Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft
File:                     DfYzARXsRfUx_1YTHrhFWq-3dsw.mft (raw, json)
Hash identifier:          C45n/cq9F8gS6w+tWDCgWLR+q/Au4jtlsFAmaK3VDz4=
Subject key identifier:   DD:DF:FA:D5:45:20:95:3C:36:0E:74:96:FB:21:28:85:47:7B:E0:62
Authority key identifier: 0D:F6:33:01:15:EC:45:F5:31:FF:56:13:1E:B8:45:5A:AF:B7:76:CC
Certificate issuer:       /CN=A91192A0/serialNumber=0DF6330115EC45F531FF56131EB8455AAFB776CC
Certificate serial:       0CC1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfYzARXsRfUx_1YTHrhFWq-3dsw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft
Manifest number:          0CB0
Signing time:             Thu 16 Apr 2026 18:26:17 +0000
Manifest this update:     Thu 16 Apr 2026 18:26:16 +0000
Manifest next update:     Thu 23 Apr 2026 18:26:16 +0000
Files and hashes:         1: DfYzARXsRfUx_1YTHrhFWq-3dsw.crl (hash: 3Ii2AjLygQbfIj2w4TrTFYLjx7vKfQe1g2CJ5jIEdp4=)
                          2: 38FA1FDE135711EAACF3565BC4F9AE02.roa (hash: NhjTfScaCqVbvaLNMngmgmtWXWmQK8LVMA/pISXdhoQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.crl
                          rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfYzARXsRfUx_1YTHrhFWq-3dsw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:26:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3265 (0xcc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91192A0, serialNumber=0DF6330115EC45F531FF56131EB8455AAFB776CC
        Validity
            Not Before: Apr 16 18:26:16 2026 GMT
            Not After : Apr 23 18:26:16 2026 GMT
        Subject: CN=69e129c8-e069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ae:70:ff:98:f4:90:82:92:10:d0:5d:15:1e:
                    dc:35:fa:1b:b3:5a:a8:1c:0e:bf:b4:03:d6:26:22:
                    33:04:e6:f4:c9:f4:89:3a:83:16:65:86:fd:99:59:
                    a1:43:28:3d:b2:97:38:ca:32:f8:19:e1:60:b8:c4:
                    e7:c5:39:d0:8b:ac:d0:0b:9b:8a:b2:ef:d4:dc:b0:
                    93:ab:30:9f:56:9f:3f:55:af:3e:18:2f:19:be:2d:
                    cd:07:1f:66:7d:c1:0e:e5:b6:5d:98:80:8e:18:a1:
                    ef:4d:c6:50:ae:3c:d3:92:da:4c:a6:7c:16:af:48:
                    b9:1d:be:84:c3:fc:20:0e:a8:79:d6:b7:bc:a9:19:
                    58:10:38:55:6d:08:e4:6d:95:51:5d:44:7c:02:40:
                    d4:08:0e:65:c0:ab:ce:1c:6c:2b:9d:b0:9f:ba:6f:
                    4c:45:95:c2:14:f4:75:1c:94:0d:12:ae:bb:fe:4d:
                    61:27:04:f7:30:ef:fa:30:2f:98:57:96:9c:cb:9a:
                    e8:c8:ba:54:29:7a:f9:6b:69:2e:6a:f1:0c:c2:41:
                    59:6d:b8:e1:15:c2:2d:62:c9:62:98:3b:e2:5a:e8:
                    bf:7b:99:80:f6:c8:b1:1c:a1:76:ea:0e:18:64:50:
                    ef:d9:ab:47:b5:85:c8:df:25:a6:0e:4c:0f:95:f1:
                    27:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:DF:FA:D5:45:20:95:3C:36:0E:74:96:FB:21:28:85:47:7B:E0:62
            X509v3 Authority Key Identifier:
                keyid:0D:F6:33:01:15:EC:45:F5:31:FF:56:13:1E:B8:45:5A:AF:B7:76:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfYzARXsRfUx_1YTHrhFWq-3dsw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:25:61:e5:0b:68:c3:f4:ab:ce:77:af:b7:ed:82:30:46:95:
         0c:13:99:a1:21:ed:35:ae:1a:e6:d4:ac:15:56:2f:e5:42:0f:
         d4:d8:0f:f4:8f:1f:4b:32:a8:aa:97:5a:d7:3b:6f:9a:e6:38:
         16:6e:15:45:c7:2f:fd:4e:e0:b2:d3:9e:05:2c:a4:7b:2c:f0:
         94:da:eb:d6:02:f9:48:0e:5a:f4:72:ec:15:28:24:74:c9:b5:
         66:49:2e:52:b1:00:05:f8:6c:22:b2:4b:b1:b9:83:95:be:82:
         ed:de:93:d1:f5:ce:8c:ba:f5:f0:60:c2:3a:72:33:cf:86:48:
         ef:cd:5c:fb:93:da:c5:27:1a:62:36:6d:22:5f:73:86:b3:fa:
         2f:92:8e:67:85:8e:78:e1:1d:3a:57:97:6b:72:d0:53:d4:47:
         ad:79:f3:59:89:04:64:5b:a6:3f:34:25:e0:43:52:9d:0f:10:
         d0:e6:ec:7c:ed:74:00:de:a3:2b:33:ff:e2:4c:32:fc:d5:1f:
         71:b1:8d:3e:20:90:67:98:1c:5b:70:1d:43:31:65:01:96:f4:
         57:c9:46:a7:ca:02:7d:b6:20:cf:f9:db:ef:de:39:8e:fa:72:
         39:d3:81:7b:2a:30:d4:97:c8:4d:4b:aa:d2:13:bd:a9:52:a8:
         69:32:1c:9f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTkyQTAxMTAvBgNVBAUTKDBERjYzMzAxMTVFQzQ1RjUzMUZGNTYxMzFFQjg0NTVB
QUZCNzc2Q0MwHhcNMjYwNDE2MTgyNjE2WhcNMjYwNDIzMTgyNjE2WjAYMRYwFAYD
VQQDEw02OWUxMjljOC1lMDY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAja5w/5j0kIKSENBdFR7cNfobs1qoHA6/tAPWJiIzBOb0yfSJOoMWZYb9mVmh
Qyg9spc4yjL4GeFguMTnxTnQi6zQC5uKsu/U3LCTqzCfVp8/Va8+GC8Zvi3NBx9m
fcEO5bZdmICOGKHvTcZQrjzTktpMpnwWr0i5Hb6Ew/wgDqh51re8qRlYEDhVbQjk
bZVRXUR8AkDUCA5lwKvOHGwrnbCfum9MRZXCFPR1HJQNEq67/k1hJwT3MO/6MC+Y
V5acy5royLpUKXr5a2kuavEMwkFZbbjhFcItYslimDviWui/e5mA9sixHKF26g4Y
ZFDv2atHtYXI3yWmDkwPlfEn1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN3f+tVF
IJU8Ng50lvshKIVHe+BiMB8GA1UdIwQYMBaAFA32MwEV7EX1Mf9WEx64RVqvt3bM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTJBMC80RjFFQUU4NDEz
NTYxMUVBOTkyQjExNUFDNEY5QUUwMi9EZll6QVJYc1JmVXhfMVlUSHJoRldxLTNk
c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RmWXpBUlhzUmZVeF8xWVRIcmhGV3EtM2Rzdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OTJBMC80RjFFQUU4NDEzNTYxMUVBOTkyQjExNUFDNEY5QUUwMi9EZll6QVJYc1Jm
VXhfMVlUSHJoRldxLTNkc3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACSVh5Qtow/Srznevt+2CMEaVDBOZoSHtNa4a5tSsFVYv5UIP1NgP9I8fSzKo
qpda1ztvmuY4Fm4VRccv/U7gstOeBSykeyzwlNrr1gL5SA5a9HLsFSgkdMm1Zkku
UrEABfhsIrJLsbmDlb6C7d6T0fXOjLr18GDCOnIzz4ZI781c+5PaxScaYjZtIl9z
hrP6L5KOZ4WOeOEdOleXa3LQU9RHrXnzWYkEZFumPzQl4ENSnQ8Q0ObsfO10AN6j
KzP/4kwy/NUfcbGNPiCQZ5gcW3AdQzFlAZb0V8lGp8oCfbYgz/nb7945jvpyOdOB
eyow1JfITUuq0hO9qVKoaTIcnw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:31:07 2026 by rpki-client