Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.mft
File:                     _vE6uFK4kquii39LJSVwiZZNdms.mft (raw, json)
Hash identifier:          NL60nB/vM6xvhe4LmOkdTtAmvGKba/wlSAveImUuB84=
Subject key identifier:   C2:90:BB:97:71:3B:4A:C8:0E:55:B0:A9:96:DF:31:7D:E7:4A:84:A3
Authority key identifier: FE:F1:3A:B8:52:B8:92:AB:A2:8B:7F:4B:25:25:70:89:96:4D:76:6B
Certificate issuer:       /CN=A91B66C5/serialNumber=FEF13AB852B892ABA28B7F4B25257089964D766B
Certificate serial:       0ABA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vE6uFK4kquii39LJSVwiZZNdms.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.mft
Manifest number:          0AAD
Signing time:             Sun 26 Apr 2026 19:24:44 +0000
Manifest this update:     Sun 26 Apr 2026 19:24:43 +0000
Manifest next update:     Sun 03 May 2026 19:24:43 +0000
Files and hashes:         1: _vE6uFK4kquii39LJSVwiZZNdms.crl (hash: XHtwmf8o8ctbiJ7/CJqXLmfsXPhiGzaTc7mlr43+1p8=)
                          2: 503D2222018111EBB0502527C4F9AE02.roa (hash: MCzUyxnTRehmJMjRKUltJb5xp2lunuQcTMASQVMB0GE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.crl
                          rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vE6uFK4kquii39LJSVwiZZNdms.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 03 May 2026 19:24:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2746 (0xaba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B66C5, serialNumber=FEF13AB852B892ABA28B7F4B25257089964D766B
        Validity
            Not Before: Apr 26 19:24:43 2026 GMT
            Not After : May  3 19:24:43 2026 GMT
        Subject: CN=69ee667b-c648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:84:74:80:51:4c:79:8a:9f:d8:14:35:28:22:
                    56:df:3a:7b:97:fe:d8:96:98:3a:a4:0a:99:2f:8d:
                    9a:77:09:f4:30:c7:2e:9e:a1:41:a7:09:9f:55:e9:
                    9f:5e:fb:73:f9:9f:ea:d4:3c:72:d2:1d:73:91:5c:
                    3a:4e:bf:47:a6:d8:ad:51:f1:65:91:2f:15:e9:5a:
                    81:8d:5c:38:31:d7:2f:cf:a3:6c:a8:08:03:d3:27:
                    ce:98:bf:6e:72:46:7d:37:27:e5:08:e7:ab:9a:ce:
                    71:7d:eb:1e:c3:ed:8d:a3:71:2a:4c:d1:9f:ad:0b:
                    e7:03:2b:29:bb:27:ea:65:55:ba:db:a3:2f:99:91:
                    1f:03:13:7a:be:3d:62:f6:7b:b0:a9:15:f8:08:55:
                    ef:b2:98:2b:e3:fa:7d:6c:23:da:16:55:0e:b4:51:
                    22:62:e1:4f:9e:da:8f:00:8b:a2:1b:2f:63:83:63:
                    f6:08:32:93:3d:75:63:e8:af:a8:8a:2f:e5:de:8a:
                    43:1c:fb:d8:0d:48:13:8f:dd:8b:37:37:9a:6d:c5:
                    70:18:be:8e:fa:f8:43:7b:03:4b:6c:b2:be:89:f1:
                    26:75:4c:72:2f:de:d6:5b:8d:e2:75:a4:8c:17:65:
                    74:19:72:fe:6d:e5:49:19:57:e4:50:26:c7:0f:0b:
                    b8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:90:BB:97:71:3B:4A:C8:0E:55:B0:A9:96:DF:31:7D:E7:4A:84:A3
