Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft
File:                     S8VilW0H0G-q3JIziLmGYPcofJo.mft (raw, json)
Hash identifier:          t/yUuIOy+vshYA7VeBBa0i4pQCa5EEbqXWx+gvlDj6M=
Subject key identifier:   75:C7:2D:2E:8A:4B:FE:6A:83:23:E5:DA:89:54:F2:6F:0C:50:B3:DB
Authority key identifier: 4B:C5:62:95:6D:07:D0:6F:AA:DC:92:33:88:B9:86:60:F7:28:7C:9A
Certificate issuer:       /CN=A91BF039/serialNumber=4BC562956D07D06FAADC923388B98660F7287C9A
Certificate serial:       0BAA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S8VilW0H0G-q3JIziLmGYPcofJo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft
Manifest number:          0BA0
Signing time:             Thu 16 Apr 2026 18:59:09 +0000
Manifest this update:     Thu 16 Apr 2026 18:59:09 +0000
Manifest next update:     Thu 23 Apr 2026 18:59:09 +0000
Files and hashes:         1: S8VilW0H0G-q3JIziLmGYPcofJo.crl (hash: g7QhsMX5Bj9SPAoKqeoDfbpK7yb4kqd5k/lCqJpA9mA=)
                          2: 6D49440845BC11EAB591BD20C4F9AE02.roa (hash: zPalni0azpF/zlC0w+aS0ngHnlgcsl2xEhMwm9vK8X0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.crl
                          rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S8VilW0H0G-q3JIziLmGYPcofJo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:59:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2986 (0xbaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF039, serialNumber=4BC562956D07D06FAADC923388B98660F7287C9A
        Validity
            Not Before: Apr 16 18:59:09 2026 GMT
            Not After : Apr 23 18:59:09 2026 GMT
        Subject: CN=69e1317d-a920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f4:b8:6c:17:5e:d2:b0:7d:f8:c6:05:81:2f:
                    d8:d8:c2:7e:fe:b9:64:51:6f:1f:47:b9:ad:c3:ae:
                    db:93:62:63:ef:fc:c6:26:c1:18:ca:73:86:7c:d0:
                    65:e0:40:6b:41:48:1b:3a:a8:0e:b1:63:30:6a:08:
                    2b:d6:84:ce:5f:c2:c0:ab:1c:14:99:f1:6c:5b:f1:
                    06:a1:ae:41:9c:3e:78:7e:b2:27:5a:91:9e:c4:59:
                    c3:49:b0:60:87:73:82:5e:92:15:ef:09:73:bc:eb:
                    ff:ba:b2:27:8b:17:49:f8:2d:ab:94:c1:73:86:d5:
                    83:2b:00:57:d9:b3:83:b7:e8:22:c7:94:98:e1:97:
                    6f:ea:a4:1c:4a:c3:b9:dc:8c:52:92:23:33:9f:18:
                    3d:1b:3d:a1:54:2a:6c:61:11:36:5b:54:7e:19:35:
                    13:57:24:1d:76:34:60:89:ef:c2:2d:9b:45:a5:2e:
                    26:6b:6b:de:9d:3e:04:a2:4b:3f:24:5b:9a:64:cb:
                    bf:e2:ec:f0:e1:71:aa:81:a3:13:96:11:f1:e9:c0:
                    00:79:7d:f5:47:29:b7:83:58:b0:aa:3e:66:e2:2f:
                    f1:6d:9a:8c:ab:e2:bf:c7:85:97:ed:f3:00:ab:0c:
                    e1:13:0d:7f:2e:0b:55:81:0f:d3:fa:fd:a8:8f:67:
                    a8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:C7:2D:2E:8A:4B:FE:6A:83:23:E5:DA:89:54:F2:6F:0C:50:B3:DB
