Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.mft
File:                     hQh9CO2zN-4B6xruuBLL7jStjmM.mft (raw, json)
Hash identifier:          DruASdMjWyquA1/0VESE+IPzqnLsENpDtzHFs2bocX4=
Subject key identifier:   26:AB:91:21:55:17:3D:36:3B:21:27:C6:C1:FC:C6:66:FC:54:CF:47
Authority key identifier: 85:08:7D:08:ED:B3:37:EE:01:EB:1A:EE:B8:12:CB:EE:34:AD:8E:63
Certificate issuer:       /CN=A91DE01E/serialNumber=85087D08EDB337EE01EB1AEEB812CBEE34AD8E63
Certificate serial:       4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQh9CO2zN-4B6xruuBLL7jStjmM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.mft
Manifest number:          4D
Signing time:             Sun 05 Apr 2026 07:35:13 +0000
Manifest this update:     Sun 05 Apr 2026 07:35:13 +0000
Manifest next update:     Sun 12 Apr 2026 07:35:13 +0000
Files and hashes:         1: hQh9CO2zN-4B6xruuBLL7jStjmM.crl (hash: qpPlfsx0UlgmARidNm60GNieDHAKov/IsREtlOrrtGI=)
                          2: F7DB315EBEC811F0A266E40FC4F9AE02.roa (hash: w+kCz29PMoE0vXbHOHzh6jQZ1Wd2peHTD++7Yo/0GCA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.crl
                          rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQh9CO2zN-4B6xruuBLL7jStjmM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 07:35:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE01E, serialNumber=85087D08EDB337EE01EB1AEEB812CBEE34AD8E63
        Validity
            Not Before: Apr  5 07:35:13 2026 GMT
            Not After : Apr 12 07:35:13 2026 GMT
        Subject: CN=69d210b1-ce7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b4:80:dc:fd:17:33:53:3d:bf:3e:18:74:03:
                    ba:ee:d7:e7:7f:2b:d9:6f:21:58:3c:30:19:7a:00:
                    6f:5e:34:a2:90:06:56:36:83:57:33:84:55:79:de:
                    9d:00:6a:58:e1:25:b5:bd:52:66:b9:cc:a5:27:3d:
                    c5:0d:e6:1f:e1:f3:7a:1f:2d:9e:f2:35:19:ae:96:
                    82:72:2e:f1:2b:30:f5:a4:eb:6d:0a:29:19:72:dc:
                    91:b4:f1:83:32:ba:c2:24:40:41:b3:e3:63:01:4d:
                    71:a0:bb:30:fc:1b:91:d3:9c:a8:b2:83:36:e7:f1:
                    cf:b1:32:da:12:b9:d0:68:b3:f1:d5:e1:b3:4b:07:
                    f8:be:7c:da:70:29:8b:2e:e0:9f:42:a0:72:a3:8d:
                    f6:38:97:2c:c2:5a:15:38:3d:2e:d6:0b:54:9a:8c:
                    c1:ad:51:61:d7:e7:57:1f:03:1a:49:51:c3:ae:79:
                    ee:4e:4c:39:0f:a5:0d:6c:57:1b:49:b1:a0:a3:7e:
                    41:f2:a1:36:c3:d2:04:c7:c7:cb:a2:2d:56:9a:da:
                    0b:2b:c9:19:1c:11:1f:65:4f:fa:f3:a6:0d:e6:06:
                    87:4b:84:f6:8d:9a:50:03:bf:de:5d:c2:45:27:b4:
                    4a:84:10:8f:85:10:d0:0c:89:07:ba:2d:a7:97:b6:
                    01:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:AB:91:21:55:17:3D:36:3B:21:27:C6:C1:FC:C6:66:FC:54:CF:47
