Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft
File:                     31OLuqk3tpugC7J7caS3dubkGf4.mft (raw, json)
Hash identifier:          a34EVLBNwgYG0FqZ8Uol8uAD1zqWTo/lGmt5vJtQ/sg=
Subject key identifier:   DE:58:58:3F:14:D2:E3:C2:03:8B:3C:75:1E:2E:D2:3A:77:B5:A5:9B
Authority key identifier: DF:53:8B:BA:A9:37:B6:9B:A0:0B:B2:7B:71:A4:B7:76:E6:E4:19:FE
Certificate issuer:       /CN=A9191170/serialNumber=DF538BBAA937B69BA00BB27B71A4B776E6E419FE
Certificate serial:       0224
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31OLuqk3tpugC7J7caS3dubkGf4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft
Manifest number:          021D
Signing time:             Sun 19 Apr 2026 02:33:25 +0000
Manifest this update:     Sun 19 Apr 2026 02:33:24 +0000
Manifest next update:     Sun 26 Apr 2026 02:33:24 +0000
Files and hashes:         1: 31OLuqk3tpugC7J7caS3dubkGf4.crl (hash: AsjNKG6WR60cwgYx5nvrfVQQR/kzTysR4qJ2QAlJ1Dw=)
                          2: 086823BE07B911F0875CC733C4F9AE02.roa (hash: LwADRNH2zXke5XeuF1Oo6gjD6e4ZUXmZaNArwtimmJA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.crl
                          rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31OLuqk3tpugC7J7caS3dubkGf4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 02:33:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 548 (0x224)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191170, serialNumber=DF538BBAA937B69BA00BB27B71A4B776E6E419FE
        Validity
            Not Before: Apr 19 02:33:24 2026 GMT
            Not After : Apr 26 02:33:24 2026 GMT
        Subject: CN=69e43ef4-efdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:82:98:d5:f4:50:80:41:46:78:69:70:76:cf:
                    b8:78:32:82:e7:ac:37:de:cc:01:9d:bb:cb:e9:81:
                    f1:64:c4:2f:7f:ea:3c:69:7e:0a:30:d2:42:17:60:
                    38:92:17:7b:00:e3:c0:84:af:3b:59:f0:3e:fb:70:
                    ec:54:f1:75:b1:f8:b8:f1:55:f2:40:6f:a0:ab:18:
                    2b:bc:6e:b3:7c:dc:0c:c5:b3:64:ba:b5:8d:e9:b4:
                    22:dd:4b:00:eb:46:c4:be:9d:95:a6:32:41:1c:f5:
                    d0:d2:54:77:57:8c:68:f4:5e:b8:65:e7:9a:14:9a:
                    d3:b7:86:5d:2e:3c:16:07:ac:35:20:6a:9f:1e:61:
                    30:44:42:cc:71:24:09:3f:8c:1c:df:9b:e6:7b:b8:
                    ca:f9:fd:53:72:98:d5:cb:2a:33:5f:dd:6f:bd:49:
                    bf:5f:56:7c:29:af:17:5b:91:f0:1e:4c:61:94:a2:
                    b2:f6:6f:3e:43:77:e6:46:ca:71:c2:56:22:03:c9:
                    ff:38:45:48:5a:7c:fe:9e:ca:9f:8d:e1:89:64:77:
                    92:64:7b:66:63:e6:31:1d:17:cf:cb:8a:a7:4c:82:
                    97:2f:b5:b9:54:8e:a3:b0:f1:8e:18:81:fb:31:8f:
                    9b:3d:4f:88:51:a8:46:aa:23:f9:7e:f1:2b:fc:b6:
                    19:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:58:58:3F:14:D2:E3:C2:03:8B:3C:75:1E:2E:D2:3A:77:B5:A5:9B
