Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft
File:                     x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft (raw, json)
Hash identifier:          h3BIGCMdAgee4GlBdNvdqxV43nB4S1g5IT9xLqREhSU=
Subject key identifier:   93:B8:1F:65:29:71:13:BC:81:28:0E:55:60:22:09:C2:67:FD:4B:D6
Authority key identifier: C7:40:DD:49:24:C0:82:34:17:37:E2:19:E1:5A:E6:8F:70:17:DC:B8
Certificate issuer:       /CN=A91222FA/serialNumber=C740DD4924C082341737E219E15AE68F7017DCB8
Certificate serial:       05DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft
Manifest number:          05D5
Signing time:             Thu 16 Apr 2026 22:55:09 +0000
Manifest this update:     Thu 16 Apr 2026 22:55:09 +0000
Manifest next update:     Thu 23 Apr 2026 22:55:09 +0000
Files and hashes:         1: x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.crl (hash: MVFUOIOOb30qR47en1hzvyU9aRO7Phlj67UP48fd3F8=)
                          2: BFA10A96FA8911EB8122C53FC4F9AE02.roa (hash: UgEEJTWIM54CHKob5V3mW5gsYSR/YNMzJ4dhTAYf1UI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.crl
                          rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:55:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1500 (0x5dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91222FA, serialNumber=C740DD4924C082341737E219E15AE68F7017DCB8
        Validity
            Not Before: Apr 16 22:55:09 2026 GMT
            Not After : Apr 23 22:55:09 2026 GMT
        Subject: CN=69e168cd-c38c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a0:7f:98:f9:34:68:56:e1:51:b0:1e:33:fd:
                    45:b8:b0:f8:ef:c9:e7:b5:23:33:4b:b0:ad:4c:67:
                    05:ef:00:21:52:de:91:48:af:37:20:dd:4f:56:79:
                    d1:e9:d0:e1:dd:2a:cd:f8:0a:f1:57:c7:c1:07:07:
                    09:6e:83:70:70:43:b2:05:e2:19:3e:3c:05:45:8f:
                    ba:cc:1a:c0:59:04:60:28:42:af:a4:cf:1c:47:a3:
                    a6:b8:5b:bd:60:23:05:c5:7f:34:ef:e5:57:ba:d7:
                    e3:9e:13:8c:af:ed:5f:f0:d4:2d:d0:44:8a:bd:15:
                    ef:9a:ed:ba:b6:3c:e2:09:9a:34:77:3c:88:c7:55:
                    c8:16:09:42:3f:ee:01:6d:17:a5:0e:20:71:1d:a7:
                    c7:b2:42:c1:da:f9:28:36:44:8b:25:1c:19:32:2a:
                    6c:13:80:5a:fa:d7:f7:6d:4d:a2:a6:2e:0e:81:1b:
                    74:96:0d:c6:21:6a:4d:54:13:a9:04:fb:a2:59:e5:
                    32:bf:0a:f3:63:a3:18:f9:5d:e0:fa:0f:19:3e:e1:
                    90:c3:c5:ca:02:c4:d7:5c:79:ba:e8:69:11:06:ff:
                    6a:2f:8d:da:ff:94:2e:f3:c1:0a:1b:68:03:9f:66:
                    03:67:1e:b7:12:78:9c:ee:39:cc:35:b6:5a:14:67:
                    10:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B8:1F:65:29:71:13:BC:81:28:0E:55:60:22:09:C2:67:FD:4B:D6
