Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft
File:                     bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft (raw, json)
Hash identifier:          /uHCHKgJyGeR5h4Oo4nVZV97YU9RA9uCGFbF8qaqW1U=
Subject key identifier:   8B:23:CC:D2:26:34:E9:6D:1B:BA:13:07:2B:F2:85:D6:5B:44:4C:BE
Authority key identifier: 6C:9B:96:87:D0:5E:2B:5B:E5:36:10:9A:6A:F9:BF:FA:19:98:73:D4
Certificate issuer:       /CN=A91C95AA/serialNumber=6C9B9687D05E2B5BE536109A6AF9BFFA199873D4
Certificate serial:       02EE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft
Manifest number:          02E7
Signing time:             Fri 17 Apr 2026 01:12:55 +0000
Manifest this update:     Fri 17 Apr 2026 01:12:54 +0000
Manifest next update:     Fri 24 Apr 2026 01:12:54 +0000
Files and hashes:         1: bJuWh9BeK1vlNhCaavm_-hmYc9Q.crl (hash: mVa/eNdfITXJDjaVPlcFaJOSMU2+AvRpkEmDGhcEKSk=)
                          2: FB1F8158242A11ED9547B486C4F9AE02.roa (hash: qOTgX26Zanjyv6Lj/0iXY/YLtNoeVOf7TQ8Rw4nq2og=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.crl
                          rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:12:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 750 (0x2ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C95AA, serialNumber=6C9B9687D05E2B5BE536109A6AF9BFFA199873D4
        Validity
            Not Before: Apr 17 01:12:54 2026 GMT
            Not After : Apr 24 01:12:54 2026 GMT
        Subject: CN=69e18917-d83b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:25:69:1a:d8:05:7d:34:95:72:7d:ee:c9:8e:
                    f5:b8:1b:91:af:f3:6e:b1:fc:17:1c:9e:5e:53:d9:
                    2a:7d:be:98:74:16:6e:1a:7a:c1:70:bf:73:d5:7f:
                    be:c2:09:85:58:22:f0:eb:6f:88:e6:76:49:53:5c:
                    ce:ff:db:5c:ed:f4:e1:3c:b3:14:10:e9:f5:2a:01:
                    32:06:4a:fa:50:8e:1c:e0:8a:5d:2d:ea:57:18:b5:
                    86:4c:c4:51:01:c0:34:a5:de:f1:5a:ff:56:41:93:
                    27:bf:cf:78:2a:6b:f8:72:3d:4c:0d:05:bb:ff:1c:
                    1a:bc:19:d7:bf:36:29:4f:3f:27:d5:35:22:87:38:
                    5f:b6:29:94:17:c0:7f:bb:ae:0a:d2:c7:ef:de:dc:
                    df:9e:e3:ba:f8:35:29:70:3d:19:b9:f7:bb:15:fa:
                    19:c6:55:1a:b8:b4:5f:7a:a7:b0:e0:15:3e:58:9d:
                    90:84:b2:23:e6:f7:3b:5e:f6:a4:16:3e:8e:9e:c9:
                    a1:2d:14:1f:04:a2:c6:d2:b2:42:9b:ab:78:ae:2f:
                    06:7b:f4:1d:dd:01:6c:b7:c8:48:25:6c:c6:62:59:
                    1f:bc:df:4d:24:89:a5:db:a4:2e:04:f7:c0:54:5d:
                    79:7e:86:a1:73:a5:c8:8d:f7:37:1e:1b:5f:27:d2:
                    4e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:23:CC:D2:26:34:E9:6D:1B:BA:13:07:2B:F2:85:D6:5B:44:4C:BE
