Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft
File:                     MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft (raw, json)
Hash identifier:          ngfR3HozqTXD4Yeuym9Uka8LUUamSBWZGh0mHWVVEq8=
Subject key identifier:   36:36:8E:DD:9F:71:FA:1D:6B:40:83:1F:CF:62:CA:CB:EA:04:3D:7C
Authority key identifier: 30:34:DE:F0:4D:9A:03:EE:22:89:89:24:E3:12:64:C0:1D:E0:03:03
Certificate issuer:       /CN=A91E81A5/serialNumber=3034DEF04D9A03EE22898924E31264C01DE00303
Certificate serial:       0255
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft
Manifest number:          0243
Signing time:             Fri 17 Apr 2026 02:14:32 +0000
Manifest this update:     Fri 17 Apr 2026 02:14:31 +0000
Manifest next update:     Fri 24 Apr 2026 02:14:31 +0000
Files and hashes:         1: MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl (hash: bCV5RkKlShKwestFSPCcxr/cnGD/wIOzbzs8e4D3XW8=)
                          2: 7BD5A1FCCA0B11ED8B414F75C4F9AE02.roa (hash: EIvm3xLw4Nyp5EuKey6WkJaoQc2wgEjOvCaL4fAv+m8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl
                          rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:14:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 597 (0x255)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E81A5, serialNumber=3034DEF04D9A03EE22898924E31264C01DE00303
        Validity
            Not Before: Apr 17 02:14:31 2026 GMT
            Not After : Apr 24 02:14:31 2026 GMT
        Subject: CN=69e19788-a2de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c9:66:b0:9c:46:82:48:9c:2b:23:2b:8c:a6:
                    1c:3e:9b:9c:41:8f:81:f1:58:0c:80:e3:62:8a:46:
                    71:ec:85:f4:e0:1a:fa:a0:ba:35:48:cb:8d:00:f4:
                    a8:1a:50:e9:88:4b:05:a2:9a:b2:86:d9:7b:17:85:
                    4b:8f:29:aa:bd:c2:cf:75:db:37:2c:a5:c5:8f:1b:
                    70:d7:82:66:a1:4a:af:ee:71:fa:92:a8:a9:8b:d7:
                    c8:63:c7:e9:bd:f9:62:12:3e:35:27:bb:33:d4:da:
                    db:ff:80:07:74:52:5a:37:3b:51:e1:4d:3c:c4:00:
                    6f:6c:06:8d:76:c9:68:f3:9e:46:0c:68:bf:ea:1f:
                    e5:a9:22:6b:30:09:43:31:c2:15:21:e6:a8:5f:ef:
                    e7:b9:81:dd:d3:64:42:7b:ce:b3:e4:72:a8:03:57:
                    04:63:6f:8b:54:95:37:c3:50:26:a3:71:17:85:c6:
                    6a:20:71:4c:db:97:3f:a7:a0:29:94:65:f8:3c:91:
                    b6:7f:e8:0d:b0:9a:74:6a:1b:3b:9e:fc:92:74:f6:
                    5f:46:ff:dc:01:db:64:aa:99:ee:13:03:63:0d:8d:
                    7d:b9:d2:c7:5e:b0:71:38:16:03:68:f1:ba:1b:d4:
                    6f:da:82:c2:0d:cb:c1:a7:36:20:16:ba:49:fc:b8:
                    39:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:36:8E:DD:9F:71:FA:1D:6B:40:83:1F:CF:62:CA:CB:EA:04:3D:7C
