Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft
File:                     r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft (raw, json)
Hash identifier:          bx5MSUbleTsXV3Lp8MPCrMhk6rfKCQXfnJFp9p3fyv8=
Subject key identifier:   75:94:23:D6:50:3A:7E:1F:6E:20:9B:CD:0E:54:24:28:73:C0:64:A8
Authority key identifier: AF:A6:D7:BD:C3:7B:64:C8:F1:46:EE:A6:17:36:D3:D4:51:78:FB:37
Certificate issuer:       /CN=A91E8CB0/serialNumber=AFA6D7BDC37B64C8F146EEA61736D3D45178FB37
Certificate serial:       028A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft
Manifest number:          0282
Signing time:             Fri 17 Apr 2026 01:39:20 +0000
Manifest this update:     Fri 17 Apr 2026 01:39:19 +0000
Manifest next update:     Fri 24 Apr 2026 01:39:19 +0000
Files and hashes:         1: r6bXvcN7ZMjxRu6mFzbT1FF4-zc.crl (hash: Qmf3dxhHnF30aFskmdBkSgOl4oPb/krVFCuTQrGH66A=)
                          2: F11BA4EA75B811EDA34F9687C4F9AE02.roa (hash: EhbdEYMmyBbOg+c6cZePofT5T8fPpEuhHFd/+ssLJFs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.crl
                          rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:39:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 650 (0x28a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8CB0, serialNumber=AFA6D7BDC37B64C8F146EEA61736D3D45178FB37
        Validity
            Not Before: Apr 17 01:39:19 2026 GMT
            Not After : Apr 24 01:39:19 2026 GMT
        Subject: CN=69e18f47-f34e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b5:11:aa:cb:d1:71:5c:33:cc:e5:b6:4a:ab:
                    69:53:07:ca:21:6d:1c:90:4c:13:e5:ea:33:a2:7e:
                    f4:de:9e:16:18:09:c8:99:54:0b:b4:49:c0:f8:e6:
                    98:92:1c:bb:8d:59:b6:d7:01:35:f8:3b:4b:dc:1b:
                    89:9d:62:e1:a6:c8:a6:71:e2:2a:9f:d4:3c:10:e2:
                    86:2c:c5:48:cb:f6:80:7c:a1:c0:e7:19:1d:9a:99:
                    75:0b:0d:18:d9:c8:75:ea:6e:37:04:85:65:b8:3f:
                    cf:74:ef:8a:f4:a7:2c:f3:53:98:55:51:c8:42:f1:
                    94:75:97:0c:9b:02:31:1e:69:f9:9c:c7:de:10:be:
                    92:18:ef:91:05:44:a8:d0:19:8c:78:47:91:37:02:
                    c6:d0:f9:a1:d7:cf:3d:fc:82:4d:2e:1f:7c:38:c5:
                    c2:25:75:78:2b:53:90:63:c8:45:50:9a:ba:cc:de:
                    8a:e1:30:d2:ee:99:67:95:0d:29:4b:32:a1:96:4c:
                    62:c6:81:8b:15:de:72:9e:84:db:80:52:8d:25:99:
                    d1:68:60:b5:d5:5d:18:83:48:39:7f:65:22:7c:b7:
                    7a:14:88:76:77:a2:85:70:8e:1b:5c:86:d4:31:25:
                    d4:c6:6c:d2:2f:94:ab:07:4e:04:28:07:38:e2:0e:
                    6f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:94:23:D6:50:3A:7E:1F:6E:20:9B:CD:0E:54:24:28:73:C0:64:A8
