Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft
File:                     v7abwiV2uVe6tf8za36DWNy3Cio.mft (raw, json)
Hash identifier:          eEOu6gYN6PrUT38py+J872NPXS/Pz4V2QYNWufLq/sA=
Subject key identifier:   3B:B7:2F:B6:25:14:64:B6:2D:17:E4:B5:F9:60:F0:9C:8D:36:08:44
Authority key identifier: BF:B6:9B:C2:25:76:B9:57:BA:B5:FF:33:6B:7E:83:58:DC:B7:0A:2A
Certificate issuer:       /CN=A91D5BFB/serialNumber=BFB69BC22576B957BAB5FF336B7E8358DCB70A2A
Certificate serial:       2276
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7abwiV2uVe6tf8za36DWNy3Cio.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft
Manifest number:          2252
Signing time:             Sat 04 Apr 2026 15:48:20 +0000
Manifest this update:     Sat 04 Apr 2026 15:48:20 +0000
Manifest next update:     Sat 11 Apr 2026 15:48:20 +0000
Files and hashes:         1: v7abwiV2uVe6tf8za36DWNy3Cio.crl (hash: dqoQnWWeXsPTUQLWiUWs6z0xW6OMyQhF2rAiOfNa64I=)
                          2: 6D2F20B6ECEB11EE960F5531C4F9AE02.roa (hash: JN5MdgQyOnCl7sTnuuhfSC+dcJigA58t5/ie8y0Mx7o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.crl
                          rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7abwiV2uVe6tf8za36DWNy3Cio.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 15:48:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8822 (0x2276)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5BFB, serialNumber=BFB69BC22576B957BAB5FF336B7E8358DCB70A2A
        Validity
            Not Before: Apr  4 15:48:20 2026 GMT
            Not After : Apr 11 15:48:20 2026 GMT
        Subject: CN=69d132c4-0632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:00:b5:68:7c:38:f4:b5:d5:e7:f6:70:3a:25:
                    fc:f2:81:c0:17:cd:a0:98:df:77:fe:21:5f:40:dd:
                    c8:55:e1:fb:0a:36:74:51:db:d1:b5:62:17:b8:85:
                    d6:ad:c0:03:d6:4d:20:44:28:4c:79:83:dd:fe:4f:
                    3c:df:90:3f:f4:55:c2:c5:9d:bc:cd:e7:5a:1b:b1:
                    7e:4b:22:80:63:d8:40:db:cf:f7:9e:36:08:2f:51:
                    3f:fb:88:b1:52:75:7e:4a:57:89:4a:0b:f2:ae:07:
                    a5:47:60:c9:51:da:12:fd:a3:57:a9:3b:27:7d:93:
                    25:c5:06:e5:69:26:07:89:d4:7b:7b:a2:86:27:e7:
                    a3:b3:a9:9e:5f:69:2a:b0:02:52:fb:8e:bb:6a:67:
                    a9:63:ea:64:70:87:b1:f8:6a:ba:b7:64:9b:dc:a7:
                    8e:d0:40:92:76:7a:4d:ef:8e:50:b0:60:8e:8d:50:
                    e8:b1:32:b6:3e:28:6c:19:24:51:70:cb:f3:85:b2:
                    a8:ed:cd:1c:67:b4:7d:b3:15:48:e3:14:f3:87:13:
                    00:bb:a1:61:e4:18:ea:67:78:0c:f2:0a:d6:59:35:
                    a5:4f:60:6e:35:5f:8a:a0:5b:ad:76:0e:2f:b9:4b:
                    0c:d6:3e:be:86:a5:dc:3a:91:80:06:19:f6:7b:1d:
                    74:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B7:2F:B6:25:14:64:B6:2D:17:E4:B5:F9:60:F0:9C:8D:36:08:44
