Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.mft
File:                     1ex0z8jA_QV81Og74-tX8GHcWPg.mft (raw, json)
Hash identifier:          I+vqcd4A0t7c5BjciUM2YpZ+w8950NUV7NJce9QJUqg=
Subject key identifier:   21:49:F0:95:5A:63:B0:07:82:F0:4A:21:8A:40:E0:BA:A7:A8:0E:61
Authority key identifier: D5:EC:74:CF:C8:C0:FD:05:7C:D4:E8:3B:E3:EB:57:F0:61:DC:58:F8
Certificate issuer:       /CN=A91D313B/serialNumber=D5EC74CFC8C0FD057CD4E83BE3EB57F061DC58F8
Certificate serial:       0147
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ex0z8jA_QV81Og74-tX8GHcWPg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.mft
Manifest number:          0147
Signing time:             Fri 17 Apr 2026 04:56:21 +0000
Manifest this update:     Fri 17 Apr 2026 04:56:21 +0000
Manifest next update:     Fri 24 Apr 2026 04:56:21 +0000
Files and hashes:         1: 1ex0z8jA_QV81Og74-tX8GHcWPg.crl (hash: oSf7ytcsMScgxl4jtVrMkBOlXxXppdhXiotXdHztNb0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.crl
                          rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ex0z8jA_QV81Og74-tX8GHcWPg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:56:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 327 (0x147)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D313B, serialNumber=D5EC74CFC8C0FD057CD4E83BE3EB57F061DC58F8
        Validity
            Not Before: Apr 17 04:56:21 2026 GMT
            Not After : Apr 24 04:56:21 2026 GMT
        Subject: CN=69e1bd75-1b35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:8d:11:b9:63:06:ac:99:39:60:62:1c:8e:dd:
                    c1:11:e1:57:0d:06:87:f2:73:3d:53:0f:af:75:11:
                    67:a1:92:b4:f4:53:89:74:6c:36:6a:f9:aa:b7:e0:
                    d4:f3:e6:a4:32:cc:73:ab:3c:4e:3b:4f:34:b1:a0:
                    1d:84:89:07:a0:32:bf:07:98:b2:a7:53:bf:d6:e3:
                    8d:d4:f5:49:74:b7:fd:1c:bc:e7:9f:b4:a7:cf:0d:
                    71:77:d2:81:cc:9b:55:e2:e1:35:3c:4c:e6:40:19:
                    d7:93:15:a8:a4:2d:be:c3:8a:ab:a3:23:45:23:bb:
                    ec:08:19:b6:d1:a6:f1:22:aa:34:f2:cb:37:03:20:
                    2d:bc:d0:a4:00:ee:c2:27:e6:2b:74:e9:ae:31:f4:
                    46:af:e1:d1:1b:fb:cd:d1:41:43:fc:fe:13:ee:eb:
                    80:e1:53:4c:81:3b:bb:a6:b3:ea:ce:4a:eb:50:77:
                    43:67:1a:f9:99:6a:1f:08:59:f9:03:76:a4:48:e3:
                    9d:da:7e:3c:77:27:7d:60:99:cf:76:9a:38:76:44:
                    28:7e:7c:50:93:77:31:c2:95:95:4f:a4:13:df:ef:
                    45:e3:d3:21:b8:1b:b7:d8:32:d6:a2:d2:0a:11:40:
                    b7:94:77:5a:c3:2a:44:a9:d5:d5:e5:20:78:59:c3:
                    fc:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:49:F0:95:5A:63:B0:07:82:F0:4A:21:8A:40:E0:BA:A7:A8:0E:61
