Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft
File:                     CNJW1CbKIXH86BfGRSP4MqNpF70.mft (raw, json)
Hash identifier:          Ys7FOCtbfIYEL0JbxILFyHQvJ5x3uB+88aqZ48HTq8g=
Subject key identifier:   8B:FC:18:1E:4E:90:B8:35:18:EB:8E:D2:16:DF:2F:F2:AB:9D:DE:3B
Authority key identifier: 08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD
Certificate issuer:       /CN=A91C1FCC/serialNumber=08D256D426CA2171FCE817C64523F832A36917BD
Certificate serial:       0B00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft
Manifest number:          0AD8
Signing time:             Sat 18 Apr 2026 19:20:46 +0000
Manifest this update:     Sat 18 Apr 2026 19:20:45 +0000
Manifest next update:     Sat 25 Apr 2026 19:20:45 +0000
Files and hashes:         1: CNJW1CbKIXH86BfGRSP4MqNpF70.crl (hash: luP+wuIwR5b7CxxAzb4zF2UWBsumifsIA9Ppp8UKg7s=)
                          2: F15AD62031FA11EE96640F3EC4F9AE02.roa (hash: Y5wKsH1cPWNKRGL2sR47JtUL6S3wrlsTRofvAYJPq3Y=)
                          3: 8F12C9C8391F11EFB455E565C4F9AE02.roa (hash: bueneiv4zkp1hJi+0Ko6hSLY2lsE8PKm4m/3t84VQKA=)
                          4: 54098620A37B11EFAC4F8E3CC4F9AE02.roa (hash: AzvWvbrPiuhKiBHdJfjBxy5Ra/OUuOns6Vjq7S/FHI8=)
                          5: C6671418A37A11EFBED1AE3BC4F9AE02.roa (hash: vfLHTt29kOm1Z7Kfy6jmmNrQQkJF27JhRO5eWjZJVw0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl
                          rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 19:20:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2816 (0xb00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1FCC, serialNumber=08D256D426CA2171FCE817C64523F832A36917BD
        Validity
            Not Before: Apr 18 19:20:45 2026 GMT
            Not After : Apr 25 19:20:45 2026 GMT
        Subject: CN=69e3d98e-4346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8f:21:2f:28:7c:44:4b:a7:ae:02:f3:d6:43:
                    71:1d:7b:f2:d1:0d:60:8c:ef:a0:ee:45:ae:51:24:
                    94:92:cc:5e:85:99:b6:30:16:54:5e:88:44:3a:ce:
                    df:87:eb:8b:03:fc:ed:d6:ec:d6:e8:9e:ae:4f:3c:
                    10:95:ca:17:33:6f:fd:37:de:f2:cf:cf:9f:72:e7:
                    13:b9:04:d2:ea:66:8a:2a:fb:de:d5:dd:b2:48:75:
                    25:4e:d9:40:0e:c1:d4:f6:6e:11:42:7d:67:94:fc:
                    eb:55:b8:69:31:ff:9e:52:a6:15:b5:e2:70:76:78:
                    a2:93:83:63:6c:2b:25:30:ad:a0:dc:d6:7c:b4:4f:
                    78:e8:5e:bf:41:a4:61:51:b9:5c:84:fa:69:6d:36:
                    63:e1:2c:6b:b5:04:df:ca:85:52:46:65:ce:b6:82:
                    f8:bc:7a:c5:91:58:c4:7e:0a:02:60:65:19:bd:5d:
                    5c:ed:0f:c0:70:00:79:75:08:81:82:ab:c2:84:ad:
                    5b:e3:79:b0:1c:20:65:c7:eb:96:54:3c:c9:22:70:
                    38:e4:a6:80:b4:d0:1a:7e:39:d6:3b:49:81:e7:e4:
                    50:5c:08:c4:45:e7:cc:dc:c2:47:f9:df:f0:a1:e7:
                    e3:24:9d:de:83:a3:06:89:14:a3:3b:0a:f4:a4:a1:
                    73:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:FC:18:1E:4E:90:B8:35:18:EB:8E:D2:16:DF:2F:F2:AB:9D:DE:3B
            X509v3 Authority Key Identifier:
                keyid:08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:cc:db:de:7a:52:f8:64:1c:83:19:e0:76:08:62:47:36:b1:
         17:c4:b2:36:5d:67:bb:93:24:1b:9f:77:8e:60:e7:c0:e9:3a:
         f1:46:ee:36:2b:93:2b:06:f8:59:e0:a0:2f:d5:be:20:4c:3b:
         36:47:59:d8:21:0f:dd:aa:00:f7:22:36:e7:8e:cc:d4:7e:2e:
         ce:79:cf:bb:50:23:82:a7:b9:f4:e4:3a:95:df:2e:81:b7:07:
         87:5d:3a:d4:cb:74:67:7e:cb:de:a5:ca:df:21:37:ad:1d:fe:
         f9:21:a0:b8:46:f5:6d:4d:a7:f4:82:dc:13:41:b5:30:2a:e3:
         3d:6f:5f:f6:41:81:9e:7d:90:55:f6:16:fa:94:cf:bf:86:0a:
         ff:e4:c9:80:85:f1:39:81:1a:4e:41:83:28:83:d6:27:e6:56:
         b7:72:52:b1:75:6d:32:71:e0:49:da:50:2d:06:32:e5:04:b0:
         3c:b5:49:f8:4c:d3:a7:ab:9b:4b:cb:ec:29:de:6d:a8:e7:f1:
         74:58:46:3e:9e:c7:d2:4d:a7:61:c2:01:12:1d:c7:6a:3b:ae:
         ef:8b:58:4c:ee:cb:dc:0c:7f:a8:9e:50:4a:d2:0d:2a:12:d5:
         be:1f:62:0d:45:32:b1:7c:9e:73:c3:80:7e:bd:40:4c:d7:79:
         3a:ea:6b:4d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCwAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzFGQ0MxMTAvBgNVBAUTKDA4RDI1NkQ0MjZDQTIxNzFGQ0U4MTdDNjQ1MjNGODMy
QTM2OTE3QkQwHhcNMjYwNDE4MTkyMDQ1WhcNMjYwNDI1MTkyMDQ1WjAYMRYwFAYD
VQQDEw02OWUzZDk4ZS00MzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs48hLyh8REunrgLz1kNxHXvy0Q1gjO+g7kWuUSSUksxehZm2MBZUXohEOs7f
h+uLA/zt1uzW6J6uTzwQlcoXM2/9N97yz8+fcucTuQTS6maKKvve1d2ySHUlTtlA
DsHU9m4RQn1nlPzrVbhpMf+eUqYVteJwdniik4NjbCslMK2g3NZ8tE946F6/QaRh
UblchPppbTZj4SxrtQTfyoVSRmXOtoL4vHrFkVjEfgoCYGUZvV1c7Q/AcAB5dQiB
gqvChK1b43mwHCBlx+uWVDzJInA45KaAtNAafjnWO0mB5+RQXAjERefM3MJH+d/w
oefjJJ3eg6MGiRSjOwr0pKFz4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIv8GB5O
kLg1GOuO0hbfL/Krnd47MB8GA1UdIwQYMBaAFAjSVtQmyiFx/OgXxkUj+DKjaRe9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUZDQy9DREJDNTk4Njcz
MDkxMUVBQTg4MjAwMzBDNEY5QUUwMi9DTkpXMUNiS0lYSDg2QmZHUlNQNE1xTnBG
NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NOSlcxQ2JLSVhIODZCZkdSU1A0TXFOcEY3MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MUZDQy9DREJDNTk4NjczMDkxMUVBQTg4MjAwMzBDNEY5QUUwMi9DTkpXMUNiS0lY
SDg2QmZHUlNQNE1xTnBGNzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASczb3npS+GQcgxngdghiRzaxF8SyNl1nu5MkG593jmDnwOk68UbuNiuTKwb4
WeCgL9W+IEw7NkdZ2CEP3aoA9yI2547M1H4uznnPu1Ajgqe59OQ6ld8ugbcHh106
1Mt0Z37L3qXK3yE3rR3++SGguEb1bU2n9ILcE0G1MCrjPW9f9kGBnn2QVfYW+pTP
v4YK/+TJgIXxOYEaTkGDKIPWJ+ZWt3JSsXVtMnHgSdpQLQYy5QSwPLVJ+EzTp6ub
S8vsKd5tqOfxdFhGPp7H0k2nYcIBEh3Hajuu74tYTO7L3Ax/qJ5QStINKhLVvh9i
DUUysXyec8OAfr1ATNd5OuprTQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:03:14 2026 by rpki-client