Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft
File:                     inP7xm5uPo6rLV_CtomRCR8CHkU.mft (raw, json)
Hash identifier:          tSb6pM7sY2qugaD4juAWwy6JbkdyOvDehfsjwrpOZ7o=
Subject key identifier:   BC:22:61:A0:D5:35:76:0C:81:D1:5E:43:78:D9:5C:16:C8:62:E9:D5
Authority key identifier: 8A:73:FB:C6:6E:6E:3E:8E:AB:2D:5F:C2:B6:89:91:09:1F:02:1E:45
Certificate issuer:       /CN=A91DD309/serialNumber=8A73FBC66E6E3E8EAB2D5FC2B68991091F021E45
Certificate serial:       1CBC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inP7xm5uPo6rLV_CtomRCR8CHkU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft
Manifest number:          1C99
Signing time:             Thu 16 Apr 2026 16:09:04 +0000
Manifest this update:     Thu 16 Apr 2026 16:09:03 +0000
Manifest next update:     Thu 23 Apr 2026 16:09:03 +0000
Files and hashes:         1: inP7xm5uPo6rLV_CtomRCR8CHkU.crl (hash: SrMIglb4GiQDS7C2UtsaeqOUYcqkpFNvH3D5r68336E=)
                          2: 5A927B8088BA11F0951D1687C4F9AE02.roa (hash: wZg2SjBeIs3sbQBsHHtlhSYA3htjRxqL+3CCyp3oKAw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.crl
                          rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inP7xm5uPo6rLV_CtomRCR8CHkU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 16:09:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7356 (0x1cbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD309, serialNumber=8A73FBC66E6E3E8EAB2D5FC2B68991091F021E45
        Validity
            Not Before: Apr 16 16:09:03 2026 GMT
            Not After : Apr 23 16:09:03 2026 GMT
        Subject: CN=69e109a0-41fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:25:83:b4:d0:96:24:15:02:d6:92:fd:e3:7f:
                    ac:43:83:b3:04:93:6a:77:ba:bb:98:f4:dd:79:5c:
                    37:2d:16:67:74:3e:12:fb:45:36:d4:99:02:c4:1e:
                    d4:ad:80:3a:bb:5c:41:a4:80:5a:73:da:ae:1e:33:
                    98:a9:1f:74:2e:ef:c6:0b:d8:c7:ac:65:8d:14:59:
                    02:d9:4d:21:9f:2d:c3:e4:0d:1d:8d:d1:bb:12:4e:
                    4b:52:6d:50:a5:18:fd:c1:c8:78:26:5e:49:df:86:
                    49:db:74:28:10:51:8e:b4:34:6a:23:ec:ba:55:1c:
                    1e:d0:3c:d4:2e:11:58:7b:69:85:ed:04:e1:67:bd:
                    24:05:8c:2e:2b:26:3a:ef:3d:cc:c1:25:9e:e2:79:
                    85:61:12:17:2c:cd:04:bc:cf:47:36:26:84:1d:fc:
                    97:68:d9:ca:b6:d1:f9:78:7f:05:fd:e6:e8:3c:0e:
                    77:9e:a8:45:dc:41:05:ed:50:3d:e3:d9:e5:7f:0e:
                    1a:2d:a9:63:03:5c:32:70:38:b8:c1:6e:db:3b:ea:
                    95:57:20:4b:a1:f2:3b:1c:b6:26:f1:d5:f7:61:79:
                    d1:2d:65:0a:d2:95:62:7d:b5:97:74:c1:ca:40:42:
                    85:2b:24:5e:23:9a:15:eb:08:b8:21:e8:d2:aa:95:
                    88:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:22:61:A0:D5:35:76:0C:81:D1:5E:43:78:D9:5C:16:C8:62:E9:D5
