Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft
File:                     Abso_b4VWoZixe5oDP3wyY1OvR0.mft (raw, json)
Hash identifier:          MTCcRzopzP/V2d6eaqTWHvY8oy9CbXvcL5mGcqB0A7o=
Subject key identifier:   50:42:CF:08:18:D0:AB:F3:93:A2:E3:BD:6B:03:B6:0D:41:8F:DF:52
Authority key identifier: 01:BB:28:FD:BE:15:5A:86:62:C5:EE:68:0C:FD:F0:C9:8D:4E:BD:1D
Certificate issuer:       /CN=A91DACA7/serialNumber=01BB28FDBE155A8662C5EE680CFDF0C98D4EBD1D
Certificate serial:       014A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft
Manifest number:          0145
Signing time:             Sun 05 Apr 2026 04:42:55 +0000
Manifest this update:     Sun 05 Apr 2026 04:42:54 +0000
Manifest next update:     Sun 12 Apr 2026 04:42:54 +0000
Files and hashes:         1: Abso_b4VWoZixe5oDP3wyY1OvR0.crl (hash: BAAx4uRZEg9HV5B91I6fapLNzM/xHYYB0ou7EuOqH/A=)
                          2: ECB0C56845B211EFBCC09A1AC4F9AE02.roa (hash: XlfXtiHFNX7/67H2UR1inFOAMG5dLCk4KBq/ZXW7m4o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.crl
                          rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 04:42:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 330 (0x14a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DACA7, serialNumber=01BB28FDBE155A8662C5EE680CFDF0C98D4EBD1D
        Validity
            Not Before: Apr  5 04:42:54 2026 GMT
            Not After : Apr 12 04:42:54 2026 GMT
        Subject: CN=69d1e84e-0a83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:dc:26:b0:ca:82:52:c2:ad:4b:f3:47:da:b1:
                    3f:c6:77:fa:cc:a5:79:8a:30:ce:f4:6d:e3:68:09:
                    09:b5:a2:5f:c0:c9:bf:1a:34:90:7c:11:28:c6:f3:
                    d5:d0:e3:9c:cf:15:87:f2:86:92:f3:0c:2c:2d:16:
                    c8:49:f7:fa:31:0d:11:34:99:95:d8:73:27:f4:fd:
                    f3:9c:06:b0:93:c2:98:5d:c2:46:c8:76:ab:28:88:
                    d9:c9:d9:c3:39:17:53:00:8d:16:22:26:b6:96:d7:
                    18:f8:87:c6:e3:d8:2a:d2:9b:82:2e:78:97:ed:ec:
                    33:c1:99:8c:63:1d:19:85:b5:1c:04:b0:44:6f:5d:
                    84:55:37:be:bf:5f:6f:89:b4:ee:d2:a3:c3:ea:07:
                    83:a1:89:6a:ac:a3:e5:c8:a1:c5:2d:09:b3:e5:58:
                    26:03:e6:a7:38:6c:e8:e3:54:d9:ad:45:74:a6:c3:
                    d3:1f:b5:d4:21:b2:a9:f3:37:41:f5:2e:cb:c9:da:
                    15:67:1c:d7:11:bd:14:10:bf:b3:e2:ef:d7:df:ef:
                    50:6e:40:0d:bb:c2:36:96:51:f0:e1:a3:53:02:b7:
                    cf:87:3b:67:db:1d:cb:5f:2a:e9:99:7e:f2:73:5b:
                    31:47:42:98:a2:52:96:99:aa:ce:73:77:53:6d:26:
                    12:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:42:CF:08:18:D0:AB:F3:93:A2:E3:BD:6B:03:B6:0D:41:8F:DF:52