            X509v3 Authority Key Identifier:
                keyid:C7:40:DD:49:24:C0:82:34:17:37:E2:19:E1:5A:E6:8F:70:17:DC:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:2c:7e:75:93:3e:84:7c:e1:6f:cf:28:c7:da:89:c3:e5:b9:
         0b:2c:bd:6d:3d:0e:34:f2:ec:74:6b:e3:0e:a5:80:ea:c3:e3:
         70:6f:b4:90:c5:9b:aa:85:04:e9:02:e3:88:bd:8e:0d:99:f8:
         40:37:24:e5:c1:b2:2f:83:3b:ef:1d:a4:47:60:a9:05:4e:40:
         e7:0e:4c:7c:89:c0:bf:d0:e7:5a:ac:b2:8b:5c:70:29:01:04:
         9a:58:24:2a:1f:f0:7c:c9:05:c7:2a:5c:b9:12:a4:f0:8e:9d:
         1e:a0:a4:f0:c4:6f:e3:a9:5a:c6:96:a1:ff:b2:5e:f8:e8:8d:
         d6:f9:a3:01:e8:71:88:09:cf:3d:d6:df:51:27:c6:47:db:1f:
         0e:c6:a3:4f:33:5b:29:f7:4f:05:54:43:a8:48:1c:eb:e6:27:
         45:a7:db:c7:d0:bb:e5:5b:5b:3c:7d:a5:1b:9a:14:62:70:96:
         e5:b0:2f:62:c3:71:b4:49:a5:46:38:ea:65:26:98:a4:0e:7b:
         ec:0f:ed:cb:d6:c4:5d:b3:bd:3a:e1:a2:0d:4c:d6:df:23:59:
         c6:19:f1:a6:5a:81:9f:10:cc:2b:4f:01:c1:4a:29:16:3f:0d:
         de:f0:a1:ac:fe:4e:50:b0:1c:33:f4:a0:a5:84:61:47:1c:3b:
         da:8f:5a:d7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjIyRkExMTAvBgNVBAUTKEM3NDBERDQ5MjRDMDgyMzQxNzM3RTIxOUUxNUFFNjhG
NzAxN0RDQjgwHhcNMjYwNDE2MjI1NTA5WhcNMjYwNDIzMjI1NTA5WjAYMRYwFAYD
VQQDEw02OWUxNjhjZC1jMzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv6B/mPk0aFbhUbAeM/1FuLD478nntSMzS7CtTGcF7wAhUt6RSK83IN1PVnnR
6dDh3SrN+ArxV8fBBwcJboNwcEOyBeIZPjwFRY+6zBrAWQRgKEKvpM8cR6OmuFu9
YCMFxX807+VXutfjnhOMr+1f8NQt0ESKvRXvmu26tjziCZo0dzyIx1XIFglCP+4B
bRelDiBxHafHskLB2vkoNkSLJRwZMipsE4Ba+tf3bU2ipi4OgRt0lg3GIWpNVBOp
BPuiWeUyvwrzY6MY+V3g+g8ZPuGQw8XKAsTXXHm66GkRBv9qL43a/5Qu88EKG2gD
n2YDZx63Enic7jnMNbZaFGcQ9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJO4H2Up
cRO8gSgOVWAiCcJn/UvWMB8GA1UdIwQYMBaAFMdA3UkkwII0FzfiGeFa5o9wF9y4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjJGQS9FODBEQUEyRUZB
ODUxMUVCQjY2ODJGMzdDNEY5QUUwMi94MERkU1NUQWdqUVhOLUlaNFZybWozQVgz
TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3gwRGRTU1RBZ2pRWE4tSVo0VnJtajNBWDNMZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MjJGQS9FODBEQUEyRUZBODUxMUVCQjY2ODJGMzdDNEY5QUUwMi94MERkU1NUQWdq
UVhOLUlaNFZybWozQVgzTGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkix+dZM+hHzhb88ox9qJw+W5Cyy9bT0ONPLsdGvjDqWA6sPjcG+0kMWbqoUE
6QLjiL2ODZn4QDck5cGyL4M77x2kR2CpBU5A5w5MfInAv9DnWqyyi1xwKQEEmlgk
Kh/wfMkFxypcuRKk8I6dHqCk8MRv46laxpah/7Je+OiN1vmjAehxiAnPPdbfUSfG
R9sfDsajTzNbKfdPBVRDqEgc6+YnRafbx9C75VtbPH2lG5oUYnCW5bAvYsNxtEml
RjjqZSaYpA577A/ty9bEXbO9OuGiDUzW3yNZxhnxplqBnxDMK08BwUopFj8N3vCh
rP5OULAcM/SgpYRhRxw72o9a1w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:05:32 2026 by rpki-client