Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91293F4/1F695EEC8E7F11EAA9584C67C4F9AE02/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.mft
File:                     5qVLrX0XbkRHqelPJEgDJ8G0DJ4.mft (raw, json)
Hash identifier:          xs6CBda8OUwtruE35Kt/PubfdMWew+2mXaLJ5yNpJvs=
Subject key identifier:   FB:3B:25:13:B1:38:17:CD:B8:C4:92:AF:74:51:04:77:11:4A:B4:05
Authority key identifier: E6:A5:4B:AD:7D:17:6E:44:47:A9:E9:4F:24:48:03:27:C1:B4:0C:9E
Certificate issuer:       /CN=A91293F4/serialNumber=E6A54BAD7D176E4447A9E94F24480327C1B40C9E
Certificate serial:       0A47
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91293F4/1F695EEC8E7F11EAA9584C67C4F9AE02/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.mft
Manifest number:          0A31
Signing time:             Thu 16 Apr 2026 19:39:32 +0000
Manifest this update:     Thu 16 Apr 2026 19:39:32 +0000
Manifest next update:     Thu 23 Apr 2026 19:39:32 +0000
Files and hashes:         1: 5qVLrX0XbkRHqelPJEgDJ8G0DJ4.crl (hash: acGsb2zCQiISfhL4GFpWFqgR15lHMcUb8bQfoG/h8RE=)
                          2: 3E730FA28E8111EAB2038B6BC4F9AE02.roa (hash: vSaXKWRBXUPLPn7+Q/yDSX8ApY9DTLpiFPD4ogaWMGI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91293F4/1F695EEC8E7F11EAA9584C67C4F9AE02/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.crl
                          rsync://rpki.apnic.net/member_repository/A91293F4/1F695EEC8E7F11EAA9584C67C4F9AE02/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:39:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2631 (0xa47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91293F4, serialNumber=E6A54BAD7D176E4447A9E94F24480327C1B40C9E
        Validity
            Not Before: Apr 16 19:39:32 2026 GMT
            Not After : Apr 23 19:39:32 2026 GMT
        Subject: CN=69e13af4-2eee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ca:79:f1:5b:ad:e9:f1:50:02:22:8a:28:5b:
                    d3:56:1f:d5:6b:7d:0c:10:57:51:61:78:c8:8a:40:
                    3a:04:a8:42:e0:6a:fc:83:63:5f:5a:5a:a0:b0:e6:
                    08:e1:08:17:f4:08:6e:2e:c8:5b:84:d7:c3:e7:58:
                    65:b5:a8:ff:c8:74:82:72:fa:ca:65:2f:c7:a5:ba:
                    be:9c:b6:d5:32:f7:48:6b:18:5c:85:93:a7:05:08:
                    b5:c6:5b:dd:58:b4:b0:cd:1b:9e:e5:5a:d3:ab:5f:
                    7a:f9:f7:9f:a9:4c:e5:2c:47:8e:37:0b:7a:28:8f:
                    71:a9:24:63:c1:d8:65:f0:6d:b1:62:5b:e7:43:c3:
                    ce:9e:c0:10:99:af:47:73:26:8e:ad:93:37:35:0a:
                    09:7c:c9:71:01:bc:8b:44:d5:b4:2b:d5:8d:d5:75:
                    2e:5e:35:13:14:9c:16:f4:6c:15:f9:36:27:7e:85:
                    ab:4c:6d:00:7c:e9:4f:d7:32:f4:20:b2:1c:52:36:
                    fd:da:0a:43:be:4b:af:0b:fa:f9:18:ea:20:09:e1:
                    82:41:19:79:ae:fe:60:0f:fa:36:06:d9:cc:12:11:
                    43:cb:ff:2a:e8:2f:c9:0c:00:da:a3:de:4e:01:d9:
                    b1:dc:2b:b7:82:b9:b1:da:c0:96:65:88:ce:81:61:
                    56:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:3B:25:13:B1:38:17:CD:B8:C4:92:AF:74:51:04:77:11:4A:B4:05
            X509v3 Authority Key Identifier:
                keyid:E6:A5:4B:AD:7D:17:6E:44:47:A9:E9:4F:24:48:03:27:C1:B4:0C:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91293F4/1F695EEC8E7F11EAA9584C67C4F9AE02/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91293F4/1F695EEC8E7F11EAA9584C67C4F9AE02/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:3b:49:43:1d:c9:b4:72:5d:13:93:57:ea:7b:f8:0e:d0:35:
         d3:02:95:5d:c4:f6:be:af:86:37:1d:18:4d:ac:d8:30:a9:1d:
         cb:e9:a8:85:ab:0d:5d:d9:da:84:05:02:4b:a3:da:ee:20:20:
         0e:93:b8:f0:e4:eb:4e:8a:8b:7a:89:8b:8f:be:b8:de:99:cd:
         d5:5f:cb:50:d7:19:12:1a:bc:47:72:51:9d:1c:9b:99:e0:df:
         76:4e:8d:91:b8:35:d1:76:a2:cb:cb:a7:42:de:a4:8d:3a:dc:
         76:25:fe:fa:2b:04:99:c8:bf:76:b9:9e:89:19:7a:38:b9:38:
         73:43:4f:48:da:71:a3:cc:df:8d:65:94:96:3c:89:eb:a2:fc:
         4c:86:46:2d:d3:73:17:52:ca:4a:b2:f2:34:3c:e6:15:93:8b:
         bb:a5:14:62:51:72:a2:07:35:29:7d:26:55:7b:af:91:54:cc:
         f7:a8:42:5c:2f:96:dc:f8:78:93:5a:46:6b:57:65:4f:aa:a7:
         4a:c5:9e:30:2b:d5:63:e7:c4:4a:41:37:52:45:ca:5c:a3:eb:
         14:a3:29:c5:2a:c2:29:05:99:39:ef:27:0d:53:77:d9:b4:06:
         31:8f:9f:e1:7b:79:1b:ea:5e:0d:dd:40:a4:f0:ad:f8:f7:7b:
         aa:e2:25:fb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjkzRjQxMTAvBgNVBAUTKEU2QTU0QkFEN0QxNzZFNDQ0N0E5RTk0RjI0NDgwMzI3
QzFCNDBDOUUwHhcNMjYwNDE2MTkzOTMyWhcNMjYwNDIzMTkzOTMyWjAYMRYwFAYD
VQQDEw02OWUxM2FmNC0yZWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkMp58Vut6fFQAiKKKFvTVh/Va30MEFdRYXjIikA6BKhC4Gr8g2NfWlqgsOYI
4QgX9AhuLshbhNfD51hltaj/yHSCcvrKZS/Hpbq+nLbVMvdIaxhchZOnBQi1xlvd
WLSwzRue5VrTq196+fefqUzlLEeONwt6KI9xqSRjwdhl8G2xYlvnQ8POnsAQma9H
cyaOrZM3NQoJfMlxAbyLRNW0K9WN1XUuXjUTFJwW9GwV+TYnfoWrTG0AfOlP1zL0
ILIcUjb92gpDvkuvC/r5GOogCeGCQRl5rv5gD/o2BtnMEhFDy/8q6C/JDADao95O
Admx3Cu3grmx2sCWZYjOgWFW0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPs7JROx
OBfNuMSSr3RRBHcRSrQFMB8GA1UdIwQYMBaAFOalS619F25ER6npTyRIAyfBtAye
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTNGNC8xRjY5NUVFQzhF
N0YxMUVBQTk1ODRDNjdDNEY5QUUwMi81cVZMclgwWGJrUkhxZWxQSkVnREo4RzBE
SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVxVkxyWDBYYmtSSHFlbFBKRWdESjhHMERKNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
OTNGNC8xRjY5NUVFQzhFN0YxMUVBQTk1ODRDNjdDNEY5QUUwMi81cVZMclgwWGJr
UkhxZWxQSkVnREo4RzBESjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYTtJQx3JtHJdE5NX6nv4DtA10wKVXcT2vq+GNx0YTazYMKkdy+mohasNXdna
hAUCS6Pa7iAgDpO48OTrToqLeomLj7643pnN1V/LUNcZEhq8R3JRnRybmeDfdk6N
kbg10Xaiy8unQt6kjTrcdiX++isEmci/drmeiRl6OLk4c0NPSNpxo8zfjWWUljyJ
66L8TIZGLdNzF1LKSrLyNDzmFZOLu6UUYlFyogc1KX0mVXuvkVTM96hCXC+W3Ph4
k1pGa1dlT6qnSsWeMCvVY+fESkE3UkXKXKPrFKMpxSrCKQWZOe8nDVN32bQGMY+f
4Xt5G+peDd1ApPCt+Pd7quIl+w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:23:49 2026 by rpki-client