Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.mft
File:                     tLEObLONU2XQVOjb6Q808sOIsQw.mft (raw, json)
Hash identifier:          tyaZIur/N7cZNqsSW766xHpfmvih9BkyHST39lV0A8Y=
Subject key identifier:   EC:0B:69:C7:A4:8E:5E:43:17:5B:2D:DF:A5:90:3E:F6:CF:0F:39:D5
Authority key identifier: B4:B1:0E:6C:B3:8D:53:65:D0:54:E8:DB:E9:0F:34:F2:C3:88:B1:0C
Certificate issuer:       /CN=A91CE3A3/serialNumber=B4B10E6CB38D5365D054E8DBE90F34F2C388B10C
Certificate serial:       0D3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLEObLONU2XQVOjb6Q808sOIsQw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.mft
Manifest number:          0D07
Signing time:             Sat 04 Apr 2026 18:05:21 +0000
Manifest this update:     Sat 04 Apr 2026 18:05:20 +0000
Manifest next update:     Sat 11 Apr 2026 18:05:20 +0000
Files and hashes:         1: tLEObLONU2XQVOjb6Q808sOIsQw.crl (hash: B9pgWuI8kPYOUO1EGhSL1UyMW4BdL5Jy8YFub69Dokg=)
                          2: 618AD7B6638A11F08BC2A840C4F9AE02.roa (hash: l1iCGSn/PX7oFU8pYAYmto407lNna+dcfVIeQPwpey4=)
                          3: 610856EC638A11F08BC2A840C4F9AE02.roa (hash: hFVkKE+Qi5ASFcR8wJP4hxF2ONROpTw8ANjmt7CoeCQ=)
                          4: 30256B5CF7B911EEAB0C6C36C4F9AE02.roa (hash: 98uYds8I1pxO4Y6dKdHlz74HRamQ9x93aGa9N7uQZao=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.crl
                          rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLEObLONU2XQVOjb6Q808sOIsQw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 18:05:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3386 (0xd3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE3A3, serialNumber=B4B10E6CB38D5365D054E8DBE90F34F2C388B10C
        Validity
            Not Before: Apr  4 18:05:20 2026 GMT
            Not After : Apr 11 18:05:20 2026 GMT
        Subject: CN=69d152e1-20b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:03:dc:b4:a4:ce:2a:76:b5:d9:02:0a:bd:75:
                    ff:db:bc:8d:96:97:1d:c6:7d:47:83:42:99:02:f1:
                    05:93:ef:7a:df:5c:04:95:0c:79:3a:00:39:0d:75:
                    57:76:c6:15:56:e4:b3:01:48:0d:06:c3:bb:38:ca:
                    22:c9:a3:90:2a:ba:f8:57:fe:14:f7:a1:b9:9b:23:
                    2f:d2:23:63:d6:39:0d:ce:33:fe:21:d3:ad:3f:a0:
                    40:cd:5c:61:0c:01:ee:16:5c:be:41:17:78:66:1c:
                    fa:fb:57:e9:76:57:ad:9e:90:d8:94:8f:d6:37:e7:
                    d7:0b:20:06:1c:58:7c:5e:08:f2:7d:c3:76:71:4c:
                    9e:e7:09:99:43:a4:02:17:ec:08:8d:04:da:b8:45:
                    56:60:19:38:c2:48:1b:d7:c6:81:64:5b:da:ed:c4:
                    68:b7:1e:df:5d:70:75:d2:8c:69:b2:0c:7c:da:fc:
                    79:16:4d:a5:1f:bb:c8:f8:c1:d2:08:33:6e:99:46:
                    f0:05:0d:37:99:f3:2f:51:15:ea:df:c9:c1:57:16:
                    3c:f1:02:8b:b7:19:01:d4:08:9f:d6:d3:30:00:58:
                    42:ff:b2:07:62:43:ae:f9:d5:8b:20:c1:8d:90:ff:
                    28:51:80:56:2f:80:75:1c:ab:ae:88:1d:eb:dd:c2:
                    62:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:0B:69:C7:A4:8E:5E:43:17:5B:2D:DF:A5:90:3E:F6:CF:0F:39:D5
            X509v3 Authority Key Identifier:
                keyid:B4:B1:0E:6C:B3:8D:53:65:D0:54:E8:DB:E9:0F:34:F2:C3:88:B1:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLEObLONU2XQVOjb6Q808sOIsQw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:7b:a6:f7:50:6d:58:2e:3a:df:5e:66:b9:21:30:6a:10:05:
         f8:92:c4:96:63:9d:fd:34:92:9a:b5:4f:d0:d6:92:fa:b5:f5:
         12:4a:8c:7b:cd:55:3d:fb:8a:f4:01:75:87:9d:61:92:ad:b3:
         de:dc:d9:7d:bd:24:17:51:8a:e9:37:c9:55:4f:25:9c:29:68:
         7e:68:57:b4:ea:99:ef:56:b0:34:df:0a:32:31:ab:76:26:16:
         06:c1:85:7a:9f:e1:46:5a:b6:63:dd:a3:6f:c4:63:4c:0a:b4:
         9b:9d:09:32:ee:15:4e:17:a5:99:cd:67:61:6e:14:3f:27:40:
         b8:29:90:ce:a5:48:16:95:07:f2:c8:b2:f5:83:43:a3:63:fb:
         91:d3:01:9e:ba:76:26:2c:50:d4:69:13:57:5d:ff:65:39:f6:
         fd:d5:49:7f:30:b2:b4:5f:88:25:72:df:ab:89:49:32:d4:75:
         ae:4b:ee:04:3a:b6:3d:dd:6f:99:69:68:e5:d0:be:f7:0b:1d:
         df:92:09:db:2d:4d:23:60:fe:4c:f0:fb:12:8f:07:0c:0a:da:
         16:8e:20:c0:cb:fc:ce:9e:1a:f0:4b:d4:11:06:de:91:13:d8:
         fb:ac:9c:bc:89:76:87:11:61:f3:17:df:41:c1:66:2e:07:84:
         de:62:13:7f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDTowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0UzQTMxMTAvBgNVBAUTKEI0QjEwRTZDQjM4RDUzNjVEMDU0RThEQkU5MEYzNEYy
QzM4OEIxMEMwHhcNMjYwNDA0MTgwNTIwWhcNMjYwNDExMTgwNTIwWjAYMRYwFAYD
VQQDEw02OWQxNTJlMS0yMGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqwPctKTOKna12QIKvXX/27yNlpcdxn1Hg0KZAvEFk+9631wElQx5OgA5DXVX
dsYVVuSzAUgNBsO7OMoiyaOQKrr4V/4U96G5myMv0iNj1jkNzjP+IdOtP6BAzVxh
DAHuFly+QRd4Zhz6+1fpdletnpDYlI/WN+fXCyAGHFh8XgjyfcN2cUye5wmZQ6QC
F+wIjQTauEVWYBk4wkgb18aBZFva7cRotx7fXXB10oxpsgx82vx5Fk2lH7vI+MHS
CDNumUbwBQ03mfMvURXq38nBVxY88QKLtxkB1Aif1tMwAFhC/7IHYkOu+dWLIMGN
kP8oUYBWL4B1HKuuiB3r3cJiEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOwLacek
jl5DF1st36WQPvbPDznVMB8GA1UdIwQYMBaAFLSxDmyzjVNl0FTo2+kPNPLDiLEM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTNBMy8yMDkxREM4RTA1
MDExMUVBQkQ5QjIwMkNDNEY5QUUwMi90TEVPYkxPTlUyWFFWT2piNlE4MDhzT0lz
UXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RMRU9iTE9OVTJYUVZPamI2UTgwOHNPSXNRdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RTNBMy8yMDkxREM4RTA1MDExMUVBQkQ5QjIwMkNDNEY5QUUwMi90TEVPYkxPTlUy
WFFWT2piNlE4MDhzT0lzUXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPXum91BtWC46315muSEwahAF+JLElmOd/TSSmrVP0NaS+rX1EkqMe81VPfuK
9AF1h51hkq2z3tzZfb0kF1GK6TfJVU8lnClofmhXtOqZ71awNN8KMjGrdiYWBsGF
ep/hRlq2Y92jb8RjTAq0m50JMu4VThelmc1nYW4UPydAuCmQzqVIFpUH8siy9YND
o2P7kdMBnrp2JixQ1GkTV13/ZTn2/dVJfzCytF+IJXLfq4lJMtR1rkvuBDq2Pd1v
mWlo5dC+9wsd35IJ2y1NI2D+TPD7Eo8HDAraFo4gwMv8zp4a8EvUEQbekRPY+6yc
vIl2hxFh8xffQcFmLgeE3mITfw==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:49:41 2026 by rpki-client