Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft
File:                     XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft (raw, json)
Hash identifier:          wQfjyl35dodA3QZz00V4YN5b6Q4Y6dqAQXr7wOxP1pc=
Subject key identifier:   9D:54:B1:20:43:93:DB:FC:73:70:64:7B:2E:2E:6C:F7:52:9D:50:4F
Authority key identifier: 5E:05:74:46:C4:96:1E:4D:26:C3:7F:FE:A8:AC:3F:7A:AD:D8:3B:32
Certificate issuer:       /CN=A91D83B3/serialNumber=5E057446C4961E4D26C37FFEA8AC3F7AADD83B32
Certificate serial:       0A48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft
Manifest number:          0A3E
Signing time:             Thu 16 Apr 2026 19:37:28 +0000
Manifest this update:     Thu 16 Apr 2026 19:37:27 +0000
Manifest next update:     Thu 23 Apr 2026 19:37:27 +0000
Files and hashes:         1: XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl (hash: aU4HJwq6QYVVjsVDLnh3VRfYWsKALYjm+QzerxhkVXQ=)
                          2: B01A5D448A0E11EAA8C40916C4F9AE02.roa (hash: uL14OpfP32+5y3tA0ivSjK4NgQZZVX7Ob3/KlBQRVf0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl
                          rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:37:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2632 (0xa48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D83B3, serialNumber=5E057446C4961E4D26C37FFEA8AC3F7AADD83B32
        Validity
            Not Before: Apr 16 19:37:27 2026 GMT
            Not After : Apr 23 19:37:27 2026 GMT
        Subject: CN=69e13a77-d9cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:47:15:e1:5b:96:8a:88:60:ed:1d:2d:46:f2:
                    2b:59:c0:3d:9c:79:15:99:6c:14:91:03:94:0e:c9:
                    29:c5:92:ae:61:ca:b9:27:60:8b:c7:d9:51:c9:aa:
                    a1:96:cd:b2:eb:01:55:b6:10:aa:db:ee:eb:60:d8:
                    0b:f9:30:08:2a:e1:94:f2:c8:a4:ff:d6:c3:63:45:
                    df:fd:b5:b1:96:75:b3:ed:67:2a:e5:d3:a1:16:0e:
                    ed:bd:31:3e:5b:7b:33:c9:4e:cd:83:e0:e3:dc:26:
                    6f:f9:19:a4:15:f1:cf:7e:79:79:b2:e7:82:5b:e1:
                    d2:87:4f:a7:87:7a:13:d0:d7:e7:f8:d7:33:2d:42:
                    21:e6:cc:45:d5:bb:52:a0:45:77:9f:42:35:32:48:
                    b8:1d:a7:f8:20:03:a5:c0:39:c1:35:bf:be:fd:84:
                    1a:5f:0e:63:ad:61:12:86:a7:25:df:07:3a:35:c3:
                    af:e0:05:7b:69:f7:d1:69:9e:b9:d4:e4:f5:a3:ab:
                    65:0c:fb:b4:5e:75:6e:d3:7f:f2:c2:09:ce:95:85:
                    9b:ef:2f:90:5e:80:d3:79:d2:d7:9d:9b:fb:11:32:
                    87:ab:71:87:50:de:1a:b7:c5:ea:2b:58:01:9c:6c:
                    ed:64:84:5a:56:2c:86:dd:ae:60:1a:71:f8:dc:dc:
                    73:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:54:B1:20:43:93:DB:FC:73:70:64:7B:2E:2E:6C:F7:52:9D:50:4F