            X509v3 Authority Key Identifier:
                keyid:FE:F1:3A:B8:52:B8:92:AB:A2:8B:7F:4B:25:25:70:89:96:4D:76:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vE6uFK4kquii39LJSVwiZZNdms.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:e6:f8:da:49:a1:e4:be:d5:b3:d0:11:72:bc:c9:fa:df:6d:
         69:a8:fd:75:36:05:7a:f8:b9:e3:3e:76:4a:fd:60:35:37:2d:
         31:bf:08:77:91:c5:8f:fa:d9:0e:fd:95:5e:d2:4c:02:9c:cf:
         66:52:3d:6a:b2:8c:e4:a8:58:67:df:ea:92:90:f0:f6:82:98:
         27:ef:39:61:06:5e:a6:0d:60:af:80:dc:92:44:6d:7c:80:05:
         2d:f2:53:60:f5:78:c4:5a:fd:b6:0f:f0:12:0c:a7:c7:1e:4a:
         26:2d:37:ca:70:b1:a6:33:b8:c6:d7:d8:9e:15:8e:39:c1:10:
         22:bf:af:fd:63:5f:06:5a:0c:05:83:a0:ae:89:d9:af:dc:25:
         89:2b:b9:73:26:40:4c:fb:6c:35:23:b4:5d:d3:4a:35:6b:07:
         67:15:eb:2c:32:b5:54:2c:8c:c4:37:5e:54:89:ec:c2:f4:55:
         2b:9c:2e:5c:9e:d7:23:1f:fa:62:d1:b9:ac:e7:2c:bd:85:43:
         b2:e3:85:66:71:9c:0f:02:9e:ae:17:a4:17:8f:23:8f:60:33:
         12:53:82:e5:52:1b:de:ae:c1:75:1a:3e:5b:67:27:6d:d2:1b:
         2b:a9:73:5e:2e:67:e7:b5:72:b6:3a:70:0b:56:c0:da:21:ef:
         8e:29:b5:e9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCrowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjY2QzUxMTAvBgNVBAUTKEZFRjEzQUI4NTJCODkyQUJBMjhCN0Y0QjI1MjU3MDg5
OTY0RDc2NkIwHhcNMjYwNDI2MTkyNDQzWhcNMjYwNTAzMTkyNDQzWjAYMRYwFAYD
VQQDEw02OWVlNjY3Yi1jNjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArIR0gFFMeYqf2BQ1KCJW3zp7l/7Ylpg6pAqZL42adwn0MMcunqFBpwmfVemf
Xvtz+Z/q1Dxy0h1zkVw6Tr9HptitUfFlkS8V6VqBjVw4Mdcvz6NsqAgD0yfOmL9u
ckZ9NyflCOerms5xfesew+2No3EqTNGfrQvnAyspuyfqZVW626MvmZEfAxN6vj1i
9nuwqRX4CFXvspgr4/p9bCPaFlUOtFEiYuFPntqPAIuiGy9jg2P2CDKTPXVj6K+o
ii/l3opDHPvYDUgTj92LNzeabcVwGL6O+vhDewNLbLK+ifEmdUxyL97WW43idaSM
F2V0GXL+beVJGVfkUCbHDwu45QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMKQu5dx
O0rIDlWwqZbfMX3nSoSjMB8GA1UdIwQYMBaAFP7xOrhSuJKroot/SyUlcImWTXZr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjZDNS9BMkNEMzU0RTc3
RUUxMUVBQTVEMDBDMjhDNEY5QUUwMi9fdkU2dUZLNGtxdWlpMzlMSlNWd2laWk5k
bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL192RTZ1Rks0a3F1aWkzOUxKU1Z3aVpaTmRtcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NjZDNS9BMkNEMzU0RTc3RUUxMUVBQTVEMDBDMjhDNEY5QUUwMi9fdkU2dUZLNGtx
dWlpMzlMSlNWd2laWk5kbXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPOb42kmh5L7Vs9ARcrzJ+t9taaj9dTYFevi54z52Sv1gNTctMb8Id5HFj/rZ
Dv2VXtJMApzPZlI9arKM5KhYZ9/qkpDw9oKYJ+85YQZepg1gr4DckkRtfIAFLfJT
YPV4xFr9tg/wEgynxx5KJi03ynCxpjO4xtfYnhWOOcEQIr+v/WNfBloMBYOgronZ
r9wliSu5cyZATPtsNSO0XdNKNWsHZxXrLDK1VCyMxDdeVInswvRVK5wuXJ7XIx/6
YtG5rOcsvYVDsuOFZnGcDwKerhekF48jj2AzElOC5VIb3q7BdRo+W2cnbdIbK6lz
Xi5n57VytjpwC1bA2iHvjim16Q==
-----END CERTIFICATE-----
Generated at Mon Apr 27 14:37:34 2026 by rpki-client