Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEA8B/C27E37964B8111F08F65507EC4F9AE02/sVtAV6tQlrMkq8scfwJ7b6NmyNU.mft
File:                     sVtAV6tQlrMkq8scfwJ7b6NmyNU.mft (raw, json)
Hash identifier:          RFDSpZivg40ytbpORQYp95Sbdju50g/BYimo4G5R4oc=
Subject key identifier:   2E:6B:4C:4A:A0:0D:73:EE:93:72:AD:05:88:A7:D4:FC:B5:BB:58:12
Authority key identifier: B1:5B:40:57:AB:50:96:B3:24:AB:CB:1C:7F:02:7B:6F:A3:66:C8:D5
Certificate issuer:       /CN=A91BEA8B/serialNumber=B15B4057AB5096B324ABCB1C7F027B6FA366C8D5
Certificate serial:       A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sVtAV6tQlrMkq8scfwJ7b6NmyNU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BEA8B/C27E37964B8111F08F65507EC4F9AE02/sVtAV6tQlrMkq8scfwJ7b6NmyNU.mft
Manifest number:          A3
Signing time:             Fri 17 Apr 2026 07:03:33 +0000
Manifest this update:     Fri 17 Apr 2026 07:03:33 +0000
Manifest next update:     Fri 24 Apr 2026 07:03:33 +0000
Files and hashes:         1: sVtAV6tQlrMkq8scfwJ7b6NmyNU.crl (hash: X/uuaXVTU9QgutehgWLdg16n/lCvRBHCQroSaVblkCM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BEA8B/C27E37964B8111F08F65507EC4F9AE02/sVtAV6tQlrMkq8scfwJ7b6NmyNU.crl
                          rsync://rpki.apnic.net/member_repository/A91BEA8B/C27E37964B8111F08F65507EC4F9AE02/sVtAV6tQlrMkq8scfwJ7b6NmyNU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sVtAV6tQlrMkq8scfwJ7b6NmyNU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164 (0xa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BEA8B, serialNumber=B15B4057AB5096B324ABCB1C7F027B6FA366C8D5
        Validity
            Not Before: Apr 17 07:03:33 2026 GMT
            Not After : Apr 24 07:03:33 2026 GMT
        Subject: CN=69e1db45-1e9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b4:75:13:7c:ee:e5:12:16:21:83:d1:02:13:
                    6e:78:d8:dc:41:2c:7c:fe:3d:73:c1:e4:40:99:a0:
                    d9:2c:3e:be:38:a6:cb:9c:1e:b8:d1:4b:13:9a:69:
                    3f:b9:ba:8c:22:e7:ff:68:96:44:0c:53:a3:ef:12:
                    ea:4d:0e:de:1a:23:bc:bd:67:21:6c:8e:5e:24:c6:
                    d7:ba:67:dc:1a:39:bf:a4:ac:b7:27:ba:6b:c4:ee:
                    57:a2:ae:d7:79:b8:ab:05:ea:dd:3f:b3:51:34:2b:
                    9d:b9:50:d0:74:0c:ff:59:03:26:d7:6b:a3:7f:b3:
                    89:58:b6:74:d5:98:32:3c:56:cc:49:35:03:c7:6a:
                    ca:6f:f4:32:f1:81:fe:4d:50:5c:5e:91:08:e7:d5:
                    0b:7d:43:6d:6c:e9:84:79:79:95:d2:3c:8e:dd:52:
                    00:41:a9:d9:04:a5:5b:6d:46:d2:78:19:b3:69:72:
                    75:f3:d4:d5:f4:37:35:cd:bb:bb:06:c0:f7:12:04:
                    8b:b6:93:5d:90:bf:65:90:f7:2e:b9:0b:7c:c8:dc:
                    21:91:d4:c7:83:c8:64:f1:1a:6a:b7:ea:7f:72:d0:
                    4a:b9:87:fb:28:15:99:6f:c2:27:c5:84:83:f1:83:
                    73:4d:56:ba:2e:7d:08:97:00:bb:a8:ec:3d:1f:69:
                    e3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:6B:4C:4A:A0:0D:73:EE:93:72:AD:05:88:A7:D4:FC:B5:BB:58:12