            X509v3 Authority Key Identifier:
                keyid:5E:05:74:46:C4:96:1E:4D:26:C3:7F:FE:A8:AC:3F:7A:AD:D8:3B:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:7e:a6:58:dc:66:04:ad:ed:c7:b0:08:27:ce:c2:c3:23:76:
         b4:1d:62:1a:82:91:bb:c6:4c:36:d6:c7:79:77:88:22:0f:be:
         b7:97:23:67:ca:03:11:ce:e2:47:ae:d2:aa:66:af:f5:c5:3d:
         39:da:19:07:65:1c:8b:42:e3:49:6a:40:8e:ee:07:b5:b6:43:
         55:ad:08:e0:8a:d9:68:a2:88:ac:48:ed:af:60:dd:f3:6c:f5:
         ee:c3:a7:33:5b:65:11:56:be:93:02:23:aa:91:90:6b:18:50:
         f2:2c:b4:16:d0:15:3d:81:6b:a7:4b:e9:be:10:c8:20:5b:9d:
         62:ec:92:24:fe:33:31:39:61:7a:92:1b:39:ca:cd:fb:8f:67:
         7e:37:2e:25:9c:71:35:cf:fd:14:ee:60:84:59:58:c0:c6:05:
         ec:cd:73:00:a0:53:d7:41:fe:d7:33:f0:a4:89:26:28:26:13:
         db:82:53:cd:39:46:0d:a6:ab:8d:51:2f:fa:9e:89:86:27:c2:
         98:72:29:78:f4:14:e4:c9:d4:69:d6:dd:ec:76:c0:54:61:bf:
         9f:b6:2c:74:f7:ab:e9:b7:36:d1:28:d9:13:5f:ab:d3:de:43:
         cc:19:bd:48:af:a0:fe:30:86:90:68:20:6c:54:fa:ac:d5:8f:
         6f:6e:8b:32
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDgzQjMxMTAvBgNVBAUTKDVFMDU3NDQ2QzQ5NjFFNEQyNkMzN0ZGRUE4QUMzRjdB
QUREODNCMzIwHhcNMjYwNDE2MTkzNzI3WhcNMjYwNDIzMTkzNzI3WjAYMRYwFAYD
VQQDEw02OWUxM2E3Ny1kOWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA10cV4VuWiohg7R0tRvIrWcA9nHkVmWwUkQOUDskpxZKuYcq5J2CLx9lRyaqh
ls2y6wFVthCq2+7rYNgL+TAIKuGU8sik/9bDY0Xf/bWxlnWz7Wcq5dOhFg7tvTE+
W3szyU7Ng+Dj3CZv+RmkFfHPfnl5sueCW+HSh0+nh3oT0Nfn+NczLUIh5sxF1btS
oEV3n0I1Mki4Haf4IAOlwDnBNb++/YQaXw5jrWEShqcl3wc6NcOv4AV7affRaZ65
1OT1o6tlDPu0XnVu03/ywgnOlYWb7y+QXoDTedLXnZv7ETKHq3GHUN4at8XqK1gB
nGztZIRaViyG3a5gGnH43NxziwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ1UsSBD
k9v8c3Bkey4ubPdSnVBPMB8GA1UdIwQYMBaAFF4FdEbElh5NJsN//qisP3qt2Dsy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODNCMy9BM0QzRDgyMjhB
MEQxMUVBQTUwNTk3MTRDNEY5QUUwMi9YZ1YwUnNTV0hrMG13M18tcUt3X2VxM1lP
ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hnVjBSc1NXSGswbXczXy1xS3dfZXEzWU96SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
ODNCMy9BM0QzRDgyMjhBMEQxMUVBQTUwNTk3MTRDNEY5QUUwMi9YZ1YwUnNTV0hr
MG13M18tcUt3X2VxM1lPekkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHn6mWNxmBK3tx7AIJ87CwyN2tB1iGoKRu8ZMNtbHeXeIIg++t5cjZ8oDEc7i
R67Sqmav9cU9OdoZB2Uci0LjSWpAju4HtbZDVa0I4IrZaKKIrEjtr2Dd82z17sOn
M1tlEVa+kwIjqpGQaxhQ8iy0FtAVPYFrp0vpvhDIIFudYuySJP4zMTlhepIbOcrN
+49nfjcuJZxxNc/9FO5ghFlYwMYF7M1zAKBT10H+1zPwpIkmKCYT24JTzTlGDaar
jVEv+p6JhifCmHIpePQU5MnUadbd7HbAVGG/n7YsdPer6bc20SjZE1+r095DzBm9
SK+g/jCGkGggbFT6rNWPb26LMg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:36:15 2026 by rpki-client