Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft
File:                     tdM6ejKlCC0za2sFt5ZfMHRwonY.mft (raw, json)
Hash identifier:          xxvjwtpa/2fwV4IgxapttcV9lh9/yR/itwb7WOPvQuw=
Subject key identifier:   3C:22:B5:AE:E9:83:CB:A0:57:3F:4C:C0:8E:7C:38:04:44:67:5A:72
Authority key identifier: B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76
Certificate issuer:       /CN=A91F1446/serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276
Certificate serial:       03F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft
Manifest number:          03DD
Signing time:             Fri 17 Apr 2026 00:27:23 +0000
Manifest this update:     Fri 17 Apr 2026 00:27:23 +0000
Manifest next update:     Fri 24 Apr 2026 00:27:23 +0000
Files and hashes:         1: tdM6ejKlCC0za2sFt5ZfMHRwonY.crl (hash: s9WFdhbKGuCBY0Em4NFlvNnV8h7+5DXoTIFow6kiGvo=)
                          2: 69B0C410EC2411EFBE58C381C4F9AE02.roa (hash: jSMX3ABEtZSpyQCFX5+dmu6REmnL6WokXfamqru1uKo=)
                          3: 31521640C6CB11ECB185E43EC4F9AE02.roa (hash: JsxVCM2jhz9Lx7VvZgXYGsgvn7pvcdkyEVtE+jYL+ow=)
                          4: D56B4ABED54E11EFAD8C4E52C4F9AE02.roa (hash: GdMrJQOmwecU85NbmUFnrqBWRHWEAMkwnRXidf68flk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl
                          rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1014 (0x3f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1446, serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276
        Validity
            Not Before: Apr 17 00:27:23 2026 GMT
            Not After : Apr 24 00:27:23 2026 GMT
        Subject: CN=69e17e6b-f3fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b2:c6:a9:b9:17:7d:08:a8:00:4d:3a:1f:4c:
                    2c:72:45:25:64:3d:af:c6:c3:00:4c:89:57:46:bb:
                    57:d2:62:d8:62:15:67:0d:4a:6f:eb:af:19:35:f3:
                    60:eb:49:4b:06:50:16:e0:3c:9f:65:61:fb:f3:88:
                    99:86:a7:87:c9:03:9f:25:f7:89:31:c6:6e:96:f3:
                    d1:12:cd:df:4d:52:b5:66:6e:fc:2f:82:a9:ff:8b:
                    47:c2:e2:d1:e2:4c:81:ed:ab:1f:40:ae:51:03:9b:
                    7c:12:6f:9c:36:fb:ca:3a:5e:cf:f4:2a:aa:f6:85:
                    71:ed:24:ac:84:3d:03:8f:25:c5:9b:46:99:6b:26:
                    e3:6e:60:67:ac:70:96:db:e4:e2:2d:e7:eb:f5:17:
                    c4:ef:f4:5c:bb:5d:06:19:78:c7:e3:bd:90:d5:4a:
                    cc:51:3b:ab:e8:f9:1f:bf:e4:c4:cb:64:f2:26:f5:
                    0c:51:4b:56:4d:3e:ea:79:0e:79:ce:f3:99:0d:6f:
                    44:a6:61:68:2b:59:59:df:54:3e:f5:b1:6e:8d:10:
                    35:6f:ea:16:11:bb:62:2b:87:f6:1a:00:00:0a:93:
                    91:25:32:c8:17:31:d4:12:f7:21:eb:d0:64:5d:6f:
                    09:38:5c:fc:eb:88:c9:32:fa:8a:0b:ba:ed:f2:b1:
