Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft
File:                     DZhBj4TCLONROV4eXE1dka5g_h8.mft (raw, json)
Hash identifier:          cuLdTAoNtMChYzwYtuk5unco0QleQBfGqotEjEHoUUA=
Subject key identifier:   00:62:72:D1:56:82:A2:08:89:41:CF:E7:B9:C6:3D:8B:9B:B6:E5:8F
Authority key identifier: 0D:98:41:8F:84:C2:2C:E3:51:39:5E:1E:5C:4D:5D:91:AE:60:FE:1F
Certificate issuer:       /CN=A91DED5A/serialNumber=0D98418F84C22CE351395E1E5C4D5D91AE60FE1F
Certificate serial:       03C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DZhBj4TCLONROV4eXE1dka5g_h8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft
Manifest number:          03BF
Signing time:             Sun 19 Apr 2026 00:33:26 +0000
Manifest this update:     Sun 19 Apr 2026 00:33:26 +0000
Manifest next update:     Sun 26 Apr 2026 00:33:26 +0000
Files and hashes:         1: DZhBj4TCLONROV4eXE1dka5g_h8.crl (hash: 6ClfFi2gvF+0QcFZ1D15hJxUyRxybrLJ0fBDfphNbNo=)
                          2: 26DB1136FDFC11ECBB977313C4F9AE02.roa (hash: in2SGcslKvdWmLFyOrq3QeVaymp0oqerQYbYxXUBafo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.crl
                          rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DZhBj4TCLONROV4eXE1dka5g_h8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 00:33:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 966 (0x3c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DED5A, serialNumber=0D98418F84C22CE351395E1E5C4D5D91AE60FE1F
        Validity
            Not Before: Apr 19 00:33:26 2026 GMT
            Not After : Apr 26 00:33:26 2026 GMT
        Subject: CN=69e422d6-5709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:85:b5:10:1b:69:69:ee:3d:94:7d:b3:b1:e5:
                    f3:ff:d1:ed:36:fe:7a:e6:fa:8d:66:61:a1:41:55:
                    c0:eb:f4:6d:10:cf:62:1a:50:be:c0:f3:e2:41:b4:
                    1d:f8:77:1e:b5:84:f9:7f:2f:ad:27:b7:18:ec:ce:
                    d2:5d:bb:9e:f4:db:97:ce:5c:e9:2a:46:c1:a9:d2:
                    18:ce:3f:24:b6:c1:54:fe:4e:9d:61:0b:35:9a:04:
                    85:0f:ff:ef:e7:3a:35:19:da:88:93:8a:75:7c:7a:
                    4c:7d:9e:49:71:b9:cc:2d:37:b2:9b:82:c4:8e:10:
                    f7:3a:e7:16:f2:67:89:10:54:0e:2e:dd:de:eb:f7:
                    b5:68:7e:b9:86:b6:a7:53:66:15:72:a6:dc:72:c6:
                    9a:9b:e2:5c:a1:97:86:40:51:bd:89:1c:95:f6:1e:
                    ca:be:c8:e6:41:da:63:94:ee:7f:67:90:d4:03:20:
                    79:84:fc:98:02:8f:f5:67:e1:a3:35:cb:88:07:3a:
                    a5:8c:01:1b:2d:ac:ba:06:84:5e:62:d9:32:0e:a5:
                    c4:d0:19:0d:57:84:15:15:d1:99:87:07:1f:e6:1d:
                    b6:68:10:cf:c6:d2:ee:08:f4:b7:c6:18:15:59:42:
                    8a:85:35:c0:51:15:c0:63:57:31:2c:d1:50:93:eb:
                    32:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:62:72:D1:56:82:A2:08:89:41:CF:E7:B9:C6:3D:8B:9B:B6:E5:8F
            X509v3 Authority Key Identifier:
                keyid:0D:98:41:8F:84:C2:2C:E3:51:39:5E:1E:5C:4D:5D:91:AE:60:FE:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DZhBj4TCLONROV4eXE1dka5g_h8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:1b:00:fa:9c:ea:a9:0c:51:61:9f:b2:e7:d7:9b:0e:bc:db:
         89:a0:e1:2c:97:af:8d:01:f5:e3:fd:f0:9e:ea:c7:57:10:b1:
         00:8e:2d:57:d5:8c:5a:83:ed:a1:48:09:91:ca:19:f8:f9:e8:
         d3:dc:8f:f6:d6:87:98:df:ea:65:dc:88:d1:40:1b:47:78:3e:
         be:2d:15:f9:60:c1:57:84:16:19:4c:85:05:ef:b2:e5:ff:ee:
         1f:c1:fd:0a:ee:81:05:ef:52:5e:8f:38:19:20:f3:6b:f9:69:
         3c:69:68:41:3d:54:71:06:56:fd:ff:67:ff:22:0b:56:bb:66:
         5c:70:4d:53:77:96:1f:c1:52:a3:13:d4:cd:49:4c:35:98:68:
         14:19:5a:d3:b8:01:84:a1:49:02:45:2c:ac:19:a4:d3:87:55:
         9c:db:36:1e:42:c5:d5:81:53:89:09:c4:89:68:aa:81:c4:cd:
         71:c1:fd:76:40:9b:f0:03:1b:ee:b3:95:7c:c1:c7:63:63:1c:
         b9:51:00:97:02:a6:cc:2a:14:61:2d:5e:1e:69:41:2d:19:57:
         f7:ea:f7:1d:e8:71:6d:7d:3d:cc:25:14:23:a6:f0:8e:9e:47:
         68:b8:58:29:76:c1:45:15:53:64:ee:88:58:84:ee:f7:39:dd:
         f5:a3:bb:15
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REVENUExMTAvBgNVBAUTKDBEOTg0MThGODRDMjJDRTM1MTM5NUUxRTVDNEQ1RDkx
QUU2MEZFMUYwHhcNMjYwNDE5MDAzMzI2WhcNMjYwNDI2MDAzMzI2WjAYMRYwFAYD
VQQDEw02OWU0MjJkNi01NzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtIW1EBtpae49lH2zseXz/9HtNv565vqNZmGhQVXA6/RtEM9iGlC+wPPiQbQd
+HcetYT5fy+tJ7cY7M7SXbue9NuXzlzpKkbBqdIYzj8ktsFU/k6dYQs1mgSFD//v
5zo1GdqIk4p1fHpMfZ5JcbnMLTeym4LEjhD3OucW8meJEFQOLt3e6/e1aH65hran
U2YVcqbccsaam+JcoZeGQFG9iRyV9h7KvsjmQdpjlO5/Z5DUAyB5hPyYAo/1Z+Gj
NcuIBzqljAEbLay6BoReYtkyDqXE0BkNV4QVFdGZhwcf5h22aBDPxtLuCPS3xhgV
WUKKhTXAURXAY1cxLNFQk+sysQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFABictFW
gqIIiUHP57nGPYubtuWPMB8GA1UdIwQYMBaAFA2YQY+EwizjUTleHlxNXZGuYP4f
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUQ1QS81REVEQTAyOENG
N0UxMUVDOTMyRTAyNEFDNEY5QUUwMi9EWmhCajRUQ0xPTlJPVjRlWEUxZGthNWdf
aDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RaaEJqNFRDTE9OUk9WNGVYRTFka2E1Z19oOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RUQ1QS81REVEQTAyOENGN0UxMUVDOTMyRTAyNEFDNEY5QUUwMi9EWmhCajRUQ0xP
TlJPVjRlWEUxZGthNWdfaDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABRsA+pzqqQxRYZ+y59ebDrzbiaDhLJevjQH14/3wnurHVxCxAI4tV9WMWoPt
oUgJkcoZ+Pno09yP9taHmN/qZdyI0UAbR3g+vi0V+WDBV4QWGUyFBe+y5f/uH8H9
Cu6BBe9SXo84GSDza/lpPGloQT1UcQZW/f9n/yILVrtmXHBNU3eWH8FSoxPUzUlM
NZhoFBla07gBhKFJAkUsrBmk04dVnNs2HkLF1YFTiQnEiWiqgcTNccH9dkCb8AMb
7rOVfMHHY2McuVEAlwKmzCoUYS1eHmlBLRlX9+r3HehxbX09zCUUI6bwjp5HaLhY
KXbBRRVTZO6IWITu9znd9aO7FQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 12:51:17 2026 by rpki-client