            X509v3 Authority Key Identifier:
                keyid:D5:EC:74:CF:C8:C0:FD:05:7C:D4:E8:3B:E3:EB:57:F0:61:DC:58:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ex0z8jA_QV81Og74-tX8GHcWPg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:f9:a4:7b:f4:0a:f1:ae:9d:60:66:29:e4:35:a3:50:d2:f3:
         36:1d:c5:e0:42:7f:ba:0b:6f:bc:9c:ff:f1:84:8e:9a:94:1f:
         e2:b8:7f:a8:0a:3c:c5:78:52:4c:1f:60:67:1c:1c:c3:ca:46:
         95:39:77:78:f3:10:42:67:8c:62:c5:1c:5d:5d:97:c9:8d:57:
         6e:2b:7e:1b:31:54:a8:27:ba:72:69:5b:13:2f:44:d3:b4:d1:
         a9:e4:c5:c0:68:10:c7:ac:02:d5:73:d4:2c:fc:71:ed:2e:26:
         cc:45:91:19:c6:da:9f:7a:e8:45:a1:58:12:19:91:91:68:8a:
         03:3b:f2:ee:1a:f6:a7:5c:1a:c0:12:57:e2:ed:05:f5:e0:80:
         b9:3d:3b:4f:91:56:5e:17:37:91:45:6b:c3:bc:29:fe:d0:69:
         d2:0e:2c:01:79:d5:4c:c0:25:12:78:5d:c8:43:99:fe:5e:a2:
         c5:b1:20:18:1f:33:0d:58:c5:d6:73:fa:a4:3d:a9:ba:f0:74:
         d5:1c:39:20:b4:3e:f2:82:74:70:f1:6b:e1:20:99:32:2d:cf:
         2b:e5:0e:af:dd:80:03:a5:49:46:f2:35:64:8e:55:ba:44:95:
         74:6d:a9:ff:17:e4:cb:7a:c6:10:be:f4:93:fb:86:d0:36:46:
         70:f4:b5:90
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDMxM0IxMTAvBgNVBAUTKEQ1RUM3NENGQzhDMEZEMDU3Q0Q0RTgzQkUzRUI1N0Yw
NjFEQzU4RjgwHhcNMjYwNDE3MDQ1NjIxWhcNMjYwNDI0MDQ1NjIxWjAYMRYwFAYD
VQQDEw02OWUxYmQ3NS0xYjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2o0RuWMGrJk5YGIcjt3BEeFXDQaH8nM9Uw+vdRFnoZK09FOJdGw2avmqt+DU
8+akMsxzqzxOO080saAdhIkHoDK/B5iyp1O/1uON1PVJdLf9HLznn7Snzw1xd9KB
zJtV4uE1PEzmQBnXkxWopC2+w4qroyNFI7vsCBm20abxIqo08ss3AyAtvNCkAO7C
J+YrdOmuMfRGr+HRG/vN0UFD/P4T7uuA4VNMgTu7prPqzkrrUHdDZxr5mWofCFn5
A3akSOOd2n48dyd9YJnPdpo4dkQofnxQk3cxwpWVT6QT3+9F49MhuBu32DLWotIK
EUC3lHdawypEqdXV5SB4WcP8dwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCFJ8JVa
Y7AHgvBKIYpA4LqnqA5hMB8GA1UdIwQYMBaAFNXsdM/IwP0FfNToO+PrV/Bh3Fj4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzEzQi9ENUJGRUMxNDQ3
REIxMUVGQUVBNEIwMkRDNEY5QUUwMi8xZXgwejhqQV9RVjgxT2c3NC10WDhHSGNX
UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFleDB6OGpBX1FWODFPZzc0LXRYOEdIY1dQZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MzEzQi9ENUJGRUMxNDQ3REIxMUVGQUVBNEIwMkRDNEY5QUUwMi8xZXgwejhqQV9R
VjgxT2c3NC10WDhHSGNXUGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAN/mke/QK8a6dYGYp5DWjUNLzNh3F4EJ/ugtvvJz/8YSOmpQf4rh/qAo8xXhS
TB9gZxwcw8pGlTl3ePMQQmeMYsUcXV2XyY1Xbit+GzFUqCe6cmlbEy9E07TRqeTF
wGgQx6wC1XPULPxx7S4mzEWRGcban3roRaFYEhmRkWiKAzvy7hr2p1wawBJX4u0F
9eCAuT07T5FWXhc3kUVrw7wp/tBp0g4sAXnVTMAlEnhdyEOZ/l6ixbEgGB8zDVjF
1nP6pD2puvB01Rw5ILQ+8oJ0cPFr4SCZMi3PK+UOr92AA6VJRvI1ZI5VukSVdG2p
/xfky3rGEL70k/uG0DZGcPS1kA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:53:19 2026 by rpki-client