                    d2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:22:B5:AE:E9:83:CB:A0:57:3F:4C:C0:8E:7C:38:04:44:67:5A:72
            X509v3 Authority Key Identifier:
                keyid:B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:06:0a:cb:ba:91:73:88:16:dd:85:f1:f2:12:1c:91:bb:57:
         bd:95:7e:d0:ab:04:5f:a9:1f:f3:3f:52:0c:67:3b:bf:83:01:
         e8:18:08:e4:33:1c:16:28:a7:3b:e9:76:f2:76:7d:48:10:c1:
         55:7a:c8:de:6a:67:09:59:a6:8b:f8:9b:d0:47:fa:9e:0d:30:
         9e:12:50:8a:b0:77:97:75:20:ee:15:6e:28:78:6c:7e:87:41:
         f5:a4:6d:1f:b3:f4:b7:2f:a9:be:fc:60:7a:f0:50:f3:db:89:
         33:54:34:65:51:68:67:b2:a1:fb:b6:17:97:d0:2d:a3:67:f8:
         57:e2:6f:04:a1:1b:98:a3:15:aa:3a:97:0e:f5:61:15:47:22:
         fd:64:55:a4:5c:1d:a2:9a:e8:2c:87:b7:04:63:b9:a9:bd:a3:
         7b:86:53:6c:97:d3:3a:30:f1:26:2b:27:df:74:5b:fa:37:2c:
         b2:49:e9:2d:55:3e:83:51:8e:42:40:1b:7a:67:1d:5a:b5:7b:
         64:24:70:82:77:5c:0c:b6:0c:2b:6b:98:4c:41:ae:83:82:f4:
         99:d3:bb:2b:1f:e5:03:4e:61:e5:ed:fd:96:39:1f:d1:5d:e6:
         25:21:93:21:30:8b:c7:e4:c6:00:6a:6c:70:2a:66:02:bf:7b:
         68:9a:1a:91
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA/YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjE0NDYxMTAvBgNVBAUTKEI1RDMzQTdBMzJBNTA4MkQzMzZCNkIwNUI3OTY1RjMw
NzQ3MEEyNzYwHhcNMjYwNDE3MDAyNzIzWhcNMjYwNDI0MDAyNzIzWjAYMRYwFAYD
VQQDEw02OWUxN2U2Yi1mM2ZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtLLGqbkXfQioAE06H0wsckUlZD2vxsMATIlXRrtX0mLYYhVnDUpv668ZNfNg
60lLBlAW4DyfZWH784iZhqeHyQOfJfeJMcZulvPREs3fTVK1Zm78L4Kp/4tHwuLR
4kyB7asfQK5RA5t8Em+cNvvKOl7P9Cqq9oVx7SSshD0DjyXFm0aZaybjbmBnrHCW
2+TiLefr9RfE7/Rcu10GGXjH472Q1UrMUTur6Pkfv+TEy2TyJvUMUUtWTT7qeQ55
zvOZDW9EpmFoK1lZ31Q+9bFujRA1b+oWEbtiK4f2GgAACpORJTLIFzHUEvch69Bk
XW8JOFz864jJMvqKC7rt8rHSrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDwita7p
g8ugVz9MwI58OAREZ1pyMB8GA1UdIwQYMBaAFLXTOnoypQgtM2trBbeWXzB0cKJ2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTQ0Ni8yQTFGRjU2RUM1
MzUxMUVDOEU1QTAzMTNDNEY5QUUwMi90ZE02ZWpLbENDMHphMnNGdDVaZk1IUndv
blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RkTTZlaktsQ0MwemEyc0Z0NVpmTUhSd29uWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MTQ0Ni8yQTFGRjU2RUM1MzUxMUVDOEU1QTAzMTNDNEY5QUUwMi90ZE02ZWpLbEND
MHphMnNGdDVaZk1IUndvblkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjQYKy7qRc4gW3YXx8hIckbtXvZV+0KsEX6kf8z9SDGc7v4MB6BgI5DMcFiin
O+l28nZ9SBDBVXrI3mpnCVmmi/ib0Ef6ng0wnhJQirB3l3Ug7hVuKHhsfodB9aRt
H7P0ty+pvvxgevBQ89uJM1Q0ZVFoZ7Kh+7YXl9Ato2f4V+JvBKEbmKMVqjqXDvVh
FUci/WRVpFwdoproLIe3BGO5qb2je4ZTbJfTOjDxJisn33Rb+jcssknpLVU+g1GO
QkAbemcdWrV7ZCRwgndcDLYMK2uYTEGug4L0mdO7Kx/lA05h5e39ljkf0V3mJSGT
ITCLx+TGAGpscCpmAr97aJoakQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:14:10 2026 by rpki-client