Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.mft
File:                     daduw5hFLfosNmmexaR2zMWB3lc.mft (raw, json)
Hash identifier:          0pwnprjlDux/pylbvQyZuYT3pkoF4AOxqIoMjO4e/64=
Subject key identifier:   5A:07:A1:FE:B1:A4:AD:87:63:FD:8C:BA:BF:79:11:5A:09:5E:62:F8
Authority key identifier: 75:A7:6E:C3:98:45:2D:FA:2C:36:69:9E:C5:A4:76:CC:C5:81:DE:57
Certificate issuer:       /CN=A91D62C9/serialNumber=75A76EC398452DFA2C36699EC5A476CCC581DE57
Certificate serial:       1AFC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daduw5hFLfosNmmexaR2zMWB3lc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.mft
Manifest number:          1AFC
Signing time:             Sat 04 Apr 2026 16:11:51 +0000
Manifest this update:     Sat 04 Apr 2026 16:11:50 +0000
Manifest next update:     Sat 11 Apr 2026 16:11:50 +0000
Files and hashes:         1: daduw5hFLfosNmmexaR2zMWB3lc.crl (hash: /PZLuuDTWde8w/OiZd/fMQOYiaWAAMj/ul1G8laeeFo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.crl
                          rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daduw5hFLfosNmmexaR2zMWB3lc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 16:11:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6908 (0x1afc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D62C9, serialNumber=75A76EC398452DFA2C36699EC5A476CCC581DE57
        Validity
            Not Before: Apr  4 16:11:50 2026 GMT
            Not After : Apr 11 16:11:50 2026 GMT
        Subject: CN=69d13846-e1f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ae:a5:e9:4c:a1:89:30:51:6f:5a:dc:49:30:
                    ae:94:bd:aa:97:e3:ae:a2:a0:ae:d3:a2:79:07:e0:
                    c6:34:52:51:d5:b0:dd:73:c5:3b:a0:8f:3d:70:16:
                    b9:48:6b:23:bb:03:76:58:6f:53:4e:c4:be:f7:9b:
                    e4:f0:40:3c:a7:ca:b1:90:09:46:45:27:19:d3:1c:
                    4a:e9:6d:dc:05:2a:17:46:03:df:b3:92:ef:e7:ed:
                    63:d2:3e:3c:81:c6:45:76:cf:c3:ed:9b:bc:bc:9e:
                    0d:31:e5:35:4b:02:77:2a:bc:3a:ef:1c:59:bd:89:
                    f9:b0:97:19:c0:04:82:15:fa:cf:e7:ac:3f:16:10:
                    c9:05:47:d0:0e:b0:c4:36:88:61:f5:0b:6f:ac:f4:
                    39:8a:17:76:77:82:89:76:50:99:37:66:35:82:cf:
                    6a:28:61:c7:f7:33:f6:4c:8b:5e:36:59:19:3e:f3:
                    cc:bf:bc:87:40:b6:cd:cf:2a:98:b7:db:09:60:75:
                    d3:b6:6e:2c:76:71:2a:f7:db:ac:a3:e3:f3:0a:f0:
                    ae:5f:28:74:a8:72:55:b0:ee:03:9c:0c:e2:68:cb:
                    cb:8b:95:77:86:1e:ff:9f:a7:1b:6c:7a:58:1c:60:
                    51:2e:2f:02:d1:6c:1d:3e:74:d5:08:3f:5e:20:00:
                    03:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:07:A1:FE:B1:A4:AD:87:63:FD:8C:BA:BF:79:11:5A:09:5E:62:F8
