Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft
File:                     DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft (raw, json)
Hash identifier:          g0BZ5dsU7otRI7D367RVbXuaDRjyXvDRKvJZoTTV8RY=
Subject key identifier:   F0:D8:73:75:82:04:C9:6A:ED:1D:D3:91:1C:60:57:D5:70:7B:95:07
Authority key identifier: 0F:0B:CE:E1:5A:DB:6D:57:D0:2C:D0:4B:45:22:3A:B8:06:6A:54:5D
Certificate issuer:       /CN=A91E8161/serialNumber=0F0BCEE15ADB6D57D02CD04B45223AB8066A545D
Certificate serial:       1778
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DwvO4VrbbVfQLNBLRSI6uAZqVF0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft
Manifest number:          1765
Signing time:             Tue 28 Apr 2026 16:40:38 +0000
Manifest this update:     Tue 28 Apr 2026 16:40:38 +0000
Manifest next update:     Tue 05 May 2026 16:40:38 +0000
Files and hashes:         1: DwvO4VrbbVfQLNBLRSI6uAZqVF0.crl (hash: OomrTRjxacVNoduoYFEX7WzjLPvHH0GvY3k98kVakvA=)
                          2: C109FFF4FC0511E7BAFB3E48C4F9AE02.roa (hash: ixlZRVOoeUZJ75nnpCsBl4fkLgRW7J4+9KrLoGwUAJc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.crl
                          rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DwvO4VrbbVfQLNBLRSI6uAZqVF0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 05 May 2026 16:40:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6008 (0x1778)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8161, serialNumber=0F0BCEE15ADB6D57D02CD04B45223AB8066A545D
        Validity
            Not Before: Apr 28 16:40:38 2026 GMT
            Not After : May  5 16:40:38 2026 GMT
        Subject: CN=69f0e306-4c8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f2:e6:89:7e:bd:3a:4d:e7:9b:d5:b0:5b:a0:
                    41:56:55:a2:c8:97:a7:41:b4:75:95:84:44:19:60:
                    4e:a2:d4:c8:a5:d9:4e:31:74:8b:7a:c1:59:16:c5:
                    77:6c:8c:0a:3d:bc:61:46:bc:77:4a:ba:ac:6a:45:
                    c2:e9:2a:10:ef:cc:ae:19:a2:7d:a7:e3:ca:e6:3b:
                    34:d0:f8:a4:e8:29:15:bb:6e:a0:96:e0:44:8d:7d:
                    5c:ee:fb:80:e6:39:67:b4:ab:a4:ab:31:10:4e:41:
                    5d:f1:b5:12:52:3c:83:1b:c8:a2:c0:77:a3:47:b6:
                    27:83:32:6d:ff:d9:04:6c:af:a9:b0:1b:d1:24:a1:
                    c6:6e:06:be:c2:1a:05:19:06:0f:7f:b2:c4:05:51:
                    38:dd:0e:ea:4e:90:9c:fb:53:39:6e:ae:fe:c0:54:
                    d8:c4:a8:a7:f0:75:1f:58:2e:be:2a:91:8d:29:30:
                    c5:e9:5b:cf:df:eb:6b:56:3c:5a:d0:39:8b:07:36:
                    03:4f:c5:26:7d:10:6b:45:b3:a8:6e:2b:69:d9:10:
                    6c:56:3e:b8:c5:6f:76:b4:fc:3d:d0:70:33:df:65:
                    86:d8:b8:6f:1e:24:4c:1a:7d:c1:6a:f0:05:2c:8d:
                    1f:20:e4:5a:54:d2:04:73:68:e5:5c:1f:67:ad:02:
                    1d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D8:73:75:82:04:C9:6A:ED:1D:D3:91:1C:60:57:D5:70:7B:95:07