            X509v3 Authority Key Identifier:
                keyid:AF:A6:D7:BD:C3:7B:64:C8:F1:46:EE:A6:17:36:D3:D4:51:78:FB:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:b2:82:ba:c8:40:60:4d:04:9a:3f:21:98:4c:9e:0e:1f:6d:
         c4:0f:fa:ee:05:22:a3:c7:09:65:ad:94:b7:16:54:72:28:04:
         e1:0b:71:9a:5b:fb:75:ba:d4:66:4c:a0:b1:49:5e:db:e3:22:
         ed:5d:f9:98:52:4e:32:a6:8f:04:6c:af:1c:d7:3f:43:d2:85:
         44:18:bf:8a:bb:29:6f:92:c5:ac:3c:0f:0d:ae:fb:d3:d1:c5:
         de:24:4c:27:c0:13:3f:a8:99:77:7b:47:9f:f9:72:f5:92:28:
         13:b7:5a:4c:c4:fa:04:18:9c:30:52:e6:1c:0c:5b:58:3d:e0:
         1a:b0:f4:20:97:fa:f8:bf:2a:a5:f8:74:78:70:64:2c:42:8c:
         06:ec:d4:77:9f:18:26:ba:83:d5:d1:e9:31:32:21:ff:6e:cb:
         29:88:bd:04:ff:66:d7:3e:77:1b:5e:f7:1b:ab:de:17:15:d2:
         76:a5:9a:cf:09:a6:53:ec:2e:67:2d:60:b8:d1:47:f3:20:36:
         6a:ec:cd:3a:ae:7c:30:95:3d:1d:c4:16:78:6d:5a:3c:e1:d6:
         83:cf:13:ba:30:81:33:89:ef:5e:fb:c7:07:bd:15:6a:6f:e8:
         46:65:66:66:74:05:8c:1c:a1:a7:ff:9f:9c:5e:17:93:94:0f:
         55:37:13:cd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RThDQjAxMTAvBgNVBAUTKEFGQTZEN0JEQzM3QjY0QzhGMTQ2RUVBNjE3MzZEM0Q0
NTE3OEZCMzcwHhcNMjYwNDE3MDEzOTE5WhcNMjYwNDI0MDEzOTE5WjAYMRYwFAYD
VQQDEw02OWUxOGY0Ny1mMzRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv7URqsvRcVwzzOW2SqtpUwfKIW0ckEwT5eozon703p4WGAnImVQLtEnA+OaY
khy7jVm21wE1+DtL3BuJnWLhpsimceIqn9Q8EOKGLMVIy/aAfKHA5xkdmpl1Cw0Y
2ch16m43BIVluD/PdO+K9Kcs81OYVVHIQvGUdZcMmwIxHmn5nMfeEL6SGO+RBUSo
0BmMeEeRNwLG0Pmh1889/IJNLh98OMXCJXV4K1OQY8hFUJq6zN6K4TDS7plnlQ0p
SzKhlkxixoGLFd5ynoTbgFKNJZnRaGC11V0Yg0g5f2UifLd6FIh2d6KFcI4bXIbU
MSXUxmzSL5SrB04EKAc44g5vtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHWUI9ZQ
On4fbiCbzQ5UJChzwGSoMB8GA1UdIwQYMBaAFK+m173De2TI8Ubuphc209RRePs3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOENCMC8zNzcwMTI0RTZC
QzUxMUVEODY2QTdENUVDNEY5QUUwMi9yNmJYdmNON1pNanhSdTZtRnpiVDFGRjQt
emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3I2Ylh2Y043Wk1qeFJ1Nm1GemJUMUZGNC16Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OENCMC8zNzcwMTI0RTZCQzUxMUVEODY2QTdENUVDNEY5QUUwMi9yNmJYdmNON1pN
anhSdTZtRnpiVDFGRjQtemMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAv7KCushAYE0Emj8hmEyeDh9txA/67gUio8cJZa2UtxZUcigE4Qtxmlv7dbrU
ZkygsUle2+Mi7V35mFJOMqaPBGyvHNc/Q9KFRBi/irspb5LFrDwPDa7709HF3iRM
J8ATP6iZd3tHn/ly9ZIoE7daTMT6BBicMFLmHAxbWD3gGrD0IJf6+L8qpfh0eHBk
LEKMBuzUd58YJrqD1dHpMTIh/27LKYi9BP9m1z53G173G6veFxXSdqWazwmmU+wu
Zy1guNFH8yA2auzNOq58MJU9HcQWeG1aPOHWg88TujCBM4nvXvvHB70Vam/oRmVm
ZnQFjByhp/+fnF4Xk5QPVTcTzQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:40:10 2026 by rpki-client