Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft
File:                     aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft (raw, json)
Hash identifier:          f30wiHxPUTY6guDybLSAFPeck5aepS7wFmNJAqHG53s=
Subject key identifier:   06:13:11:A8:FE:58:BD:F2:6C:E0:09:D7:36:67:2D:20:66:9C:FB:50
Authority key identifier: 68:8B:B0:59:5F:59:5B:71:1E:02:45:0A:CE:E3:B2:6C:11:3B:79:2F
Certificate issuer:       /CN=A91549ED/serialNumber=688BB0595F595B711E02450ACEE3B26C113B792F
Certificate serial:       084D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIuwWV9ZW3EeAkUKzuOybBE7eS8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft
Manifest number:          0842
Signing time:             Thu 16 Apr 2026 20:48:47 +0000
Manifest this update:     Thu 16 Apr 2026 20:48:46 +0000
Manifest next update:     Thu 23 Apr 2026 20:48:46 +0000
Files and hashes:         1: aIuwWV9ZW3EeAkUKzuOybBE7eS8.crl (hash: Xy1J+sOEUzvlb9WLNnSY1jZaxlyxd83l9QPJls6WnTY=)
                          2: 89B3D06E0F9111EBA9B90727C4F9AE02.roa (hash: OMJTHEhRKbysqVwaCH/CrR6Pj2ikKlgHxMDDmRLDUbY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.crl
                          rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIuwWV9ZW3EeAkUKzuOybBE7eS8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:48:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2125 (0x84d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91549ED, serialNumber=688BB0595F595B711E02450ACEE3B26C113B792F
        Validity
            Not Before: Apr 16 20:48:46 2026 GMT
            Not After : Apr 23 20:48:46 2026 GMT
        Subject: CN=69e14b2f-25ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:63:dd:55:e5:df:b1:20:f1:9e:c2:fc:c8:e7:
                    a3:24:38:5f:50:41:5c:fc:97:36:ac:08:e4:93:f6:
                    87:ac:d3:8f:c9:53:58:6f:00:d4:d1:01:6d:85:b9:
                    45:c7:9c:be:4e:be:64:69:22:0a:60:60:a4:d3:31:
                    71:0c:c8:5d:5f:3f:c6:ef:9c:fd:2b:04:ca:0c:bb:
                    6e:90:c2:56:e9:6e:24:f9:fc:f0:41:fa:e1:63:bf:
                    a0:b4:40:fa:e9:db:16:1e:12:55:b4:b9:1b:15:7b:
                    b9:0c:70:b3:78:55:57:19:f5:70:28:c6:48:48:99:
                    44:66:de:33:8c:42:0d:4d:60:35:78:b9:58:ce:01:
                    6f:b9:81:76:7e:33:18:78:3a:27:e6:06:ee:49:56:
                    66:d6:2d:e0:c2:55:46:15:40:ad:c2:02:03:64:9f:
                    7e:c9:88:ee:84:f3:83:7b:2e:1f:38:82:ba:ff:95:
                    fd:07:41:54:22:82:a3:eb:c1:bc:cb:b7:ab:ba:c5:
                    b6:dc:78:1d:68:fd:87:4f:47:63:96:aa:1b:c2:f6:
                    d9:81:1c:6a:00:2c:e9:56:b3:c8:2d:ee:c7:f9:e4:
                    9d:b8:9c:c9:02:c0:66:29:af:f3:84:b8:5b:8f:66:
                    6f:43:ff:c4:4d:54:c7:d1:c3:2e:91:30:96:b1:12:
                    3a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:13:11:A8:FE:58:BD:F2:6C:E0:09:D7:36:67:2D:20:66:9C:FB:50
