Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft
File:                     xsGRae6n0Ga8m8py3YgwvBg6EmY.mft (raw, json)
Hash identifier:          S2zsLYG9Ivlzf5iRSrpBeUy5lstB58qY8KPwKn+0+2E=
Subject key identifier:   92:88:E1:24:B0:73:F8:E5:53:51:86:AC:C7:C9:4A:93:54:1D:D0:32
Authority key identifier: C6:C1:91:69:EE:A7:D0:66:BC:9B:CA:72:DD:88:30:BC:18:3A:12:66
Certificate issuer:       /CN=A91F1C46/serialNumber=C6C19169EEA7D066BC9BCA72DD8830BC183A1266
Certificate serial:       0887
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xsGRae6n0Ga8m8py3YgwvBg6EmY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft
Manifest number:          087D
Signing time:             Thu 16 Apr 2026 20:32:03 +0000
Manifest this update:     Thu 16 Apr 2026 20:32:03 +0000
Manifest next update:     Thu 23 Apr 2026 20:32:03 +0000
Files and hashes:         1: xsGRae6n0Ga8m8py3YgwvBg6EmY.crl (hash: Cnjkm9Si/MkWEai/tjFiVFxmESzTq/UucO8vlGjLj68=)
                          2: D3EA977EF32D11EA8498822CC4F9AE02.roa (hash: 2KftQgjQucTB7mWe4Ghtn15fUs79qb57lhCbaWg6O8Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.crl
                          rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xsGRae6n0Ga8m8py3YgwvBg6EmY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:32:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2183 (0x887)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1C46, serialNumber=C6C19169EEA7D066BC9BCA72DD8830BC183A1266
        Validity
            Not Before: Apr 16 20:32:03 2026 GMT
            Not After : Apr 23 20:32:03 2026 GMT
        Subject: CN=69e14743-015d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3f:a4:8b:f0:e9:13:6d:c3:78:f8:15:7a:03:
                    b2:19:4d:61:3a:48:5c:c3:7e:91:4c:b8:f5:27:c5:
                    68:ac:2f:1b:94:96:a1:58:0b:ca:6e:6c:77:21:78:
                    ec:5f:8c:a4:67:7a:8d:a1:21:f3:32:14:03:57:d7:
                    02:24:c3:ae:1c:a6:95:e1:19:2d:e7:37:2c:af:70:
                    cd:ea:62:53:65:f4:89:a6:b4:30:58:fc:14:98:45:
                    75:81:3c:ff:e1:d4:04:ae:d0:b0:20:e5:ec:ec:c7:
                    2d:ea:3e:06:6c:83:50:a5:01:35:29:bc:44:4b:1e:
                    49:4d:8d:fb:9b:ca:4b:d1:7e:84:9f:9a:ad:f9:17:
                    c0:3b:09:80:d7:ec:ed:5f:88:76:9a:9f:34:36:89:
                    ac:18:d8:c3:63:5c:0a:3d:40:9a:9a:e2:04:20:57:
                    9c:8d:92:2a:b5:40:06:2a:23:3a:02:05:fa:59:74:
                    4b:83:3f:fb:68:8e:66:27:d8:6a:b1:fc:db:4c:9a:
                    7f:e5:e8:65:5d:36:5c:25:03:9f:c2:fe:31:69:11:
                    f5:b3:b7:22:65:a7:5a:ac:86:38:60:1e:94:f6:34:
                    c3:5a:64:78:07:21:cb:aa:1b:21:27:8c:8b:d3:64:
                    52:20:74:29:16:72:b1:c1:d7:a6:13:e4:e3:68:64:
                    1c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:88:E1:24:B0:73:F8:E5:53:51:86:AC:C7:C9:4A:93:54:1D:D0:32
            X509v3 Authority Key Identifier:
                keyid:C6:C1:91:69:EE:A7:D0:66:BC:9B:CA:72:DD:88:30:BC:18:3A:12:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xsGRae6n0Ga8m8py3YgwvBg6EmY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:29:f0:3c:25:d2:f5:50:7c:f0:3d:08:4f:78:f7:7c:e8:d1:
         41:2e:66:5f:a8:aa:5b:46:b3:65:0c:f9:23:4c:33:35:ad:94:
         ef:94:94:0c:48:33:9e:04:ae:af:20:67:95:ed:5d:70:c0:0d:
         eb:9d:82:61:4b:fd:6b:67:20:75:15:a9:96:26:82:a6:fa:8a:
         e7:75:26:37:a8:06:96:3b:e2:7d:83:f4:e8:58:9e:3a:eb:4c:
         e5:6e:e5:0f:a1:1b:24:86:33:d0:8c:c9:80:ed:3d:ab:ac:33:
         8c:3b:c5:a9:5f:f1:f2:78:73:de:68:ab:d0:b5:33:5c:94:30:
         b9:3b:af:1c:54:42:0f:cd:04:3f:45:96:e8:0e:ce:9f:84:07:
         57:2a:13:d7:62:14:d4:92:3a:27:ca:de:68:a4:7e:72:da:5a:
         09:d6:06:a4:5a:38:e5:ab:3f:a8:94:fa:43:06:0a:21:01:6a:
         ed:e2:ec:a4:d0:b7:ba:23:a5:b8:45:ca:e0:bc:1d:7d:1a:5e:
         7c:03:af:9a:1f:86:d0:39:50:32:fc:4b:b7:0a:ac:62:e5:f3:
         e7:09:eb:aa:cc:7b:ed:89:4b:5e:77:12:55:18:a4:e5:77:18:
         ee:9e:5a:14:ec:2c:53:1f:3e:30:05:50:d1:34:24:34:96:b8:
         8b:ca:dc:c3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjFDNDYxMTAvBgNVBAUTKEM2QzE5MTY5RUVBN0QwNjZCQzlCQ0E3MkREODgzMEJD
MTgzQTEyNjYwHhcNMjYwNDE2MjAzMjAzWhcNMjYwNDIzMjAzMjAzWjAYMRYwFAYD
VQQDEw02OWUxNDc0My0wMTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuj+ki/DpE23DePgVegOyGU1hOkhcw36RTLj1J8VorC8blJahWAvKbmx3IXjs
X4ykZ3qNoSHzMhQDV9cCJMOuHKaV4Rkt5zcsr3DN6mJTZfSJprQwWPwUmEV1gTz/
4dQErtCwIOXs7Mct6j4GbINQpQE1KbxESx5JTY37m8pL0X6En5qt+RfAOwmA1+zt
X4h2mp80NomsGNjDY1wKPUCamuIEIFecjZIqtUAGKiM6AgX6WXRLgz/7aI5mJ9hq
sfzbTJp/5ehlXTZcJQOfwv4xaRH1s7ciZadarIY4YB6U9jTDWmR4ByHLqhshJ4yL
02RSIHQpFnKxwdemE+TjaGQcYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJKI4SSw
c/jlU1GGrMfJSpNUHdAyMB8GA1UdIwQYMBaAFMbBkWnup9BmvJvKct2IMLwYOhJm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUM0Ni8wNUNBREQxNkYx
ODYxMUVBOERFQzNDMTRDNEY5QUUwMi94c0dSYWU2bjBHYThtOHB5M1lnd3ZCZzZF
bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hzR1JhZTZuMEdhOG04cHkzWWd3dkJnNkVtWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MUM0Ni8wNUNBREQxNkYxODYxMUVBOERFQzNDMTRDNEY5QUUwMi94c0dSYWU2bjBH
YThtOHB5M1lnd3ZCZzZFbVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGSnwPCXS9VB88D0IT3j3fOjRQS5mX6iqW0azZQz5I0wzNa2U75SUDEgzngSu
ryBnle1dcMAN652CYUv9a2cgdRWpliaCpvqK53UmN6gGljvifYP06FieOutM5W7l
D6EbJIYz0IzJgO09q6wzjDvFqV/x8nhz3mir0LUzXJQwuTuvHFRCD80EP0WW6A7O
n4QHVyoT12IU1JI6J8reaKR+ctpaCdYGpFo45as/qJT6QwYKIQFq7eLspNC3uiOl
uEXK4LwdfRpefAOvmh+G0DlQMvxLtwqsYuXz5wnrqsx77YlLXncSVRik5XcY7p5a
FOwsUx8+MAVQ0TQkNJa4i8rcww==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:06:45 2026 by rpki-client