Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.mft
File:                     oRHoHEs-J72m4nEkl_bbugz7CCY.mft (raw, json)
Hash identifier:          v+zNrJWhz3Ei/sDHIuZU1+QYfBeqOPlnQjIA2knpBZo=
Subject key identifier:   6C:DA:75:60:72:F5:25:B8:27:35:0B:0A:C7:33:D5:3B:10:48:40:79
Authority key identifier: A1:11:E8:1C:4B:3E:27:BD:A6:E2:71:24:97:F6:DB:BA:0C:FB:08:26
Certificate issuer:       /CN=A91C1DB8/serialNumber=A111E81C4B3E27BDA6E2712497F6DBBA0CFB0826
Certificate serial:       1413
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oRHoHEs-J72m4nEkl_bbugz7CCY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.mft
Manifest number:          1404
Signing time:             Thu 16 Apr 2026 16:51:23 +0000
Manifest this update:     Thu 16 Apr 2026 16:51:23 +0000
Manifest next update:     Thu 23 Apr 2026 16:51:23 +0000
Files and hashes:         1: oRHoHEs-J72m4nEkl_bbugz7CCY.crl (hash: IaK/J54SFHKsXZNAOEJ+kwkUuxdYN2lfM8MHAQ84eeU=)
                          2: 6D6692CAAA0211EEAADA3D32C4F9AE02.roa (hash: 2PmqHELB1hwleGl17N3DUTadd9q9hQXwA/8mpl3xfuo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.crl
                          rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oRHoHEs-J72m4nEkl_bbugz7CCY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 16:51:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5139 (0x1413)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1DB8, serialNumber=A111E81C4B3E27BDA6E2712497F6DBBA0CFB0826
        Validity
            Not Before: Apr 16 16:51:23 2026 GMT
            Not After : Apr 23 16:51:23 2026 GMT
        Subject: CN=69e1138b-37a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1e:f1:78:9f:b1:13:99:ed:10:78:21:6c:10:
                    4c:26:4d:b2:37:cc:d7:46:b5:f9:e1:03:f5:88:63:
                    66:35:0e:b6:c6:bf:c2:85:37:0a:2d:10:73:42:4b:
                    2a:c0:17:74:93:23:f7:ac:09:04:31:39:3e:4e:34:
                    35:9b:cf:a1:75:21:34:ff:3f:ad:ed:e0:da:d1:1e:
                    11:7f:34:49:19:de:a9:68:4a:ee:8c:f9:81:6d:ab:
                    83:a0:61:8d:b9:84:84:5e:a3:49:73:1f:d1:6a:5c:
                    0f:74:b8:2b:44:4d:03:ce:ed:0d:36:0f:db:33:f0:
                    2f:b5:e8:c8:3f:2d:2d:47:9b:f2:5b:4c:56:ec:f8:
                    ef:07:cd:50:e3:63:5b:85:62:e0:f3:ef:e0:d1:4f:
                    ff:7e:d2:cc:69:6c:f6:2b:18:eb:6d:e7:a4:dd:c6:
                    b8:f4:ce:8e:9b:ec:6f:e2:ec:a8:71:d9:23:2d:7a:
                    a0:3e:16:b2:14:3a:c6:01:0f:b7:48:01:a3:ca:f1:
                    16:56:72:4b:2c:e7:05:ba:a8:31:95:0b:a6:f5:58:
                    8f:52:7b:a6:da:8b:32:df:d2:17:30:4f:3d:c8:35:
                    79:92:5c:f6:54:e2:7e:db:2f:54:15:33:f0:8b:03:
                    b6:ea:39:f7:91:c1:d5:39:c7:2e:13:bf:35:1b:4d:
                    03:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:DA:75:60:72:F5:25:B8:27:35:0B:0A:C7:33:D5:3B:10:48:40:79
