Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC039/1534A05AA17411EFBF616624C4F9AE02/kQglePceS4YFfcPrBwP-ZYnmaJE.mft
File:                     kQglePceS4YFfcPrBwP-ZYnmaJE.mft (raw, json)
Hash identifier:          D+rog+3VxdxwzzzOjqDxC6uycFjksM7Fy83Jvk+joK8=
Subject key identifier:   D1:C5:C5:D0:E3:F4:D7:A6:69:3D:B5:2D:AD:E9:33:39:B1:C7:B6:27
Authority key identifier: 91:08:25:78:F7:1E:4B:86:05:7D:C3:EB:07:03:FE:65:89:E6:68:91
Certificate issuer:       /CN=A91BC039/serialNumber=91082578F71E4B86057DC3EB0703FE6589E66891
Certificate serial:       0116
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kQglePceS4YFfcPrBwP-ZYnmaJE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC039/1534A05AA17411EFBF616624C4F9AE02/kQglePceS4YFfcPrBwP-ZYnmaJE.mft
Manifest number:          0111
Signing time:             Thu 16 Apr 2026 23:13:38 +0000
Manifest this update:     Thu 16 Apr 2026 23:13:38 +0000
Manifest next update:     Thu 23 Apr 2026 23:13:38 +0000
Files and hashes:         1: kQglePceS4YFfcPrBwP-ZYnmaJE.crl (hash: no6BP8oM8MRVuqQJhLr46EEbJl2iQOr104QJ0nTjDa0=)
                          2: 1167F6B2A18211EFA7475221C4F9AE02.roa (hash: YCpUxQ8dgkmMh3e5UHsZ7Ir2L2aOgpsDHkfqNgWqSFU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC039/1534A05AA17411EFBF616624C4F9AE02/kQglePceS4YFfcPrBwP-ZYnmaJE.crl
                          rsync://rpki.apnic.net/member_repository/A91BC039/1534A05AA17411EFBF616624C4F9AE02/kQglePceS4YFfcPrBwP-ZYnmaJE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kQglePceS4YFfcPrBwP-ZYnmaJE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 278 (0x116)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC039, serialNumber=91082578F71E4B86057DC3EB0703FE6589E66891
        Validity
            Not Before: Apr 16 23:13:38 2026 GMT
            Not After : Apr 23 23:13:38 2026 GMT
        Subject: CN=69e16d22-0a9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:1e:4f:c3:35:09:ba:05:c1:de:f5:44:96:62:
                    9b:cf:77:a8:15:91:62:56:e2:64:2a:e8:fb:ad:b3:
                    7b:a4:98:65:33:c8:95:1e:ea:c8:ff:36:6c:b0:2b:
                    4e:46:93:d7:39:41:a3:35:7d:3c:d0:7e:41:56:31:
                    18:44:76:16:4b:f2:99:6a:af:fc:83:12:f7:9e:ce:
                    8b:29:58:bb:e6:65:69:65:e7:fb:4b:22:64:fc:c0:
                    6a:56:4d:45:a2:c8:35:ff:f1:98:51:17:58:61:4c:
                    d0:a6:c4:cb:6c:53:2b:e7:db:14:dd:a1:86:c5:5d:
                    ee:db:3f:24:b7:de:6d:09:60:de:87:d4:45:d1:cd:
                    2c:fa:01:f5:b2:16:e4:88:ee:ca:39:51:b3:60:4e:
                    5b:0a:7c:ef:a6:19:cf:95:4e:45:5c:e1:fd:43:4c:
                    e0:69:83:83:4d:18:f8:2e:e2:c3:7a:02:99:de:6e:
                    43:7a:93:95:21:3d:7b:86:6d:fc:9e:45:5b:0d:94:
                    c2:7e:bc:d3:75:e5:49:44:35:bb:7a:15:e7:c5:96:
                    e9:f1:e0:6b:4f:12:f3:97:3d:da:ac:a0:2d:e2:19:
                    f3:a2:78:b5:ff:a6:4f:d3:7f:c6:fc:75:18:0e:a7:
                    34:35:a1:56:2f:8d:3c:25:d3:e5:56:89:16:c1:44:
                    58:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:C5:C5:D0:E3:F4:D7:A6:69:3D:B5:2D:AD:E9:33:39:B1:C7:B6:27
            X509v3 Authority Key Identifier:
                keyid:91:08:25:78:F7:1E:4B:86:05:7D:C3:EB:07:03:FE:65:89:E6:68:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC039/1534A05AA17411EFBF616624C4F9AE02/kQglePceS4YFfcPrBwP-ZYnmaJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kQglePceS4YFfcPrBwP-ZYnmaJE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC039/1534A05AA17411EFBF616624C4F9AE02/kQglePceS4YFfcPrBwP-ZYnmaJE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:05:cb:e0:6a:c1:c4:dc:4d:49:3c:dc:eb:db:b0:b3:d9:26:
         65:8e:02:af:10:d3:8e:e7:af:26:98:95:61:4a:61:b5:51:44:
         68:44:47:3b:bf:34:29:b9:38:e5:10:ca:7f:7a:89:5f:45:d2:
         30:fb:fe:58:ae:9f:f2:59:9a:e9:c3:6b:39:90:04:2f:84:cc:
         a4:1d:e3:25:37:fa:8c:2a:c7:9f:e4:01:ab:d5:67:28:e6:ac:
         96:dc:8e:1b:5d:d3:ea:7f:39:b4:de:25:d0:2c:bc:93:c9:6d:
         00:22:47:e6:b8:89:bf:c3:1f:a9:f4:75:52:2e:fa:25:c3:53:
         04:65:08:ef:9e:b2:d6:ad:8b:5b:f9:c4:aa:25:7a:25:e3:62:
         c9:31:c2:0a:d0:e7:74:ef:87:f3:af:d5:78:62:32:e2:c2:dc:
         91:43:1c:34:88:09:36:a1:89:08:18:b4:e5:0a:19:e9:ff:ed:
         78:4d:f9:bb:2f:50:ad:bd:d8:a4:ee:00:7c:3a:e8:00:bb:d5:
         a7:33:4b:0e:1f:64:50:3b:2e:8b:c7:03:fa:cf:c1:37:03:b2:
         54:03:c0:ab:e4:97:22:13:63:29:0b:e7:3f:0f:9f:af:75:bf:
         e8:b1:f8:68:b8:a5:42:5c:db:12:f9:71:21:e9:41:ca:2b:43:
         0c:e2:9f:d6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkMwMzkxMTAvBgNVBAUTKDkxMDgyNTc4RjcxRTRCODYwNTdEQzNFQjA3MDNGRTY1
ODlFNjY4OTEwHhcNMjYwNDE2MjMxMzM4WhcNMjYwNDIzMjMxMzM4WjAYMRYwFAYD
VQQDEw02OWUxNmQyMi0wYTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAhB5PwzUJugXB3vVElmKbz3eoFZFiVuJkKuj7rbN7pJhlM8iVHurI/zZssCtO
RpPXOUGjNX080H5BVjEYRHYWS/KZaq/8gxL3ns6LKVi75mVpZef7SyJk/MBqVk1F
osg1//GYURdYYUzQpsTLbFMr59sU3aGGxV3u2z8kt95tCWDeh9RF0c0s+gH1shbk
iO7KOVGzYE5bCnzvphnPlU5FXOH9Q0zgaYODTRj4LuLDegKZ3m5DepOVIT17hm38
nkVbDZTCfrzTdeVJRDW7ehXnxZbp8eBrTxLzlz3arKAt4hnzoni1/6ZP03/G/HUY
Dqc0NaFWL408JdPlVokWwURY4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNHFxdDj
9NemaT21La3pMzmxx7YnMB8GA1UdIwQYMBaAFJEIJXj3HkuGBX3D6wcD/mWJ5miR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzAzOS8xNTM0QTA1QUEx
NzQxMUVGQkY2MTY2MjRDNEY5QUUwMi9rUWdsZVBjZVM0WUZmY1ByQndQLVpZbm1h
SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2tRZ2xlUGNlUzRZRmZjUHJCd1AtWllubWFKRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QzAzOS8xNTM0QTA1QUExNzQxMUVGQkY2MTY2MjRDNEY5QUUwMi9rUWdsZVBjZVM0
WUZmY1ByQndQLVpZbm1hSkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqAXL4GrBxNxNSTzc69uws9kmZY4CrxDTjuevJpiVYUphtVFEaERHO780Kbk4
5RDKf3qJX0XSMPv+WK6f8lma6cNrOZAEL4TMpB3jJTf6jCrHn+QBq9VnKOasltyO
G13T6n85tN4l0Cy8k8ltACJH5riJv8MfqfR1Ui76JcNTBGUI756y1q2LW/nEqiV6
JeNiyTHCCtDndO+H86/VeGIy4sLckUMcNIgJNqGJCBi05QoZ6f/teE35uy9Qrb3Y
pO4AfDroALvVpzNLDh9kUDsui8cD+s/BNwOyVAPAq+SXIhNjKQvnPw+fr3W/6LH4
aLilQlzbEvlxIelByitDDOKf1g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:46:17 2026 by rpki-client