            X509v3 Authority Key Identifier:
                keyid:75:A7:6E:C3:98:45:2D:FA:2C:36:69:9E:C5:A4:76:CC:C5:81:DE:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daduw5hFLfosNmmexaR2zMWB3lc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:70:65:6d:6e:87:cf:ed:27:8e:25:6e:61:d1:ef:03:93:bb:
         ba:0e:ba:f7:6c:30:4a:76:7a:73:41:2f:fe:3c:cc:fc:25:f1:
         48:7e:30:e7:82:2d:76:69:98:4f:b5:19:8a:6f:8e:d5:97:6a:
         02:73:f1:b8:ae:56:76:e0:50:93:1d:93:c3:e1:0f:16:fb:95:
         b4:e6:2c:1a:81:0b:02:1a:5c:56:8c:5b:f9:25:ff:d6:6e:eb:
         1e:32:06:dd:b8:68:75:09:85:b9:0b:ff:8c:01:89:62:c6:39:
         8a:c3:4f:2b:65:0b:d0:f5:d9:03:4f:99:af:1e:e6:39:a2:82:
         71:0e:5d:6e:0a:c3:70:4e:50:55:93:c6:ac:bc:96:2f:72:60:
         3d:fd:f1:27:47:75:ca:bb:c0:9e:88:8c:9a:74:e0:ca:ce:30:
         4e:b5:0c:fe:a5:ab:df:22:25:bf:43:f4:d5:f8:1b:19:13:64:
         94:b5:c5:c3:01:d2:ad:48:57:f6:29:10:ec:70:6c:ca:75:5f:
         4b:c9:2e:7c:47:33:04:b6:69:d8:b7:fe:18:91:6c:0d:0e:a6:
         8e:62:0b:9e:b6:5b:3b:68:7c:02:7d:14:e4:e8:22:96:b0:cf:
         f1:27:66:e5:d9:71:3c:e9:1d:ee:df:eb:4a:7d:0d:95:23:7b:
         7f:97:27:5d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDYyQzkxMTAvBgNVBAUTKDc1QTc2RUMzOTg0NTJERkEyQzM2Njk5RUM1QTQ3NkND
QzU4MURFNTcwHhcNMjYwNDA0MTYxMTUwWhcNMjYwNDExMTYxMTUwWjAYMRYwFAYD
VQQDEw02OWQxMzg0Ni1lMWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuK6l6UyhiTBRb1rcSTCulL2ql+OuoqCu06J5B+DGNFJR1bDdc8U7oI89cBa5
SGsjuwN2WG9TTsS+95vk8EA8p8qxkAlGRScZ0xxK6W3cBSoXRgPfs5Lv5+1j0j48
gcZFds/D7Zu8vJ4NMeU1SwJ3Krw67xxZvYn5sJcZwASCFfrP56w/FhDJBUfQDrDE
Nohh9QtvrPQ5ihd2d4KJdlCZN2Y1gs9qKGHH9zP2TIteNlkZPvPMv7yHQLbNzyqY
t9sJYHXTtm4sdnEq99uso+PzCvCuXyh0qHJVsO4DnAziaMvLi5V3hh7/n6cbbHpY
HGBRLi8C0WwdPnTVCD9eIAAD2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFoHof6x
pK2HY/2Mur95EVoJXmL4MB8GA1UdIwQYMBaAFHWnbsOYRS36LDZpnsWkdszFgd5X
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjJDOS82RkIwMDA4RTNF
N0YxMUU3OTQ4QUY3M0FDNEY5QUUwMi9kYWR1dzVoRkxmb3NObW1leGFSMnpNV0Iz
bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RhZHV3NWhGTGZvc05tbWV4YVIyek1XQjNsYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NjJDOS82RkIwMDA4RTNFN0YxMUU3OTQ4QUY3M0FDNEY5QUUwMi9kYWR1dzVoRkxm
b3NObW1leGFSMnpNV0IzbGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAn3BlbW6Hz+0njiVuYdHvA5O7ug6692wwSnZ6c0Ev/jzM/CXxSH4w54ItdmmY
T7UZim+O1ZdqAnPxuK5WduBQkx2Tw+EPFvuVtOYsGoELAhpcVoxb+SX/1m7rHjIG
3bhodQmFuQv/jAGJYsY5isNPK2UL0PXZA0+Zrx7mOaKCcQ5dbgrDcE5QVZPGrLyW
L3JgPf3xJ0d1yrvAnoiMmnTgys4wTrUM/qWr3yIlv0P01fgbGRNklLXFwwHSrUhX
9ikQ7HBsynVfS8kufEczBLZp2Lf+GJFsDQ6mjmILnrZbO2h8An0U5OgilrDP8Sdm
5dlxPOkd7t/rSn0NlSN7f5cnXQ==
-----END CERTIFICATE-----
Generated at Mon Apr 6 09:53:39 2026 by rpki-client