Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A68C0/6A4A46BAF0D511F08429E12B3B6F56BC/E8Krd5tajbuzlsnlhFgXkwu-Fq4.mft
File:                     E8Krd5tajbuzlsnlhFgXkwu-Fq4.mft (raw, json)
Hash identifier:          vTcsGmFVupf7pEUK4OvP2u+IV034gPq+q7gurXBDUsE=
Subject key identifier:   38:BB:BB:B0:B8:7C:C5:E3:08:7D:F6:2B:9F:C5:34:1E:DF:90:B5:AE
Authority key identifier: 13:C2:AB:77:9B:5A:8D:BB:B3:96:C9:E5:84:58:17:93:0B:BE:16:AE
Certificate issuer:       /CN=A91A68C0/serialNumber=13C2AB779B5A8DBBB396C9E5845817930BBE16AE
Certificate serial:       37
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E8Krd5tajbuzlsnlhFgXkwu-Fq4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A68C0/6A4A46BAF0D511F08429E12B3B6F56BC/E8Krd5tajbuzlsnlhFgXkwu-Fq4.mft
Manifest number:          35
Signing time:             Fri 17 Apr 2026 08:18:59 +0000
Manifest this update:     Fri 17 Apr 2026 08:18:58 +0000
Manifest next update:     Fri 24 Apr 2026 08:18:58 +0000
Files and hashes:         1: E8Krd5tajbuzlsnlhFgXkwu-Fq4.crl (hash: Z6Gi82Jmh33XeK/VnzlefmdYMnseVkezFb5K+niXRvg=)
                          2: 53134072F0E511F09202A4D23F6F56BC.roa (hash: 7QaNcrtRXFfDvmT/IQFQ8jEHpmg7vJSCEBEkxGI5xTM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A68C0/6A4A46BAF0D511F08429E12B3B6F56BC/E8Krd5tajbuzlsnlhFgXkwu-Fq4.crl
                          rsync://rpki.apnic.net/member_repository/A91A68C0/6A4A46BAF0D511F08429E12B3B6F56BC/E8Krd5tajbuzlsnlhFgXkwu-Fq4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E8Krd5tajbuzlsnlhFgXkwu-Fq4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A68C0, serialNumber=13C2AB779B5A8DBBB396C9E5845817930BBE16AE
        Validity
            Not Before: Apr 17 08:18:58 2026 GMT
            Not After : Apr 24 08:18:58 2026 GMT
        Subject: CN=69e1ecf3-161e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:45:03:65:20:78:c8:5d:6d:f1:a1:71:34:1d:
                    0d:47:2b:2d:af:fa:3f:6c:af:2d:d7:5b:a9:0a:c5:
                    6e:ee:34:43:bc:b8:3c:ee:0a:06:36:70:0c:0e:a9:
                    45:c8:6f:65:0d:00:a5:b5:91:d7:cf:02:b9:fe:49:
                    12:a4:6f:e2:de:7a:32:9a:4e:c9:17:26:d9:f1:74:
                    ec:3c:d9:95:58:75:cf:5a:9e:1d:e2:a5:a8:98:3a:
                    6a:ab:74:5c:dc:e7:d3:54:64:07:78:f6:5e:e5:1e:
                    d4:da:d9:a0:b0:43:b0:e2:29:dd:01:8c:cb:c5:6c:
                    91:0a:de:75:b0:4a:7d:21:42:eb:e0:e9:18:c5:de:
                    86:52:7d:92:76:ee:ab:df:ab:33:87:7e:e9:7a:23:
                    03:3e:4e:d2:48:8f:03:0b:c1:34:5a:a9:66:50:77:
                    3a:a2:7e:d3:cc:6a:24:06:dc:03:60:56:db:97:45:
                    9e:b3:6b:bd:64:81:af:cf:f3:50:d5:5b:f4:80:0b:
                    a6:4f:11:98:2c:5a:fd:5a:dc:ca:00:b1:b9:9f:f9:
                    a9:c0:4b:e8:c8:fb:16:bc:0e:92:38:a2:30:97:68:
                    87:4d:fe:96:c4:f4:d7:e3:d0:ca:6e:5a:1a:79:c7:
                    72:4f:d1:b1:82:5c:7b:1f:45:9f:e8:50:08:63:12:
                    aa:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:BB:BB:B0:B8:7C:C5:E3:08:7D:F6:2B:9F:C5:34:1E:DF:90:B5:AE
