Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.mft
File:                     ROq4zxyb1totteNCtBx0fuOkUF8.mft (raw, json)
Hash identifier:          ioGzaKAnxdlCRpLoumrB16ruEAyiXD8ZLxqCPIP0p6c=
Subject key identifier:   D4:4B:9A:1D:E6:73:66:AE:BE:A5:23:21:8E:69:D5:0B:74:BD:46:17
Authority key identifier: 44:EA:B8:CF:1C:9B:D6:DA:2D:B5:E3:42:B4:1C:74:7E:E3:A4:50:5F
Certificate issuer:       /CN=A91B00B6/serialNumber=44EAB8CF1C9BD6DA2DB5E342B41C747EE3A4505F
Certificate serial:       0AB0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROq4zxyb1totteNCtBx0fuOkUF8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.mft
Manifest number:          0AA9
Signing time:             Thu 16 Apr 2026 19:24:51 +0000
Manifest this update:     Thu 16 Apr 2026 19:24:51 +0000
Manifest next update:     Thu 23 Apr 2026 19:24:51 +0000
Files and hashes:         1: ROq4zxyb1totteNCtBx0fuOkUF8.crl (hash: KrGQEVuu80DMxayhsjaCFaANoomJzJSXkeH22HVgL+M=)
                          2: 800EC4AE756F11EAAA2E0F6CC4F9AE02.roa (hash: blTR7FZGYhqfmkBDBSyb66ptUGt5kPtOu9kj+Uqu480=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.crl
                          rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROq4zxyb1totteNCtBx0fuOkUF8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:24:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2736 (0xab0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B00B6, serialNumber=44EAB8CF1C9BD6DA2DB5E342B41C747EE3A4505F
        Validity
            Not Before: Apr 16 19:24:51 2026 GMT
            Not After : Apr 23 19:24:51 2026 GMT
        Subject: CN=69e13783-4c79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:af:44:c9:bc:ef:af:d5:8d:38:21:83:55:39:
                    a8:da:23:b0:75:20:fa:07:dd:32:52:76:49:6a:ff:
                    96:a7:ed:d2:a2:bb:2f:8f:b3:2d:24:e8:ce:b4:aa:
                    3e:95:b2:45:bc:1d:36:6f:c3:9d:38:a5:e1:3f:b5:
                    4b:32:f6:3e:d7:8f:6f:cd:1f:fd:b1:99:d5:21:c5:
                    16:95:d6:c0:85:7e:ff:6e:56:a9:a6:d6:f8:b0:83:
                    60:90:e7:e5:ba:35:4f:5e:21:cb:3b:60:18:fd:fa:
                    20:0f:18:7f:8d:48:ea:21:5f:12:17:f4:34:eb:0e:
                    3b:c5:b1:1b:a4:b8:e4:dc:d2:2d:d0:5b:80:41:38:
                    61:c3:61:b2:d0:d4:60:e4:6a:94:a2:bb:32:af:4c:
                    96:3a:15:17:9a:d3:3d:4a:62:8e:a4:88:5a:40:c4:
                    a7:7d:c1:69:4f:81:26:87:c8:b5:6d:63:e8:9f:a5:
                    11:c3:9b:51:68:cb:95:4a:22:86:fc:7c:4b:0b:68:
                    32:d1:40:f8:50:36:28:16:a6:8d:67:57:c4:08:73:
                    3f:dd:fb:19:c9:18:af:69:90:ec:bd:08:00:d3:40:
                    7f:33:31:a7:a7:82:4e:ba:2a:c1:5f:d0:d2:b4:0d:
                    07:aa:9a:fc:6b:f6:06:f3:9c:15:d0:e2:cf:a9:ca:
                    92:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:4B:9A:1D:E6:73:66:AE:BE:A5:23:21:8E:69:D5:0B:74:BD:46:17
