Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft
File:                     f2vh1aJzD8In-vyJbRNDMkF4MXk.mft (raw, json)
Hash identifier:          L1IrWmsMuc0A0kjBtPV6CYdZKZCIzMwmWG8rnHxTf3E=
Subject key identifier:   53:8E:3A:36:51:BC:22:32:84:71:AB:3F:07:87:4C:7D:7A:B6:B8:69
Authority key identifier: 7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79
Certificate issuer:       /CN=A91DB4FE/serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179
Certificate serial:       0939
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft
Manifest number:          0836
Signing time:             Thu 16 Apr 2026 21:56:19 +0000
Manifest this update:     Thu 16 Apr 2026 21:56:19 +0000
Manifest next update:     Thu 23 Apr 2026 21:56:19 +0000
Files and hashes:         1: f2vh1aJzD8In-vyJbRNDMkF4MXk.crl (hash: KlBttDWizcMScY5RDWV4lpP3BtxH9LYZDhCp4R3lDDg=)
                          2: 284AFDA0F86011EE8DCC542DC4F9AE02.roa (hash: dT+hUVzmzkp0MF+xQqQP5dOO9l8lXm4CbzD8IR61uj0=)
                          3: 95EC5BBE0DC811F0A0561D5AC4F9AE02.roa (hash: DeqneaRaSaBqZknkWh20qyHmXKPz6RiopHUHTadeIFs=)
                          4: 5A034FE6BD9011EF8EBE9D64C4F9AE02.roa (hash: F75QXCxGZr3+/SASqc++qXUU4Ak7hy/ZkNV6fX02oFA=)
                          5: 71921B808DBD11EBB4566432C4F9AE02.roa (hash: 5/4YUq2O9OTal/tX146cKHyOeYhVIqDbo8MR2WNGJTA=)
                          6: DB120D6EC34A11EB9559E184C4F9AE02.roa (hash: FZxNGPEDm98WyIYelmT7Ny6KqOSVp9Hnu1QHhzseL+U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl
                          rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:56:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2361 (0x939)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB4FE, serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179
        Validity
            Not Before: Apr 16 21:56:19 2026 GMT
            Not After : Apr 23 21:56:19 2026 GMT
        Subject: CN=69e15b03-cff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ca:bb:a9:80:c2:28:77:ce:47:83:94:e6:67:
                    4b:7c:93:6c:d4:42:83:46:07:ce:0d:1e:fa:2a:9a:
                    8d:4d:2d:83:d1:48:ea:5a:84:63:c9:57:7c:ac:86:
                    7c:44:99:56:f3:11:f7:99:da:8f:93:3e:29:60:8e:
                    2a:af:de:92:c5:fa:3f:dc:72:9f:cc:fb:97:b4:fd:
                    fd:7b:b4:24:77:00:11:f9:b8:f6:0f:cb:ea:1a:42:
                    cc:b8:cc:ac:42:4b:1d:cd:f4:44:64:59:40:31:36:
                    ec:1d:de:24:47:6a:64:d0:a5:76:2e:2f:61:12:e2:
                    8a:f8:44:a1:30:74:17:7f:48:c0:03:9d:66:1b:83:
                    56:1c:fc:22:3e:8e:02:88:ff:79:94:90:bf:6f:a7:
                    8d:64:df:f4:6c:25:0c:df:9d:5d:29:9e:68:3a:f2:
                    2e:04:12:83:ed:6e:9e:4d:ef:f1:d6:2b:8b:38:3f:
                    90:09:82:50:78:6f:21:87:1e:80:2a:64:29:e0:1b:
                    84:31:dd:8b:9f:8e:a8:d9:c5:f9:af:f2:0a:c5:5c:
                    3c:82:1d:b7:d9:c7:c5:6d:1b:75:da:63:37:18:6b:
                    0f:da:44:0e:22:b0:04:76:2e:cc:0a:e5:2a:c9:c6:
                    9d:d0:76:34:9d:0e:0f:46:5c:45:47:4e:14:5a:09:
                    3e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:8E:3A:36:51:BC:22:32:84:71:AB:3F:07:87:4C:7D:7A:B6:B8:69
            X509v3 Authority Key Identifier:
                keyid:7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:aa:2d:2c:87:b4:33:5d:0f:d0:65:8c:54:77:20:11:d1:53:
         5a:97:e1:6b:5b:a5:cd:c9:81:01:6e:0f:0c:45:ec:39:07:30:
         1c:09:e4:77:1d:97:3b:e2:a2:c2:21:86:b3:a1:55:a7:6b:93:
         51:bd:6a:30:00:31:78:40:16:f2:7f:bd:13:4b:26:39:ba:d1:
         33:fb:c2:d3:65:e7:f7:32:e9:4d:0f:a7:f7:2e:d2:37:f7:e3:
         5c:eb:f1:ab:1f:4b:a9:bb:5e:96:4a:3c:ae:a1:83:bd:e0:0d:
         5e:b4:c2:25:22:f1:ef:1e:f9:6c:00:9c:ab:4c:28:b4:17:b7:
         a3:39:13:ea:bc:f2:ab:7e:2c:af:44:f4:a8:39:3c:66:95:2e:
         39:2b:d7:2a:d7:dd:83:8f:f1:00:24:7a:8d:ef:1b:a4:7e:39:
         86:32:5f:f3:d5:48:46:e0:67:2a:02:14:75:a3:63:d3:9d:c6:
         e6:b7:65:3b:c8:ea:3f:bb:01:6d:8b:ef:93:5d:17:d9:87:c0:
         fb:63:21:bc:83:b4:01:01:74:8f:cf:70:ef:54:ff:59:09:2f:
         18:ea:6f:50:a7:b7:22:c5:17:88:1d:97:a9:fa:70:f5:91:12:
         5a:7e:1b:ab:5a:49:f8:b6:ef:8b:69:fe:c9:f6:0e:b1:cc:77:
         56:50:f6:43
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCTkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REI0RkUxMTAvBgNVBAUTKDdGNkJFMUQ1QTI3MzBGQzIyN0ZBRkM4OTZEMTM0MzMy
NDE3ODMxNzkwHhcNMjYwNDE2MjE1NjE5WhcNMjYwNDIzMjE1NjE5WjAYMRYwFAYD
VQQDEw02OWUxNWIwMy1jZmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoMq7qYDCKHfOR4OU5mdLfJNs1EKDRgfODR76KpqNTS2D0UjqWoRjyVd8rIZ8
RJlW8xH3mdqPkz4pYI4qr96Sxfo/3HKfzPuXtP39e7QkdwAR+bj2D8vqGkLMuMys
QksdzfREZFlAMTbsHd4kR2pk0KV2Li9hEuKK+EShMHQXf0jAA51mG4NWHPwiPo4C
iP95lJC/b6eNZN/0bCUM351dKZ5oOvIuBBKD7W6eTe/x1iuLOD+QCYJQeG8hhx6A
KmQp4BuEMd2Ln46o2cX5r/IKxVw8gh232cfFbRt12mM3GGsP2kQOIrAEdi7MCuUq
ycad0HY0nQ4PRlxFR04UWgk+FQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFOOOjZR
vCIyhHGrPweHTH16trhpMB8GA1UdIwQYMBaAFH9r4dWicw/CJ/r8iW0TQzJBeDF5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjRGRS9DRjRBMTBFQTg1
RTExMUVCQUZCNTFFODRDNEY5QUUwMi9mMnZoMWFKekQ4SW4tdnlKYlJORE1rRjRN
WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2YydmgxYUp6RDhJbi12eUpiUk5ETWtGNE1Yay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QjRGRS9DRjRBMTBFQTg1RTExMUVCQUZCNTFFODRDNEY5QUUwMi9mMnZoMWFKekQ4
SW4tdnlKYlJORE1rRjRNWGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbKotLIe0M10P0GWMVHcgEdFTWpfha1ulzcmBAW4PDEXsOQcwHAnkdx2XO+Ki
wiGGs6FVp2uTUb1qMAAxeEAW8n+9E0smObrRM/vC02Xn9zLpTQ+n9y7SN/fjXOvx
qx9Lqbtelko8rqGDveANXrTCJSLx7x75bACcq0wotBe3ozkT6rzyq34sr0T0qDk8
ZpUuOSvXKtfdg4/xACR6je8bpH45hjJf89VIRuBnKgIUdaNj053G5rdlO8jqP7sB
bYvvk10X2YfA+2MhvIO0AQF0j89w71T/WQkvGOpvUKe3IsUXiB2Xqfpw9ZESWn4b
q1pJ+Lbvi2n+yfYOscx3VlD2Qw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:13:28 2026 by rpki-client