            X509v3 Authority Key Identifier:
                keyid:13:C2:AB:77:9B:5A:8D:BB:B3:96:C9:E5:84:58:17:93:0B:BE:16:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A68C0/6A4A46BAF0D511F08429E12B3B6F56BC/E8Krd5tajbuzlsnlhFgXkwu-Fq4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E8Krd5tajbuzlsnlhFgXkwu-Fq4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A68C0/6A4A46BAF0D511F08429E12B3B6F56BC/E8Krd5tajbuzlsnlhFgXkwu-Fq4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:6c:7a:db:d9:4e:d2:bf:c0:38:d5:d3:9c:8b:b3:17:bb:e4:
         ae:41:21:bc:ba:75:f7:96:f8:a6:cf:b4:e5:1b:a5:55:24:35:
         34:a5:ae:e9:b1:56:1c:4f:fa:cb:eb:36:0b:77:b6:ba:8b:54:
         f2:9f:cc:20:46:c4:56:d2:6b:da:59:56:03:d6:6a:de:4b:d7:
         1c:36:a8:b8:59:39:a1:01:24:e5:4c:2a:88:5e:c7:cc:ff:e7:
         d2:4a:ac:ad:bd:9a:59:69:e4:5f:16:86:fa:0d:6a:53:d6:85:
         33:7f:c6:16:7d:17:3d:db:a1:11:b2:f8:dd:c1:b2:9f:97:2e:
         30:4a:6b:d7:6a:e0:6a:27:a9:33:e3:a3:99:90:bd:e1:9d:0d:
         80:32:08:63:1a:f8:f1:0a:02:f1:a2:7b:77:fa:c8:86:c5:2e:
         aa:73:73:61:f5:3d:9b:cd:c4:3f:26:f9:e3:d1:f8:ef:14:ed:
         0a:f6:93:59:bc:58:3a:55:8f:25:e0:fd:87:ca:cb:9c:34:f4:
         d9:58:84:5e:97:5d:d0:11:95:8a:42:ef:90:75:4e:03:1c:a2:
         47:e1:b0:ab:f7:9b:59:b8:d8:2c:7b:45:a5:45:80:b4:76:2c:
         50:fe:6b:8e:78:b8:4c:35:de:57:82:d5:92:13:d7:77:2e:95:
         b8:5e:06:29
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
NjhDMDExMC8GA1UEBRMoMTNDMkFCNzc5QjVBOERCQkIzOTZDOUU1ODQ1ODE3OTMw
QkJFMTZBRTAeFw0yNjA0MTcwODE4NThaFw0yNjA0MjQwODE4NThaMBgxFjAUBgNV
BAMTDTY5ZTFlY2YzLTE2MWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCoRQNlIHjIXW3xoXE0HQ1HKy2v+j9sry3XW6kKxW7uNEO8uDzuCgY2cAwOqUXI
b2UNAKW1kdfPArn+SRKkb+LeejKaTskXJtnxdOw82ZVYdc9anh3ipaiYOmqrdFzc
59NUZAd49l7lHtTa2aCwQ7DiKd0BjMvFbJEK3nWwSn0hQuvg6RjF3oZSfZJ27qvf
qzOHful6IwM+TtJIjwMLwTRaqWZQdzqiftPMaiQG3ANgVtuXRZ6za71kga/P81DV
W/SAC6ZPEZgsWv1a3MoAsbmf+anAS+jI+xa8DpI4ojCXaIdN/pbE9Nfj0MpuWhp5
x3JP0bGCXHsfRZ/oUAhjEqqvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUOLu7sLh8
xeMIffYrn8U0Ht+Qta4wHwYDVR0jBBgwFoAUE8Krd5tajbuzlsnlhFgXkwu+Fq4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2OEMwLzZBNEE0NkJBRjBE
NTExRjA4NDI5RTEyQjNCNkY1NkJDL0U4S3JkNXRhamJ1emxzbmxoRmdYa3d1LUZx
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvRThLcmQ1dGFqYnV6bHNubGhGZ1hrd3UtRnE0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2
OEMwLzZBNEE0NkJBRjBENTExRjA4NDI5RTEyQjNCNkY1NkJDL0U4S3JkNXRhamJ1
emxzbmxoRmdYa3d1LUZxNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBxbHrb2U7Sv8A41dOci7MXu+SuQSG8unX3lvimz7TlG6VVJDU0pa7psVYcT/rL
6zYLd7a6i1Tyn8wgRsRW0mvaWVYD1mreS9ccNqi4WTmhASTlTCqIXsfM/+fSSqyt
vZpZaeRfFob6DWpT1oUzf8YWfRc926ERsvjdwbKfly4wSmvXauBqJ6kz46OZkL3h
nQ2AMghjGvjxCgLxont3+siGxS6qc3Nh9T2bzcQ/Jvnj0fjvFO0K9pNZvFg6VY8l
4P2HysucNPTZWIRel13QEZWKQu+QdU4DHKJH4bCr95tZuNgse0WlRYC0dixQ/muO
eLhMNd5XgtWSE9d3LpW4XgYp
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:29:59 2026 by rpki-client