            X509v3 Authority Key Identifier:
                keyid:68:8B:B0:59:5F:59:5B:71:1E:02:45:0A:CE:E3:B2:6C:11:3B:79:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIuwWV9ZW3EeAkUKzuOybBE7eS8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:dc:83:3c:92:55:cc:86:a3:f9:b5:f3:e0:77:a0:33:af:51:
         d0:8a:1d:82:69:0b:2a:0f:4c:e0:98:ee:3a:b4:4e:93:c6:ba:
         e6:14:3c:66:d0:06:46:e1:7e:25:5d:d5:3b:72:1a:b9:83:85:
         67:f0:35:ef:98:26:fc:87:3b:b2:d2:7e:ce:f4:2c:77:53:21:
         12:a4:07:1b:a7:62:20:9b:b4:61:b3:a2:0d:24:a3:2e:5d:60:
         a6:9a:f8:1a:4c:c0:77:4a:c8:1f:e9:e5:e5:5d:7e:c2:10:25:
         3d:e3:76:3d:63:59:23:53:3f:0d:2b:ef:96:16:70:b8:b9:61:
         10:63:a7:0a:e9:29:eb:6e:22:25:2d:41:92:e3:f3:b1:81:e8:
         03:9f:9f:fb:cb:13:37:1e:7d:c6:e6:76:de:ba:18:0d:3f:d8:
         82:78:23:85:7c:ac:47:de:06:6d:2b:8c:84:6a:5d:b5:9a:ce:
         ed:2c:df:a9:c8:83:62:25:36:f7:a8:56:13:aa:96:f5:8a:fc:
         77:b0:75:ea:fd:8d:1e:44:ff:d4:45:2b:6a:d7:6b:64:92:90:
         a2:1b:40:fe:55:e2:35:c2:14:9b:7e:ee:ee:0f:a2:44:8c:1a:
         1f:3a:17:30:b4:a3:92:0c:cb:95:9b:3c:96:ab:56:92:a1:6c:
         32:b3:92:f5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCE0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTQ5RUQxMTAvBgNVBAUTKDY4OEJCMDU5NUY1OTVCNzExRTAyNDUwQUNFRTNCMjZD
MTEzQjc5MkYwHhcNMjYwNDE2MjA0ODQ2WhcNMjYwNDIzMjA0ODQ2WjAYMRYwFAYD
VQQDEw02OWUxNGIyZi0yNWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz2PdVeXfsSDxnsL8yOejJDhfUEFc/Jc2rAjkk/aHrNOPyVNYbwDU0QFthblF
x5y+Tr5kaSIKYGCk0zFxDMhdXz/G75z9KwTKDLtukMJW6W4k+fzwQfrhY7+gtED6
6dsWHhJVtLkbFXu5DHCzeFVXGfVwKMZISJlEZt4zjEINTWA1eLlYzgFvuYF2fjMY
eDon5gbuSVZm1i3gwlVGFUCtwgIDZJ9+yYjuhPODey4fOIK6/5X9B0FUIoKj68G8
y7erusW23HgdaP2HT0djlqobwvbZgRxqACzpVrPILe7H+eSduJzJAsBmKa/zhLhb
j2ZvQ//ETVTH0cMukTCWsRI6PwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAYTEaj+
WL3ybOAJ1zZnLSBmnPtQMB8GA1UdIwQYMBaAFGiLsFlfWVtxHgJFCs7jsmwRO3kv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDlFRC9CNzcxNEI5NjA5
MTgxMUVCOTVGQTI3MzdDNEY5QUUwMi9hSXV3V1Y5WlczRWVBa1VLenVPeWJCRTdl
UzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FJdXdXVjlaVzNFZUFrVUt6dU95YkJFN2VTOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NDlFRC9CNzcxNEI5NjA5MTgxMUVCOTVGQTI3MzdDNEY5QUUwMi9hSXV3V1Y5Wlcz
RWVBa1VLenVPeWJCRTdlUzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALtyDPJJVzIaj+bXz4HegM69R0IodgmkLKg9M4JjuOrROk8a65hQ8ZtAGRuF+
JV3VO3IauYOFZ/A175gm/Ic7stJ+zvQsd1MhEqQHG6diIJu0YbOiDSSjLl1gppr4
GkzAd0rIH+nl5V1+whAlPeN2PWNZI1M/DSvvlhZwuLlhEGOnCukp624iJS1BkuPz
sYHoA5+f+8sTNx59xuZ23roYDT/YgngjhXysR94GbSuMhGpdtZrO7SzfqciDYiU2
96hWE6qW9Yr8d7B16v2NHkT/1EUratdrZJKQohtA/lXiNcIUm37u7g+iRIwaHzoX
MLSjkgzLlZs8lqtWkqFsMrOS9Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:16:52 2026 by rpki-client