            X509v3 Authority Key Identifier:
                keyid:8A:73:FB:C6:6E:6E:3E:8E:AB:2D:5F:C2:B6:89:91:09:1F:02:1E:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inP7xm5uPo6rLV_CtomRCR8CHkU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:38:4e:8f:e1:4d:fb:f4:ba:e8:b0:99:93:a3:fb:f5:84:77:
         62:36:79:95:45:38:04:6c:a0:c3:0e:66:2c:88:19:a2:27:3b:
         89:b5:14:65:4c:f2:fc:a7:17:7c:ce:e8:78:f7:03:c4:6f:10:
         b6:2d:72:14:74:f4:34:01:f3:0d:2d:d6:21:0f:27:e4:53:d6:
         d4:a7:18:32:7b:f5:34:46:f3:4b:99:e1:68:79:6f:81:24:9f:
         97:2c:98:6b:15:de:08:38:fc:62:eb:36:f5:8e:46:d0:83:8e:
         3c:03:b9:83:ae:68:0b:f2:ee:b8:a8:af:9b:cf:2e:5b:0c:cd:
         26:bd:58:70:8d:5d:77:86:99:50:82:42:e2:69:d2:69:16:43:
         3e:33:b4:ea:69:e4:76:60:14:b8:b0:c6:af:33:26:30:29:0d:
         06:eb:3d:b9:01:e4:2e:84:cc:8c:fc:f3:58:1a:b3:d9:4e:3a:
         03:58:3e:64:dd:b8:fa:df:4b:7e:3d:ee:28:d3:12:f2:dd:73:
         6c:27:af:cc:64:6f:c0:c1:85:41:30:3f:17:a7:81:84:8d:a5:
         a9:34:b7:8e:af:1e:8b:67:a8:99:6b:7b:9e:ff:74:a8:32:79:
         b6:6b:05:85:d3:53:65:5e:99:b8:ba:23:cf:34:00:9a:43:6e:
         49:fc:22:16
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHLwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REQzMDkxMTAvBgNVBAUTKDhBNzNGQkM2NkU2RTNFOEVBQjJENUZDMkI2ODk5MTA5
MUYwMjFFNDUwHhcNMjYwNDE2MTYwOTAzWhcNMjYwNDIzMTYwOTAzWjAYMRYwFAYD
VQQDEw02OWUxMDlhMC00MWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjyWDtNCWJBUC1pL943+sQ4OzBJNqd7q7mPTdeVw3LRZndD4S+0U21JkCxB7U
rYA6u1xBpIBac9quHjOYqR90Lu/GC9jHrGWNFFkC2U0hny3D5A0djdG7Ek5LUm1Q
pRj9wch4Jl5J34ZJ23QoEFGOtDRqI+y6VRwe0DzULhFYe2mF7QThZ70kBYwuKyY6
7z3MwSWe4nmFYRIXLM0EvM9HNiaEHfyXaNnKttH5eH8F/eboPA53nqhF3EEF7VA9
49nlfw4aLaljA1wycDi4wW7bO+qVVyBLofI7HLYm8dX3YXnRLWUK0pVifbWXdMHK
QEKFKyReI5oV6wi4IejSqpWIpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLwiYaDV
NXYMgdFeQ3jZXBbIYunVMB8GA1UdIwQYMBaAFIpz+8Zubj6Oqy1fwraJkQkfAh5F
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDMwOS8xRkQ2QTZFRUZB
NjkxMUU2OEVDMTIzMzNDNEY5QUUwMi9pblA3eG01dVBvNnJMVl9DdG9tUkNSOENI
a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2luUDd4bTV1UG82ckxWX0N0b21SQ1I4Q0hrVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RDMwOS8xRkQ2QTZFRUZBNjkxMUU2OEVDMTIzMzNDNEY5QUUwMi9pblA3eG01dVBv
NnJMVl9DdG9tUkNSOENIa1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAojhOj+FN+/S66LCZk6P79YR3YjZ5lUU4BGygww5mLIgZoic7ibUUZUzy/KcX
fM7oePcDxG8Qti1yFHT0NAHzDS3WIQ8n5FPW1KcYMnv1NEbzS5nhaHlvgSSflyyY
axXeCDj8Yus29Y5G0IOOPAO5g65oC/LuuKivm88uWwzNJr1YcI1dd4aZUIJC4mnS
aRZDPjO06mnkdmAUuLDGrzMmMCkNBus9uQHkLoTMjPzzWBqz2U46A1g+ZN24+t9L
fj3uKNMS8t1zbCevzGRvwMGFQTA/F6eBhI2lqTS3jq8ei2eomWt7nv90qDJ5tmsF
hdNTZV6ZuLojzzQAmkNuSfwiFg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:09:33 2026 by rpki-client