Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft
File:                     y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft (raw, json)
Hash identifier:          gty8KdiKCkjey9EqLJskPKIPPPH2KYnsBGub1IoC50A=
Subject key identifier:   4C:D4:C5:E9:1D:AD:E9:01:1E:92:15:97:B0:97:23:A2:A6:1D:5C:25
Authority key identifier: CB:BB:BB:24:B2:2B:43:5D:1C:A4:93:A9:D6:3D:CA:77:9B:E0:79:6A
Certificate issuer:       /CN=A91E0CF5/serialNumber=CBBBBB24B22B435D1CA493A9D63DCA779BE0796A
Certificate serial:       014F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft
Manifest number:          0147
Signing time:             Fri 17 Apr 2026 04:56:52 +0000
Manifest this update:     Fri 17 Apr 2026 04:56:51 +0000
Manifest next update:     Fri 24 Apr 2026 04:56:51 +0000
Files and hashes:         1: y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl (hash: 0Vnw56MKEDajm3W1Lz77EJvZOcN1NIqWNwd+Mk/VZ+w=)
                          2: C155660E492B11EF8EF0D04FC4F9AE02.roa (hash: N0mjQ3paWd02SrbPugyLiWD2jfFiR2KxN4PTpCiYbDA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl
                          rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:56:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 335 (0x14f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0CF5, serialNumber=CBBBBB24B22B435D1CA493A9D63DCA779BE0796A
        Validity
            Not Before: Apr 17 04:56:51 2026 GMT
            Not After : Apr 24 04:56:51 2026 GMT
        Subject: CN=69e1bd94-f6fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8d:a6:35:44:32:a2:61:48:7d:99:1d:2a:37:
                    cb:da:2a:1a:e8:96:3f:07:ab:29:8b:6d:a8:cd:5c:
                    92:58:04:be:26:0e:02:3c:ce:33:1a:6e:13:e2:dc:
                    53:94:fe:37:c9:3d:7c:c3:8f:7b:3f:9a:d5:e6:56:
                    75:0a:82:1c:6d:47:2c:b8:8d:47:9c:c0:6b:e2:1b:
                    5e:bc:92:ed:0c:3c:54:ad:52:23:c0:de:36:18:51:
                    1b:1a:cb:c2:b2:d6:ae:d2:cc:a3:5a:7f:c8:3d:61:
                    47:55:6d:a8:35:cf:fb:f2:77:f0:65:37:4a:9f:cb:
                    78:3d:48:18:77:46:70:bd:5f:c4:05:39:8e:49:32:
                    d8:71:1d:2b:5a:d5:3b:00:06:91:64:62:c3:33:27:
                    2c:e2:a9:e6:65:18:9b:00:d5:ba:ab:f0:f7:9f:ea:
                    cc:29:d3:48:1a:e5:0d:83:8c:e8:5e:6a:2b:9c:e1:
                    bb:75:6b:11:ed:5c:20:98:55:d3:e6:5f:71:f6:62:
                    39:65:3e:b3:b3:db:bc:68:8a:d0:44:41:a3:33:7d:
                    67:66:ba:8c:b1:41:55:52:47:05:35:71:c7:b5:af:
                    8a:d5:08:e2:4d:86:9a:d8:ae:b4:4e:b3:15:a8:a5:
                    46:6a:51:54:e3:61:d6:3a:53:44:d4:70:cf:d8:07:
                    64:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:D4:C5:E9:1D:AD:E9:01:1E:92:15:97:B0:97:23:A2:A6:1D:5C:25