            X509v3 Authority Key Identifier:
                keyid:44:EA:B8:CF:1C:9B:D6:DA:2D:B5:E3:42:B4:1C:74:7E:E3:A4:50:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROq4zxyb1totteNCtBx0fuOkUF8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:45:93:47:12:fe:56:41:df:54:2e:ed:f6:d3:41:17:c6:0c:
         aa:59:10:52:4f:ae:58:96:61:cb:27:05:30:50:d9:14:60:13:
         41:63:61:b4:89:8d:4a:32:e9:59:e0:3a:f4:0d:fa:bc:48:db:
         c1:33:dd:59:74:a5:03:78:cb:cc:13:9b:a6:43:6f:3f:3a:b1:
         bd:06:c6:92:2a:78:84:66:5d:b8:c8:1f:9b:3e:86:33:a9:00:
         9d:b3:ab:32:d5:fb:96:21:81:de:39:b9:61:dd:34:5f:4a:b4:
         27:b7:c3:b8:76:b8:57:06:21:11:54:82:15:11:49:54:1c:d0:
         d8:7a:bb:ac:1b:34:57:dc:88:99:5b:25:83:c1:ff:1d:59:d1:
         9e:2a:cf:d6:3c:3d:93:b8:c9:ff:ec:bb:3e:5e:c4:f6:71:2f:
         08:77:b2:71:19:77:04:bb:97:55:90:e9:46:58:fb:a8:04:3c:
         1d:a0:81:eb:6c:c2:18:ef:8c:a7:54:ab:bc:38:5b:94:27:db:
         f3:f0:d6:00:e2:f9:8f:74:69:cd:06:1e:e3:05:a7:ba:34:ee:
         4b:8a:56:82:b1:c1:f9:94:1a:7a:6d:9a:11:22:8a:49:0c:21:
         38:9e:c3:e1:7d:b3:3d:6d:bf:f3:1f:88:8b:bf:a0:fd:44:7a:
         05:97:8e:ba
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCrAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjAwQjYxMTAvBgNVBAUTKDQ0RUFCOENGMUM5QkQ2REEyREI1RTM0MkI0MUM3NDdF
RTNBNDUwNUYwHhcNMjYwNDE2MTkyNDUxWhcNMjYwNDIzMTkyNDUxWjAYMRYwFAYD
VQQDEw02OWUxMzc4My00Yzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoa9Eybzvr9WNOCGDVTmo2iOwdSD6B90yUnZJav+Wp+3Sorsvj7MtJOjOtKo+
lbJFvB02b8OdOKXhP7VLMvY+149vzR/9sZnVIcUWldbAhX7/blapptb4sINgkOfl
ujVPXiHLO2AY/fogDxh/jUjqIV8SF/Q06w47xbEbpLjk3NIt0FuAQThhw2Gy0NRg
5GqUorsyr0yWOhUXmtM9SmKOpIhaQMSnfcFpT4Emh8i1bWPon6URw5tRaMuVSiKG
/HxLC2gy0UD4UDYoFqaNZ1fECHM/3fsZyRivaZDsvQgA00B/MzGnp4JOuirBX9DS
tA0Hqpr8a/YG85wV0OLPqcqSFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNRLmh3m
c2auvqUjIY5p1Qt0vUYXMB8GA1UdIwQYMBaAFETquM8cm9baLbXjQrQcdH7jpFBf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDBCNi85RjlBRjdBODc1
NkUxMUVBOTkxNDIzNkJDNEY5QUUwMi9ST3E0enh5YjF0b3R0ZU5DdEJ4MGZ1T2tV
RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JPcTR6eHliMXRvdHRlTkN0QngwZnVPa1VGOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MDBCNi85RjlBRjdBODc1NkUxMUVBOTkxNDIzNkJDNEY5QUUwMi9ST3E0enh5YjF0
b3R0ZU5DdEJ4MGZ1T2tVRjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeEWTRxL+VkHfVC7t9tNBF8YMqlkQUk+uWJZhyycFMFDZFGATQWNhtImNSjLp
WeA69A36vEjbwTPdWXSlA3jLzBObpkNvPzqxvQbGkip4hGZduMgfmz6GM6kAnbOr
MtX7liGB3jm5Yd00X0q0J7fDuHa4VwYhEVSCFRFJVBzQ2Hq7rBs0V9yImVslg8H/
HVnRnirP1jw9k7jJ/+y7Pl7E9nEvCHeycRl3BLuXVZDpRlj7qAQ8HaCB62zCGO+M
p1SrvDhblCfb8/DWAOL5j3RpzQYe4wWnujTuS4pWgrHB+ZQaem2aESKKSQwhOJ7D
4X2zPW2/8x+Ii7+g/UR6BZeOug==
-----END CERTIFICATE-----
Generated at Sat Apr 18 05:15:21 2026 by rpki-client