Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft
File:                     wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft (raw, json)
Hash identifier:          heuBuLDAwRBV5GEyKubrU2s4+zyoGZ0mtWm8qJqCj5U=
Subject key identifier:   DE:2A:01:9A:9A:97:AC:50:04:2C:54:88:3D:C6:FA:F8:80:D3:E9:75
Authority key identifier: C2:A2:EB:4C:F9:10:27:78:A4:2E:15:CC:D2:0A:58:4E:DC:ED:C2:72
Certificate issuer:       /CN=A91365B9/serialNumber=C2A2EB4CF9102778A42E15CCD20A584EDCEDC272
Certificate serial:       0440
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqLrTPkQJ3ikLhXM0gpYTtztwnI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft
Manifest number:          0439
Signing time:             Fri 17 Apr 2026 00:11:05 +0000
Manifest this update:     Fri 17 Apr 2026 00:11:04 +0000
Manifest next update:     Fri 24 Apr 2026 00:11:04 +0000
Files and hashes:         1: wqLrTPkQJ3ikLhXM0gpYTtztwnI.crl (hash: YCOJHJec3RHYkT/8/QBkmBNd8lSMtDauC+1dCjhchjk=)
                          2: AFF4E1F89EB711EC8210607DC4F9AE02.roa (hash: r355JtbsChvpKdcC5nW7ewoVZ03Rj0iVIbKKdmTNzQU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.crl
                          rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqLrTPkQJ3ikLhXM0gpYTtztwnI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:11:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1088 (0x440)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91365B9, serialNumber=C2A2EB4CF9102778A42E15CCD20A584EDCEDC272
        Validity
            Not Before: Apr 17 00:11:04 2026 GMT
            Not After : Apr 24 00:11:04 2026 GMT
        Subject: CN=69e17a99-bd91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d8:96:e5:e4:21:39:27:a6:b5:e9:9c:70:e7:
                    36:81:e5:ab:68:03:b5:d8:63:15:31:c9:7f:25:69:
                    a5:a7:bf:3a:a3:82:2e:9f:39:7a:38:5c:e9:e0:92:
                    90:2f:52:9d:68:f7:4a:35:49:25:48:09:74:05:2b:
                    82:68:2b:2f:68:c0:80:4b:64:ef:12:ca:bf:d4:9f:
                    dd:93:c8:cc:e4:07:0d:c9:27:e2:97:fb:b2:8c:58:
                    85:51:2a:8c:be:2e:2d:82:a7:dd:ea:cc:52:f1:0c:
                    2f:08:93:f3:b4:c8:29:d5:ba:44:d7:01:fe:71:7f:
                    46:17:5d:c8:6b:4d:f0:19:15:a8:21:bf:6a:b5:ca:
                    10:98:39:3c:1a:7c:0d:6c:cb:1d:a9:b8:eb:86:46:
                    ef:1d:d0:e3:b0:61:40:0b:94:bf:f5:ca:dc:c1:1e:
                    11:f1:e8:73:6a:86:62:76:6b:a0:87:6c:8d:c7:2e:
                    eb:fb:85:17:85:cb:2b:75:2c:ef:a1:4f:71:60:b3:
                    8d:8a:09:94:2d:b6:c3:51:01:07:45:a2:e9:9f:e8:
                    9b:e5:49:38:a0:af:67:7c:76:fe:de:9d:88:42:67:
                    ea:b9:38:ca:36:e8:da:37:4b:02:e3:36:fd:b4:24:
                    7a:4c:4b:fc:6d:e5:24:35:6a:a4:7f:f8:1c:7e:5b:
                    ae:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:2A:01:9A:9A:97:AC:50:04:2C:54:88:3D:C6:FA:F8:80:D3:E9:75
            X509v3 Authority Key Identifier:
                keyid:C2:A2:EB:4C:F9:10:27:78:A4:2E:15:CC:D2:0A:58:4E:DC:ED:C2:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqLrTPkQJ3ikLhXM0gpYTtztwnI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:d0:0d:6e:bb:f0:49:f3:9a:55:7e:f2:46:20:bb:02:c6:1c:
         ce:70:4e:a9:e1:cd:bb:da:5f:73:73:18:78:f7:89:36:f9:97:
         14:46:bd:b7:d9:05:ba:8a:4a:f2:31:01:8e:79:c4:ba:da:1f:
         5f:3b:a1:8c:f0:2c:de:8f:ae:79:92:5a:c3:d8:d8:39:ae:10:
         6b:6f:e5:c0:29:cb:f6:39:d6:f4:33:e5:26:7e:41:52:ab:4c:
         2b:bd:b1:10:64:41:54:ff:a6:7a:80:c5:af:90:c2:a8:74:e6:
         fe:70:3d:4b:61:91:01:52:48:c6:82:bd:4b:8c:b4:17:7b:15:
         32:3b:26:15:80:f9:8a:c2:d7:be:ec:48:bf:6b:1f:0f:82:aa:
         4f:86:03:f4:18:4b:e1:32:7e:19:8f:b1:40:f8:cf:76:3d:b6:
         62:bc:3a:f1:3d:91:4d:2e:fa:b5:31:38:de:de:a2:5f:c7:c3:
         5b:14:4d:dc:d6:ed:07:c3:3d:ac:d0:d5:44:c1:70:b5:c3:69:
         1b:34:51:15:ee:f4:31:12:b7:b1:cc:89:d2:ac:7c:11:da:ec:
         8c:3e:1b:23:1d:b0:85:2b:93:5d:34:87:1a:82:8a:aa:ee:4b:
         d1:0b:c2:db:48:db:5f:87:cc:48:56:0f:2c:f4:aa:eb:22:41:
         c0:75:36:ba
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzY1QjkxMTAvBgNVBAUTKEMyQTJFQjRDRjkxMDI3NzhBNDJFMTVDQ0QyMEE1ODRF
RENFREMyNzIwHhcNMjYwNDE3MDAxMTA0WhcNMjYwNDI0MDAxMTA0WjAYMRYwFAYD
VQQDEw02OWUxN2E5OS1iZDkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAudiW5eQhOSemtemccOc2geWraAO12GMVMcl/JWmlp786o4Iunzl6OFzp4JKQ
L1KdaPdKNUklSAl0BSuCaCsvaMCAS2TvEsq/1J/dk8jM5AcNySfil/uyjFiFUSqM
vi4tgqfd6sxS8QwvCJPztMgp1bpE1wH+cX9GF13Ia03wGRWoIb9qtcoQmDk8GnwN
bMsdqbjrhkbvHdDjsGFAC5S/9crcwR4R8ehzaoZidmugh2yNxy7r+4UXhcsrdSzv
oU9xYLONigmULbbDUQEHRaLpn+ib5Uk4oK9nfHb+3p2IQmfquTjKNujaN0sC4zb9
tCR6TEv8beUkNWqkf/gcfluucwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN4qAZqa
l6xQBCxUiD3G+viA0+l1MB8GA1UdIwQYMBaAFMKi60z5ECd4pC4VzNIKWE7c7cJy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjVCOS83NDVENzcwMjlF
QjQxMUVDQkYwRTE0NzdDNEY5QUUwMi93cUxyVFBrUUozaWtMaFhNMGdwWVR0enR3
bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dxTHJUUGtRSjNpa0xoWE0wZ3BZVHR6dHduSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NjVCOS83NDVENzcwMjlFQjQxMUVDQkYwRTE0NzdDNEY5QUUwMi93cUxyVFBrUUoz
aWtMaFhNMGdwWVR0enR3bkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFdANbrvwSfOaVX7yRiC7AsYcznBOqeHNu9pfc3MYePeJNvmXFEa9t9kFuopK
8jEBjnnEutofXzuhjPAs3o+ueZJaw9jYOa4Qa2/lwCnL9jnW9DPlJn5BUqtMK72x
EGRBVP+meoDFr5DCqHTm/nA9S2GRAVJIxoK9S4y0F3sVMjsmFYD5isLXvuxIv2sf
D4KqT4YD9BhL4TJ+GY+xQPjPdj22Yrw68T2RTS76tTE43t6iX8fDWxRN3NbtB8M9
rNDVRMFwtcNpGzRRFe70MRK3scyJ0qx8EdrsjD4bIx2whSuTXTSHGoKKqu5L0QvC
20jbX4fMSFYPLPSq6yJBwHU2ug==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:31:01 2026 by rpki-client