            X509v3 Authority Key Identifier:
                keyid:CB:BB:BB:24:B2:2B:43:5D:1C:A4:93:A9:D6:3D:CA:77:9B:E0:79:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:86:b8:e9:0a:13:87:e3:2b:32:95:12:fa:a7:6c:77:0c:aa:
         02:b9:1b:b6:02:bf:62:b5:f3:5c:af:fb:8e:d2:2b:8e:60:66:
         12:9e:ce:e6:e2:b9:2b:76:a0:1f:1d:b5:2f:5a:c3:c4:4a:99:
         f4:c6:cf:2b:ec:b6:40:49:e7:7f:d1:01:8d:c8:87:f8:36:2d:
         1a:68:60:3d:13:1d:3a:82:9a:c8:c9:d9:19:b4:79:35:0d:c5:
         21:3c:50:83:d9:0a:f2:88:95:46:75:eb:e4:97:46:83:81:31:
         cc:2c:9d:2f:11:8f:c4:b3:aa:2c:03:6f:24:af:f8:9a:1b:de:
         cd:d0:39:b0:18:60:9e:77:10:0e:18:e1:85:f5:c2:75:72:d6:
         37:e7:a1:99:60:ab:e5:e7:e9:f2:c7:29:19:28:cf:98:ed:b0:
         2c:bd:18:4d:6f:8d:92:81:9e:e4:1c:3e:26:1e:70:c1:21:7b:
         4c:ba:ba:a9:cf:6d:04:40:10:d3:8f:d5:79:56:0c:a5:c2:46:
         55:a2:4d:1a:28:c9:73:86:64:f6:a4:a9:15:26:57:19:c7:45:
         ab:54:7f:f2:23:22:e8:1d:37:e2:da:d6:40:d3:b3:3c:c1:92:
         1f:cc:79:15:21:ad:51:d7:6b:cb:fe:0b:ff:b9:d5:26:60:03:
         1a:be:98:fc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTBDRjUxMTAvBgNVBAUTKENCQkJCQjI0QjIyQjQzNUQxQ0E0OTNBOUQ2M0RDQTc3
OUJFMDc5NkEwHhcNMjYwNDE3MDQ1NjUxWhcNMjYwNDI0MDQ1NjUxWjAYMRYwFAYD
VQQDEw02OWUxYmQ5NC1mNmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp42mNUQyomFIfZkdKjfL2ioa6JY/B6spi22ozVySWAS+Jg4CPM4zGm4T4txT
lP43yT18w497P5rV5lZ1CoIcbUcsuI1HnMBr4htevJLtDDxUrVIjwN42GFEbGsvC
stau0syjWn/IPWFHVW2oNc/78nfwZTdKn8t4PUgYd0ZwvV/EBTmOSTLYcR0rWtU7
AAaRZGLDMycs4qnmZRibANW6q/D3n+rMKdNIGuUNg4zoXmornOG7dWsR7VwgmFXT
5l9x9mI5ZT6zs9u8aIrQREGjM31nZrqMsUFVUkcFNXHHta+K1QjiTYaa2K60TrMV
qKVGalFU42HWOlNE1HDP2AdkLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEzUxekd
rekBHpIVl7CXI6KmHVwlMB8GA1UdIwQYMBaAFMu7uySyK0NdHKSTqdY9yneb4Hlq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMENGNS81MzhDMTk2MDQ5
MkIxMUVGQkUxMDE4NEZDNEY5QUUwMi95N3U3SkxJclExMGNwSk9wMWozS2Q1dmdl
V28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3k3dTdKTElyUTEwY3BKT3AxajNLZDV2Z2VXby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MENGNS81MzhDMTk2MDQ5MkIxMUVGQkUxMDE4NEZDNEY5QUUwMi95N3U3SkxJclEx
MGNwSk9wMWozS2Q1dmdlV28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeYa46QoTh+MrMpUS+qdsdwyqArkbtgK/YrXzXK/7jtIrjmBmEp7O5uK5K3ag
Hx21L1rDxEqZ9MbPK+y2QEnnf9EBjciH+DYtGmhgPRMdOoKayMnZGbR5NQ3FITxQ
g9kK8oiVRnXr5JdGg4ExzCydLxGPxLOqLANvJK/4mhvezdA5sBhgnncQDhjhhfXC
dXLWN+ehmWCr5efp8scpGSjPmO2wLL0YTW+NkoGe5Bw+Jh5wwSF7TLq6qc9tBEAQ
04/VeVYMpcJGVaJNGijJc4Zk9qSpFSZXGcdFq1R/8iMi6B034trWQNOzPMGSH8x5
FSGtUddry/4L/7nVJmADGr6Y/A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:04:52 2026 by rpki-client