            X509v3 Authority Key Identifier:
                keyid:0F:0B:CE:E1:5A:DB:6D:57:D0:2C:D0:4B:45:22:3A:B8:06:6A:54:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DwvO4VrbbVfQLNBLRSI6uAZqVF0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:36:7a:96:62:87:ff:0b:cb:20:f3:13:5a:a8:8b:32:15:1d:
         88:1d:0d:9c:5e:98:a5:f3:a7:6c:aa:08:09:ec:36:5b:df:71:
         ca:19:c5:c9:b9:df:7e:19:b0:4a:3a:a7:07:4d:72:0d:04:28:
         bc:39:be:8c:f9:c4:83:c2:69:90:a6:be:f5:c4:c6:ec:2a:23:
         ac:c3:76:5d:58:46:f3:74:bf:5e:73:f3:5c:1d:00:45:5e:4e:
         e3:fc:c0:4b:39:4c:0d:35:03:64:ba:36:80:c2:45:be:fd:6b:
         e3:dc:e0:a9:b8:25:9e:5e:dc:0d:66:f9:db:ee:bf:15:89:ab:
         81:8f:f8:3d:0b:80:3c:14:68:72:58:a9:c5:6f:2b:be:a3:a0:
         0b:48:2a:3e:93:aa:71:ed:43:f8:d9:84:ef:ca:2f:7c:a4:73:
         62:5d:65:53:c3:9d:10:64:63:31:22:8d:8f:90:3d:3a:64:dd:
         77:29:1d:d7:d2:88:b2:c0:2d:09:61:08:62:29:3a:36:95:14:
         32:b2:aa:10:c0:d8:e5:cb:1b:73:46:c9:c4:08:c0:3c:14:6a:
         c1:77:48:ba:ae:8f:40:81:77:2c:f4:03:a5:57:07:19:fd:04:
         3b:56:f5:a6:e0:c9:d3:5c:aa:4c:a0:b7:7d:2e:59:f8:b4:36:
         63:bd:e5:8b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICF3gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTgxNjExMTAvBgNVBAUTKDBGMEJDRUUxNUFEQjZENTdEMDJDRDA0QjQ1MjIzQUI4
MDY2QTU0NUQwHhcNMjYwNDI4MTY0MDM4WhcNMjYwNTA1MTY0MDM4WjAYMRYwFAYD
VQQDEw02OWYwZTMwNi00YzhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvfLmiX69Ok3nm9WwW6BBVlWiyJenQbR1lYREGWBOotTIpdlOMXSLesFZFsV3
bIwKPbxhRrx3SrqsakXC6SoQ78yuGaJ9p+PK5js00Pik6CkVu26gluBEjX1c7vuA
5jlntKukqzEQTkFd8bUSUjyDG8iiwHejR7YngzJt/9kEbK+psBvRJKHGbga+whoF
GQYPf7LEBVE43Q7qTpCc+1M5bq7+wFTYxKin8HUfWC6+KpGNKTDF6VvP3+trVjxa
0DmLBzYDT8UmfRBrRbOobitp2RBsVj64xW92tPw90HAz32WG2LhvHiRMGn3BavAF
LI0fIORaVNIEc2jlXB9nrQIdLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPDYc3WC
BMlq7R3TkRxgV9Vwe5UHMB8GA1UdIwQYMBaAFA8LzuFa221X0CzQS0UiOrgGalRd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODE2MS82NzA2MTJCMEZB
NjQxMUU3QTRDMjY5M0VDNEY5QUUwMi9Ed3ZPNFZyYmJWZlFMTkJMUlNJNnVBWnFW
RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0R3dk80VnJiYlZmUUxOQkxSU0k2dUFacVZGMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
ODE2MS82NzA2MTJCMEZBNjQxMUU3QTRDMjY5M0VDNEY5QUUwMi9Ed3ZPNFZyYmJW
ZlFMTkJMUlNJNnVBWnFWRjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAizZ6lmKH/wvLIPMTWqiLMhUdiB0NnF6YpfOnbKoICew2W99xyhnFybnffhmw
SjqnB01yDQQovDm+jPnEg8JpkKa+9cTG7CojrMN2XVhG83S/XnPzXB0ARV5O4/zA
SzlMDTUDZLo2gMJFvv1r49zgqbglnl7cDWb52+6/FYmrgY/4PQuAPBRoclipxW8r
vqOgC0gqPpOqce1D+NmE78ovfKRzYl1lU8OdEGRjMSKNj5A9OmTddykd19KIssAt
CWEIYik6NpUUMrKqEMDY5csbc0bJxAjAPBRqwXdIuq6PQIF3LPQDpVcHGf0EO1b1
puDJ01yqTKC3fS5Z+LQ2Y73liw==
-----END CERTIFICATE-----
Generated at Wed Apr 29 21:15:57 2026 by rpki-client