Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.mft
File:                     nMiKhtCzfs7o1XZX75l4lTJoDN8.mft (raw, json)
Hash identifier:          m75HiyB5PBIXFhZ9Z3HNRzio3UyUQfaiImHV7k5LZM8=
Subject key identifier:   47:6C:B8:13:F0:64:BA:AF:AE:C8:22:52:45:A5:90:D3:BF:18:32:C5
Authority key identifier: 9C:C8:8A:86:D0:B3:7E:CE:E8:D5:76:57:EF:99:78:95:32:68:0C:DF
Certificate issuer:       /CN=A91A4B39/serialNumber=9CC88A86D0B37ECEE8D57657EF99789532680CDF
Certificate serial:       01BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nMiKhtCzfs7o1XZX75l4lTJoDN8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.mft
Manifest number:          01B6
Signing time:             Sun 19 Apr 2026 03:43:51 +0000
Manifest this update:     Sun 19 Apr 2026 03:43:50 +0000
Manifest next update:     Sun 26 Apr 2026 03:43:50 +0000
Files and hashes:         1: nMiKhtCzfs7o1XZX75l4lTJoDN8.crl (hash: zCHFno8+yJ2h2M5C8ZlVAlQ8Qxu8cGRqCoVYxf0Zv8s=)
                          2: AA778F4CAF8A11EEB167DB64C4F9AE02.roa (hash: fwuxGVlJEIbfWm/zAmVn2KsgJ1NWhQLxSqXc+gc1DUU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.crl
                          rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nMiKhtCzfs7o1XZX75l4lTJoDN8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 03:43:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 444 (0x1bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4B39, serialNumber=9CC88A86D0B37ECEE8D57657EF99789532680CDF
        Validity
            Not Before: Apr 19 03:43:50 2026 GMT
            Not After : Apr 26 03:43:50 2026 GMT
        Subject: CN=69e44f77-d76b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6c:7d:31:34:de:9d:be:d2:1e:47:2b:5e:ed:
                    5f:33:62:06:7a:76:3b:f4:68:6e:0e:34:37:ac:c0:
                    c6:0b:39:64:95:76:dd:97:96:67:0b:48:50:ec:2a:
                    2d:6a:7b:5a:8a:cd:c5:55:3c:dc:06:18:0c:9c:7f:
                    0f:e3:a4:07:61:ad:10:76:ad:ed:08:63:9b:45:c7:
                    ca:5f:72:75:9c:cf:37:94:b1:d5:a6:38:03:bc:52:
                    37:3e:4e:f3:1b:1c:6d:7e:8e:23:a7:4c:d3:b0:e4:
                    46:3a:83:74:62:19:96:19:dd:63:0d:4b:ad:82:50:
                    ac:fa:fa:c2:e3:3d:4e:25:e9:ea:93:db:03:77:d4:
                    b6:b2:c2:82:e3:be:3c:2a:25:13:62:3a:e7:ee:7d:
                    71:31:a2:ce:d0:f4:32:85:dc:2f:51:21:3a:f7:40:
                    14:66:82:a2:ac:6f:f5:25:b6:d5:e3:3f:ce:88:8f:
                    18:5d:8b:66:c2:56:a9:69:66:c0:27:12:33:8b:62:
                    e7:45:4a:64:62:39:6f:ac:3f:bf:ef:da:52:d6:3e:
                    79:26:12:bb:15:f2:98:d9:43:ca:3f:dc:1d:82:c2:
                    6b:55:c2:cf:40:58:1b:ef:b1:50:04:81:a6:0b:95:
                    a9:a8:ee:3f:d5:1d:a1:92:ce:91:ba:4a:61:87:8d:
                    af:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:6C:B8:13:F0:64:BA:AF:AE:C8:22:52:45:A5:90:D3:BF:18:32:C5
