ODgncUVg54ZX8IsIh3sBjuQRp
of7vYKXPcTGe8yv7Dps+TialK/8Fq5hFVk4zy7QWMhFphpacO8d+UkZnB6+mTNPL
WsHfGRmrkkS8DYq1001CPqQ9iqiw5EAbSt9nVRXqlnsk+0Z4pWRMSoXNjAYB6V78
KRmjCOKcOBa3eNcNYWM6PPhtf+FQRBNuNk6cf14GO4wHOylNFOJ3RONJZthZrEsM
BkBzFgqRajoObrAJsK9AW2MG5g==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:31:46 2026 by rpki-client