            X509v3 Authority Key Identifier:
                keyid:4B:C5:62:95:6D:07:D0:6F:AA:DC:92:33:88:B9:86:60:F7:28:7C:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S8VilW0H0G-q3JIziLmGYPcofJo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:f3:65:7f:aa:77:1e:79:69:5f:44:eb:ad:f1:01:73:bc:74:
         8d:eb:71:8c:9a:d2:d2:58:7b:f1:f5:12:0d:49:bd:62:db:d3:
         1b:25:f6:1e:dc:e2:06:dc:2f:d0:55:a7:17:0d:9d:90:68:8e:
         e0:08:e9:b6:84:93:22:65:1b:02:8d:7f:46:46:5a:fc:c3:1c:
         e9:23:82:31:c9:ab:20:81:a9:57:9b:d8:5c:cc:44:5e:97:ab:
         23:ec:18:88:30:f4:25:38:bf:1a:5c:94:d3:00:ae:21:c3:ba:
         da:4a:a5:10:13:31:f0:b9:82:28:ed:02:b4:90:21:35:0f:33:
         b5:3c:53:92:d8:f1:1c:d5:01:fb:ed:18:22:39:7e:3f:ac:5f:
         21:76:db:15:6f:53:1c:fd:ce:53:5f:40:46:ad:76:26:19:27:
         ec:76:e5:3c:10:6a:02:dd:61:ad:0d:10:38:67:4a:3f:1e:4f:
         63:78:f9:d5:76:13:7e:d7:d4:63:9c:ef:ec:f6:2e:37:96:0a:
         4e:9f:e0:f9:ab:40:b2:8a:90:16:2a:60:88:bd:ea:61:a9:ed:
         5f:d1:b9:c6:41:c9:8f:22:4e:0a:de:03:91:78:f1:4f:8e:ad:
         33:12:d9:ec:9a:7c:e7:cc:06:bd:8a:48:f7:48:f8:76:f8:50:
         38:fc:27:57
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC6owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkYwMzkxMTAvBgNVBAUTKDRCQzU2Mjk1NkQwN0QwNkZBQURDOTIzMzg4Qjk4NjYw
RjcyODdDOUEwHhcNMjYwNDE2MTg1OTA5WhcNMjYwNDIzMTg1OTA5WjAYMRYwFAYD
VQQDEw02OWUxMzE3ZC1hOTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2vS4bBde0rB9+MYFgS/Y2MJ+/rlkUW8fR7mtw67bk2Jj7/zGJsEYynOGfNBl
4EBrQUgbOqgOsWMwaggr1oTOX8LAqxwUmfFsW/EGoa5BnD54frInWpGexFnDSbBg
h3OCXpIV7wlzvOv/urInixdJ+C2rlMFzhtWDKwBX2bODt+gix5SY4Zdv6qQcSsO5
3IxSkiMznxg9Gz2hVCpsYRE2W1R+GTUTVyQddjRgie/CLZtFpS4ma2venT4Eoks/
JFuaZMu/4uzw4XGqgaMTlhHx6cAAeX31Rym3g1iwqj5m4i/xbZqMq+K/x4WX7fMA
qwzhEw1/LgtVgQ/T+v2oj2eo9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHXHLS6K
S/5qgyPl2olU8m8MULPbMB8GA1UdIwQYMBaAFEvFYpVtB9BvqtySM4i5hmD3KHya
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjAzOS8yNTY3NkRGMDQ1
QkIxMUVBQTY0ODc3MUVDNEY5QUUwMi9TOFZpbFcwSDBHLXEzSkl6aUxtR1lQY29m
Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1M4VmlsVzBIMEctcTNKSXppTG1HWVBjb2ZKby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RjAzOS8yNTY3NkRGMDQ1QkIxMUVBQTY0ODc3MUVDNEY5QUUwMi9TOFZpbFcwSDBH
LXEzSkl6aUxtR1lQY29mSm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABfNlf6p3HnlpX0TrrfEBc7x0jetxjJrS0lh78fUSDUm9YtvTGyX2HtziBtwv
0FWnFw2dkGiO4AjptoSTImUbAo1/RkZa/MMc6SOCMcmrIIGpV5vYXMxEXperI+wY
iDD0JTi/GlyU0wCuIcO62kqlEBMx8LmCKO0CtJAhNQ8ztTxTktjxHNUB++0YIjl+
P6xfIXbbFW9THP3OU19ARq12Jhkn7HblPBBqAt1hrQ0QOGdKPx5PY3j51XYTftfU
Y5zv7PYuN5YKTp/g+atAsoqQFipgiL3qYantX9G5xkHJjyJOCt4DkXjxT46tMxLZ
7Jp858wGvYpI90j4dvhQOPwnVw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:30:03 2026 by rpki-client