Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft
File:                     fnHZ0UYSF7D4LAexXE8CnyZySYo.mft (raw, json)
Hash identifier:          aL8NFzYpCRjt/sc10fzEwM6p8NVbSbNIh42QUGw9Des=
Subject key identifier:   6F:E4:BF:2E:ED:23:C2:54:77:A1:C4:78:87:3E:79:C2:28:32:B8:E7
Authority key identifier: 7E:71:D9:D1:46:12:17:B0:F8:2C:07:B1:5C:4F:02:9F:26:72:49:8A
Certificate issuer:       /CN=A91A11A1/serialNumber=7E71D9D1461217B0F82C07B15C4F029F2672498A
Certificate serial:       01BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft
Manifest number:          01AF
Signing time:             Fri 17 Apr 2026 03:47:40 +0000
Manifest this update:     Fri 17 Apr 2026 03:47:40 +0000
Manifest next update:     Fri 24 Apr 2026 03:47:40 +0000
Files and hashes:         1: fnHZ0UYSF7D4LAexXE8CnyZySYo.crl (hash: yQDzO4/z6YyI2P2BaJgNil+rkzUavOegGw38VvprQDA=)
                          2: FA66BA00BD1311EEBC015623C4F9AE02.roa (hash: qJJvsPUngd7sU+FxNj5+ieKU5yZcXa/zUUo8JSHAZ60=)
                          3: F57B503EB05F11EEB6F38532C4F9AE02.roa (hash: Cf+f/rErS+gscIQrLTVw0RlWMSXZG8pgxu+sjMSHC6U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.crl
                          rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:47:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 444 (0x1bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A11A1, serialNumber=7E71D9D1461217B0F82C07B15C4F029F2672498A
        Validity
            Not Before: Apr 17 03:47:40 2026 GMT
            Not After : Apr 24 03:47:40 2026 GMT
        Subject: CN=69e1ad5c-066a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:eb:d1:ff:1b:ba:41:84:62:6e:93:bd:f0:25:
                    21:cf:63:5e:35:1b:72:d2:b5:59:7f:ac:2b:12:fa:
                    37:e2:bf:30:d1:08:44:de:ab:c9:2b:2e:a9:5d:73:
                    0b:3e:fa:a7:fd:bd:71:54:63:d4:74:61:01:2c:1f:
                    5e:62:a1:b5:28:42:2e:c6:a5:9e:41:f0:00:4d:8e:
                    dd:98:ca:ed:4a:9b:ec:38:5e:6f:a3:03:7e:0f:28:
                    91:5e:63:12:5e:79:59:b8:ff:25:b9:ed:af:8b:e5:
                    da:6f:8a:b9:e7:7d:7a:6d:ab:55:a1:17:92:18:27:
                    de:5f:86:94:86:2f:78:96:cc:73:c1:bb:7d:b7:37:
                    38:ef:b8:8e:34:78:e9:3d:91:4e:fa:2b:ab:b4:b0:
                    d6:1d:3a:24:03:bd:d9:a5:65:50:2e:e3:71:96:1a:
                    20:88:97:9e:eb:e7:b3:9e:40:c3:93:68:5c:04:13:
                    58:7e:59:5b:30:5c:8f:5a:a3:97:53:b2:f0:fa:1e:
                    23:97:6c:7d:94:ab:62:fa:81:df:fb:ff:33:25:80:
                    12:19:c6:65:1d:c6:79:39:7e:83:d1:f2:20:be:53:
                    df:6d:08:91:2a:5c:f5:77:b0:e9:04:8f:2b:1f:8c:
                    66:56:d0:1a:ae:ba:68:e3:8b:68:22:a1:6e:b5:6b:
                    9a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E4:BF:2E:ED:23:C2:54:77:A1:C4:78:87:3E:79:C2:28:32:B8:E7
            X509v3 Authority Key Identifier:
                keyid:7E:71:D9:D1:46:12:17:B0:F8:2C:07:B1:5C:4F:02:9F:26:72:49:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:0a:d7:59:14:26:80:de:03:47:51:87:72:b6:45:79:96:15:
         e9:0e:c3:d5:e8:97:7d:1a:67:d3:73:e7:58:77:f4:50:02:25:
         ab:58:ee:d9:e5:c7:85:92:9b:67:c3:1c:99:f6:df:6a:29:1f:
         85:54:85:8e:3a:eb:fc:93:86:bb:b9:a9:c3:2e:db:b3:e9:07:
         a5:19:49:48:c7:9a:7f:b8:54:d7:f2:d5:e0:4a:4e:cf:a2:8b:
         f4:39:65:8c:73:4f:af:40:a6:55:79:89:e4:9c:18:33:46:6a:
         46:66:09:a7:ac:a4:9b:b4:4d:f9:ce:49:41:b6:dc:a1:ba:e6:
         ea:5f:ce:ac:b6:15:d6:c2:a3:db:72:cc:a0:c9:68:4e:65:15:
         e3:6b:46:c9:8e:41:7b:84:09:9d:db:90:17:b6:5c:0d:54:cc:
         23:3f:02:8f:ab:47:bc:3f:8b:7b:40:f6:cd:28:b1:f2:b1:f5:
         fa:eb:fb:34:36:02:74:3f:0f:1c:7c:30:e7:4f:9c:47:1b:35:
         59:41:1d:51:1a:0f:f5:8b:26:a2:db:c5:ae:e3:88:57:ed:68:
         25:d5:ca:77:c3:e1:ed:a8:8a:9e:6b:e6:1e:d6:a3:a1:ab:85:
         ac:a2:50:30:18:6d:86:ea:ea:71:31:21:70:0d:0d:84:1b:f7:
         39:18:f4:4b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTExQTExMTAvBgNVBAUTKDdFNzFEOUQxNDYxMjE3QjBGODJDMDdCMTVDNEYwMjlG
MjY3MjQ5OEEwHhcNMjYwNDE3MDM0NzQwWhcNMjYwNDI0MDM0NzQwWjAYMRYwFAYD
VQQDEw02OWUxYWQ1Yy0wNjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz+vR/xu6QYRibpO98CUhz2NeNRty0rVZf6wrEvo34r8w0QhE3qvJKy6pXXML
Pvqn/b1xVGPUdGEBLB9eYqG1KEIuxqWeQfAATY7dmMrtSpvsOF5vowN+DyiRXmMS
XnlZuP8lue2vi+Xab4q55316batVoReSGCfeX4aUhi94lsxzwbt9tzc477iONHjp
PZFO+iurtLDWHTokA73ZpWVQLuNxlhogiJee6+eznkDDk2hcBBNYfllbMFyPWqOX
U7Lw+h4jl2x9lKti+oHf+/8zJYASGcZlHcZ5OX6D0fIgvlPfbQiRKlz1d7DpBI8r
H4xmVtAarrpo44toIqFutWuasQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG/kvy7t
I8JUd6HEeIc+ecIoMrjnMB8GA1UdIwQYMBaAFH5x2dFGEhew+CwHsVxPAp8mckmK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTFBMS9BOUI3M0NBOEIw
NUYxMUVFOTlDNjU0NzdDNEY5QUUwMi9mbkhaMFVZU0Y3RDRMQWV4WEU4Q255WnlT
WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZuSFowVVlTRjdENExBZXhYRThDbnlaeVNZby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MTFBMS9BOUI3M0NBOEIwNUYxMUVFOTlDNjU0NzdDNEY5QUUwMi9mbkhaMFVZU0Y3
RDRMQWV4WEU4Q255WnlTWW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeQrXWRQmgN4DR1GHcrZFeZYV6Q7D1eiXfRpn03PnWHf0UAIlq1ju2eXHhZKb
Z8McmfbfaikfhVSFjjrr/JOGu7mpwy7bs+kHpRlJSMeaf7hU1/LV4EpOz6KL9Dll
jHNPr0CmVXmJ5JwYM0ZqRmYJp6ykm7RN+c5JQbbcobrm6l/OrLYV1sKj23LMoMlo
TmUV42tGyY5Be4QJnduQF7ZcDVTMIz8Cj6tHvD+Le0D2zSix8rH1+uv7NDYCdD8P
HHww50+cRxs1WUEdURoP9YsmotvFruOIV+1oJdXKd8Ph7aiKnmvmHtajoauFrKJQ
MBhthurqcTEhcA0NhBv3ORj0Sw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:25:57 2026 by rpki-client