Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.mft
File:                     NDyCcTdhxY6CRQ2UqleWffm0bxU.mft (raw, json)
Hash identifier:          DhxP/SdzJLXjoTBePvx5Iz30uYRAiJ7u4dx/V8WCnTo=
Subject key identifier:   EB:1B:3A:80:C5:79:3A:C8:53:CC:E7:F7:9A:20:A1:C0:5B:87:D9:30
Authority key identifier: 34:3C:82:71:37:61:C5:8E:82:45:0D:94:AA:57:96:7D:F9:B4:6F:15
Certificate issuer:       /CN=A91DE10F/serialNumber=343C82713761C58E82450D94AA57967DF9B46F15
Certificate serial:       18B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDyCcTdhxY6CRQ2UqleWffm0bxU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.mft
Manifest number:          18AD
Signing time:             Thu 16 Apr 2026 16:25:17 +0000
Manifest this update:     Thu 16 Apr 2026 16:25:17 +0000
Manifest next update:     Thu 23 Apr 2026 16:25:17 +0000
Files and hashes:         1: NDyCcTdhxY6CRQ2UqleWffm0bxU.crl (hash: 6GZLcZP0tUlX/gD6RrMGbUvixCZzq9QQHJFJY4WYBA0=)
                          2: 31AA8496B62811E7882B893BC4F9AE02.roa (hash: 6sLoFUeESrRwO2QcFsgOleUZ2lZsfKCDD+HCcQh7dNM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.crl
                          rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDyCcTdhxY6CRQ2UqleWffm0bxU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 16:25:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6329 (0x18b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE10F, serialNumber=343C82713761C58E82450D94AA57967DF9B46F15
        Validity
            Not Before: Apr 16 16:25:17 2026 GMT
            Not After : Apr 23 16:25:17 2026 GMT
        Subject: CN=69e10d6d-2025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a8:7f:f4:0b:b1:a3:f7:ae:6d:b6:f1:03:2c:
                    9d:6d:d1:a2:db:46:f3:4a:d8:1a:fd:3e:15:bc:90:
                    a4:cd:3d:f9:d4:8d:8a:f4:56:c7:30:b1:ab:89:94:
                    85:05:3e:a3:7f:39:3b:bc:0e:2d:2b:72:b8:37:30:
                    0f:41:61:7b:36:46:27:22:5a:50:b3:be:3e:c1:5a:
                    57:6c:f0:48:f7:cf:d3:32:70:2a:fd:2c:04:15:55:
                    41:be:98:e9:2c:24:b7:dc:44:bf:f6:00:96:89:54:
                    ed:02:8f:78:10:74:0d:53:3f:4b:10:76:91:9c:c7:
                    00:3c:63:f8:4c:6b:42:19:01:95:58:fa:57:9d:23:
                    58:99:d9:c8:14:35:1c:ba:de:d4:2f:17:f7:08:67:
                    65:19:65:ac:86:e7:e8:40:6a:51:15:1d:3f:eb:c1:
                    3c:39:3e:bc:16:33:03:cc:3f:f9:67:b6:7a:f7:b7:
                    6f:a1:1f:31:6c:56:96:aa:ab:8a:22:d5:ce:6b:9a:
                    4c:8e:65:6d:6d:6f:89:4d:b3:06:c2:7a:cd:9b:ae:
                    b6:b6:7a:54:b0:19:80:ff:3d:ba:4c:4b:83:36:95:
                    18:8f:07:12:f4:9c:0c:e0:3f:1f:86:98:ec:f5:22:
                    72:40:e8:35:ed:d8:45:9d:3c:fd:aa:6e:d9:c4:ea:
                    0c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:1B:3A:80:C5:79:3A:C8:53:CC:E7:F7:9A:20:A1:C0:5B:87:D9:30