            X509v3 Authority Key Identifier:
                keyid:A1:11:E8:1C:4B:3E:27:BD:A6:E2:71:24:97:F6:DB:BA:0C:FB:08:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oRHoHEs-J72m4nEkl_bbugz7CCY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:44:43:ca:6e:e2:f7:14:27:90:71:fb:2c:f6:dc:00:93:78:
         fa:aa:b1:88:cb:50:fa:cb:ec:95:46:17:ee:36:fb:b6:fc:e2:
         99:0f:1e:9f:33:b4:e5:c8:c8:13:b1:0b:11:f8:00:5f:bc:5e:
         67:5d:8b:c0:7d:26:d1:63:34:43:2c:ea:64:f6:58:e2:f8:82:
         ae:5b:aa:2f:4f:6f:7b:4a:f6:31:25:d3:46:d4:ca:44:4d:80:
         30:3e:02:aa:33:bd:5d:9a:7d:1a:4b:16:bd:b8:50:52:58:19:
         9d:a9:31:ee:d0:da:e0:57:12:30:f5:da:5c:8c:c9:5d:76:9d:
         7c:8f:b1:be:bf:0b:3c:0e:ce:3d:45:3f:be:9f:30:9b:43:41:
         43:12:c9:2f:92:2d:d8:11:c3:b1:a7:84:86:50:31:33:18:2f:
         a0:88:18:eb:ba:10:83:45:92:43:98:bf:fb:92:de:1f:c8:97:
         20:2b:73:a5:45:b1:0f:60:25:d7:f6:58:19:d0:ef:95:18:80:
         7b:e9:ed:f2:09:0d:01:42:05:20:02:c6:ac:88:7d:4a:f6:33:
         10:88:3f:19:b8:55:92:8a:10:91:4b:00:91:ae:eb:ca:22:17:
         25:58:f0:12:26:d0:62:38:22:dc:2c:d8:9d:75:88:15:76:de:
         50:e9:5d:c2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFBMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzFEQjgxMTAvBgNVBAUTKEExMTFFODFDNEIzRTI3QkRBNkUyNzEyNDk3RjZEQkJB
MENGQjA4MjYwHhcNMjYwNDE2MTY1MTIzWhcNMjYwNDIzMTY1MTIzWjAYMRYwFAYD
VQQDEw02OWUxMTM4Yi0zN2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsR7xeJ+xE5ntEHghbBBMJk2yN8zXRrX54QP1iGNmNQ62xr/ChTcKLRBzQksq
wBd0kyP3rAkEMTk+TjQ1m8+hdSE0/z+t7eDa0R4RfzRJGd6paErujPmBbauDoGGN
uYSEXqNJcx/RalwPdLgrRE0Dzu0NNg/bM/AvtejIPy0tR5vyW0xW7PjvB81Q42Nb
hWLg8+/g0U//ftLMaWz2Kxjrbeek3ca49M6Om+xv4uyocdkjLXqgPhayFDrGAQ+3
SAGjyvEWVnJLLOcFuqgxlQum9ViPUnum2osy39IXME89yDV5klz2VOJ+2y9UFTPw
iwO26jn3kcHVOccuE781G00D/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGzadWBy
9SW4JzULCscz1TsQSEB5MB8GA1UdIwQYMBaAFKER6BxLPie9puJxJJf227oM+wgm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMURCOC8wRDk5MzFCQUEx
MUUxMUU4OUU2MzY3MTBDNEY5QUUwMi9vUkhvSEVzLUo3Mm00bkVrbF9iYnVnejdD
Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL29SSG9IRXMtSjcybTRuRWtsX2JidWd6N0NDWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MURCOC8wRDk5MzFCQUExMUUxMUU4OUU2MzY3MTBDNEY5QUUwMi9vUkhvSEVzLUo3
Mm00bkVrbF9iYnVnejdDQ1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAX0RDym7i9xQnkHH7LPbcAJN4+qqxiMtQ+svslUYX7jb7tvzimQ8enzO05cjI
E7ELEfgAX7xeZ12LwH0m0WM0QyzqZPZY4viCrluqL09ve0r2MSXTRtTKRE2AMD4C
qjO9XZp9GksWvbhQUlgZnakx7tDa4FcSMPXaXIzJXXadfI+xvr8LPA7OPUU/vp8w
m0NBQxLJL5It2BHDsaeEhlAxMxgvoIgY67oQg0WSQ5i/+5LeH8iXICtzpUWxD2Al
1/ZYGdDvlRiAe+nt8gkNAUIFIALGrIh9SvYzEIg/GbhVkooQkUsAka7ryiIXJVjw
EibQYjgi3CzYnXWIFXbeUOldwg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:31:35 2026 by rpki-client