Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft
File:                     ABXboDjLzLFS7RcROqCo1ddIjSE.mft (raw, json)
Hash identifier:          QM+b/eva9sjcP6LiiS+yArLp058F86zw+v5Ai8oFujI=
Subject key identifier:   3C:37:34:15:8D:09:76:B3:EE:6C:A5:E4:E2:76:70:36:1C:D2:4E:43
Authority key identifier: 00:15:DB:A0:38:CB:CC:B1:52:ED:17:11:3A:A0:A8:D5:D7:48:8D:21
Certificate issuer:       /CN=A91CC564/serialNumber=0015DBA038CBCCB152ED17113AA0A8D5D7488D21
Certificate serial:       0923
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABXboDjLzLFS7RcROqCo1ddIjSE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft
Manifest number:          091A
Signing time:             Thu 16 Apr 2026 20:10:36 +0000
Manifest this update:     Thu 16 Apr 2026 20:10:36 +0000
Manifest next update:     Thu 23 Apr 2026 20:10:36 +0000
Files and hashes:         1: ABXboDjLzLFS7RcROqCo1ddIjSE.crl (hash: WGH/7ydZvZENlgM8jTIwTfvUfldpzgM/Uk2DZ0nrJ4Y=)
                          2: 74CCA13ADBE811EA8D063B7DC4F9AE02.roa (hash: Z/q3Sn+bG/2MqO5zayEdrpBR4UkNKUijCjfuQZVUaYw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.crl
                          rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABXboDjLzLFS7RcROqCo1ddIjSE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:10:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2339 (0x923)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC564, serialNumber=0015DBA038CBCCB152ED17113AA0A8D5D7488D21
        Validity
            Not Before: Apr 16 20:10:36 2026 GMT
            Not After : Apr 23 20:10:36 2026 GMT
        Subject: CN=69e1423c-a237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b8:4e:72:d5:a0:53:b6:1b:2d:71:4e:92:d4:
                    88:a3:95:ce:39:6b:3f:83:d5:64:9c:76:bf:d4:cd:
                    61:1d:47:60:65:b5:fe:67:d0:89:a0:e5:45:64:f3:
                    08:c0:2f:6d:02:62:af:22:9a:b1:dd:72:70:3c:8e:
                    2d:71:b9:16:37:bd:bc:07:11:b8:92:5f:cb:96:15:
                    37:3d:90:8c:86:1c:28:ae:81:6a:70:82:c8:9b:b3:
                    1b:0d:66:1c:72:9c:ec:7d:22:1a:47:04:f2:eb:99:
                    e1:db:c4:de:f8:0a:4a:cb:6a:48:c3:a4:c8:b9:d8:
                    6b:e9:4d:cf:e9:04:3b:e8:85:32:a8:b9:54:7f:39:
                    8c:8d:78:a3:07:8a:5f:99:42:d1:ef:44:06:0b:6b:
                    d6:7a:6e:28:6a:21:8d:f3:0d:34:78:12:ea:cc:a0:
                    aa:31:6a:5e:a7:76:a7:b3:fd:24:77:b5:4f:c5:86:
                    40:0c:b4:ff:4a:9f:b7:e3:7b:8c:bd:f7:24:97:80:
                    e8:1c:9f:d9:07:af:f6:a3:11:f1:72:27:2b:30:98:
                    de:8c:54:1d:b3:87:cb:29:a2:a1:94:8d:75:e2:75:
                    42:ed:cc:0b:15:14:42:1f:1b:c0:37:21:c2:64:3b:
                    4e:e8:a0:93:8e:61:94:6f:6a:4a:18:ea:bc:50:04:
                    94:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:37:34:15:8D:09:76:B3:EE:6C:A5:E4:E2:76:70:36:1C:D2:4E:43
