Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.mft
File:                     97sXL8rsr7-evvJQihVCZDOuyd4.mft (raw, json)
Hash identifier:          GyTsC74WIPocSIwrcEbZNS1rvZ1jLJN1eslKsnnyzLU=
Subject key identifier:   7A:E2:1D:F8:FC:0A:D7:43:3D:10:95:5A:35:9B:95:28:BF:C9:44:A7
Authority key identifier: F7:BB:17:2F:CA:EC:AF:BF:9E:BE:F2:50:8A:15:42:64:33:AE:C9:DE
Certificate issuer:       /CN=A91CEDD3/serialNumber=F7BB172FCAECAFBF9EBEF2508A15426433AEC9DE
Certificate serial:       0289
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/97sXL8rsr7-evvJQihVCZDOuyd4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.mft
Manifest number:          0280
Signing time:             Fri 17 Apr 2026 01:41:49 +0000
Manifest this update:     Fri 17 Apr 2026 01:41:48 +0000
Manifest next update:     Fri 24 Apr 2026 01:41:48 +0000
Files and hashes:         1: 97sXL8rsr7-evvJQihVCZDOuyd4.crl (hash: r4YiQGYfHK0xpw+FICTmoVl0hmgddyphLSpUMlqAYKE=)
                          2: C714C5A6706211EDA9CCDB76C4F9AE02.roa (hash: PQz0xbKbyiBo1K+6lX1c97d5j/JyzQaM1t6G0/g1HBw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.crl
                          rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/97sXL8rsr7-evvJQihVCZDOuyd4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:41:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 649 (0x289)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CEDD3, serialNumber=F7BB172FCAECAFBF9EBEF2508A15426433AEC9DE
        Validity
            Not Before: Apr 17 01:41:48 2026 GMT
            Not After : Apr 24 01:41:48 2026 GMT
        Subject: CN=69e18fdc-c44c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:06:27:b7:cb:a0:09:dd:3c:96:c7:23:ff:6a:
                    8c:63:55:17:2d:8b:a2:fa:fc:74:a0:5b:9b:18:be:
                    f1:5e:08:71:6c:11:79:97:ee:c4:8d:60:ae:95:21:
                    91:ac:d8:59:15:ce:f9:e1:1c:7f:38:9d:03:0c:32:
                    f7:86:d2:ac:d2:06:05:2e:2f:a2:82:3c:b4:5f:bd:
                    db:e3:25:5b:0c:c1:e0:7b:1f:47:7c:4f:52:f8:68:
                    b7:8f:73:a5:36:18:e9:f0:a3:94:84:1c:69:3c:e0:
                    37:40:f2:56:f8:bc:85:22:94:0c:e6:bc:81:30:4d:
                    87:f4:42:53:3a:a2:34:1c:74:74:6e:b6:a6:67:86:
                    35:51:09:53:d9:86:3f:51:e2:10:17:93:01:2f:5d:
                    74:fe:64:94:df:c8:05:43:67:4c:9c:4d:80:77:ca:
                    40:94:7c:92:86:cf:e4:6f:8c:ab:5c:1b:5c:92:a1:
                    29:2d:ac:5e:8f:b9:99:9f:6e:09:34:fc:bb:bc:66:
                    f0:aa:bb:ee:53:26:f8:db:e5:f5:8d:8e:60:a3:14:
                    be:92:3a:b4:10:9a:56:54:98:2e:18:93:07:2d:74:
                    c6:49:9f:39:67:75:6d:2d:8b:78:cf:a1:36:32:0b:
                    96:76:4d:ad:02:8d:79:a5:54:5a:08:7b:b1:99:42:
                    ad:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E2:1D:F8:FC:0A:D7:43:3D:10:95:5A:35:9B:95:28:BF:C9:44:A7
            X509v3 Authority Key Identifier:
                keyid:F7:BB:17:2F:CA:EC:AF:BF:9E:BE:F2:50:8A:15:42:64:33:AE:C9:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/97sXL8rsr7-evvJQihVCZDOuyd4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:ca:de:d5:6e:a0:e2:90:7b:fd:4d:9e:87:ca:cb:05:84:0c:
         12:88:87:ca:73:3a:14:fc:c3:2b:62:cb:5b:13:15:e9:7e:e3:
         9d:5a:fc:18:4c:2e:6d:fe:0a:58:cd:83:a6:18:9e:d0:32:83:
         4a:c8:bf:7c:4f:b4:dd:b2:8f:bb:09:44:c5:7f:9a:07:ee:e2:
         ed:a8:ec:69:07:68:4d:be:64:84:0f:f3:ef:06:3c:c7:7f:5a:
         59:96:c0:68:e4:08:c3:21:f5:03:be:59:39:e2:c8:99:ca:1e:
         b9:ea:1f:30:4d:d9:c2:9b:b4:64:82:fb:08:8e:12:5a:82:05:
         9c:d4:5b:f8:eb:38:2b:40:7c:cf:51:f6:60:8c:f9:5a:1c:66:
         65:99:ec:2f:cf:3b:be:92:b5:61:2b:c0:30:f6:ee:00:b0:85:
         3a:a4:07:70:a6:7e:66:89:f0:11:a2:56:7d:b9:8b:4e:47:69:
         53:41:19:64:f9:41:8d:90:19:4c:e7:ac:9b:27:9f:e8:41:f9:
         1f:0e:98:83:9f:e9:a0:a0:9f:3a:d8:bc:2c:c8:41:3e:60:5b:
         e2:f4:b6:6c:de:29:97:d0:43:7a:9e:88:3c:5d:24:15:6c:f8:
         c3:48:03:96:17:5f:a1:1c:3b:b8:b4:15:74:f1:d0:92:32:89:
         2c:73:79:36
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0VERDMxMTAvBgNVBAUTKEY3QkIxNzJGQ0FFQ0FGQkY5RUJFRjI1MDhBMTU0MjY0
MzNBRUM5REUwHhcNMjYwNDE3MDE0MTQ4WhcNMjYwNDI0MDE0MTQ4WjAYMRYwFAYD
VQQDEw02OWUxOGZkYy1jNDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAngYnt8ugCd08lscj/2qMY1UXLYui+vx0oFubGL7xXghxbBF5l+7EjWCulSGR
rNhZFc754Rx/OJ0DDDL3htKs0gYFLi+igjy0X73b4yVbDMHgex9HfE9S+Gi3j3Ol
Nhjp8KOUhBxpPOA3QPJW+LyFIpQM5ryBME2H9EJTOqI0HHR0bramZ4Y1UQlT2YY/
UeIQF5MBL110/mSU38gFQ2dMnE2Ad8pAlHyShs/kb4yrXBtckqEpLaxej7mZn24J
NPy7vGbwqrvuUyb42+X1jY5goxS+kjq0EJpWVJguGJMHLXTGSZ85Z3VtLYt4z6E2
MguWdk2tAo15pVRaCHuxmUKttQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHriHfj8
CtdDPRCVWjWblSi/yUSnMB8GA1UdIwQYMBaAFPe7Fy/K7K+/nr7yUIoVQmQzrsne
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUREMy9EMDY2MzMyODcw
NUUxMUVEQUNBRDg4NUJDNEY5QUUwMi85N3NYTDhyc3I3LWV2dkpRaWhWQ1pET3V5
ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzk3c1hMOHJzcjctZXZ2SlFpaFZDWkRPdXlkNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RUREMy9EMDY2MzMyODcwNUUxMUVEQUNBRDg4NUJDNEY5QUUwMi85N3NYTDhyc3I3
LWV2dkpRaWhWQ1pET3V5ZDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJ8re1W6g4pB7/U2eh8rLBYQMEoiHynM6FPzDK2LLWxMV6X7jnVr8GEwubf4K
WM2Dphie0DKDSsi/fE+03bKPuwlExX+aB+7i7ajsaQdoTb5khA/z7wY8x39aWZbA
aOQIwyH1A75ZOeLImcoeueofME3Zwpu0ZIL7CI4SWoIFnNRb+Os4K0B8z1H2YIz5
WhxmZZnsL887vpK1YSvAMPbuALCFOqQHcKZ+ZonwEaJWfbmLTkdpU0EZZPlBjZAZ
TOesmyef6EH5Hw6Yg5/poKCfOti8LMhBPmBb4vS2bN4pl9BDep6IPF0kFWz4w0gD
lhdfoRw7uLQVdPHQkjKJLHN5Ng==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:17:21 2026 by rpki-client