Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft
File:                     Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft (raw, json)
Hash identifier:          Q59dgcFeuaXfJ0hjQ6AOIjYj81Yvp0iNmM++pGAGc7A=
Subject key identifier:   71:8C:0A:1E:15:48:82:91:E0:13:C3:3A:69:FC:42:0D:44:4E:44:DF
Authority key identifier: 3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60
Certificate issuer:       /CN=A91188EE/serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360
Certificate serial:       01A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft
Manifest number:          018D
Signing time:             Fri 17 Apr 2026 04:21:18 +0000
Manifest this update:     Fri 17 Apr 2026 04:21:18 +0000
Manifest next update:     Fri 24 Apr 2026 04:21:18 +0000
Files and hashes:         1: Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl (hash: 6ZGx8a2Ke8k8fShzCQ3uh2o/lAsCSD8hbKNz1QBYiR4=)
                          2: 6AAF8E08F51C11F09AD046EA586F56BC.roa (hash: s2lIkMQgjms5atxnw0PAOxe6sKifUyjcGIbRJ9ah5DU=)
                          3: 4DC69458F51C11F0B1C1D2E9586F56BC.roa (hash: QcCJl1UfRJP0/shxvSvEBu5HkTvWkijjCe1nldV+mo4=)
                          4: B7B28B24B29611F091864D65C4F9AE02.roa (hash: dj/sfeD/XP/p4+SxOW5PGasZJgjYig5gGrKVB5oVAWk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl
                          rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 418 (0x1a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91188EE, serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360
        Validity
            Not Before: Apr 17 04:21:18 2026 GMT
            Not After : Apr 24 04:21:18 2026 GMT
        Subject: CN=69e1b53e-c23b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4c:22:95:23:ec:9b:5f:83:95:4f:31:f1:86:
                    de:6f:2c:0a:f5:5b:ca:9d:47:84:48:b0:b9:67:51:
                    c9:89:fe:37:7e:80:fd:26:cb:02:c1:f7:d7:5f:30:
                    c1:17:bd:1c:48:d9:7a:e8:9e:ec:a2:41:25:19:a5:
                    cf:ee:36:45:61:7c:fb:21:1f:62:d6:4a:21:ea:f7:
                    5d:9a:8b:55:04:36:86:b1:20:bd:4e:cd:cd:3e:4b:
                    25:b1:d0:0f:5e:0e:19:1f:af:6b:16:20:0e:db:41:
                    c1:cb:76:9d:74:54:be:25:ca:10:4a:69:1a:a7:8d:
                    76:f2:0b:a8:90:a5:70:6f:25:cf:ef:70:b7:dd:ca:
                    00:2c:5c:af:53:88:1e:30:b4:8a:f7:db:5c:b1:06:
                    f9:f3:81:18:d9:3d:e3:34:04:5e:a4:81:fb:9d:76:
                    02:d9:1e:e9:58:12:09:3c:e4:14:db:cd:0f:d9:b9:
                    28:d3:76:54:86:ac:83:78:cc:90:84:07:21:7d:fc:
                    89:48:23:3d:da:19:43:85:64:81:06:d9:cf:6f:d3:
                    79:b1:f7:7f:41:e4:c2:9d:de:59:ae:0b:6a:5a:7f:
                    c5:4e:b7:20:14:fe:d8:85:b5:4c:99:c4:69:e7:fe:
                    13:5e:c7:62:b4:98:10:75:71:0d:3b:ee:5c:75:0a:
                    6c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:8C:0A:1E:15:48:82:91:E0:13:C3:3A:69:FC:42:0D:44:4E:44:DF
            X509v3 Authority Key Identifier:
                keyid:3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:70:45:d4:89:dc:bd:dd:8a:3a:f2:bc:ae:9c:3d:3a:90:25:
         f2:0a:6c:71:c8:1d:85:79:b2:50:45:73:ec:16:7f:73:4a:ab:
         4e:b6:33:18:fa:75:c0:8b:5c:8c:1d:5c:72:49:73:5c:b7:cf:
         f6:93:d7:c8:e6:28:ce:cb:cb:b5:34:eb:e1:27:3c:7c:2a:64:
         83:3f:0d:f4:80:c3:e4:3b:9c:85:48:4e:e6:79:68:a7:09:ca:
         80:59:bb:09:01:31:00:e0:88:b2:b8:28:25:14:e9:1d:99:af:
         54:4c:5c:41:5d:0e:99:c2:9a:44:24:a4:9c:29:49:b1:93:c7:
         be:62:0d:fe:fe:d3:bd:71:35:d1:0b:91:19:62:8a:ff:a9:23:
         9f:18:94:c8:71:a7:7f:52:21:70:f6:64:c7:f1:55:db:bf:a5:
         4e:31:62:e8:fa:82:9f:60:ce:32:bf:5f:fb:43:0e:05:88:79:
         2e:0a:66:7c:f1:ee:e6:da:df:ab:e0:31:d8:a6:19:7a:f5:0f:
         43:2f:da:74:d0:65:c3:80:0d:cd:8c:7d:06:65:4a:84:65:73:
         d2:29:42:25:88:c9:ac:f4:7e:e2:d5:04:de:8b:52:d3:35:32:
         f3:21:08:de:ce:5b:92:8c:d6:c5:4a:2c:3a:99:53:72:c8:a2:
         c1:35:b8:1a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTg4RUUxMTAvBgNVBAUTKDNBRURBODA0MDdENzdCQjUyODQ4QUJEOUY3MjU5QkQ4
MDdBNUQzNjAwHhcNMjYwNDE3MDQyMTE4WhcNMjYwNDI0MDQyMTE4WjAYMRYwFAYD
VQQDEw02OWUxYjUzZS1jMjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzEwilSPsm1+DlU8x8YbebywK9VvKnUeESLC5Z1HJif43foD9JssCwffXXzDB
F70cSNl66J7sokElGaXP7jZFYXz7IR9i1koh6vddmotVBDaGsSC9Ts3NPkslsdAP
Xg4ZH69rFiAO20HBy3addFS+JcoQSmkap4128guokKVwbyXP73C33coALFyvU4ge
MLSK99tcsQb584EY2T3jNARepIH7nXYC2R7pWBIJPOQU280P2bko03ZUhqyDeMyQ
hAchffyJSCM92hlDhWSBBtnPb9N5sfd/QeTCnd5ZrgtqWn/FTrcgFP7YhbVMmcRp
5/4TXsditJgQdXENO+5cdQpsNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHGMCh4V
SIKR4BPDOmn8Qg1ETkTfMB8GA1UdIwQYMBaAFDrtqAQH13u1KEir2fclm9gHpdNg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODhFRS8zMjA5NzMxQUZC
QUYxMUVFQTZCQzM5NTJDNEY5QUUwMi9PdTJvQkFmWGU3VW9TS3ZaOXlXYjJBZWww
MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL091Mm9CQWZYZTdVb1NLdlo5eVdiMkFlbDAyQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
ODhFRS8zMjA5NzMxQUZCQUYxMUVFQTZCQzM5NTJDNEY5QUUwMi9PdTJvQkFmWGU3
VW9TS3ZaOXlXYjJBZWwwMkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXHBF1Incvd2KOvK8rpw9OpAl8gpsccgdhXmyUEVz7BZ/c0qrTrYzGPp1wItc
jB1ccklzXLfP9pPXyOYozsvLtTTr4Sc8fCpkgz8N9IDD5DuchUhO5nlopwnKgFm7
CQExAOCIsrgoJRTpHZmvVExcQV0OmcKaRCSknClJsZPHvmIN/v7TvXE10QuRGWKK
/6kjnxiUyHGnf1IhcPZkx/FV27+lTjFi6PqCn2DOMr9f+0MOBYh5LgpmfPHu5trf
q+Ax2KYZevUPQy/adNBlw4ANzYx9BmVKhGVz0ilCJYjJrPR+4tUE3otS0zUy8yEI
3s5bkozWxUosOplTcsiiwTW4Gg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:42:48 2026 by rpki-client