            X509v3 Authority Key Identifier:
                keyid:BF:B6:9B:C2:25:76:B9:57:BA:B5:FF:33:6B:7E:83:58:DC:B7:0A:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7abwiV2uVe6tf8za36DWNy3Cio.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:4e:05:c9:51:e8:34:f6:3f:fc:25:ac:e2:ba:38:b9:bd:bc:
         17:b0:fd:57:69:14:b7:c1:e1:24:0b:a4:ac:1f:b1:f7:80:9a:
         34:27:76:68:72:ef:34:96:d2:3a:06:eb:be:74:8e:54:ad:c6:
         f2:cd:9d:6f:8c:f3:8f:75:49:12:52:b0:bf:d8:f6:df:a5:c0:
         e6:50:26:5c:ef:48:b0:de:26:31:a5:d2:30:1c:95:2e:d7:94:
         01:f8:00:95:59:fc:d7:81:5e:2f:ec:4e:d0:ef:da:c8:7d:24:
         18:6d:9a:6e:d0:1e:a7:8e:34:83:3a:b6:92:fb:42:32:e4:b3:
         96:1a:0f:98:df:04:a2:6c:3b:06:88:40:d1:6c:04:22:b8:34:
         4a:5b:51:81:7e:62:ed:54:26:34:5d:dc:57:82:9a:b6:c4:db:
         aa:9f:10:eb:63:17:61:82:4e:61:89:c9:2c:04:64:93:bf:ef:
         28:2a:f1:10:6c:68:2a:71:8d:d1:fc:c4:94:ba:c9:12:ee:b9:
         13:68:7f:d1:39:86:93:af:65:fe:2b:98:3f:c0:8e:94:8a:a3:
         75:5b:32:35:84:85:9c:76:ca:fd:20:2c:b1:0a:0d:6b:f0:c9:
         21:c3:67:75:0a:52:7e:84:e3:ed:b8:c5:16:00:b8:e0:93:bb:
         9b:58:29:44
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICInYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDVCRkIxMTAvBgNVBAUTKEJGQjY5QkMyMjU3NkI5NTdCQUI1RkYzMzZCN0U4MzU4
RENCNzBBMkEwHhcNMjYwNDA0MTU0ODIwWhcNMjYwNDExMTU0ODIwWjAYMRYwFAYD
VQQDEw02OWQxMzJjNC0wNjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0QC1aHw49LXV5/ZwOiX88oHAF82gmN93/iFfQN3IVeH7CjZ0UdvRtWIXuIXW
rcAD1k0gRChMeYPd/k8835A/9FXCxZ28zedaG7F+SyKAY9hA28/3njYIL1E/+4ix
UnV+SleJSgvyrgelR2DJUdoS/aNXqTsnfZMlxQblaSYHidR7e6KGJ+ejs6meX2kq
sAJS+467amepY+pkcIex+Gq6t2Sb3KeO0ECSdnpN745QsGCOjVDosTK2PihsGSRR
cMvzhbKo7c0cZ7R9sxVI4xTzhxMAu6Fh5BjqZ3gM8grWWTWlT2BuNV+KoFutdg4v
uUsM1j6+hqXcOpGABhn2ex10AwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDu3L7Yl
FGS2LRfktflg8JyNNghEMB8GA1UdIwQYMBaAFL+2m8IldrlXurX/M2t+g1jctwoq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUJGQi9ERjJFMDEzRUQ5
RkIxMUU1ODREMTFBNzZDNEY5QUUwMi92N2Fid2lWMnVWZTZ0Zjh6YTM2RFdOeTND
aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Y3YWJ3aVYydVZlNnRmOHphMzZEV055M0Npby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NUJGQi9ERjJFMDEzRUQ5RkIxMUU1ODREMTFBNzZDNEY5QUUwMi92N2Fid2lWMnVW
ZTZ0Zjh6YTM2RFdOeTNDaW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAh04FyVHoNPY//CWs4ro4ub28F7D9V2kUt8HhJAukrB+x94CaNCd2aHLvNJbS
OgbrvnSOVK3G8s2db4zzj3VJElKwv9j236XA5lAmXO9IsN4mMaXSMByVLteUAfgA
lVn814FeL+xO0O/ayH0kGG2abtAep440gzq2kvtCMuSzlhoPmN8Eomw7BohA0WwE
Irg0SltRgX5i7VQmNF3cV4KatsTbqp8Q62MXYYJOYYnJLARkk7/vKCrxEGxoKnGN
0fzElLrJEu65E2h/0TmGk69l/iuYP8COlIqjdVsyNYSFnHbK/SAssQoNa/DJIcNn
dQpSfoTj7bjFFgC44JO7m1gpRA==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:34 2026 by rpki-client