            X509v3 Authority Key Identifier:
                keyid:01:BB:28:FD:BE:15:5A:86:62:C5:EE:68:0C:FD:F0:C9:8D:4E:BD:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:62:a3:0b:fd:b1:ec:2a:88:9f:13:9f:eb:f9:ed:bf:e4:2a:
         6a:a4:38:d6:32:04:d3:d7:4e:f2:16:02:cc:0d:73:9b:a8:2f:
         4a:ee:69:94:87:12:5d:30:e4:a0:e8:ec:2f:5a:6d:77:32:d7:
         60:42:65:ac:2f:1c:73:70:3e:45:d6:22:76:76:37:c9:e7:85:
         66:29:1b:f8:0e:33:44:04:a7:52:32:0e:68:50:1d:25:52:cc:
         f1:d6:b7:e4:16:32:96:82:c3:8c:11:9d:d6:ca:91:b5:fe:d2:
         ec:02:9d:48:b1:9f:c7:5e:fe:9d:40:55:14:70:4e:c9:4b:3d:
         34:11:23:be:ae:fc:0e:35:fe:4e:24:1d:a9:69:fd:94:ea:0b:
         78:60:07:95:17:3d:25:fc:ae:43:8d:05:14:f9:4d:b1:35:e6:
         5a:fc:c6:83:8f:3c:c4:88:d3:f7:ce:bd:68:0e:d3:3b:75:00:
         99:11:7a:02:80:df:78:36:c3:ab:22:9a:21:88:5f:a5:85:83:
         46:47:fd:ff:62:46:7f:90:a9:bb:ad:7c:44:ed:2c:55:6d:9a:
         48:51:f7:7e:e8:b5:41:e0:8d:4c:a4:a4:8e:01:2e:7c:bf:7c:
         fc:95:94:5c:86:da:a9:0e:c2:19:3e:20:40:b3:7d:b7:32:ba:
         7e:1c:55:4a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REFDQTcxMTAvBgNVBAUTKDAxQkIyOEZEQkUxNTVBODY2MkM1RUU2ODBDRkRGMEM5
OEQ0RUJEMUQwHhcNMjYwNDA1MDQ0MjU0WhcNMjYwNDEyMDQ0MjU0WjAYMRYwFAYD
VQQDEw02OWQxZTg0ZS0wYTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqtwmsMqCUsKtS/NH2rE/xnf6zKV5ijDO9G3jaAkJtaJfwMm/GjSQfBEoxvPV
0OOczxWH8oaS8wwsLRbISff6MQ0RNJmV2HMn9P3znAawk8KYXcJGyHarKIjZydnD
ORdTAI0WIia2ltcY+IfG49gq0puCLniX7ewzwZmMYx0ZhbUcBLBEb12EVTe+v19v
ibTu0qPD6geDoYlqrKPlyKHFLQmz5VgmA+anOGzo41TZrUV0psPTH7XUIbKp8zdB
9S7LydoVZxzXEb0UEL+z4u/X3+9QbkANu8I2llHw4aNTArfPhztn2x3LXyrpmX7y
c1sxR0KYolKWmarOc3dTbSYSFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFBCzwgY
0Kvzk6LjvWsDtg1Bj99SMB8GA1UdIwQYMBaAFAG7KP2+FVqGYsXuaAz98MmNTr0d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQUNBNy81MTdFNkU0QzQ1
QjIxMUVGQTVERjZEMTlDNEY5QUUwMi9BYnNvX2I0VldvWml4ZTVvRFAzd3lZMU92
UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0Fic29fYjRWV29aaXhlNW9EUDN3eVkxT3ZSMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QUNBNy81MTdFNkU0QzQ1QjIxMUVGQTVERjZEMTlDNEY5QUUwMi9BYnNvX2I0Vldv
Wml4ZTVvRFAzd3lZMU92UjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQWKjC/2x7CqInxOf6/ntv+QqaqQ41jIE09dO8hYCzA1zm6gvSu5plIcSXTDk
oOjsL1ptdzLXYEJlrC8cc3A+RdYidnY3yeeFZikb+A4zRASnUjIOaFAdJVLM8da3
5BYyloLDjBGd1sqRtf7S7AKdSLGfx17+nUBVFHBOyUs9NBEjvq78DjX+TiQdqWn9
lOoLeGAHlRc9JfyuQ40FFPlNsTXmWvzGg488xIjT9869aA7TO3UAmRF6AoDfeDbD
qyKaIYhfpYWDRkf9/2JGf5Cpu618RO0sVW2aSFH3fui1QeCNTKSkjgEufL98/JWU
XIbaqQ7CGT4gQLN9tzK6fhxVSg==
-----END CERTIFICATE-----
Generated at Mon Apr 6 18:03:26 2026 by rpki-client