Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft
File:                     9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft (raw, json)
Hash identifier:          MU+OTpvAFuXj0QoMi/HWRmhTBHrut1rkViZr9u2XtDY=
Subject key identifier:   06:67:E5:8E:8D:D7:AE:B9:C9:66:C9:D9:09:23:82:4B:15:35:C5:61
Authority key identifier: F7:26:7E:80:BE:81:7F:04:3D:28:FB:7E:73:05:F4:C4:88:A8:39:1A
Certificate issuer:       /CN=A91C7AA5/serialNumber=F7267E80BE817F043D28FB7E7305F4C488A8391A
Certificate serial:       F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yZ-gL6BfwQ9KPt-cwX0xIioORo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft
Manifest number:          E2
Signing time:             Fri 17 Apr 2026 06:39:57 +0000
Manifest this update:     Fri 17 Apr 2026 06:39:56 +0000
Manifest next update:     Fri 24 Apr 2026 06:39:56 +0000
Files and hashes:         1: 9yZ-gL6BfwQ9KPt-cwX0xIioORo.crl (hash: e+KT+z+S7eh/D4tV/iFynJ7WpUcjZxT52T1RxKjgvA4=)
                          2: 0AC13D943C5711F0BFBB572EC4F9AE02.roa (hash: 7IPdyrB8hldu0/eD1JF7CKYpSU0HFM1oIZi+GkIqvMI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.crl
                          rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yZ-gL6BfwQ9KPt-cwX0xIioORo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:39:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 247 (0xf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7AA5, serialNumber=F7267E80BE817F043D28FB7E7305F4C488A8391A
        Validity
            Not Before: Apr 17 06:39:56 2026 GMT
            Not After : Apr 24 06:39:56 2026 GMT
        Subject: CN=69e1d5bc-3c78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:78:6b:53:f3:ad:e7:eb:8a:38:33:64:3e:19:
                    ec:dd:a1:eb:98:16:d9:ad:07:84:20:00:19:6d:f0:
                    3b:63:5b:4d:50:e3:df:74:66:0e:f7:de:11:e4:43:
                    c2:c7:ac:cb:5b:be:3c:71:74:15:b5:f1:b5:5b:8c:
                    31:5f:e3:81:f7:ab:80:a5:c0:61:98:f0:1b:8e:8d:
                    44:a1:2d:02:2e:30:c9:9e:9e:00:ca:97:2d:f1:f8:
                    d7:f3:aa:84:3c:8e:3d:51:6c:3a:6f:98:00:72:e4:
                    e4:9a:aa:0a:dd:f1:c7:cd:63:40:18:bf:09:ed:7e:
                    5b:30:1a:be:2e:ff:d3:a3:36:f1:57:e7:74:e8:26:
                    d5:fe:2b:30:f7:59:57:72:c4:51:35:d1:3d:4c:7f:
                    94:d6:80:a1:63:95:91:76:f6:2f:18:68:79:19:57:
                    0a:43:e5:67:22:68:fb:ea:0f:9b:98:f5:81:f1:87:
                    72:6b:37:99:9b:59:f8:de:3a:87:17:c2:6f:d1:dc:
                    e8:75:33:dd:d7:64:39:9c:df:16:39:76:ce:43:c4:
                    70:be:bb:20:6a:dc:48:21:59:5b:47:41:42:2f:c3:
                    d6:71:51:51:66:67:69:95:28:7a:d7:db:e3:a3:30:
                    3e:70:31:3f:68:13:e6:b1:dd:e0:05:15:9d:78:7c:
                    66:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:67:E5:8E:8D:D7:AE:B9:C9:66:C9:D9:09:23:82:4B:15:35:C5:61
            X509v3 Authority Key Identifier:
                keyid:F7:26:7E:80:BE:81:7F:04:3D:28:FB:7E:73:05:F4:C4:88:A8:39:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yZ-gL6BfwQ9KPt-cwX0xIioORo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:09:28:39:71:58:d3:4b:28:03:7a:c2:88:38:a3:41:11:3e:
         aa:6e:cb:d4:bf:af:ee:c5:4d:f9:5c:fc:bb:5f:ca:e0:ac:95:
         63:f0:0d:30:39:1d:fc:31:c6:0e:99:ac:a1:03:cd:36:eb:1a:
         ba:34:0f:7d:ef:82:70:c2:fb:b1:e0:26:78:e4:62:4b:9d:17:
         a8:3b:28:40:ac:eb:49:eb:f0:c9:1d:2a:d0:48:75:4b:22:42:
         b0:14:8c:b3:fe:62:f5:9e:e0:35:a6:b8:49:e4:7c:86:1c:fb:
         8e:43:99:9a:4b:09:77:8e:3c:79:3a:65:a0:b3:66:b2:f4:c2:
         7d:93:63:62:56:70:ee:49:3b:f7:b4:c8:0e:be:33:4b:3c:a9:
         63:65:06:a8:4d:d9:b2:12:ec:84:e1:b5:30:24:7e:8d:79:df:
         b7:42:25:85:2a:66:88:9f:f2:85:e4:01:a3:0d:fb:b9:e0:1d:
         75:75:a4:ff:d2:8d:1d:c0:4e:43:c2:7a:a3:f7:9c:37:8c:21:
         6b:1d:3d:38:10:b0:07:4b:d1:50:73:bf:5e:5d:d6:25:25:7e:
         3f:ea:fd:1f:20:73:01:c4:a9:03:85:65:5e:42:7d:79:7e:dc:
         d9:f7:5b:93:a2:26:76:db:60:d0:78:a9:d1:28:23:eb:8c:6b:
         57:c0:84:de
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzdBQTUxMTAvBgNVBAUTKEY3MjY3RTgwQkU4MTdGMDQzRDI4RkI3RTczMDVGNEM0
ODhBODM5MUEwHhcNMjYwNDE3MDYzOTU2WhcNMjYwNDI0MDYzOTU2WjAYMRYwFAYD
VQQDEw02OWUxZDViYy0zYzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0XhrU/Ot5+uKODNkPhns3aHrmBbZrQeEIAAZbfA7Y1tNUOPfdGYO994R5EPC
x6zLW748cXQVtfG1W4wxX+OB96uApcBhmPAbjo1EoS0CLjDJnp4Aypct8fjX86qE
PI49UWw6b5gAcuTkmqoK3fHHzWNAGL8J7X5bMBq+Lv/TozbxV+d06CbV/isw91lX
csRRNdE9TH+U1oChY5WRdvYvGGh5GVcKQ+VnImj76g+bmPWB8YdyazeZm1n43jqH
F8Jv0dzodTPd12Q5nN8WOXbOQ8RwvrsgatxIIVlbR0FCL8PWcVFRZmdplSh619vj
ozA+cDE/aBPmsd3gBRWdeHxmswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAZn5Y6N
1665yWbJ2QkjgksVNcVhMB8GA1UdIwQYMBaAFPcmfoC+gX8EPSj7fnMF9MSIqDka
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0FBNS9CQUZCMzU3NDE1
QkIxMUYwQkZENTQ4ODFDNEY5QUUwMi85eVotZ0w2QmZ3UTlLUHQtY3dYMHhJaW9P
Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzl5Wi1nTDZCZndROUtQdC1jd1gweElpb09Sby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
N0FBNS9CQUZCMzU3NDE1QkIxMUYwQkZENTQ4ODFDNEY5QUUwMi85eVotZ0w2QmZ3
UTlLUHQtY3dYMHhJaW9PUm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApwkoOXFY00soA3rCiDijQRE+qm7L1L+v7sVN+Vz8u1/K4KyVY/ANMDkd/DHG
DpmsoQPNNusaujQPfe+CcML7seAmeORiS50XqDsoQKzrSevwyR0q0Eh1SyJCsBSM
s/5i9Z7gNaa4SeR8hhz7jkOZmksJd448eTploLNmsvTCfZNjYlZw7kk797TIDr4z
SzypY2UGqE3ZshLshOG1MCR+jXnft0IlhSpmiJ/yheQBow37ueAddXWk/9KNHcBO
Q8J6o/ecN4whax09OBCwB0vRUHO/Xl3WJSV+P+r9HyBzAcSpA4VlXkJ9eX7c2fdb
k6Imdttg0Hip0Sgj64xrV8CE3g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:39:48 2026 by rpki-client