            X509v3 Authority Key Identifier:
                keyid:9C:C8:8A:86:D0:B3:7E:CE:E8:D5:76:57:EF:99:78:95:32:68:0C:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nMiKhtCzfs7o1XZX75l4lTJoDN8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B39/FEF549E8AF1611EE8C48A74DC4F9AE02/nMiKhtCzfs7o1XZX75l4lTJoDN8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:e4:a4:ac:9c:69:03:4e:85:c9:6b:cb:bb:44:07:1f:99:a5:
         83:5d:23:a2:0c:a1:92:cf:4a:03:54:e4:aa:41:3a:2e:78:32:
         96:43:a0:36:34:aa:e6:cd:c7:01:b8:9f:24:56:fc:6f:7e:14:
         7d:06:a3:1d:12:e5:6b:33:3a:b0:fb:4f:55:16:c4:02:b1:0a:
         c9:2a:73:b5:fe:08:9e:89:12:3c:8b:0b:35:01:0b:31:4b:a2:
         11:10:c4:9c:4d:27:48:15:03:7e:78:17:c5:fe:ff:d9:e7:f1:
         3c:76:4b:e8:85:be:b4:04:8e:d5:5e:7e:ca:91:06:47:4f:20:
         0a:f8:7a:82:54:0e:47:69:01:93:25:92:78:53:91:d5:dc:f5:
         ae:c5:4a:aa:47:27:ed:ee:7a:1e:4c:72:eb:83:c3:2c:02:c9:
         27:47:38:98:d3:6f:f4:b9:de:29:8a:bc:8f:f9:11:3b:08:da:
         1c:fb:91:4d:91:2a:5c:1e:bc:64:bf:3a:c2:f8:82:ce:46:17:
         0f:a2:45:07:fd:1d:86:92:e7:be:e1:63:c4:45:9a:91:53:fd:
         e9:1e:a0:72:0f:63:2b:e5:15:63:87:18:ee:44:bf:d9:00:de:
         0b:8d:eb:bb:cf:b1:c2:88:61:d9:d5:a2:de:5c:ce:03:ce:a0:
         c7:2f:b2:83
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTRCMzkxMTAvBgNVBAUTKDlDQzg4QTg2RDBCMzdFQ0VFOEQ1NzY1N0VGOTk3ODk1
MzI2ODBDREYwHhcNMjYwNDE5MDM0MzUwWhcNMjYwNDI2MDM0MzUwWjAYMRYwFAYD
VQQDEw02OWU0NGY3Ny1kNzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmmx9MTTenb7SHkcrXu1fM2IGenY79GhuDjQ3rMDGCzlklXbdl5ZnC0hQ7Cot
antais3FVTzcBhgMnH8P46QHYa0Qdq3tCGObRcfKX3J1nM83lLHVpjgDvFI3Pk7z
Gxxtfo4jp0zTsORGOoN0YhmWGd1jDUutglCs+vrC4z1OJenqk9sDd9S2ssKC4748
KiUTYjrn7n1xMaLO0PQyhdwvUSE690AUZoKirG/1JbbV4z/OiI8YXYtmwlapaWbA
JxIzi2LnRUpkYjlvrD+/79pS1j55JhK7FfKY2UPKP9wdgsJrVcLPQFgb77FQBIGm
C5WpqO4/1R2hks6Rukphh42v1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEdsuBPw
ZLqvrsgiUkWlkNO/GDLFMB8GA1UdIwQYMBaAFJzIiobQs37O6NV2V++ZeJUyaAzf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEIzOS9GRUY1NDlFOEFG
MTYxMUVFOEM0OEE3NERDNEY5QUUwMi9uTWlLaHRDemZzN28xWFpYNzVsNGxUSm9E
TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25NaUtodEN6ZnM3bzFYWlg3NWw0bFRKb0ROOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NEIzOS9GRUY1NDlFOEFGMTYxMUVFOEM0OEE3NERDNEY5QUUwMi9uTWlLaHRDemZz
N28xWFpYNzVsNGxUSm9ETjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUuSkrJxpA06FyWvLu0QHH5mlg10jogyhks9KA1TkqkE6LngylkOgNjSq5s3H
AbifJFb8b34UfQajHRLlazM6sPtPVRbEArEKySpztf4InokSPIsLNQELMUuiERDE
nE0nSBUDfngXxf7/2efxPHZL6IW+tASO1V5+ypEGR08gCvh6glQOR2kBkyWSeFOR
1dz1rsVKqkcn7e56Hkxy64PDLALJJ0c4mNNv9LneKYq8j/kROwjaHPuRTZEqXB68
ZL86wviCzkYXD6JFB/0dhpLnvuFjxEWakVP96R6gcg9jK+UVY4cY7kS/2QDeC43r
u8+xwohh2dWi3lzOA86gxy+ygw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 14:20:13 2026 by rpki-client