Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.mft
File:                     BUM8OuqKSXAsmoLuyV0WtVA86mA.mft (raw, json)
Hash identifier:          XHIiEq+kRCKvVKu/W0K0KRLK0CFjX3EzkCUD3YKiQTM=
Subject key identifier:   BE:BB:6E:F3:C4:4C:71:31:C8:03:54:57:4F:5B:E8:BB:61:BF:0A:DC
Authority key identifier: 05:43:3C:3A:EA:8A:49:70:2C:9A:82:EE:C9:5D:16:B5:50:3C:EA:60
Certificate issuer:       /CN=A91CFFA0/serialNumber=05433C3AEA8A49702C9A82EEC95D16B5503CEA60
Certificate serial:       0E09
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BUM8OuqKSXAsmoLuyV0WtVA86mA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.mft
Manifest number:          0DDB
Signing time:             Thu 16 Apr 2026 17:48:24 +0000
Manifest this update:     Thu 16 Apr 2026 17:48:23 +0000
Manifest next update:     Thu 23 Apr 2026 17:48:23 +0000
Files and hashes:         1: BUM8OuqKSXAsmoLuyV0WtVA86mA.crl (hash: Ix5L/yN64oVy7woQKSyXdIHhloYL40v9hUvPSNGwHaQ=)
                          2: 1F4E1CC014D311EA81309110C4F9AE02.roa (hash: onq3kLqhAx1MRzvzSd2yOhdRNFOh2mwuifP1Le+Ju0M=)
                          3: 0E3F36D8C43D11EBAB31777FC4F9AE02.roa (hash: D9klEFQG/k6Phw9Yt86DVaS1LFIWfa7yVLK9O+stCIY=)
                          4: 83ECD7C40CCA11ED97820077C4F9AE02.roa (hash: ky9Ng4i7BRaoHnDxU2AZbymyosvFrsEsC/8UhobSRso=)
                          5: E6F0F39214CE11EA9E740182C4F9AE02.roa (hash: USUvjmydXjtMJPzPbFEwUqIP+Ih5VSwPB5Ykt4WO3Ws=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.crl
                          rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BUM8OuqKSXAsmoLuyV0WtVA86mA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 17:48:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3593 (0xe09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFFA0, serialNumber=05433C3AEA8A49702C9A82EEC95D16B5503CEA60
        Validity
            Not Before: Apr 16 17:48:23 2026 GMT
            Not After : Apr 23 17:48:23 2026 GMT
        Subject: CN=69e120e8-286d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:70:d2:63:d3:32:c8:37:d3:76:60:9a:4c:3c:
                    8a:54:b5:1d:d4:e3:1b:b0:dc:2b:c4:c3:fc:fa:9c:
                    29:c6:ce:6e:2b:e3:83:ac:59:fe:d9:b8:8f:63:6e:
                    42:5a:46:07:0e:3f:43:21:95:97:be:a6:ea:e9:e6:
                    e9:62:1c:9a:40:76:56:5d:e4:f4:84:3f:2b:8e:a9:
                    a3:63:5a:f7:37:23:0d:82:15:52:3f:48:05:bf:69:
                    dc:fd:eb:08:27:29:ef:fd:84:30:78:ba:de:d5:99:
                    8c:7a:59:a7:bc:8f:58:2b:96:bf:a0:18:87:f2:28:
                    6d:c0:cb:41:5d:7f:8b:5d:22:ee:fc:05:4c:71:33:
                    ac:22:11:88:2c:4e:f4:6e:69:2d:bd:ff:2c:ea:19:
                    a2:cb:39:5f:8d:5a:8e:13:75:34:fc:5f:d5:9e:da:
                    60:06:02:5b:61:5c:14:e3:2b:67:52:58:de:84:e2:
                    bf:72:81:12:06:cf:38:bd:63:61:ba:a5:43:0b:9c:
                    23:22:f7:e3:d7:60:48:3a:cd:eb:66:63:4f:0f:7a:
                    45:5a:fd:f9:ee:2c:b1:58:67:06:25:7b:ce:02:24:
                    46:60:93:b1:ce:db:ea:31:ec:1d:92:f3:9e:1c:c0:
                    9d:bd:22:26:9d:a6:38:ea:6b:bc:67:1f:4c:ff:23:
                    0f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:BB:6E:F3:C4:4C:71:31:C8:03:54:57:4F:5B:E8:BB:61:BF:0A:DC
            X509v3 Authority Key Identifier:
                keyid:05:43:3C:3A:EA:8A:49:70:2C:9A:82:EE:C9:5D:16:B5:50:3C:EA:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BUM8OuqKSXAsmoLuyV0WtVA86mA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:6b:94:b7:46:64:cb:f6:1a:25:61:c8:b1:4b:6f:71:94:43:
         27:83:af:92:93:90:fc:db:e4:77:98:16:5d:a5:8c:f1:e5:42:
         88:a9:bd:d3:6b:48:c7:8e:52:9f:e2:b6:ac:18:ff:6e:9e:8a:
         be:5d:12:72:67:9b:86:cb:ce:ce:ad:b5:46:d9:33:08:02:e1:
         14:14:b2:7a:72:35:72:b9:41:00:9e:50:16:e6:e4:46:71:c6:
         37:a0:a2:b4:61:05:89:0d:89:51:ca:15:e1:d6:55:88:c3:cc:
         c1:d2:41:38:77:98:54:39:fb:41:46:f6:4d:8d:82:c7:aa:e5:
         26:70:ee:2a:0e:09:e7:a9:1e:5f:43:d2:b3:d2:40:90:89:f0:
         fa:72:bf:b7:c9:2b:6a:ad:a4:11:9b:16:77:0d:d0:c7:42:76:
         3e:96:0e:00:ae:0d:f9:73:27:55:92:18:51:52:12:ca:c9:21:
         2d:cc:1b:53:3d:76:c8:1f:93:06:86:64:ad:6e:e4:9a:3f:f0:
         e5:f7:75:f5:d0:22:45:1a:6e:55:95:d7:ed:5f:a5:11:e9:27:
         e4:2d:0d:a8:4c:98:a9:28:70:0b:d6:72:c5:3e:f9:57:2b:37:
         20:d4:ea:07:b9:00:be:4f:a0:d6:98:91:f9:bb:42:3c:09:93:
         b4:0b:2a:cc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0ZGQTAxMTAvBgNVBAUTKDA1NDMzQzNBRUE4QTQ5NzAyQzlBODJFRUM5NUQxNkI1
NTAzQ0VBNjAwHhcNMjYwNDE2MTc0ODIzWhcNMjYwNDIzMTc0ODIzWjAYMRYwFAYD
VQQDEw02OWUxMjBlOC0yODZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy3DSY9MyyDfTdmCaTDyKVLUd1OMbsNwrxMP8+pwpxs5uK+ODrFn+2biPY25C
WkYHDj9DIZWXvqbq6ebpYhyaQHZWXeT0hD8rjqmjY1r3NyMNghVSP0gFv2nc/esI
Jynv/YQweLre1ZmMelmnvI9YK5a/oBiH8ihtwMtBXX+LXSLu/AVMcTOsIhGILE70
bmktvf8s6hmiyzlfjVqOE3U0/F/VntpgBgJbYVwU4ytnUljehOK/coESBs84vWNh
uqVDC5wjIvfj12BIOs3rZmNPD3pFWv357iyxWGcGJXvOAiRGYJOxztvqMewdkvOe
HMCdvSImnaY46mu8Zx9M/yMPvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL67bvPE
THExyANUV09b6LthvwrcMB8GA1UdIwQYMBaAFAVDPDrqiklwLJqC7sldFrVQPOpg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZBMC8xNTBCRjY5MEQ4
Q0IxMUU5QkFFMjREMjFDNEY5QUUwMi9CVU04T3VxS1NYQXNtb0x1eVYwV3RWQTg2
bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0JVTThPdXFLU1hBc21vTHV5VjBXdFZBODZtQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RkZBMC8xNTBCRjY5MEQ4Q0IxMUU5QkFFMjREMjFDNEY5QUUwMi9CVU04T3VxS1NY
QXNtb0x1eVYwV3RWQTg2bUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeGuUt0Zky/YaJWHIsUtvcZRDJ4OvkpOQ/Nvkd5gWXaWM8eVCiKm902tIx45S
n+K2rBj/bp6Kvl0ScmebhsvOzq21RtkzCALhFBSyenI1crlBAJ5QFubkRnHGN6Ci
tGEFiQ2JUcoV4dZViMPMwdJBOHeYVDn7QUb2TY2Cx6rlJnDuKg4J56keX0PSs9JA
kInw+nK/t8kraq2kEZsWdw3Qx0J2PpYOAK4N+XMnVZIYUVISyskhLcwbUz12yB+T
BoZkrW7kmj/w5fd19dAiRRpuVZXX7V+lEekn5C0NqEyYqShwC9ZyxT75Vys3INTq
B7kAvk+g1piR+btCPAmTtAsqzA==
-----END CERTIFICATE-----
Generated at Sat Apr 18 08:55:41 2026 by rpki-client