            X509v3 Authority Key Identifier:
                keyid:00:15:DB:A0:38:CB:CC:B1:52:ED:17:11:3A:A0:A8:D5:D7:48:8D:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABXboDjLzLFS7RcROqCo1ddIjSE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:cf:fb:45:44:39:55:ec:b2:de:95:65:86:73:a4:3d:b5:29:
         1b:03:bb:4a:9e:8f:c3:fa:83:b9:3c:d9:32:a5:3e:b8:bd:04:
         76:29:8d:bf:0c:48:21:54:be:ab:1d:43:fc:ee:d3:f7:c7:9b:
         c6:8e:57:1a:ae:f7:2e:30:75:92:e8:77:54:f6:99:3f:52:53:
         71:11:1a:0b:50:6e:f1:0c:c3:5e:26:92:91:51:53:a5:5e:2e:
         57:fc:7c:66:7c:dd:ae:51:05:3f:77:38:17:cf:89:72:f3:8a:
         03:57:05:a4:17:05:c9:ec:df:99:41:cf:e0:4f:7e:3c:60:56:
         d9:ec:f9:87:39:d8:fd:b5:5d:7d:88:64:a7:0f:22:67:19:91:
         87:7f:ac:8a:53:20:cb:57:8a:db:ee:c2:3c:19:de:3c:9b:ab:
         49:52:3c:e2:2c:c5:09:0d:4b:bc:e0:96:8e:e9:7f:4a:54:f3:
         9c:fc:67:64:03:9b:ed:94:36:ef:af:35:fe:6a:9a:f9:a4:4d:
         03:68:25:8b:d6:90:a5:0b:3c:97:08:cb:fa:34:2a:d6:f4:56:
         a9:b6:ba:8f:35:05:35:e8:93:05:21:a4:83:ac:1a:5d:74:01:
         4e:10:7c:20:4f:ca:e1:71:b9:28:36:f8:84:ff:9b:ae:02:fb:
         69:87:02:64
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCSMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0M1NjQxMTAvBgNVBAUTKDAwMTVEQkEwMzhDQkNDQjE1MkVEMTcxMTNBQTBBOEQ1
RDc0ODhEMjEwHhcNMjYwNDE2MjAxMDM2WhcNMjYwNDIzMjAxMDM2WjAYMRYwFAYD
VQQDEw02OWUxNDIzYy1hMjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvrhOctWgU7YbLXFOktSIo5XOOWs/g9VknHa/1M1hHUdgZbX+Z9CJoOVFZPMI
wC9tAmKvIpqx3XJwPI4tcbkWN728BxG4kl/LlhU3PZCMhhworoFqcILIm7MbDWYc
cpzsfSIaRwTy65nh28Te+ApKy2pIw6TIudhr6U3P6QQ76IUyqLlUfzmMjXijB4pf
mULR70QGC2vWem4oaiGN8w00eBLqzKCqMWpep3ans/0kd7VPxYZADLT/Sp+343uM
vfckl4DoHJ/ZB6/2oxHxcicrMJjejFQds4fLKaKhlI114nVC7cwLFRRCHxvANyHC
ZDtO6KCTjmGUb2pKGOq8UASUkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDw3NBWN
CXaz7myl5OJ2cDYc0k5DMB8GA1UdIwQYMBaAFAAV26A4y8yxUu0XETqgqNXXSI0h
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzU2NC80RjI5RDBDNEM0
MEYxMUVBOUMxNUI0NzBDNEY5QUUwMi9BQlhib0RqTHpMRlM3UmNST3FDbzFkZElq
U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FCWGJvRGpMekxGUzdSY1JPcUNvMWRkSWpTRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QzU2NC80RjI5RDBDNEM0MEYxMUVBOUMxNUI0NzBDNEY5QUUwMi9BQlhib0RqTHpM
RlM3UmNST3FDbzFkZElqU0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALs/7RUQ5Veyy3pVlhnOkPbUpGwO7Sp6Pw/qDuTzZMqU+uL0EdimNvwxIIVS+
qx1D/O7T98ebxo5XGq73LjB1kuh3VPaZP1JTcREaC1Bu8QzDXiaSkVFTpV4uV/x8
ZnzdrlEFP3c4F8+JcvOKA1cFpBcFyezfmUHP4E9+PGBW2ez5hznY/bVdfYhkpw8i
ZxmRh3+silMgy1eK2+7CPBnePJurSVI84izFCQ1LvOCWjul/SlTznPxnZAOb7ZQ2
7681/mqa+aRNA2gli9aQpQs8lwjL+jQq1vRWqba6jzUFNeiTBSGkg6waXXQBThB8
IE/K4XG5KDb4hP+brgL7aYcCZA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:03:14 2026 by rpki-client