Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft
File:                     4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft (raw, json)
Hash identifier:          SOhYKNR2pynOOXyOP/EnG/1senr9BKNz0dWqAxvRObg=
Subject key identifier:   21:61:22:96:2D:9A:6B:00:C7:3C:37:94:28:B7:75:18:AF:8C:BD:6C
Authority key identifier: E0:10:AF:2E:11:4A:4A:9F:D5:08:5B:E4:46:60:52:13:90:FB:13:31
Certificate issuer:       /CN=A91278D5/serialNumber=E010AF2E114A4A9FD5085BE44660521390FB1331
Certificate serial:       0B80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft
Manifest number:          0B5B
Signing time:             Thu 16 Apr 2026 19:09:16 +0000
Manifest this update:     Thu 16 Apr 2026 19:09:15 +0000
Manifest next update:     Thu 23 Apr 2026 19:09:15 +0000
Files and hashes:         1: 4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl (hash: uFRXMHFmiSxdsQCKhIFGBEjMRsGH2WDy00NQR55en4U=)
                          2: 19D0C9444D6A11EFB5578F3AC4F9AE02.roa (hash: BPfB/XTTgtvHGk3VIxBnFhEcnL04DxqHE/nHRVwjG7s=)
                          3: 76D38708D64611EE98C44371C4F9AE02.roa (hash: yMUFH8jfhcAN9l90UhmXr90e/hIZIMZpvn+Gq7qj/bY=)
                          4: 2BACE2284D6B11EF9595843FC4F9AE02.roa (hash: mmuNJzdQc+EMG4vi6YI8GL1XWoSarik/6NrUTgT3yPQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl
                          rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:09:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2944 (0xb80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91278D5, serialNumber=E010AF2E114A4A9FD5085BE44660521390FB1331
        Validity
            Not Before: Apr 16 19:09:15 2026 GMT
            Not After : Apr 23 19:09:15 2026 GMT
        Subject: CN=69e133dc-d168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:57:09:ce:3e:78:22:51:88:7d:3d:fa:52:f5:
                    2f:f7:5c:00:d6:33:38:39:17:13:c2:e7:d4:14:c4:
                    79:a0:30:71:a7:c7:8e:9f:48:92:53:ee:59:f4:04:
                    75:79:9b:61:c1:27:0c:66:bd:ff:17:b2:3d:b6:cd:
                    7e:7e:d9:ba:aa:04:54:80:20:56:51:72:8c:09:07:
                    ac:6c:62:f0:f3:cf:22:63:7f:70:9c:cb:07:a9:55:
                    03:37:91:65:47:eb:05:45:ce:ad:85:50:a5:9a:d5:
                    d6:7d:63:9d:44:32:82:f3:85:f5:77:15:3c:a0:97:
                    66:1e:3f:c9:e2:02:e0:42:41:ca:15:9d:13:b3:9e:
                    c0:60:5a:8d:7d:28:96:aa:66:93:a2:c1:2e:72:77:
                    35:77:14:02:ee:79:c5:5c:c5:14:9b:89:f2:a6:22:
                    5a:67:0b:43:c6:e4:91:30:81:66:2c:ef:7d:90:3d:
                    06:7e:72:bd:38:db:1e:8a:72:ed:f9:0c:cc:5d:52:
                    25:c6:58:03:2f:e8:02:4c:27:25:58:57:b6:42:83:
                    97:b8:3e:17:d7:f5:9f:3e:d6:c1:db:8d:17:f9:68:
                    72:98:3a:1b:f8:79:2a:8c:fb:75:60:b2:f8:80:04:
                    67:72:7d:bc:d4:6e:a8:0c:88:34:13:40:70:cb:85:
                    92:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:61:22:96:2D:9A:6B:00:C7:3C:37:94:28:B7:75:18:AF:8C:BD:6C
            X509v3 Authority Key Identifier:
                keyid:E0:10:AF:2E:11:4A:4A:9F:D5:08:5B:E4:46:60:52:13:90:FB:13:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:30:b2:97:49:b3:a2:ba:c7:35:25:d3:3d:f2:2b:23:9d:92:
         a3:de:f6:85:00:7c:06:f9:b3:63:04:5f:67:7e:c4:e5:0e:2a:
         e9:7e:d7:3e:1a:bd:c7:ff:db:57:c8:b3:6c:1b:0a:57:65:c7:
         8e:ba:cf:70:db:34:e9:7f:bb:1e:b5:d4:45:fb:24:03:a0:01:
         43:ac:4c:f5:6d:d3:b4:e3:14:e6:db:3e:e4:2c:8e:d7:97:64:
         23:ee:22:da:63:27:e6:7c:65:d4:9c:3e:10:8c:9b:bb:b6:be:
         ed:59:33:a6:56:42:a1:b5:ca:99:a8:d5:7f:af:6e:78:1c:72:
         c7:a4:65:15:9b:98:a0:34:b7:50:37:02:49:4c:cf:c0:a7:30:
         89:84:f9:48:37:45:80:2d:ea:85:dd:33:d3:39:5a:77:be:64:
         de:b5:0b:8e:1e:25:5d:45:74:3e:94:d2:ee:74:08:fe:d1:ef:
         3a:bd:49:45:cc:72:4a:f2:ab:6e:fd:c8:45:50:03:cb:8f:59:
         5a:7d:0c:69:b2:4d:2a:d9:1a:37:e5:3b:8b:a5:6e:0d:be:09:
         bb:5d:cf:e5:0e:25:18:7f:6b:d1:05:29:6a:ca:22:06:7a:bd:
         42:2c:8e:88:85:b2:b3:00:d9:e6:3f:c6:8d:b6:29:59:2d:74:
         1b:b4:d2:2f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC4AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc4RDUxMTAvBgNVBAUTKEUwMTBBRjJFMTE0QTRBOUZENTA4NUJFNDQ2NjA1MjEz
OTBGQjEzMzEwHhcNMjYwNDE2MTkwOTE1WhcNMjYwNDIzMTkwOTE1WjAYMRYwFAYD
VQQDEw02OWUxMzNkYy1kMTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqlcJzj54IlGIfT36UvUv91wA1jM4ORcTwufUFMR5oDBxp8eOn0iSU+5Z9AR1
eZthwScMZr3/F7I9ts1+ftm6qgRUgCBWUXKMCQesbGLw888iY39wnMsHqVUDN5Fl
R+sFRc6thVClmtXWfWOdRDKC84X1dxU8oJdmHj/J4gLgQkHKFZ0Ts57AYFqNfSiW
qmaTosEucnc1dxQC7nnFXMUUm4nypiJaZwtDxuSRMIFmLO99kD0GfnK9ONseinLt
+QzMXVIlxlgDL+gCTCclWFe2QoOXuD4X1/WfPtbB240X+WhymDob+HkqjPt1YLL4
gARncn281G6oDIg0E0Bwy4WSiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCFhIpYt
mmsAxzw3lCi3dRivjL1sMB8GA1UdIwQYMBaAFOAQry4RSkqf1Qhb5EZgUhOQ+xMx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzhENS82MDEzMjE2MDU2
QzgxMUVBQjY2NTdBNDBDNEY5QUUwMi80QkN2TGhGS1NwX1ZDRnZrUm1CU0U1RDdF
ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRCQ3ZMaEZLU3BfVkNGdmtSbUJTRTVEN0V6RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NzhENS82MDEzMjE2MDU2QzgxMUVBQjY2NTdBNDBDNEY5QUUwMi80QkN2TGhGS1Nw
X1ZDRnZrUm1CU0U1RDdFekUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjTCyl0mzorrHNSXTPfIrI52So972hQB8BvmzYwRfZ37E5Q4q6X7XPhq9x//b
V8izbBsKV2XHjrrPcNs06X+7HrXURfskA6ABQ6xM9W3TtOMU5ts+5CyO15dkI+4i
2mMn5nxl1Jw+EIybu7a+7VkzplZCobXKmajVf69ueBxyx6RlFZuYoDS3UDcCSUzP
wKcwiYT5SDdFgC3qhd0z0zlad75k3rULjh4lXUV0PpTS7nQI/tHvOr1JRcxySvKr
bv3IRVADy49ZWn0MabJNKtkaN+U7i6VuDb4Ju13P5Q4lGH9r0QUpasoiBnq9QiyO
iIWyswDZ5j/GjbYpWS10G7TSLw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:22:19 2026 by rpki-client