Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft
File:                     ihprqbt2zysN7jXqTP0vX_jAieM.mft (raw, json)
Hash identifier:          fwKM5HbhFYgxne6f4Mb4iVr2/37OoIDZr6RUIYEKvL4=
Subject key identifier:   92:3A:EB:A8:79:22:BA:12:8B:3F:09:D6:38:18:F5:6D:DB:65:F5:48
Authority key identifier: 8A:1A:6B:A9:BB:76:CF:2B:0D:EE:35:EA:4C:FD:2F:5F:F8:C0:89:E3
Certificate issuer:       /CN=A91C36EE/serialNumber=8A1A6BA9BB76CF2B0DEE35EA4CFD2F5FF8C089E3
Certificate serial:       0C8F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihprqbt2zysN7jXqTP0vX_jAieM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft
Manifest number:          0C86
Signing time:             Thu 16 Apr 2026 18:29:09 +0000
Manifest this update:     Thu 16 Apr 2026 18:29:09 +0000
Manifest next update:     Thu 23 Apr 2026 18:29:09 +0000
Files and hashes:         1: ihprqbt2zysN7jXqTP0vX_jAieM.crl (hash: ZVjSr4VVLvh7GGp19tW4jkHl6ZSvHpuU5sRLG4VgWfw=)
                          2: 6FCF7FF2180411EA9AA70A57C4F9AE02.roa (hash: Jmt3gOA3SMMnVdNR/G0V8b2lUdwKqb+fxUhA4ydziJ8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.crl
                          rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihprqbt2zysN7jXqTP0vX_jAieM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:29:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3215 (0xc8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C36EE, serialNumber=8A1A6BA9BB76CF2B0DEE35EA4CFD2F5FF8C089E3
        Validity
            Not Before: Apr 16 18:29:09 2026 GMT
            Not After : Apr 23 18:29:09 2026 GMT
        Subject: CN=69e12a75-a9a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:42:a5:a0:1e:5f:5d:34:39:39:ad:83:d0:d8:
                    ad:0e:5a:3c:da:aa:49:98:57:99:3b:40:40:3d:ba:
                    be:8d:09:ee:c7:f8:b0:aa:c9:8f:fc:aa:77:a4:f4:
                    ee:01:5d:3b:a0:b5:9d:66:a9:4a:ed:e8:92:5c:d7:
                    b8:a3:02:64:dd:60:77:a6:fa:c4:b7:d0:c0:09:5e:
                    1f:e8:ce:7b:a8:30:22:21:a2:03:b4:f6:dd:e0:8c:
                    f4:81:18:16:ad:f5:b6:92:3a:fa:3d:8a:9f:10:36:
                    36:5e:86:e5:56:d4:55:75:89:86:a2:fa:25:79:0f:
                    32:74:81:6f:42:74:ce:0c:b8:5b:f8:0f:10:83:1d:
                    98:22:f2:ca:4a:cc:a7:14:12:d0:b9:65:c9:61:7c:
                    de:08:74:64:c5:c8:18:cb:d5:70:73:bf:b1:ed:54:
                    51:be:b0:4c:e2:c8:37:41:84:36:95:cd:89:5f:61:
                    22:10:92:07:55:f4:13:c5:b9:8a:b6:f5:a0:26:f9:
                    36:f5:d4:d0:93:ab:17:6f:c4:42:ab:85:18:da:82:
                    59:d6:44:7b:f5:f8:e6:15:fd:73:b7:a4:6b:6e:76:
                    f4:da:32:21:fe:83:17:dc:16:3f:4f:a9:b3:ec:16:
                    d3:e6:02:50:0d:5d:a6:6b:dc:40:c9:43:82:e8:64:
                    a2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:3A:EB:A8:79:22:BA:12:8B:3F:09:D6:38:18:F5:6D:DB:65:F5:48
            X509v3 Authority Key Identifier:
                keyid:8A:1A:6B:A9:BB:76:CF:2B:0D:EE:35:EA:4C:FD:2F:5F:F8:C0:89:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihprqbt2zysN7jXqTP0vX_jAieM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:26:88:77:ec:91:66:ec:b5:41:16:ed:13:fd:38:af:53:7e:
         5d:19:3a:6a:b2:f6:6b:76:7d:96:fc:0f:df:61:7e:b2:47:5d:
         46:2f:5d:67:2b:63:9c:90:70:80:5e:e2:5b:5c:de:b7:20:9b:
         ae:98:76:35:64:14:0b:42:8d:60:4b:b8:8a:e5:f0:03:c9:c8:
         9d:ad:4f:65:70:9e:f7:a5:ab:b6:c8:c2:79:22:43:62:c6:e3:
         06:64:27:9a:c7:f8:5b:88:da:82:fe:49:84:a6:d0:be:eb:54:
         4e:01:11:66:f1:c2:5e:e7:74:f0:d9:bb:3e:38:95:cc:68:3c:
         ea:22:0e:e5:bd:04:88:de:b2:76:81:ac:08:b7:f6:bf:d6:7e:
         75:ed:36:a9:5e:37:f4:9b:6f:be:8b:56:dc:72:78:18:23:d7:
         5d:06:d8:bd:a5:5d:e6:19:6f:61:68:66:46:b3:04:18:58:73:
         0a:35:e1:3f:6c:87:9e:5b:4e:db:51:fc:02:53:92:b0:2d:e1:
         81:61:e2:eb:89:64:8d:d6:f7:0e:1c:9e:3a:26:ba:b9:31:1b:
         32:b2:4a:70:23:5a:4a:2e:49:da:f1:78:c0:d9:62:60:3f:27:
         31:6f:3b:ca:40:2f:d4:5b:be:59:4f:67:2a:b0:e7:4a:ef:eb:
         02:fe:1f:78
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzM2RUUxMTAvBgNVBAUTKDhBMUE2QkE5QkI3NkNGMkIwREVFMzVFQTRDRkQyRjVG
RjhDMDg5RTMwHhcNMjYwNDE2MTgyOTA5WhcNMjYwNDIzMTgyOTA5WjAYMRYwFAYD
VQQDEw02OWUxMmE3NS1hOWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArEKloB5fXTQ5Oa2D0NitDlo82qpJmFeZO0BAPbq+jQnux/iwqsmP/Kp3pPTu
AV07oLWdZqlK7eiSXNe4owJk3WB3pvrEt9DACV4f6M57qDAiIaIDtPbd4Iz0gRgW
rfW2kjr6PYqfEDY2XoblVtRVdYmGovoleQ8ydIFvQnTODLhb+A8Qgx2YIvLKSsyn
FBLQuWXJYXzeCHRkxcgYy9Vwc7+x7VRRvrBM4sg3QYQ2lc2JX2EiEJIHVfQTxbmK
tvWgJvk29dTQk6sXb8RCq4UY2oJZ1kR79fjmFf1zt6Rrbnb02jIh/oMX3BY/T6mz
7BbT5gJQDV2ma9xAyUOC6GSiJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJI666h5
IroSiz8J1jgY9W3bZfVIMB8GA1UdIwQYMBaAFIoaa6m7ds8rDe416kz9L1/4wInj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzZFRS9BOEMxQzg3QTE4
MDMxMUVBQkVDODJCNTZDNEY5QUUwMi9paHBycWJ0Mnp5c043alhxVFAwdlhfakFp
ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2locHJxYnQyenlzTjdqWHFUUDB2WF9qQWllTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MzZFRS9BOEMxQzg3QTE4MDMxMUVBQkVDODJCNTZDNEY5QUUwMi9paHBycWJ0Mnp5
c043alhxVFAwdlhfakFpZU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfiaId+yRZuy1QRbtE/04r1N+XRk6arL2a3Z9lvwP32F+skddRi9dZytjnJBw
gF7iW1zetyCbrph2NWQUC0KNYEu4iuXwA8nIna1PZXCe96WrtsjCeSJDYsbjBmQn
msf4W4jagv5JhKbQvutUTgERZvHCXud08Nm7PjiVzGg86iIO5b0EiN6ydoGsCLf2
v9Z+de02qV439JtvvotW3HJ4GCPXXQbYvaVd5hlvYWhmRrMEGFhzCjXhP2yHnltO
21H8AlOSsC3hgWHi64lkjdb3DhyeOia6uTEbMrJKcCNaSi5J2vF4wNliYD8nMW87
ykAv1Fu+WU9nKrDnSu/rAv4feA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:06:38 2026 by rpki-client