Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft
File:                     3SQy2K1rs-npllWAu8bSIhkHs_c.mft (raw, json)
Hash identifier:          aCLIe1NWNEjDyoR+WWISLWbCGpmtVhi5IW2elxAQxRQ=
Subject key identifier:   DF:D3:47:9B:CB:82:0D:CF:52:26:55:F9:C3:AC:3B:28:AA:38:76:FD
Authority key identifier: DD:24:32:D8:AD:6B:B3:E9:E9:96:55:80:BB:C6:D2:22:19:07:B3:F7
Certificate issuer:       /CN=A91AAE2E/serialNumber=DD2432D8AD6BB3E9E9965580BBC6D2221907B3F7
Certificate serial:       0188
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft
Manifest number:          017F
Signing time:             Fri 17 Apr 2026 04:17:59 +0000
Manifest this update:     Fri 17 Apr 2026 04:17:59 +0000
Manifest next update:     Fri 24 Apr 2026 04:17:59 +0000
Files and hashes:         1: 3SQy2K1rs-npllWAu8bSIhkHs_c.crl (hash: kDcQLKHedV7aPzSEFWQwyIIXje2EECcbzeS1x6XJb44=)
                          2: 121E99A8F21911EE95F21158C4F9AE02.roa (hash: opYVyfVrf8nOteK7/xjEMUl4M6X/BkvRe3zd604oEu4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.crl
                          rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:17:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 392 (0x188)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AAE2E, serialNumber=DD2432D8AD6BB3E9E9965580BBC6D2221907B3F7
        Validity
            Not Before: Apr 17 04:17:59 2026 GMT
            Not After : Apr 24 04:17:59 2026 GMT
        Subject: CN=69e1b477-1ddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d1:59:d2:16:98:c7:ed:02:7f:ff:e6:a7:c2:
                    7a:88:05:8f:36:30:47:cd:d2:82:28:dc:4c:6c:f7:
                    88:2d:51:a6:dd:1b:9c:d7:f5:87:1d:97:bd:66:13:
                    f0:3b:c2:e1:2f:f8:5b:1e:b9:b8:91:7f:9d:96:d4:
                    0c:f0:74:fc:47:c2:57:99:58:68:fd:68:4a:9a:61:
                    b2:58:db:24:e7:ab:2f:61:b5:c8:1d:54:8a:3d:ca:
                    df:d0:fe:4f:f6:20:33:ce:5a:95:86:81:5f:ac:5b:
                    cf:31:92:d9:4b:47:20:58:ce:35:b3:91:35:1a:90:
                    ff:80:d2:6c:60:d5:2c:38:f8:3a:98:87:9b:8c:5d:
                    c5:41:40:cf:3a:2a:6a:3f:cd:a2:ca:2a:b5:52:00:
                    45:aa:10:3f:6f:5b:00:a2:64:c8:2b:30:e6:f1:ec:
                    dc:6f:88:44:02:82:32:ee:b4:c9:ec:26:31:24:b4:
                    dc:f9:18:18:9c:57:90:ea:01:d2:28:2e:e2:cc:f5:
                    84:f8:ca:50:77:50:15:dd:bb:fc:bf:82:9e:1a:a1:
                    ce:05:1a:ed:7d:bc:7b:0e:b2:13:55:bc:53:8f:59:
                    b5:1a:57:b5:ba:fd:f0:91:66:98:8d:15:ba:8e:a3:
                    65:1e:d5:f2:58:96:a9:c2:aa:f3:ce:fe:f0:1f:78:
                    c9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D3:47:9B:CB:82:0D:CF:52:26:55:F9:C3:AC:3B:28:AA:38:76:FD
