Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft
File:                     0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft (raw, json)
Hash identifier:          7Ii9y81O8QL9DJzDDWPBCHlFFFEntnrCye1Ja9XNyQY=
Subject key identifier:   AF:56:CE:84:EE:C4:3C:B2:21:22:86:74:65:73:D6:AB:98:6A:1A:26
Authority key identifier: D0:E5:44:05:B0:3D:3D:12:34:59:DE:01:BB:40:0F:4D:7A:83:29:D0
Certificate issuer:       /CN=A91B834D/serialNumber=D0E54405B03D3D123459DE01BB400F4D7A8329D0
Certificate serial:       0262
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft
Manifest number:          0253
Signing time:             Sun 05 Apr 2026 01:54:09 +0000
Manifest this update:     Sun 05 Apr 2026 01:54:08 +0000
Manifest next update:     Sun 12 Apr 2026 01:54:08 +0000
Files and hashes:         1: 0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl (hash: PmJ11bAJYMT0HTBIFzEAzuX75UuZ35zCYjDJ1owmOfE=)
                          2: 61883292ADA511EDB2C68947C4F9AE02.roa (hash: tNl21coa/EGZ4GFdwnMPQbUa31C+8/iiCs/PaUbI1YA=)
                          3: F9B10D46ADAA11ED810C6C45C4F9AE02.roa (hash: I6Sbyec9ZcJ6A7q7pEgIDEKokkMMztzY/bH/OFuVx6g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl
                          rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 01:54:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 610 (0x262)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B834D, serialNumber=D0E54405B03D3D123459DE01BB400F4D7A8329D0
        Validity
            Not Before: Apr  5 01:54:08 2026 GMT
            Not After : Apr 12 01:54:08 2026 GMT
        Subject: CN=69d1c0c1-7cd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:db:52:37:dd:e2:67:b9:a5:fd:72:19:c1:bc:
                    94:7d:8b:67:02:09:3b:41:d6:ba:46:57:65:23:ec:
                    17:e7:fb:31:a4:ae:f9:e2:b9:bf:3f:79:2e:3b:52:
                    36:c7:91:d1:6c:bb:36:b8:d8:d3:cb:d1:a2:c2:d1:
                    43:f2:f7:fe:22:bd:ff:62:94:84:fe:bc:61:cf:4c:
                    00:64:b2:5b:be:31:e5:6c:34:9f:72:bb:f8:11:b8:
                    06:62:31:dd:b9:71:be:46:5e:4a:9c:88:98:ef:79:
                    f7:93:5e:e4:89:5b:b6:93:55:7c:7e:38:cc:27:ea:
                    79:96:f4:f8:9a:b8:3d:e0:f4:ad:10:ed:b1:dd:71:
                    8d:5f:7f:72:0c:79:81:b3:fd:8a:4c:39:d7:b6:d7:
                    13:64:ac:8e:42:d6:a8:34:d5:90:3c:df:94:c8:c6:
                    70:af:05:d0:5a:e5:7a:a8:7a:5d:17:ba:1e:77:24:
                    84:cd:f1:cf:8a:7f:26:36:a9:87:d4:9b:5e:db:9c:
                    9d:14:2c:dc:b3:b7:5f:05:34:59:95:c6:aa:62:5a:
                    75:37:a7:18:6f:42:ce:89:28:6a:ec:79:dc:78:50:
                    e3:30:e7:1e:1a:52:5e:4f:dd:e9:4a:f0:2a:d7:7b:
                    86:4a:a2:99:3f:bd:bc:a3:ba:78:df:bc:78:0a:0a:
                    e0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:56:CE:84:EE:C4:3C:B2:21:22:86:74:65:73:D6:AB:98:6A:1A:26
