Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft
File:                     0QwglvtdswSr0vmfRaKUiCktNyE.mft (raw, json)
Hash identifier:          10QVPyeAWYzwBdk0ple0pyrrDbEYl3TU0ozlcv3E60c=
Subject key identifier:   BA:B1:C5:22:AC:FF:0F:01:EE:F3:BC:69:E6:7D:11:01:77:D1:08:CB
Authority key identifier: D1:0C:20:96:FB:5D:B3:04:AB:D2:F9:9F:45:A2:94:88:29:2D:37:21
Certificate issuer:       /CN=A91C68AD/serialNumber=D10C2096FB5DB304ABD2F99F45A29488292D3721
Certificate serial:       012C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0QwglvtdswSr0vmfRaKUiCktNyE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft
Manifest number:          011C
Signing time:             Sun 05 Apr 2026 05:13:15 +0000
Manifest this update:     Sun 05 Apr 2026 05:13:15 +0000
Manifest next update:     Sun 12 Apr 2026 05:13:15 +0000
Files and hashes:         1: 0QwglvtdswSr0vmfRaKUiCktNyE.crl (hash: eUoEQD/yixNH82fdr1v3bya2uIDb+S4ZlA1XLJyEjqo=)
                          2: 1E0CBABEC99B11F0BD75C310C4F9AE02.roa (hash: XT1f5iHkb8m++28/fpiYZLplpEUsgc7c8BPU0gRXDvg=)
                          3: 1D9F5104C99B11F092A1C310C4F9AE02.roa (hash: ZvIqaTrMx4lREhhOll5OEYiWwpf2XdBASEHvDBRAKLs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.crl
                          rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0QwglvtdswSr0vmfRaKUiCktNyE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:13:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 300 (0x12c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C68AD, serialNumber=D10C2096FB5DB304ABD2F99F45A29488292D3721
        Validity
            Not Before: Apr  5 05:13:15 2026 GMT
            Not After : Apr 12 05:13:15 2026 GMT
        Subject: CN=69d1ef6b-b842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f4:ba:a1:14:b3:03:d1:5a:83:c2:f8:09:30:
                    8a:94:88:fe:9e:e3:16:fb:ac:68:b0:69:1f:63:2a:
                    29:9c:70:43:c1:42:41:e5:c0:cd:4a:4e:19:91:47:
                    aa:4c:4a:1b:bf:e9:2f:cc:fd:0f:20:ab:28:0e:1a:
                    78:a3:fc:a5:a4:ce:06:a3:5a:c1:e9:cc:f9:2d:f1:
                    ec:9b:3c:fb:b0:50:30:a9:84:fc:c5:6f:be:7e:9b:
                    01:ba:e6:17:5b:16:a8:6b:25:7a:83:03:05:0d:41:
                    17:5e:fd:71:66:07:20:87:8e:43:05:42:e1:ab:0b:
                    98:e4:8b:d8:09:68:42:4a:f5:af:cd:37:4f:f0:96:
                    54:23:23:90:4e:1c:0b:b3:25:1f:a4:cf:cb:bc:be:
                    63:32:5f:f7:c6:01:83:c9:c1:67:81:da:8b:82:6c:
                    ca:4a:87:e9:62:05:d6:17:94:fa:75:62:d7:85:e8:
                    4d:c7:c2:6b:cd:1d:4f:fd:30:b6:a6:f1:30:74:f1:
                    d5:83:f7:c8:45:40:22:a4:9a:87:fb:83:01:32:e3:
                    ea:93:16:26:43:46:04:2d:e4:7c:1e:c7:0f:1b:fb:
                    10:b9:6c:1e:f4:3b:67:81:df:cd:0a:d4:f4:18:ab:
                    d1:13:77:4b:71:03:88:84:a2:d9:f3:08:ec:24:e8:
                    2c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B1:C5:22:AC:FF:0F:01:EE:F3:BC:69:E6:7D:11:01:77:D1:08:CB
            X509v3 Authority Key Identifier:
                keyid:D1:0C:20:96:FB:5D:B3:04:AB:D2:F9:9F:45:A2:94:88:29:2D:37:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0QwglvtdswSr0vmfRaKUiCktNyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:aa:b1:33:f8:0b:3d:df:51:1a:76:ee:c3:b5:e2:a3:61:0e:
         d2:9c:de:94:07:40:0a:f3:ee:2d:00:75:3b:8a:39:ac:6f:8d:
         3d:74:2d:f3:59:14:25:06:9e:2b:bc:8a:49:92:dc:1d:e2:9f:
         30:c7:28:3e:63:c3:82:0a:67:f9:38:6c:98:0e:92:26:2e:69:
         5c:25:a7:80:83:d2:d2:60:da:f8:9f:c7:66:57:51:01:07:52:
         bb:f7:4a:8f:07:5d:98:5b:15:b8:09:5c:5f:9e:bc:7c:8e:17:
         b1:b4:98:b0:82:dc:60:f1:02:e8:47:94:3c:b6:ed:d9:73:19:
         91:ff:57:e9:9e:26:8d:7a:17:9b:c1:de:bd:89:34:dd:6b:f8:
         73:3b:fb:52:ac:11:bd:75:0c:2a:f8:c3:6c:a2:cb:11:76:66:
         12:d1:0d:3b:38:79:48:d4:8d:42:88:91:e6:00:6a:43:79:b1:
         f1:f1:3a:06:60:cb:77:2e:6a:ec:96:b4:9c:3c:f2:77:fb:c0:
         5f:3d:f0:e6:3c:1a:57:e5:56:f6:06:22:2e:d8:81:31:b6:3a:
         24:78:4a:aa:6c:81:ed:c3:e4:1a:a3:9a:ad:92:f7:24:12:12:
         37:64:ca:36:1e:3e:9d:9b:01:66:e8:5b:2f:4d:56:35:85:0c:
         5e:67:d2:45
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzY4QUQxMTAvBgNVBAUTKEQxMEMyMDk2RkI1REIzMDRBQkQyRjk5RjQ1QTI5NDg4
MjkyRDM3MjEwHhcNMjYwNDA1MDUxMzE1WhcNMjYwNDEyMDUxMzE1WjAYMRYwFAYD
VQQDEw02OWQxZWY2Yi1iODQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAovS6oRSzA9Fag8L4CTCKlIj+nuMW+6xosGkfYyopnHBDwUJB5cDNSk4ZkUeq
TEobv+kvzP0PIKsoDhp4o/ylpM4Go1rB6cz5LfHsmzz7sFAwqYT8xW++fpsBuuYX
WxaoayV6gwMFDUEXXv1xZgcgh45DBULhqwuY5IvYCWhCSvWvzTdP8JZUIyOQThwL
syUfpM/LvL5jMl/3xgGDycFngdqLgmzKSofpYgXWF5T6dWLXhehNx8JrzR1P/TC2
pvEwdPHVg/fIRUAipJqH+4MBMuPqkxYmQ0YELeR8HscPG/sQuWwe9Dtngd/NCtT0
GKvRE3dLcQOIhKLZ8wjsJOgsSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLqxxSKs
/w8B7vO8aeZ9EQF30QjLMB8GA1UdIwQYMBaAFNEMIJb7XbMEq9L5n0WilIgpLTch
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjhBRC9ERUJBMjM4MDg2
QTAxMUVGQjM2RTMwMEVDNEY5QUUwMi8wUXdnbHZ0ZHN3U3Iwdm1mUmFLVWlDa3RO
eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBRd2dsdnRkc3dTcjB2bWZSYUtVaUNrdE55RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NjhBRC9ERUJBMjM4MDg2QTAxMUVGQjM2RTMwMEVDNEY5QUUwMi8wUXdnbHZ0ZHN3
U3Iwdm1mUmFLVWlDa3ROeUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIqqxM/gLPd9RGnbuw7Xio2EO0pzelAdACvPuLQB1O4o5rG+NPXQt81kUJQae
K7yKSZLcHeKfMMcoPmPDggpn+ThsmA6SJi5pXCWngIPS0mDa+J/HZldRAQdSu/dK
jwddmFsVuAlcX568fI4XsbSYsILcYPEC6EeUPLbt2XMZkf9X6Z4mjXoXm8HevYk0
3Wv4czv7UqwRvXUMKvjDbKLLEXZmEtENOzh5SNSNQoiR5gBqQ3mx8fE6BmDLdy5q
7Ja0nDzyd/vAXz3w5jwaV+VW9gYiLtiBMbY6JHhKqmyB7cPkGqOarZL3JBISN2TK
Nh4+nZsBZuhbL01WNYUMXmfSRQ==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:33:04 2026 by rpki-client