Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft
File:                     p3g41_VBxh2wadq85dg3CafCrg0.mft (raw, json)
Hash identifier:          3Atezk3DaCRt8Te9avf3yPP/iiOEqhAn29+vvGI8uvg=
Subject key identifier:   59:83:77:D6:F8:70:EF:6E:7E:64:66:38:4A:F7:77:9F:A2:51:19:DC
Authority key identifier: A7:78:38:D7:F5:41:C6:1D:B0:69:DA:BC:E5:D8:37:09:A7:C2:AE:0D
Certificate issuer:       /CN=A9157D65/serialNumber=A77838D7F541C61DB069DABCE5D83709A7C2AE0D
Certificate serial:       0BD7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft
Manifest number:          0BC8
Signing time:             Thu 16 Apr 2026 18:53:07 +0000
Manifest this update:     Thu 16 Apr 2026 18:53:06 +0000
Manifest next update:     Thu 23 Apr 2026 18:53:06 +0000
Files and hashes:         1: p3g41_VBxh2wadq85dg3CafCrg0.crl (hash: AYzkFqy36+Wq3iuLrJT3OV9G18Dft8vojwkStr2Dd1w=)
                          2: F84C1D9C406111EAA351F913C4F9AE02.roa (hash: ZiiZYbmkg3n6zqgPw8ZXM9niSF2z+ejf3luh9TSJfQY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.crl
                          rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:53:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3031 (0xbd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157D65, serialNumber=A77838D7F541C61DB069DABCE5D83709A7C2AE0D
        Validity
            Not Before: Apr 16 18:53:06 2026 GMT
            Not After : Apr 23 18:53:06 2026 GMT
        Subject: CN=69e13013-1154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:28:05:2b:c9:5c:be:32:66:7e:de:1d:34:d8:
                    d9:a1:18:71:c3:08:f0:25:50:02:e0:d3:7a:b2:57:
                    6e:df:24:a0:c0:ec:f5:ac:d1:f7:fb:15:45:3a:ec:
                    be:1d:b7:62:7d:9b:c8:f6:69:03:00:81:50:de:aa:
                    0b:41:27:b9:72:3f:dd:9b:74:5a:1b:d6:0b:3f:be:
                    62:b4:98:94:02:77:e6:6a:ff:98:07:4f:37:30:94:
                    41:30:41:05:36:a8:f1:71:4c:a7:0f:5f:54:4f:55:
                    33:2d:06:3f:45:82:bb:c9:91:dc:60:a4:59:fe:eb:
                    af:51:7f:cb:d5:35:e5:5c:84:74:82:51:32:52:40:
                    f2:7b:89:b0:47:dc:ab:b9:c7:ad:1f:6e:a4:72:4a:
                    87:5d:c1:47:15:b9:e3:d2:b3:aa:a0:cd:14:ef:2a:
                    f2:a5:62:25:06:6b:ed:83:48:a8:8c:b6:5a:96:c8:
                    6b:a6:f2:b3:da:40:e6:de:19:e2:cf:eb:a8:ed:bc:
                    43:5d:4e:76:f4:50:af:60:f8:95:9a:4b:2f:aa:31:
                    9a:b6:38:61:62:c3:d8:54:d6:08:89:ff:fb:b2:aa:
                    79:2e:1d:26:be:7b:e4:9b:17:f2:16:f3:3f:c9:29:
                    78:6c:bf:03:0f:96:37:36:39:c6:dc:88:b8:8c:c4:
                    3c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:83:77:D6:F8:70:EF:6E:7E:64:66:38:4A:F7:77:9F:A2:51:19:DC
            X509v3 Authority Key Identifier:
                keyid:A7:78:38:D7:F5:41:C6:1D:B0:69:DA:BC:E5:D8:37:09:A7:C2:AE:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3g41_VBxh2wadq85dg3CafCrg0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D65/1A0DA82A406111EAA2BCE512C4F9AE02/p3g41_VBxh2wadq85dg3CafCrg0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:bb:e5:b5:5b:75:cd:f4:84:05:1e:69:f7:08:ff:19:b5:82:
         20:61:c9:05:8d:6b:d1:33:6c:bb:69:f6:6a:35:60:58:c6:85:
         b5:25:82:61:fa:00:59:1e:2b:fb:43:2f:96:c7:41:8e:c3:82:
         7a:cc:2e:fd:3c:23:de:d7:87:f8:df:b2:33:a6:3d:3c:cb:aa:
         9a:cf:e3:7d:1e:2c:a9:d4:b5:f0:b0:3c:9f:83:7c:3b:04:2b:
         75:1b:eb:cd:3d:47:b6:40:50:19:35:44:54:6e:99:c9:ed:89:
         b5:62:dd:a2:c2:d4:e3:cb:1f:c7:05:60:86:56:e9:c3:20:aa:
         06:65:e6:4f:52:e9:70:48:bf:dd:b3:7e:33:b2:07:f2:47:fc:
         94:69:78:5f:a2:6e:05:13:04:67:c4:c2:26:a7:6e:bf:3a:74:
         bd:a8:95:ab:84:68:58:ee:43:64:af:a5:42:32:16:e6:7c:19:
         88:c9:89:40:48:0d:f8:a0:6a:85:ee:23:74:1b:c4:d0:d8:02:
         df:e0:0a:57:45:ab:9a:24:c7:de:3c:ab:38:37:c1:3d:0b:3c:
         85:6f:2f:63:9f:bf:89:a9:9c:2d:e1:69:40:e7:f5:d9:c1:6f:
         82:9a:66:bf:ef:e5:d0:7d:b7:95:d1:73:89:c5:a5:0d:a5:bd:
         fb:cf:f7:37
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTdENjUxMTAvBgNVBAUTKEE3NzgzOEQ3RjU0MUM2MURCMDY5REFCQ0U1RDgzNzA5
QTdDMkFFMEQwHhcNMjYwNDE2MTg1MzA2WhcNMjYwNDIzMTg1MzA2WjAYMRYwFAYD
VQQDEw02OWUxMzAxMy0xMTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmSgFK8lcvjJmft4dNNjZoRhxwwjwJVAC4NN6sldu3ySgwOz1rNH3+xVFOuy+
HbdifZvI9mkDAIFQ3qoLQSe5cj/dm3RaG9YLP75itJiUAnfmav+YB083MJRBMEEF
NqjxcUynD19UT1UzLQY/RYK7yZHcYKRZ/uuvUX/L1TXlXIR0glEyUkDye4mwR9yr
ucetH26kckqHXcFHFbnj0rOqoM0U7yrypWIlBmvtg0iojLZalshrpvKz2kDm3hni
z+uo7bxDXU529FCvYPiVmksvqjGatjhhYsPYVNYIif/7sqp5Lh0mvnvkmxfyFvM/
ySl4bL8DD5Y3NjnG3Ii4jMQ8YQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFmDd9b4
cO9ufmRmOEr3d5+iURncMB8GA1UdIwQYMBaAFKd4ONf1QcYdsGnavOXYNwmnwq4N
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2NS8xQTBEQTgyQTQw
NjExMUVBQTJCQ0U1MTJDNEY5QUUwMi9wM2c0MV9WQnhoMndhZHE4NWRnM0NhZkNy
ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3AzZzQxX1ZCeGgyd2FkcTg1ZGczQ2FmQ3JnMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
N0Q2NS8xQTBEQTgyQTQwNjExMUVBQTJCQ0U1MTJDNEY5QUUwMi9wM2c0MV9WQnho
MndhZHE4NWRnM0NhZkNyZzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAb7vltVt1zfSEBR5p9wj/GbWCIGHJBY1r0TNsu2n2ajVgWMaFtSWCYfoAWR4r
+0MvlsdBjsOCeswu/Twj3teH+N+yM6Y9PMuqms/jfR4sqdS18LA8n4N8OwQrdRvr
zT1HtkBQGTVEVG6Zye2JtWLdosLU48sfxwVghlbpwyCqBmXmT1LpcEi/3bN+M7IH
8kf8lGl4X6JuBRMEZ8TCJqduvzp0vaiVq4RoWO5DZK+lQjIW5nwZiMmJQEgN+KBq
he4jdBvE0NgC3+AKV0WrmiTH3jyrODfBPQs8hW8vY5+/iamcLeFpQOf12cFvgppm
v+/l0H23ldFzicWlDaW9+8/3Nw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:54:58 2026 by rpki-client