            X509v3 Authority Key Identifier:
                keyid:DD:24:32:D8:AD:6B:B3:E9:E9:96:55:80:BB:C6:D2:22:19:07:B3:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:91:dd:e2:a5:7b:23:3c:28:83:7b:51:68:11:94:ba:60:ec:
         c3:58:c8:80:b4:71:1a:62:dd:f0:c1:77:21:5e:d8:38:1d:a9:
         af:b2:68:fc:fa:23:cc:1b:b4:f9:bc:c9:ec:ca:31:42:6c:9d:
         72:9c:4d:f0:91:50:dc:d3:93:5b:85:7d:77:11:34:ad:ab:9d:
         3f:09:da:54:d0:c2:57:fd:4b:8e:0f:2c:cc:03:86:ba:5a:8f:
         55:fd:b4:eb:4a:cb:fe:3e:6f:99:08:8a:3d:af:8f:07:9d:25:
         d1:33:2a:2a:91:5a:e4:f9:2c:35:b0:3f:1a:ec:08:8d:f0:87:
         48:eb:a7:03:20:fe:6d:f5:c2:3d:50:1d:01:69:29:aa:6a:62:
         b5:3c:a1:b9:58:d8:67:4a:ae:59:df:e7:38:9b:9b:a4:03:d0:
         48:8f:67:99:9c:2e:88:95:f8:11:fa:dd:aa:3a:4d:f3:15:cb:
         88:49:d1:ed:be:db:03:5e:ce:b8:6b:c6:12:29:c8:af:38:1b:
         28:a2:4e:77:0a:b4:ed:6f:f7:07:1c:f2:4e:9d:44:a8:9a:83:
         95:c4:a1:a9:fc:e3:04:a2:fd:ff:c8:a0:0d:f1:11:e6:7f:fd:
         4b:eb:e7:d3:3f:eb:d4:9b:bd:4b:69:c2:7b:a9:9b:b5:a1:f4:
         33:52:03:ec
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUFFMkUxMTAvBgNVBAUTKEREMjQzMkQ4QUQ2QkIzRTlFOTk2NTU4MEJCQzZEMjIy
MTkwN0IzRjcwHhcNMjYwNDE3MDQxNzU5WhcNMjYwNDI0MDQxNzU5WjAYMRYwFAYD
VQQDEw02OWUxYjQ3Ny0xZGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv9FZ0haYx+0Cf//mp8J6iAWPNjBHzdKCKNxMbPeILVGm3Ruc1/WHHZe9ZhPw
O8LhL/hbHrm4kX+dltQM8HT8R8JXmVho/WhKmmGyWNsk56svYbXIHVSKPcrf0P5P
9iAzzlqVhoFfrFvPMZLZS0cgWM41s5E1GpD/gNJsYNUsOPg6mIebjF3FQUDPOipq
P82iyiq1UgBFqhA/b1sAomTIKzDm8ezcb4hEAoIy7rTJ7CYxJLTc+RgYnFeQ6gHS
KC7izPWE+MpQd1AV3bv8v4KeGqHOBRrtfbx7DrITVbxTj1m1Gle1uv3wkWaYjRW6
jqNlHtXyWJapwqrzzv7wH3jJOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN/TR5vL
gg3PUiZV+cOsOyiqOHb9MB8GA1UdIwQYMBaAFN0kMtita7Pp6ZZVgLvG0iIZB7P3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUUyRS9FNzFBMEJCQ0Yy
MTcxMUVFQkNDQzMxMjBDNEY5QUUwMi8zU1F5MksxcnMtbnBsbFdBdThiU0loa0hz
X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNTUXkySzFycy1ucGxsV0F1OGJTSWhrSHNfYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QUUyRS9FNzFBMEJCQ0YyMTcxMUVFQkNDQzMxMjBDNEY5QUUwMi8zU1F5MksxcnMt
bnBsbFdBdThiU0loa0hzX2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJZHd4qV7Izwog3tRaBGUumDsw1jIgLRxGmLd8MF3IV7YOB2pr7Jo/PojzBu0
+bzJ7MoxQmydcpxN8JFQ3NOTW4V9dxE0raudPwnaVNDCV/1Ljg8szAOGulqPVf20
60rL/j5vmQiKPa+PB50l0TMqKpFa5PksNbA/GuwIjfCHSOunAyD+bfXCPVAdAWkp
qmpitTyhuVjYZ0quWd/nOJubpAPQSI9nmZwuiJX4EfrdqjpN8xXLiEnR7b7bA17O
uGvGEinIrzgbKKJOdwq07W/3BxzyTp1EqJqDlcShqfzjBKL9/8igDfER5n/9S+vn
0z/r1Ju9S2nCe6mbtaH0M1ID7A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:27:14 2026 by rpki-client