            X509v3 Authority Key Identifier:
                keyid:DF:53:8B:BA:A9:37:B6:9B:A0:0B:B2:7B:71:A4:B7:76:E6:E4:19:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31OLuqk3tpugC7J7caS3dubkGf4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191170/F32308C2042A11EE94A84941C4F9AE02/31OLuqk3tpugC7J7caS3dubkGf4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:0b:c8:c2:1d:23:a2:04:4e:cf:24:02:6a:b4:cd:74:e5:d4:
         0f:18:11:8d:d9:11:24:ea:e0:ef:ab:68:67:cd:dc:e1:1b:22:
         e7:1d:45:e1:df:15:ce:f0:4e:67:dd:0b:97:37:2d:a7:93:7e:
         f7:9e:bd:7b:e0:ac:71:59:57:21:75:65:62:0d:40:99:21:40:
         a0:65:c7:13:15:f9:f6:2f:17:f1:c4:f0:b5:0b:3d:ce:20:93:
         fc:55:e2:5d:af:21:d1:8c:47:19:39:c1:aa:c0:ff:4c:ed:03:
         c8:45:78:cc:31:1c:b9:99:a5:eb:20:73:f5:2e:e2:85:6b:c6:
         25:a1:93:53:e0:da:5b:4c:a1:26:ec:22:98:08:db:10:36:3f:
         2f:75:cd:fb:97:c4:b7:c7:d6:8d:7b:09:71:fe:40:55:5d:b8:
         f2:dc:de:16:5f:1a:50:90:32:be:ec:d6:d5:48:dc:e0:23:e2:
         d5:77:21:6d:92:e3:c8:c7:2b:32:74:9f:27:7f:71:ab:d2:1a:
         c3:b7:d3:c0:24:f0:83:75:45:bc:ab:a2:3b:1c:98:94:97:70:
         fa:bc:e2:a4:60:65:4e:ae:57:dc:60:2c:11:ff:0d:db:f6:9f:
         fe:f2:56:23:78:1d:3d:f6:7b:c5:bf:8f:29:bb:b7:24:ff:ed:
         42:45:82:51
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTExNzAxMTAvBgNVBAUTKERGNTM4QkJBQTkzN0I2OUJBMDBCQjI3QjcxQTRCNzc2
RTZFNDE5RkUwHhcNMjYwNDE5MDIzMzI0WhcNMjYwNDI2MDIzMzI0WjAYMRYwFAYD
VQQDEw02OWU0M2VmNC1lZmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA24KY1fRQgEFGeGlwds+4eDKC56w33swBnbvL6YHxZMQvf+o8aX4KMNJCF2A4
khd7AOPAhK87WfA++3DsVPF1sfi48VXyQG+gqxgrvG6zfNwMxbNkurWN6bQi3UsA
60bEvp2VpjJBHPXQ0lR3V4xo9F64ZeeaFJrTt4ZdLjwWB6w1IGqfHmEwRELMcSQJ
P4wc35vme7jK+f1TcpjVyyozX91vvUm/X1Z8Ka8XW5HwHkxhlKKy9m8+Q3fmRspx
wlYiA8n/OEVIWnz+nsqfjeGJZHeSZHtmY+YxHRfPy4qnTIKXL7W5VI6jsPGOGIH7
MY+bPU+IUahGqiP5fvEr/LYZowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN5YWD8U
0uPCA4s8dR4u0jp3taWbMB8GA1UdIwQYMBaAFN9Ti7qpN7aboAuye3Gkt3bm5Bn+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTE3MC9GMzIzMDhDMjA0
MkExMUVFOTRBODQ5NDFDNEY5QUUwMi8zMU9MdXFrM3RwdWdDN0o3Y2FTM2R1YmtH
ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzMxT0x1cWszdHB1Z0M3SjdjYVMzZHVia0dmNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MTE3MC9GMzIzMDhDMjA0MkExMUVFOTRBODQ5NDFDNEY5QUUwMi8zMU9MdXFrM3Rw
dWdDN0o3Y2FTM2R1YmtHZjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZgvIwh0jogROzyQCarTNdOXUDxgRjdkRJOrg76toZ83c4Rsi5x1F4d8VzvBO
Z90Llzctp5N+9569e+CscVlXIXVlYg1AmSFAoGXHExX59i8X8cTwtQs9ziCT/FXi
Xa8h0YxHGTnBqsD/TO0DyEV4zDEcuZml6yBz9S7ihWvGJaGTU+DaW0yhJuwimAjb
EDY/L3XN+5fEt8fWjXsJcf5AVV248tzeFl8aUJAyvuzW1Ujc4CPi1XchbZLjyMcr
MnSfJ39xq9Iaw7fTwCTwg3VFvKuiOxyYlJdw+rzipGBlTq5X3GAsEf8N2/af/vJW
I3gdPfZ7xb+PKbu3JP/tQkWCUQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:22:31 2026 by rpki-client