            X509v3 Authority Key Identifier:
                keyid:85:08:7D:08:ED:B3:37:EE:01:EB:1A:EE:B8:12:CB:EE:34:AD:8E:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQh9CO2zN-4B6xruuBLL7jStjmM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE01E/1447C0D8BEC811F08273660BC4F9AE02/hQh9CO2zN-4B6xruuBLL7jStjmM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:04:59:8a:1a:60:3b:b7:47:af:58:6e:fc:f9:af:60:3f:92:
         9a:59:2f:3f:e8:0a:61:ef:03:7a:33:e4:0c:ac:cc:d0:07:c7:
         f5:6b:a7:68:0f:c6:75:47:d3:66:d0:1d:02:a1:bf:e7:2e:d8:
         42:80:95:83:1c:d9:0c:f5:1b:1f:7f:57:2a:27:55:8d:31:a0:
         e6:4a:bd:f8:be:c6:2e:0c:05:9b:6f:c6:e5:5f:83:7d:26:72:
         c5:93:93:a4:14:48:c7:f8:0b:ac:b7:e3:72:db:47:06:b3:a9:
         f8:86:4c:06:d2:19:1b:f3:7b:c1:c4:ff:81:8d:6d:6e:af:3f:
         f2:cd:c8:07:cf:72:7a:44:dc:49:6f:70:b8:df:5e:e2:06:1d:
         e2:28:3f:ab:8c:ee:2d:88:35:26:53:25:6f:d4:6c:f4:4b:7a:
         a1:ff:1a:97:49:28:cf:9d:2d:a6:2e:29:ad:b4:11:f3:ba:72:
         df:bc:02:85:cf:06:bc:ba:96:da:c7:88:af:14:8e:9b:28:df:
         25:25:29:fb:ec:89:4e:22:ab:61:60:31:fd:2f:0e:5a:ff:55:
         6b:c8:18:bc:44:36:a1:b8:fb:09:54:bd:78:e6:f5:55:26:b2:
         59:b6:84:70:32:eb:01:ee:81:c8:fe:a2:ad:de:26:e2:66:aa:
         8b:c7:9c:e2
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
RTAxRTExMC8GA1UEBRMoODUwODdEMDhFREIzMzdFRTAxRUIxQUVFQjgxMkNCRUUz
NEFEOEU2MzAeFw0yNjA0MDUwNzM1MTNaFw0yNjA0MTIwNzM1MTNaMBgxFjAUBgNV
BAMTDTY5ZDIxMGIxLWNlN2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCztIDc/RczUz2/Phh0A7ru1+d/K9lvIVg8MBl6AG9eNKKQBlY2g1czhFV53p0A
aljhJbW9Uma5zKUnPcUN5h/h83ofLZ7yNRmuloJyLvErMPWk620KKRly3JG08YMy
usIkQEGz42MBTXGguzD8G5HTnKiygzbn8c+xMtoSudBos/HV4bNLB/i+fNpwKYsu
4J9CoHKjjfY4lyzCWhU4PS7WC1SajMGtUWHX51cfAxpJUcOuee5OTDkPpQ1sVxtJ
saCjfkHyoTbD0gTHx8uiLVaa2gsryRkcER9lT/rzpg3mBodLhPaNmlADv95dwkUn
tEqEEI+FENAMiQe6LaeXtgEtAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUJquRIVUX
PTY7ISfGwfzGZvxUz0cwHwYDVR0jBBgwFoAUhQh9CO2zN+4B6xruuBLL7jStjmMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURFMDFFLzE0NDdDMEQ4QkVD
ODExRjA4MjczNjYwQkM0RjlBRTAyL2hRaDlDTzJ6Ti00QjZ4cnV1QkxMN2pTdGpt
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvaFFoOUNPMnpOLTRCNnhydXVCTEw3alN0am1NLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURF
MDFFLzE0NDdDMEQ4QkVDODExRjA4MjczNjYwQkM0RjlBRTAyL2hRaDlDTzJ6Ti00
QjZ4cnV1QkxMN2pTdGptTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQC2BFmKGmA7t0evWG78+a9gP5KaWS8/6Aph7wN6M+QMrMzQB8f1a6doD8Z1R9Nm
0B0Cob/nLthCgJWDHNkM9Rsff1cqJ1WNMaDmSr34vsYuDAWbb8blX4N9JnLFk5Ok
FEjH+Aust+Ny20cGs6n4hkwG0hkb83vBxP+BjW1urz/yzcgHz3J6RNxJb3C4317i
Bh3iKD+rjO4tiDUmUyVv1Gz0S3qh/xqXSSjPnS2mLimttBHzunLfvAKFzwa8upba
x4ivFI6bKN8lJSn77IlOIqthYDH9Lw5a/1VryBi8RDahuPsJVL145vVVJrJZtoRw
MusB7oHI/qKt3ibiZqqLx5zi
-----END CERTIFICATE-----
Generated at Mon Apr 6 09:04:39 2026 by rpki-client