            X509v3 Authority Key Identifier:
                keyid:34:3C:82:71:37:61:C5:8E:82:45:0D:94:AA:57:96:7D:F9:B4:6F:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDyCcTdhxY6CRQ2UqleWffm0bxU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:94:6b:21:30:82:4f:db:85:8a:95:21:f4:82:e3:2b:3b:c6:
         60:5a:e9:20:4e:75:e7:a0:25:77:ae:a4:bd:5d:02:64:f3:bc:
         04:69:b8:87:8d:1f:7f:5f:22:a4:d5:86:51:9d:f8:33:57:8b:
         fe:b1:2a:98:ec:c1:24:98:2c:27:74:bd:34:3c:47:b5:9f:b6:
         fd:84:dc:38:0c:6e:18:fa:31:1c:5d:0b:ca:a1:34:41:6d:c4:
         04:a3:d6:99:fc:23:63:62:aa:c7:60:4a:86:90:6d:c8:69:b8:
         e2:a1:dd:55:19:d9:e7:52:08:ce:d6:fc:e1:36:91:2b:f6:5f:
         43:8f:36:cd:51:a6:e8:b4:7b:fb:78:03:21:c8:93:b6:2f:6a:
         9b:35:74:46:9c:61:36:3b:7d:77:7e:6d:0b:b0:ab:00:43:b4:
         69:aa:6d:3c:76:ec:18:ce:f2:0e:94:08:0f:76:3d:37:1b:b6:
         0f:d9:a7:eb:bb:e5:83:0a:0c:96:52:0f:fb:19:be:a2:eb:46:
         26:62:26:bd:44:e4:36:ba:7f:31:6e:88:3d:ab:4c:3f:c1:60:
         37:7a:49:fb:12:1b:30:53:7d:21:b6:22:66:a7:be:df:ef:b2:
         b8:5a:7d:d6:ef:97:33:2b:24:d4:df:04:e7:18:d5:bc:92:eb:
         69:94:00:a0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGLkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REUxMEYxMTAvBgNVBAUTKDM0M0M4MjcxMzc2MUM1OEU4MjQ1MEQ5NEFBNTc5NjdE
RjlCNDZGMTUwHhcNMjYwNDE2MTYyNTE3WhcNMjYwNDIzMTYyNTE3WjAYMRYwFAYD
VQQDEw02OWUxMGQ2ZC0yMDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm6h/9Auxo/eubbbxAyydbdGi20bzStga/T4VvJCkzT351I2K9FbHMLGriZSF
BT6jfzk7vA4tK3K4NzAPQWF7NkYnIlpQs74+wVpXbPBI98/TMnAq/SwEFVVBvpjp
LCS33ES/9gCWiVTtAo94EHQNUz9LEHaRnMcAPGP4TGtCGQGVWPpXnSNYmdnIFDUc
ut7ULxf3CGdlGWWshufoQGpRFR0/68E8OT68FjMDzD/5Z7Z697dvoR8xbFaWqquK
ItXOa5pMjmVtbW+JTbMGwnrNm662tnpUsBmA/z26TEuDNpUYjwcS9JwM4D8fhpjs
9SJyQOg17dhFnTz9qm7ZxOoMMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOsbOoDF
eTrIU8zn95ogocBbh9kwMB8GA1UdIwQYMBaAFDQ8gnE3YcWOgkUNlKpXln35tG8V
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTEwRi82MEVBNUMyQ0I1
RDMxMUU3QjZBMkRENURDNEY5QUUwMi9ORHlDY1RkaHhZNkNSUTJVcWxlV2ZmbTBi
eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05EeUNjVGRoeFk2Q1JRMlVxbGVXZmZtMGJ4VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RTEwRi82MEVBNUMyQ0I1RDMxMUU3QjZBMkRENURDNEY5QUUwMi9ORHlDY1RkaHhZ
NkNSUTJVcWxlV2ZmbTBieFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOJRrITCCT9uFipUh9ILjKzvGYFrpIE5156Ald66kvV0CZPO8BGm4h40ff18i
pNWGUZ34M1eL/rEqmOzBJJgsJ3S9NDxHtZ+2/YTcOAxuGPoxHF0LyqE0QW3EBKPW
mfwjY2Kqx2BKhpBtyGm44qHdVRnZ51IIztb84TaRK/ZfQ482zVGm6LR7+3gDIciT
ti9qmzV0RpxhNjt9d35tC7CrAEO0aaptPHbsGM7yDpQID3Y9Nxu2D9mn67vlgwoM
llIP+xm+outGJmImvUTkNrp/MW6IPatMP8FgN3pJ+xIbMFN9IbYiZqe+3++yuFp9
1u+XMysk1N8E5xjVvJLraZQAoA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:54:55 2026 by rpki-client