Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft
File:                     ld96gQDZeVNoc6wP-Z9uRyhSupk.mft (raw, json)
Hash identifier:          CE3kpx7Be4ZFAmSZvqsmRUQXGHkbzLgEw3qJcpVcvaU=
Subject key identifier:   F3:5B:94:6E:30:2A:47:7D:A5:67:E4:2C:AE:7F:27:13:F0:5F:28:56
Authority key identifier: 95:DF:7A:81:00:D9:79:53:68:73:AC:0F:F9:9F:6E:47:28:52:BA:99
Certificate issuer:       /CN=A91987D0/serialNumber=95DF7A8100D979536873AC0FF99F6E472852BA99
Certificate serial:       07B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ld96gQDZeVNoc6wP-Z9uRyhSupk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft
Manifest number:          07AD
Signing time:             Sat 18 Apr 2026 21:21:27 +0000
Manifest this update:     Sat 18 Apr 2026 21:21:26 +0000
Manifest next update:     Sat 25 Apr 2026 21:21:26 +0000
Files and hashes:         1: ld96gQDZeVNoc6wP-Z9uRyhSupk.crl (hash: DJbzkuYky1Fc4wB22q9rjb4N/jOJJIaLq8rn2RStgA0=)
                          2: 02DAC07852C611ED845AB22BC4F9AE02.roa (hash: xUgWZPS3OqCqcDCU2NsD4bCGdV7LPQ4bmn/sE/hHG+0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.crl
                          rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ld96gQDZeVNoc6wP-Z9uRyhSupk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 21:21:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1974 (0x7b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91987D0, serialNumber=95DF7A8100D979536873AC0FF99F6E472852BA99
        Validity
            Not Before: Apr 18 21:21:26 2026 GMT
            Not After : Apr 25 21:21:26 2026 GMT
        Subject: CN=69e3f5d7-dd17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c7:d6:61:40:b9:9e:ea:e6:59:31:3e:f4:26:
                    d6:ca:00:ce:78:ea:06:d1:e1:0c:12:2e:0b:5b:b5:
                    84:f0:fe:df:d4:b0:51:34:11:e1:32:a8:a4:da:1f:
                    33:c9:b4:2e:33:af:b1:2b:2e:87:49:1f:34:14:d9:
                    80:34:fd:a7:33:af:92:58:24:9d:c0:ff:68:ec:c0:
                    41:84:2c:0a:e0:ef:03:4d:2e:c1:d4:3a:8b:b6:90:
                    29:40:fa:35:59:fb:46:e8:58:68:71:37:df:40:6d:
                    3a:e7:2f:19:40:76:fa:7a:09:e6:aa:7f:25:05:cb:
                    0e:35:e7:d7:fd:25:f4:87:a8:29:83:12:33:26:79:
                    3a:23:7c:a9:d3:85:0c:ed:8b:f8:a1:44:ab:39:e4:
                    24:61:6f:e4:ea:e1:b8:5b:0b:e8:2d:15:10:93:e3:
                    30:31:6b:6b:d5:2a:08:82:15:71:8d:94:14:68:c7:
                    ee:94:6a:fb:b2:1f:d2:5f:1b:8c:e6:c9:29:40:1b:
                    c6:d4:a8:14:9e:1e:b9:31:ee:99:81:44:97:86:9e:
                    a7:d1:9b:3e:3e:97:02:73:cc:8b:65:fe:2b:44:a9:
                    b6:b3:a2:68:54:b2:7b:1c:51:9e:d2:c9:9b:11:d3:
                    6f:55:0c:c2:14:c8:37:c9:69:45:2b:58:75:03:b5:
                    74:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:5B:94:6E:30:2A:47:7D:A5:67:E4:2C:AE:7F:27:13:F0:5F:28:56
