Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.mft
File:                     ipvaaFOfcVjLATcgqZNvJkuaU3s.mft (raw, json)
Hash identifier:          w88wxBi2iroG4GK7cS5JnvWuKZJ/ncJeIdF8CDM4bBk=
Subject key identifier:   31:AE:E1:28:30:33:92:21:6A:3C:4E:A1:AD:D4:A1:8A:60:89:99:69
Authority key identifier: 8A:9B:DA:68:53:9F:71:58:CB:01:37:20:A9:93:6F:26:4B:9A:53:7B
Certificate issuer:       /CN=A91A1857/serialNumber=8A9BDA68539F7158CB013720A9936F264B9A537B
Certificate serial:       0DE6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ipvaaFOfcVjLATcgqZNvJkuaU3s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.mft
Manifest number:          0DD3
Signing time:             Sat 18 Apr 2026 17:48:06 +0000
Manifest this update:     Sat 18 Apr 2026 17:48:06 +0000
Manifest next update:     Sat 25 Apr 2026 17:48:06 +0000
Files and hashes:         1: ipvaaFOfcVjLATcgqZNvJkuaU3s.crl (hash: p87migbIZ5pH6gPuXLeFEQcHzrjULZhO4/D9LiOAicM=)
                          2: F23EB988E9A811E9864E3674C4F9AE02.roa (hash: h8Yq1El+9tmCY/aSU/vFeXJAQYEI+HLkPqW4KvJG1Ms=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.crl
                          rsync://rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ipvaaFOfcVjLATcgqZNvJkuaU3s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 17:48:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3558 (0xde6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1857, serialNumber=8A9BDA68539F7158CB013720A9936F264B9A537B
        Validity
            Not Before: Apr 18 17:48:06 2026 GMT
            Not After : Apr 25 17:48:06 2026 GMT
        Subject: CN=69e3c3d6-2b59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cd:51:25:a0:f5:45:b8:20:16:57:5b:2f:60:
                    af:86:24:bf:16:25:cb:29:3e:d8:fd:24:a8:ee:ee:
                    6e:48:f2:a4:eb:43:89:da:13:df:61:bd:04:6a:da:
                    ab:3c:07:31:3c:88:aa:13:fb:c1:2d:0e:97:40:52:
                    03:1d:e2:f1:53:86:0f:c6:7e:de:0d:5e:db:67:df:
                    c6:03:92:70:73:e3:07:d3:4d:89:d6:11:3f:9d:ee:
                    ee:bd:01:7f:12:2e:b0:03:96:98:6f:63:fb:5d:d2:
                    d9:8b:72:bb:49:ce:70:ef:14:ca:0c:22:46:7e:a4:
                    6c:e8:83:eb:24:19:cf:cf:67:a4:b8:a5:4b:08:7f:
                    73:1d:eb:13:f9:0b:29:3b:00:5e:48:f5:67:7e:54:
                    15:08:a8:5d:c4:8a:e1:45:40:35:c9:5b:86:08:fa:
                    de:53:9b:68:52:32:d6:a4:71:0d:91:57:0f:d2:f8:
                    1d:1a:56:6d:67:d9:37:2a:df:f8:62:d8:a6:ff:ad:
                    a8:31:17:47:c7:b1:88:e0:e6:a0:a5:17:8b:62:59:
                    1e:cc:7b:ff:8d:5c:0c:4a:7d:6d:7c:53:a9:54:e4:
                    88:4f:08:1d:7f:0b:c8:2d:ea:c5:d9:50:1f:01:a7:
                    cc:5b:df:5d:bb:dd:09:d2:fe:a4:0f:4e:ee:47:96:
                    95:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:AE:E1:28:30:33:92:21:6A:3C:4E:A1:AD:D4:A1:8A:60:89:99:69
            X509v3 Authority Key Identifier:
                keyid:8A:9B:DA:68:53:9F:71:58:CB:01:37:20:A9:93:6F:26:4B:9A:53:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ipvaaFOfcVjLATcgqZNvJkuaU3s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:4f:f7:c1:96:ea:15:65:41:f9:de:84:d5:cf:36:d0:0b:f8:
         a6:b4:7a:15:c9:8c:1f:3c:ad:c4:25:ad:c9:e9:db:9e:f7:c4:
         8d:73:16:5a:3a:c9:ee:4f:ff:59:d5:ae:24:2b:65:b0:1f:b5:
         2e:64:4f:22:4d:e2:a7:a0:a9:a2:6d:c7:6f:f3:9f:d5:41:de:
         8f:e7:31:69:1f:aa:f9:34:ac:ba:ee:16:7a:8a:dc:45:5c:c6:
         09:3e:8f:36:2a:be:12:4b:cb:d6:8a:7c:82:65:77:19:02:e6:
         c1:3a:fd:5f:5a:bb:db:31:45:58:5c:0b:2b:51:df:6a:42:84:
         66:98:10:00:e2:7f:be:3a:20:f7:9f:63:8c:c2:91:74:d2:5f:
         f9:52:88:ff:79:75:f4:ce:95:b4:6f:4b:48:c1:f3:ee:7e:05:
         76:83:c0:98:b1:e1:e8:ec:c8:ae:ab:91:96:51:d4:30:32:56:
         41:a6:f4:38:2d:07:9b:aa:fc:3d:d8:d0:97:0d:bb:d6:18:fc:
         9f:62:83:70:b6:85:fb:bb:24:f0:01:12:0d:e8:0b:9f:4d:9b:
         a8:2d:f7:f0:76:6b:fe:a1:83:b9:33:94:fd:40:99:66:28:25:
         a1:22:cf:63:4c:e6:34:11:d5:41:ed:49:21:d7:79:07:2a:c0:
         3c:4a:cc:1e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTE4NTcxMTAvBgNVBAUTKDhBOUJEQTY4NTM5RjcxNThDQjAxMzcyMEE5OTM2RjI2
NEI5QTUzN0IwHhcNMjYwNDE4MTc0ODA2WhcNMjYwNDI1MTc0ODA2WjAYMRYwFAYD
VQQDEw02OWUzYzNkNi0yYjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwc1RJaD1RbggFldbL2CvhiS/FiXLKT7Y/SSo7u5uSPKk60OJ2hPfYb0Eatqr
PAcxPIiqE/vBLQ6XQFIDHeLxU4YPxn7eDV7bZ9/GA5Jwc+MH002J1hE/ne7uvQF/
Ei6wA5aYb2P7XdLZi3K7Sc5w7xTKDCJGfqRs6IPrJBnPz2ekuKVLCH9zHesT+Qsp
OwBeSPVnflQVCKhdxIrhRUA1yVuGCPreU5toUjLWpHENkVcP0vgdGlZtZ9k3Kt/4
Ytim/62oMRdHx7GI4OagpReLYlkezHv/jVwMSn1tfFOpVOSITwgdfwvILerF2VAf
AafMW99du90J0v6kD07uR5aVMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDGu4Sgw
M5IhajxOoa3UoYpgiZlpMB8GA1UdIwQYMBaAFIqb2mhTn3FYywE3IKmTbyZLmlN7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTg1Ny9GMTMwN0I3NERB
RDcxMUU5OUY4Q0FDNzhDNEY5QUUwMi9pcHZhYUZPZmNWakxBVGNncVpOdkprdWFV
M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lwdmFhRk9mY1ZqTEFUY2dxWk52Smt1YVUzcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MTg1Ny9GMTMwN0I3NERBRDcxMUU5OUY4Q0FDNzhDNEY5QUUwMi9pcHZhYUZPZmNW
akxBVGNncVpOdkprdWFVM3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkk/3wZbqFWVB+d6E1c820Av4prR6FcmMHzytxCWtyenbnvfEjXMWWjrJ7k//
WdWuJCtlsB+1LmRPIk3ip6Cpom3Hb/Of1UHej+cxaR+q+TSsuu4WeorcRVzGCT6P
Niq+EkvL1op8gmV3GQLmwTr9X1q72zFFWFwLK1HfakKEZpgQAOJ/vjog959jjMKR
dNJf+VKI/3l19M6VtG9LSMHz7n4FdoPAmLHh6OzIrquRllHUMDJWQab0OC0Hm6r8
PdjQlw271hj8n2KDcLaF+7sk8AESDegLn02bqC338HZr/qGDuTOU/UCZZigloSLP
Y0zmNBHVQe1JIdd5ByrAPErMHg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 14:22:12 2026 by rpki-client