            X509v3 Authority Key Identifier:
                keyid:6C:9B:96:87:D0:5E:2B:5B:E5:36:10:9A:6A:F9:BF:FA:19:98:73:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:1f:ea:bb:11:73:8b:27:a1:1d:2b:e5:a9:c4:5a:ba:c9:6c:
         fd:f8:a9:0c:f5:1b:73:2c:da:5a:b1:fc:37:e7:70:6b:7e:c4:
         cb:dd:26:62:b2:1e:78:7d:63:74:f9:d1:37:13:fc:84:2e:eb:
         f5:09:eb:6a:19:91:c9:aa:6b:58:00:f0:c6:3f:a3:ac:da:ec:
         16:29:40:63:97:fa:85:54:8b:91:1d:08:e5:a2:1d:87:d0:d4:
         9b:7a:bd:c1:4b:94:06:7e:bd:04:c5:cd:7e:f0:ab:ce:da:6b:
         59:8f:ab:a6:ac:38:14:75:5e:a8:82:5c:69:f8:30:57:4c:82:
         95:c4:21:43:cc:74:26:15:d9:ea:b4:12:f7:80:a7:c8:ef:31:
         80:ff:a9:dc:65:48:a5:89:71:42:e9:b0:e1:a4:44:7d:f3:e2:
         5b:7e:4e:c7:51:0c:df:e9:96:00:33:d6:9c:b5:75:05:e6:8c:
         42:f9:e3:f0:ed:93:e2:a5:83:f6:0a:18:5f:f0:09:0e:ee:c7:
         cd:ff:9d:e8:58:ef:d4:83:8c:9d:1b:91:75:ee:4d:b5:0d:c4:
         2a:5c:f1:4a:25:e0:54:7e:2f:e3:1e:7e:9d:7d:da:03:5c:6f:
         0e:02:7e:86:5a:e4:74:e4:a3:84:9f:e4:36:c2:3d:f9:2d:eb:
         de:3f:08:aa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAu4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qzk1QUExMTAvBgNVBAUTKDZDOUI5Njg3RDA1RTJCNUJFNTM2MTA5QTZBRjlCRkZB
MTk5ODczRDQwHhcNMjYwNDE3MDExMjU0WhcNMjYwNDI0MDExMjU0WjAYMRYwFAYD
VQQDEw02OWUxODkxNy1kODNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwyVpGtgFfTSVcn3uyY71uBuRr/NusfwXHJ5eU9kqfb6YdBZuGnrBcL9z1X++
wgmFWCLw62+I5nZJU1zO/9tc7fThPLMUEOn1KgEyBkr6UI4c4IpdLepXGLWGTMRR
AcA0pd7xWv9WQZMnv894Kmv4cj1MDQW7/xwavBnXvzYpTz8n1TUihzhftimUF8B/
u64K0sfv3tzfnuO6+DUpcD0Zufe7FfoZxlUauLRfeqew4BU+WJ2QhLIj5vc7Xvak
Fj6OnsmhLRQfBKLG0rJCm6t4ri8Ge/Qd3QFst8hIJWzGYlkfvN9NJIml26QuBPfA
VF15foahc6XIjfc3HhtfJ9JOIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIsjzNIm
NOltG7oTByvyhdZbREy+MB8GA1UdIwQYMBaAFGyblofQXitb5TYQmmr5v/oZmHPU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTVBQS8xNTZCRDg5RTI0
MjcxMUVEQjNFQTM0ODBDNEY5QUUwMi9iSnVXaDlCZUsxdmxOaENhYXZtXy1obVlj
OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2JKdVdoOUJlSzF2bE5oQ2Fhdm1fLWhtWWM5US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OTVBQS8xNTZCRDg5RTI0MjcxMUVEQjNFQTM0ODBDNEY5QUUwMi9iSnVXaDlCZUsx
dmxOaENhYXZtXy1obVljOVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAx/quxFziyehHSvlqcRausls/fipDPUbcyzaWrH8N+dwa37Ey90mYrIeeH1j
dPnRNxP8hC7r9QnrahmRyaprWADwxj+jrNrsFilAY5f6hVSLkR0I5aIdh9DUm3q9
wUuUBn69BMXNfvCrztprWY+rpqw4FHVeqIJcafgwV0yClcQhQ8x0JhXZ6rQS94Cn
yO8xgP+p3GVIpYlxQumw4aREffPiW35Ox1EM3+mWADPWnLV1BeaMQvnj8O2T4qWD
9goYX/AJDu7Hzf+d6Fjv1IOMnRuRde5NtQ3EKlzxSiXgVH4v4x5+nX3aA1xvDgJ+
hlrkdOSjhJ/kNsI9+S3r3j8Iqg==
-----END CERTIFICATE-----
Generated at Sat Apr 18 21:08:23 2026 by rpki-client