Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft
File:                     loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft (raw, json)
Hash identifier:          nerZ1RScx//xcRPH+8q7sGFDXKRIUVslu8c1eCPteTM=
Subject key identifier:   85:CB:8F:C4:92:69:C0:18:9C:DE:1B:4D:87:3A:8D:26:43:B6:42:61
Authority key identifier: 96:82:C2:AB:E2:53:23:58:07:76:B1:D0:E2:75:D2:FD:2D:69:7E:B6
Certificate issuer:       /CN=A91514B1/serialNumber=9682C2ABE25323580776B1D0E275D2FD2D697EB6
Certificate serial:       060F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft
Manifest number:          05EB
Signing time:             Thu 16 Apr 2026 22:56:01 +0000
Manifest this update:     Thu 16 Apr 2026 22:56:01 +0000
Manifest next update:     Thu 23 Apr 2026 22:56:01 +0000
Files and hashes:         1: loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl (hash: PhedYc09bE9zdEY8PpHmsM0DuLn7DhzltGVwV/tAwmY=)
                          2: AF0A3F14178911EC876F5F50C4F9AE02.roa (hash: Ae3vnYMRPKUdXa+CO5NCrtQU86FdJMZKr59EI0hk4E8=)
                          3: D3D36BE0271011ECA0D7D95AC4F9AE02.roa (hash: 3HHpLWwhlM54c0ygayHpZ//nfGJy4YzZlrDagN2/hEE=)
                          4: AE8BB766178911EC876F5F50C4F9AE02.roa (hash: +d1MUKmmVJG/vsTFf7Frn1NwsWtESd/BW6+x47gDzSQ=)
                          5: F1C7A044D91E11EFAD3C7613C4F9AE02.roa (hash: iuk/ykP+WarrOSzWEJv6JFHYe5vwgB3sie5LRWLne0s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl
                          rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:56:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1551 (0x60f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91514B1, serialNumber=9682C2ABE25323580776B1D0E275D2FD2D697EB6
        Validity
            Not Before: Apr 16 22:56:01 2026 GMT
            Not After : Apr 23 22:56:01 2026 GMT
        Subject: CN=69e16901-d836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:32:7a:1f:25:86:f1:60:ff:19:c2:5b:e0:4e:
                    d9:77:f4:aa:6a:a6:2a:d2:10:ba:c7:60:98:bf:fa:
                    a5:9c:2c:56:50:54:28:2d:83:00:69:3f:2e:05:23:
                    d7:eb:73:d3:ef:95:a9:0f:bd:52:03:9b:0e:7b:7a:
                    33:0c:bf:e4:a3:5f:4d:33:aa:bc:c1:7b:3f:79:96:
                    76:03:e0:31:d0:ba:97:21:0a:25:6e:ff:eb:4f:c0:
                    24:5b:f2:d5:84:1b:4f:d7:5b:96:34:47:db:8b:fc:
                    bf:f6:06:05:1a:9d:cc:17:17:b7:1f:76:69:c0:51:
                    52:87:bd:c8:b4:99:26:ea:2f:b2:84:e4:65:b0:2e:
                    6b:01:98:4b:93:02:ad:a7:c6:86:75:fe:f2:8e:09:
                    4b:ac:9e:2f:54:ef:03:20:be:82:6f:43:91:7f:5e:
                    c1:b6:8e:2a:c7:fe:c3:f2:22:e8:f2:f8:68:40:f9:
                    b3:32:81:02:48:3a:27:c3:ca:19:13:c6:47:e2:78:
                    a9:26:49:a7:e9:b1:47:f3:d1:38:d2:b6:a9:16:c7:
                    13:26:90:1b:cd:7d:c5:7c:40:34:da:15:f6:8b:47:
                    0c:c5:2a:ea:d3:58:b5:b1:b3:90:aa:62:75:31:38:
                    bb:a9:79:62:a9:30:fb:c7:ac:dc:5a:46:4a:59:b0:
                    01:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:CB:8F:C4:92:69:C0:18:9C:DE:1B:4D:87:3A:8D:26:43:B6:42:61
            X509v3 Authority Key Identifier:
                keyid:96:82:C2:AB:E2:53:23:58:07:76:B1:D0:E2:75:D2:FD:2D:69:7E:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:21:8b:2b:d4:d1:d9:05:10:7b:f4:b7:88:9e:1a:22:24:2c:
         3e:a3:ca:ad:22:dc:7b:83:88:35:ff:98:3c:6b:57:5b:71:47:
         dc:64:7e:49:85:6d:1b:96:b9:29:3a:51:22:ad:07:9f:3b:3f:
         10:66:3a:00:c5:15:df:f1:d6:17:92:a8:9f:4f:1d:d0:6f:57:
         a4:f4:b4:82:2b:d6:da:b7:1d:57:b5:30:38:cc:14:59:63:75:
         5c:2b:94:a0:59:1f:6f:3d:e5:ae:9e:a4:8a:83:3c:5a:42:7b:
         f3:ef:58:50:06:e2:bb:a3:74:cd:d7:f6:5e:20:2c:21:6e:02:
         41:25:b2:a9:3a:d8:5f:5c:44:8a:d3:73:4c:7c:fb:67:62:b2:
         dc:0e:d8:09:28:fa:53:10:af:2d:9e:60:2f:bd:a8:d8:be:98:
         d5:12:31:49:c3:ea:9b:9f:fe:4b:e1:18:ea:6f:37:12:d3:fe:
         77:99:f4:3d:7f:d1:2e:de:f7:91:de:0b:7e:85:18:2b:a4:da:
         03:34:06:14:0a:a3:9c:0b:62:fa:81:a8:bd:e6:4c:8d:e8:fd:
         05:98:8d:be:fd:73:ee:dd:d0:e8:7b:d2:b0:e6:79:80:c4:d1:
         c1:70:b2:fe:d4:a9:74:f9:d1:e9:ce:f3:18:08:a4:48:95:04:
         1f:23:9c:4f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTE0QjExMTAvBgNVBAUTKDk2ODJDMkFCRTI1MzIzNTgwNzc2QjFEMEUyNzVEMkZE
MkQ2OTdFQjYwHhcNMjYwNDE2MjI1NjAxWhcNMjYwNDIzMjI1NjAxWjAYMRYwFAYD
VQQDEw02OWUxNjkwMS1kODM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArTJ6HyWG8WD/GcJb4E7Zd/SqaqYq0hC6x2CYv/qlnCxWUFQoLYMAaT8uBSPX
63PT75WpD71SA5sOe3ozDL/ko19NM6q8wXs/eZZ2A+Ax0LqXIQolbv/rT8AkW/LV
hBtP11uWNEfbi/y/9gYFGp3MFxe3H3ZpwFFSh73ItJkm6i+yhORlsC5rAZhLkwKt
p8aGdf7yjglLrJ4vVO8DIL6Cb0ORf17Bto4qx/7D8iLo8vhoQPmzMoECSDonw8oZ
E8ZH4nipJkmn6bFH89E40rapFscTJpAbzX3FfEA02hX2i0cMxSrq01i1sbOQqmJ1
MTi7qXliqTD7x6zcWkZKWbABewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIXLj8SS
acAYnN4bTYc6jSZDtkJhMB8GA1UdIwQYMBaAFJaCwqviUyNYB3ax0OJ10v0taX62
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTRCMS83QTg4NjRBQ0ZC
RTQxMUVCODJCNjI2NEZDNEY5QUUwMi9sb0xDcS1KVEkxZ0hkckhRNG5YU19TMXBm
clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2xvTENxLUpUSTFnSGRySFE0blhTX1MxcGZyWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MTRCMS83QTg4NjRBQ0ZCRTQxMUVCODJCNjI2NEZDNEY5QUUwMi9sb0xDcS1KVEkx
Z0hkckhRNG5YU19TMXBmclkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOSGLK9TR2QUQe/S3iJ4aIiQsPqPKrSLce4OINf+YPGtXW3FH3GR+SYVtG5a5
KTpRIq0Hnzs/EGY6AMUV3/HWF5Kon08d0G9XpPS0givW2rcdV7UwOMwUWWN1XCuU
oFkfbz3lrp6kioM8WkJ78+9YUAbiu6N0zdf2XiAsIW4CQSWyqTrYX1xEitNzTHz7
Z2Ky3A7YCSj6UxCvLZ5gL72o2L6Y1RIxScPqm5/+S+EY6m83EtP+d5n0PX/RLt73
kd4LfoUYK6TaAzQGFAqjnAti+oGoveZMjej9BZiNvv1z7t3Q6HvSsOZ5gMTRwXCy
/tSpdPnR6c7zGAikSJUEHyOcTw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:28:04 2026 by rpki-client