            X509v3 Authority Key Identifier:
                keyid:30:34:DE:F0:4D:9A:03:EE:22:89:89:24:E3:12:64:C0:1D:E0:03:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:af:e6:cc:22:15:ed:23:0a:5f:93:0e:81:66:86:15:c8:ad:
         56:59:93:77:7c:b9:35:91:2e:21:77:68:cd:64:65:a4:ae:3e:
         69:97:52:b7:66:ca:d9:10:08:97:40:23:6d:ca:58:8c:b8:3b:
         97:8b:7f:1f:96:3f:e1:20:96:7c:85:2f:54:8c:92:d9:ad:7d:
         f3:9b:f7:96:16:80:d6:d2:16:d0:3a:10:a1:0d:f6:0a:e4:a0:
         72:36:91:55:39:1f:58:21:3a:bb:b3:55:d9:94:1c:7b:17:4e:
         f4:2b:9d:3e:b0:92:a7:82:d1:7b:22:5a:7a:9e:f8:f1:f7:ba:
         7d:73:41:07:43:fa:e1:03:00:54:0e:19:52:72:37:6a:c5:01:
         b1:92:d4:1f:1d:21:3d:dc:03:db:f0:91:50:57:13:5a:f7:ba:
         6c:de:1c:33:0d:ce:fe:83:23:83:29:87:0e:de:51:1c:e7:3b:
         e8:f9:34:44:e1:4d:40:b5:b7:c2:ef:73:4a:be:a6:ea:a6:dd:
         9a:ce:e9:6b:60:41:e5:c6:c4:52:56:c2:c3:0a:86:0f:63:04:
         9e:1c:22:b3:c0:a0:bc:8e:cc:90:27:32:f4:4d:13:fd:86:fd:
         de:d0:d4:f7:c2:26:74:bc:f1:9c:9f:88:d4:6d:a9:f2:a7:13:
         b2:cf:1d:51
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAlUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTgxQTUxMTAvBgNVBAUTKDMwMzRERUYwNEQ5QTAzRUUyMjg5ODkyNEUzMTI2NEMw
MURFMDAzMDMwHhcNMjYwNDE3MDIxNDMxWhcNMjYwNDI0MDIxNDMxWjAYMRYwFAYD
VQQDEw02OWUxOTc4OC1hMmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApclmsJxGgkicKyMrjKYcPpucQY+B8VgMgONiikZx7IX04Br6oLo1SMuNAPSo
GlDpiEsFopqyhtl7F4VLjymqvcLPdds3LKXFjxtw14JmoUqv7nH6kqipi9fIY8fp
vfliEj41J7sz1Nrb/4AHdFJaNztR4U08xABvbAaNdslo855GDGi/6h/lqSJrMAlD
McIVIeaoX+/nuYHd02RCe86z5HKoA1cEY2+LVJU3w1Amo3EXhcZqIHFM25c/p6Ap
lGX4PJG2f+gNsJp0ahs7nvySdPZfRv/cAdtkqpnuEwNjDY19udLHXrBxOBYDaPG6
G9Rv2oLCDcvBpzYgFrpJ/Lg56QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDY2jt2f
cfoda0CDH89iysvqBD18MB8GA1UdIwQYMBaAFDA03vBNmgPuIomJJOMSZMAd4AMD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODFBNS9DMTU4NDNCNENB
MDcxMUVEOEY5RTJBNzBDNEY5QUUwMi9NRFRlOEUyYUEtNGlpWWtrNHhKa3dCM2dB
d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01EVGU4RTJhQS00aWlZa2s0eEprd0IzZ0F3TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
ODFBNS9DMTU4NDNCNENBMDcxMUVEOEY5RTJBNzBDNEY5QUUwMi9NRFRlOEUyYUEt
NGlpWWtrNHhKa3dCM2dBd00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALq/mzCIV7SMKX5MOgWaGFcitVlmTd3y5NZEuIXdozWRlpK4+aZdSt2bK2RAI
l0AjbcpYjLg7l4t/H5Y/4SCWfIUvVIyS2a1985v3lhaA1tIW0DoQoQ32CuSgcjaR
VTkfWCE6u7NV2ZQcexdO9CudPrCSp4LReyJaep748fe6fXNBB0P64QMAVA4ZUnI3
asUBsZLUHx0hPdwD2/CRUFcTWve6bN4cMw3O/oMjgymHDt5RHOc76Pk0ROFNQLW3
wu9zSr6m6qbdms7pa2BB5cbEUlbCwwqGD2MEnhwis8CgvI7MkCcy9E0T/Yb93tDU
98ImdLzxnJ+I1G2p8qcTss8dUQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:03:20 2026 by rpki-client