            X509v3 Authority Key Identifier:
                keyid:D0:E5:44:05:B0:3D:3D:12:34:59:DE:01:BB:40:0F:4D:7A:83:29:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B834D/3A2C5196ADA111EDAB6DF42DC4F9AE02/0OVEBbA9PRI0Wd4Bu0APTXqDKdA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:81:90:fe:b9:ed:28:b5:40:9c:ad:f8:92:66:6b:44:f4:4c:
         b7:67:c2:1f:b5:2b:0f:e6:51:e9:85:ff:4a:ea:6b:78:e9:c3:
         ef:e6:ff:3c:ee:eb:25:42:7a:72:ba:72:96:8c:b0:1d:21:d9:
         5b:69:3f:c1:4c:7d:48:05:82:74:c8:ce:66:23:c3:6f:51:8e:
         90:22:60:65:4e:f7:c7:af:a1:2c:08:0f:48:08:79:2c:a6:79:
         41:7a:0d:de:9c:d6:aa:be:01:25:78:e9:bb:b4:61:07:4e:fb:
         4e:bd:c8:26:3a:3c:3a:2f:51:dd:1b:96:15:36:bf:51:b3:ff:
         66:9e:41:40:fc:c7:30:2f:23:1e:db:3d:00:29:ec:d9:d8:e7:
         5c:95:be:bb:21:41:37:3c:5b:c8:a6:a6:9e:7c:0c:32:ad:f7:
         38:f6:f8:8b:5e:e8:d3:24:ab:42:c4:06:d7:f6:6b:8e:98:7f:
         99:c1:a0:a7:75:d0:96:16:4b:0e:fe:b0:d2:80:27:19:2d:27:
         1b:1b:12:37:d8:40:c7:53:34:15:dc:da:31:d0:b5:35:54:96:
         f4:a6:d9:50:5a:1d:70:da:45:87:cb:d2:f0:af:8a:11:51:f0:
         f7:8d:00:25:a1:c6:e7:81:3f:65:58:d8:a6:f7:ed:07:6d:0d:
         a6:43:54:15
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjgzNEQxMTAvBgNVBAUTKEQwRTU0NDA1QjAzRDNEMTIzNDU5REUwMUJCNDAwRjRE
N0E4MzI5RDAwHhcNMjYwNDA1MDE1NDA4WhcNMjYwNDEyMDE1NDA4WjAYMRYwFAYD
VQQDEw02OWQxYzBjMS03Y2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv9tSN93iZ7ml/XIZwbyUfYtnAgk7Qda6RldlI+wX5/sxpK754rm/P3kuO1I2
x5HRbLs2uNjTy9GiwtFD8vf+Ir3/YpSE/rxhz0wAZLJbvjHlbDSfcrv4EbgGYjHd
uXG+Rl5KnIiY73n3k17kiVu2k1V8fjjMJ+p5lvT4mrg94PStEO2x3XGNX39yDHmB
s/2KTDnXttcTZKyOQtaoNNWQPN+UyMZwrwXQWuV6qHpdF7oedySEzfHPin8mNqmH
1Jte25ydFCzcs7dfBTRZlcaqYlp1N6cYb0LOiShq7HnceFDjMOceGlJeT93pSvAq
13uGSqKZP728o7p437x4CgrgCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK9WzoTu
xDyyISKGdGVz1quYahomMB8GA1UdIwQYMBaAFNDlRAWwPT0SNFneAbtAD016gynQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODM0RC8zQTJDNTE5NkFE
QTExMUVEQUI2REY0MkRDNEY5QUUwMi8wT1ZFQmJBOVBSSTBXZDRCdTBBUFRYcURL
ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBPVkVCYkE5UFJJMFdkNEJ1MEFQVFhxREtkQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
ODM0RC8zQTJDNTE5NkFEQTExMUVEQUI2REY0MkRDNEY5QUUwMi8wT1ZFQmJBOVBS
STBXZDRCdTBBUFRYcURLZEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYIGQ/rntKLVAnK34kmZrRPRMt2fCH7UrD+ZR6YX/SupreOnD7+b/PO7rJUJ6
crpyloywHSHZW2k/wUx9SAWCdMjOZiPDb1GOkCJgZU73x6+hLAgPSAh5LKZ5QXoN
3pzWqr4BJXjpu7RhB077Tr3IJjo8Oi9R3RuWFTa/UbP/Zp5BQPzHMC8jHts9ACns
2djnXJW+uyFBNzxbyKamnnwMMq33OPb4i17o0ySrQsQG1/Zrjph/mcGgp3XQlhZL
Dv6w0oAnGS0nGxsSN9hAx1M0FdzaMdC1NVSW9KbZUFodcNpFh8vS8K+KEVHw940A
JaHG54E/ZVjYpvftB20NpkNUFQ==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:58:54 2026 by rpki-client