            X509v3 Authority Key Identifier:
                keyid:95:DF:7A:81:00:D9:79:53:68:73:AC:0F:F9:9F:6E:47:28:52:BA:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ld96gQDZeVNoc6wP-Z9uRyhSupk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:ac:65:ba:32:57:ee:43:14:93:c6:08:23:ea:a4:ea:4a:35:
         e4:96:f7:5b:fd:62:76:62:6a:4b:0a:d9:3f:b6:2a:c6:e7:05:
         4b:77:0e:91:22:e6:2a:3c:23:bc:16:6f:db:17:81:93:e9:db:
         7f:2e:57:bb:4b:d7:87:66:bf:ce:c0:8d:82:a1:ee:82:a4:4e:
         43:4a:97:9a:e5:d3:09:85:c4:17:2b:1d:fd:1d:ce:4e:43:9e:
         fb:40:6d:7c:14:dc:17:8e:1a:8c:d9:9e:f1:89:a9:76:e2:e4:
         87:1f:6e:2f:2d:8b:52:c1:c3:76:15:84:18:e8:a8:d2:18:c0:
         4d:47:6b:03:96:e1:e5:19:c4:98:43:7e:34:d4:cc:aa:52:a6:
         c3:01:18:3a:52:9d:4f:a0:df:6e:cf:be:12:49:dd:f8:c3:ff:
         db:c8:be:a4:80:78:0c:54:fa:a5:75:32:d0:70:49:1f:da:50:
         51:e2:fc:02:49:ca:ae:5e:a4:30:5c:74:97:57:37:da:ab:83:
         31:c4:da:c4:01:a3:8c:40:61:3b:3e:ca:11:27:36:22:c2:b8:
         67:b0:8e:c7:55:49:48:31:fc:61:48:5c:62:8f:c1:62:d9:10:
         26:15:75:53:fa:e3:54:04:2f:0f:c0:12:ff:a2:0c:77:ea:ac:
         e6:ff:b0:55
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB7YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTg3RDAxMTAvBgNVBAUTKDk1REY3QTgxMDBEOTc5NTM2ODczQUMwRkY5OUY2RTQ3
Mjg1MkJBOTkwHhcNMjYwNDE4MjEyMTI2WhcNMjYwNDI1MjEyMTI2WjAYMRYwFAYD
VQQDEw02OWUzZjVkNy1kZDE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1cfWYUC5nurmWTE+9CbWygDOeOoG0eEMEi4LW7WE8P7f1LBRNBHhMqik2h8z
ybQuM6+xKy6HSR80FNmANP2nM6+SWCSdwP9o7MBBhCwK4O8DTS7B1DqLtpApQPo1
WftG6FhocTffQG065y8ZQHb6egnmqn8lBcsONefX/SX0h6gpgxIzJnk6I3yp04UM
7Yv4oUSrOeQkYW/k6uG4WwvoLRUQk+MwMWtr1SoIghVxjZQUaMfulGr7sh/SXxuM
5skpQBvG1KgUnh65Me6ZgUSXhp6n0Zs+PpcCc8yLZf4rRKm2s6JoVLJ7HFGe0smb
EdNvVQzCFMg3yWlFK1h1A7V0TQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPNblG4w
Kkd9pWfkLK5/JxPwXyhWMB8GA1UdIwQYMBaAFJXfeoEA2XlTaHOsD/mfbkcoUrqZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODdEMC8xOEVCMDc1MjQy
QkUxMUVCQkMxRkVDMUZDNEY5QUUwMi9sZDk2Z1FEWmVWTm9jNndQLVo5dVJ5aFN1
cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xkOTZnUURaZVZOb2M2d1AtWjl1UnloU3Vway5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
ODdEMC8xOEVCMDc1MjQyQkUxMUVCQkMxRkVDMUZDNEY5QUUwMi9sZDk2Z1FEWmVW
Tm9jNndQLVo5dVJ5aFN1cGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUqxlujJX7kMUk8YII+qk6ko15Jb3W/1idmJqSwrZP7YqxucFS3cOkSLmKjwj
vBZv2xeBk+nbfy5Xu0vXh2a/zsCNgqHugqROQ0qXmuXTCYXEFysd/R3OTkOe+0Bt
fBTcF44ajNme8YmpduLkhx9uLy2LUsHDdhWEGOio0hjATUdrA5bh5RnEmEN+NNTM
qlKmwwEYOlKdT6Dfbs++Eknd+MP/28i+pIB4DFT6pXUy0HBJH9pQUeL8AknKrl6k
MFx0l1c32quDMcTaxAGjjEBhOz7KESc2IsK4Z7COx1VJSDH8YUhcYo/BYtkQJhV1
U/rjVAQvD8AS/6IMd+qs5v+wVQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 14:20:48 2026 by rpki-client