Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4FBE/25E826AE993211F0A354BA69C4F9AE02/pih1evOkgoa9_fg6tOZOJNguDGs.mft
File:                     pih1evOkgoa9_fg6tOZOJNguDGs.mft (raw, json)
Hash identifier:          Lu3xWl1x3y+PGkOkyBTOnP2NS3/NXWxJH3IcVVMPiZk=
Subject key identifier:   D2:8B:30:05:2B:44:83:0F:EB:7A:DF:D5:E2:65:64:2D:22:F3:7C:01
Authority key identifier: A6:28:75:7A:F3:A4:82:86:BD:FD:F8:3A:B4:E6:4E:24:D8:2E:0C:6B
Certificate issuer:       /CN=A91C4FBE/serialNumber=A628757AF3A48286BDFDF83AB4E64E24D82E0C6B
Certificate serial:       71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pih1evOkgoa9_fg6tOZOJNguDGs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4FBE/25E826AE993211F0A354BA69C4F9AE02/pih1evOkgoa9_fg6tOZOJNguDGs.mft
Manifest number:          6B
Signing time:             Sun 05 Apr 2026 07:19:18 +0000
Manifest this update:     Sun 05 Apr 2026 07:19:17 +0000
Manifest next update:     Sun 12 Apr 2026 07:19:17 +0000
Files and hashes:         1: pih1evOkgoa9_fg6tOZOJNguDGs.crl (hash: OQYkFgObjAwR6fG//dSOmxPzyevAqYvl+Hq7aMCHnCE=)
                          2: 0B4BDC0E993311F08534326BC4F9AE02.roa (hash: O+71+qKIlOFF91ThgD2M6TfIMpzWxUeWVNEtSknMhWY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4FBE/25E826AE993211F0A354BA69C4F9AE02/pih1evOkgoa9_fg6tOZOJNguDGs.crl
                          rsync://rpki.apnic.net/member_repository/A91C4FBE/25E826AE993211F0A354BA69C4F9AE02/pih1evOkgoa9_fg6tOZOJNguDGs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pih1evOkgoa9_fg6tOZOJNguDGs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 07:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4FBE, serialNumber=A628757AF3A48286BDFDF83AB4E64E24D82E0C6B
        Validity
            Not Before: Apr  5 07:19:17 2026 GMT
            Not After : Apr 12 07:19:17 2026 GMT
        Subject: CN=69d20cf6-54ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:97:d8:c8:51:af:55:2e:1a:95:32:3a:6b:54:
                    74:f8:c1:4d:81:8e:89:cc:9c:fc:79:c7:6c:e0:fe:
                    65:26:ee:ed:d4:97:12:78:6f:42:89:93:3b:3c:1d:
                    d0:0f:6d:bc:20:b8:e5:9e:d6:8d:b2:0f:98:45:43:
                    f1:d8:07:3f:ed:b2:b3:73:31:56:e1:6e:4d:76:72:
                    09:d7:fc:0a:77:3b:8a:30:38:49:a1:44:37:36:71:
                    cb:27:f0:b7:41:22:5e:0a:68:7d:22:13:5f:4c:01:
                    68:a3:f9:52:65:3b:d7:93:aa:c2:2a:4d:47:9f:8b:
                    df:ad:4c:9e:66:e5:aa:21:9c:51:16:98:37:53:73:
                    c4:98:d3:c9:4c:5e:cc:fa:71:9f:66:68:68:ae:96:
                    8e:04:31:86:ad:a0:4d:0a:0b:14:61:13:fd:90:cb:
                    5f:98:2e:b9:89:03:f0:4e:b7:91:c3:a2:3d:48:e6:
                    50:dc:f8:de:0d:37:27:30:35:37:a9:f6:de:5b:d2:
                    6f:42:c5:71:d3:fa:fb:2a:64:d6:77:dd:cf:2f:63:
                    59:15:5d:ca:df:1a:d9:fc:af:b8:11:11:c7:41:fb:
                    d7:d6:b9:ba:b9:4e:d2:9f:6c:62:65:1d:50:c6:db:
                    e4:b2:60:38:f1:64:bc:3b:d6:ce:7d:31:b4:57:ee:
                    35:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:8B:30:05:2B:44:83:0F:EB:7A:DF:D5:E2:65:64:2D:22:F3:7C:01
            X509v3 Authority Key Identifier:
                keyid:A6:28:75:7A:F3:A4:82:86:BD:FD:F8:3A:B4:E6:4E:24:D8:2E:0C:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4FBE/25E826AE993211F0A354BA69C4F9AE02/pih1evOkgoa9_fg6tOZOJNguDGs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pih1evOkgoa9_fg6tOZOJNguDGs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4FBE/25E826AE993211F0A354BA69C4F9AE02/pih1evOkgoa9_fg6tOZOJNguDGs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:37:a3:69:9d:6b:7f:fd:e3:a5:e3:f6:f1:53:11:57:41:55:
         82:2f:d1:03:52:48:be:00:97:11:c5:fd:b4:59:59:36:ca:da:
         fd:b7:d4:ac:09:07:a9:5d:ce:b9:23:d5:92:1f:80:13:e2:e6:
         d9:f5:b7:d8:26:ba:02:f5:3f:0f:ef:fb:13:05:48:e1:0c:6c:
         3c:5d:45:34:f6:42:6c:95:01:1d:1a:d5:e3:ec:e2:3a:c2:64:
         a1:ef:df:5d:81:d1:e6:1c:bb:ea:f7:d9:b4:a5:8b:63:e5:f4:
         ae:5f:d6:38:7b:09:40:ef:77:bd:95:20:c8:3e:af:eb:83:93:
         87:7e:2a:a4:0a:c5:8b:4d:a3:28:45:f5:b4:1d:4f:ee:7d:ec:
         38:60:93:f7:38:f8:86:62:76:a5:c2:4f:f2:4e:20:69:5b:29:
         73:06:fc:24:94:85:be:72:41:32:da:5a:f1:90:3d:e5:e9:20:
         3b:70:ef:6e:a7:45:bf:be:9d:64:a1:57:5e:48:1f:1f:5d:ec:
         b0:7f:70:8f:f1:f0:f6:29:7f:b0:14:05:91:38:40:6c:fb:f0:
         7d:a8:da:2f:df:4f:53:26:27:3f:6e:b9:a3:5a:31:19:37:5f:
         07:fa:31:70:24:10:62:ea:20:22:bb:ab:36:12:31:21:f8:d1:
         7b:b3:ae:e1
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
NEZCRTExMC8GA1UEBRMoQTYyODc1N0FGM0E0ODI4NkJERkRGODNBQjRFNjRFMjRE
ODJFMEM2QjAeFw0yNjA0MDUwNzE5MTdaFw0yNjA0MTIwNzE5MTdaMBgxFjAUBgNV
BAMTDTY5ZDIwY2Y2LTU0Y2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCdl9jIUa9VLhqVMjprVHT4wU2BjonMnPx5x2zg/mUm7u3UlxJ4b0KJkzs8HdAP
bbwguOWe1o2yD5hFQ/HYBz/tsrNzMVbhbk12cgnX/Ap3O4owOEmhRDc2ccsn8LdB
Il4KaH0iE19MAWij+VJlO9eTqsIqTUefi9+tTJ5m5aohnFEWmDdTc8SY08lMXsz6
cZ9maGiulo4EMYatoE0KCxRhE/2Qy1+YLrmJA/BOt5HDoj1I5lDc+N4NNycwNTep
9t5b0m9CxXHT+vsqZNZ33c8vY1kVXcrfGtn8r7gREcdB+9fWubq5TtKfbGJlHVDG
2+SyYDjxZLw71s59MbRX7jWfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU0oswBStE
gw/ret/V4mVkLSLzfAEwHwYDVR0jBBgwFoAUpih1evOkgoa9/fg6tOZOJNguDGsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0RkJFLzI1RTgyNkFFOTkz
MjExRjBBMzU0QkE2OUM0RjlBRTAyL3BpaDFldk9rZ29hOV9mZzZ0T1pPSk5ndURH
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvcGloMWV2T2tnb2E5X2ZnNnRPWk9KTmd1REdzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0
RkJFLzI1RTgyNkFFOTkzMjExRjBBMzU0QkE2OUM0RjlBRTAyL3BpaDFldk9rZ29h
OV9mZzZ0T1pPSk5ndURHcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQABN6NpnWt//eOl4/bxUxFXQVWCL9EDUki+AJcRxf20WVk2ytr9t9SsCQepXc65
I9WSH4AT4ubZ9bfYJroC9T8P7/sTBUjhDGw8XUU09kJslQEdGtXj7OI6wmSh799d
gdHmHLvq99m0pYtj5fSuX9Y4ewlA73e9lSDIPq/rg5OHfiqkCsWLTaMoRfW0HU/u
few4YJP3OPiGYnalwk/yTiBpWylzBvwklIW+ckEy2lrxkD3l6SA7cO9up0W/vp1k
oVdeSB8fXeywf3CP8fD2KX+wFAWROEBs+/B9qNov309TJic/brmjWjEZN18H+jFw
JBBi6iAiu6s2EjEh+NF7s67h
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:51:48 2026 by rpki-client