            X509v3 Authority Key Identifier:
                keyid:B1:5B:40:57:AB:50:96:B3:24:AB:CB:1C:7F:02:7B:6F:A3:66:C8:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/C27E37964B8111F08F65507EC4F9AE02/sVtAV6tQlrMkq8scfwJ7b6NmyNU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sVtAV6tQlrMkq8scfwJ7b6NmyNU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/C27E37964B8111F08F65507EC4F9AE02/sVtAV6tQlrMkq8scfwJ7b6NmyNU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:82:4f:2e:99:fb:3d:d3:55:3a:4d:47:31:b6:a3:a0:3b:07:
         ac:b9:2d:bb:f3:f8:60:e9:72:8d:53:07:85:13:af:b1:eb:5b:
         20:21:95:b1:3a:7d:fd:8e:4d:f2:69:e1:e9:f3:c7:1f:95:99:
         f6:dd:96:20:5e:e8:8c:79:c3:61:b5:7f:94:bd:59:0d:65:0c:
         d8:89:d4:37:19:76:e0:d5:b8:26:c5:c4:c3:b5:7e:5e:68:4d:
         5c:e4:73:ee:b4:4c:1c:47:27:aa:81:b5:75:8b:31:c6:fb:cd:
         89:f2:c0:57:24:44:a8:32:2a:22:8d:19:5d:cc:82:f9:6c:1f:
         a8:86:4f:cc:99:d8:25:a1:c8:fd:1c:7d:31:cd:15:5d:8b:e8:
         17:30:e3:02:0a:7e:19:bd:a0:6d:f6:51:da:b6:17:33:be:cb:
         05:2c:38:c5:b7:21:a8:e0:b2:19:f6:f9:e1:d4:c5:05:15:da:
         70:61:e1:68:dc:5a:70:10:47:83:2b:41:d7:c5:17:8a:eb:61:
         6c:b8:65:72:93:d3:f4:90:82:6d:ae:38:e9:75:e6:c1:34:cc:
         17:38:2f:6a:bb:54:7b:76:a9:3d:d3:ef:d4:f8:b6:3f:9d:31:
         3d:11:f3:25:3e:e8:92:74:b6:e5:71:07:67:ee:db:8b:af:c8:
         01:a7:87:92
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkVBOEIxMTAvBgNVBAUTKEIxNUI0MDU3QUI1MDk2QjMyNEFCQ0IxQzdGMDI3QjZG
QTM2NkM4RDUwHhcNMjYwNDE3MDcwMzMzWhcNMjYwNDI0MDcwMzMzWjAYMRYwFAYD
VQQDEw02OWUxZGI0NS0xZTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq7R1E3zu5RIWIYPRAhNueNjcQSx8/j1zweRAmaDZLD6+OKbLnB640UsTmmk/
ubqMIuf/aJZEDFOj7xLqTQ7eGiO8vWchbI5eJMbXumfcGjm/pKy3J7prxO5Xoq7X
ebirBerdP7NRNCuduVDQdAz/WQMm12ujf7OJWLZ01ZgyPFbMSTUDx2rKb/Qy8YH+
TVBcXpEI59ULfUNtbOmEeXmV0jyO3VIAQanZBKVbbUbSeBmzaXJ189TV9Dc1zbu7
BsD3EgSLtpNdkL9lkPcuuQt8yNwhkdTHg8hk8Rpqt+p/ctBKuYf7KBWZb8InxYSD
8YNzTVa6Ln0IlwC7qOw9H2njqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC5rTEqg
DXPuk3KtBYin1Py1u1gSMB8GA1UdIwQYMBaAFLFbQFerUJazJKvLHH8Ce2+jZsjV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUE4Qi9DMjdFMzc5NjRC
ODExMUYwOEY2NTUwN0VDNEY5QUUwMi9zVnRBVjZ0UWxyTWtxOHNjZndKN2I2Tm15
TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NWdEFWNnRRbHJNa3E4c2Nmd0o3YjZObXlOVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RUE4Qi9DMjdFMzc5NjRCODExMUYwOEY2NTUwN0VDNEY5QUUwMi9zVnRBVjZ0UWxy
TWtxOHNjZndKN2I2Tm15TlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOYJPLpn7PdNVOk1HMbajoDsHrLktu/P4YOlyjVMHhROvsetbICGVsTp9/Y5N
8mnh6fPHH5WZ9t2WIF7ojHnDYbV/lL1ZDWUM2InUNxl24NW4JsXEw7V+XmhNXORz
7rRMHEcnqoG1dYsxxvvNifLAVyREqDIqIo0ZXcyC+WwfqIZPzJnYJaHI/Rx9Mc0V
XYvoFzDjAgp+Gb2gbfZR2rYXM77LBSw4xbchqOCyGfb54dTFBRXacGHhaNxacBBH
gytB18UXiuthbLhlcpPT9JCCba446XXmwTTMFzgvartUe3apPdPv1Pi2P50xPRHz
JT7oknS25XEHZ+7bi6/IAaeHkg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:50:19 2026 by rpki-client