Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.mft
File:                     C33smHxhdR0-2h2_PnwipzoV3u0.mft (raw, json)
Hash identifier:          01Y/9S4n5OlH/qDm5CBjP2MBfHBnt8noTP1S7tRUcaw=
Subject key identifier:   12:49:32:09:CC:98:F0:86:9A:8B:7A:6B:CE:D9:78:EF:99:D9:6F:8E
Authority key identifier: 0B:7D:EC:98:7C:61:75:1D:3E:DA:1D:BF:3E:7C:22:A7:3A:15:DE:ED
Certificate issuer:       /CN=A91C0E57/serialNumber=0B7DEC987C61751D3EDA1DBF3E7C22A73A15DEED
Certificate serial:       0585
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C33smHxhdR0-2h2_PnwipzoV3u0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.mft
Manifest number:          057C
Signing time:             Thu 16 Apr 2026 23:11:49 +0000
Manifest this update:     Thu 16 Apr 2026 23:11:49 +0000
Manifest next update:     Thu 23 Apr 2026 23:11:49 +0000
Files and hashes:         1: C33smHxhdR0-2h2_PnwipzoV3u0.crl (hash: nVw6f1Bdoou0GwBRK+ty2kjT69PlCWdQGVwd8S5n4/A=)
                          2: 60A8F48A25D211ECB2CCF633C4F9AE02.roa (hash: 1OTKEgqlZnaKGpmz6oNBNrSZubeFhZS/c5pM2HU9abQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.crl
                          rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C33smHxhdR0-2h2_PnwipzoV3u0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:11:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1413 (0x585)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0E57, serialNumber=0B7DEC987C61751D3EDA1DBF3E7C22A73A15DEED
        Validity
            Not Before: Apr 16 23:11:49 2026 GMT
            Not After : Apr 23 23:11:49 2026 GMT
        Subject: CN=69e16cb5-0a94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ca:d1:27:63:a2:80:54:ad:47:9e:72:83:8b:
                    fd:5b:e2:63:16:e3:af:8e:2a:48:b4:5e:cc:97:17:
                    e3:c0:56:16:50:9e:4f:55:57:33:98:05:2d:b8:9d:
                    58:ad:f5:b4:77:ea:23:e8:51:ca:ef:e8:26:e3:f1:
                    da:b8:a1:8f:8a:dc:0f:f0:95:a8:5e:31:01:69:e1:
                    2e:01:a8:da:c2:e2:34:dd:84:ad:7f:7b:ce:16:dd:
                    80:ac:2c:47:8b:bc:ca:ca:ad:1a:5e:d2:24:aa:de:
                    05:31:65:2f:1d:e0:16:d7:ff:5e:2e:95:49:82:4b:
                    68:f8:08:49:77:1f:07:b5:80:2d:6a:e9:98:84:fe:
                    40:80:74:cd:7a:1b:74:c2:36:a9:fc:32:7b:b4:e1:
                    ca:30:23:4e:38:7f:a7:bd:81:d9:ce:b1:46:ef:69:
                    00:75:1d:64:e0:2e:a6:8a:e7:92:aa:8b:2c:8c:12:
                    9d:ae:d9:57:28:f6:32:67:4a:e7:f9:ae:20:64:86:
                    4c:26:3e:95:3d:5d:a6:a3:67:df:30:8f:3c:e4:27:
                    0d:ba:0e:f1:9c:45:35:f6:03:16:fa:94:ab:41:aa:
                    96:f9:7c:21:39:20:ec:c6:6b:85:96:34:92:af:54:
                    55:2d:42:ae:e3:b8:26:4c:ec:97:b9:16:d5:46:7e:
                    9a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:49:32:09:CC:98:F0:86:9A:8B:7A:6B:CE:D9:78:EF:99:D9:6F:8E
            X509v3 Authority Key Identifier:
                keyid:0B:7D:EC:98:7C:61:75:1D:3E:DA:1D:BF:3E:7C:22:A7:3A:15:DE:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C33smHxhdR0-2h2_PnwipzoV3u0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:c7:19:92:5b:eb:80:11:75:72:84:55:4c:00:3e:56:e2:e6:
         17:98:e8:fa:ad:f6:d2:e3:43:1f:29:88:4a:7f:1a:8b:d9:30:
         39:09:e4:97:66:00:df:80:5a:c7:95:4c:ef:c4:dd:5c:cb:88:
         f7:80:a1:8f:4d:5f:84:71:9f:91:0f:a4:1b:66:7d:38:65:b8:
         f0:6a:1e:b8:2f:8d:99:ec:97:59:82:3f:1a:fd:6e:b7:e0:e9:
         30:d1:cb:b5:3a:b9:76:7b:cd:c4:65:63:96:b4:67:d5:da:06:
         74:4e:50:5e:0d:d4:fa:ba:f6:a0:db:2e:f4:0f:09:88:af:6c:
         f4:88:13:4f:f8:0d:6b:c6:96:59:29:39:47:6b:c0:c0:05:83:
         8c:25:46:02:7c:6c:52:e7:c5:2c:50:11:3f:a6:44:fa:2c:fa:
         b2:22:59:0b:c2:9c:d0:23:a1:34:a2:34:6d:81:54:31:f5:59:
         49:68:b8:42:e4:88:72:7c:10:e4:2e:2e:77:40:0a:b0:ee:11:
         b4:68:ba:97:7d:0a:fb:67:63:bd:ba:aa:cf:34:18:bb:4b:90:
         8c:a5:f6:f5:17:6d:22:e3:3b:9c:79:84:b0:fd:ac:05:b9:3d:
         f7:af:bc:3a:3b:a5:02:64:a4:b9:9e:27:cd:72:49:88:54:87:
         46:3a:44:49
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzBFNTcxMTAvBgNVBAUTKDBCN0RFQzk4N0M2MTc1MUQzRURBMURCRjNFN0MyMkE3
M0ExNURFRUQwHhcNMjYwNDE2MjMxMTQ5WhcNMjYwNDIzMjMxMTQ5WjAYMRYwFAYD
VQQDEw02OWUxNmNiNS0wYTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwcrRJ2OigFStR55yg4v9W+JjFuOvjipItF7MlxfjwFYWUJ5PVVczmAUtuJ1Y
rfW0d+oj6FHK7+gm4/HauKGPitwP8JWoXjEBaeEuAajawuI03YStf3vOFt2ArCxH
i7zKyq0aXtIkqt4FMWUvHeAW1/9eLpVJgkto+AhJdx8HtYAtaumYhP5AgHTNeht0
wjap/DJ7tOHKMCNOOH+nvYHZzrFG72kAdR1k4C6miueSqossjBKdrtlXKPYyZ0rn
+a4gZIZMJj6VPV2mo2ffMI885CcNug7xnEU19gMW+pSrQaqW+XwhOSDsxmuFljSS
r1RVLUKu47gmTOyXuRbVRn6anwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBJJMgnM
mPCGmot6a87ZeO+Z2W+OMB8GA1UdIwQYMBaAFAt97Jh8YXUdPtodvz58Iqc6Fd7t
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEU1Ny9GQ0MxOEExNDIw
NEUxMUVDQjEzRUUxN0FDNEY5QUUwMi9DMzNzbUh4aGRSMC0yaDJfUG53aXB6b1Yz
dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0MzM3NtSHhoZFIwLTJoMl9QbndpcHpvVjN1MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MEU1Ny9GQ0MxOEExNDIwNEUxMUVDQjEzRUUxN0FDNEY5QUUwMi9DMzNzbUh4aGRS
MC0yaDJfUG53aXB6b1YzdTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAn8cZklvrgBF1coRVTAA+VuLmF5jo+q320uNDHymISn8ai9kwOQnkl2YA34Ba
x5VM78TdXMuI94Chj01fhHGfkQ+kG2Z9OGW48GoeuC+NmeyXWYI/Gv1ut+DpMNHL
tTq5dnvNxGVjlrRn1doGdE5QXg3U+rr2oNsu9A8JiK9s9IgTT/gNa8aWWSk5R2vA
wAWDjCVGAnxsUufFLFARP6ZE+iz6siJZC8Kc0COhNKI0bYFUMfVZSWi4QuSIcnwQ
5C4ud0AKsO4RtGi6l30K+2djvbqqzzQYu0uQjKX29RdtIuM7nHmEsP2sBbk996+8
OjulAmSkuZ4nzXJJiFSHRjpESQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:07:38 2026 by rpki-client