Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/ds0SrZ5gjKosGZe2NvRQV3vpN7w.mft
File:                     ds0SrZ5gjKosGZe2NvRQV3vpN7w.mft (raw, json)
Hash identifier:          3KsNIN83ivwlJHkk/tGrPkDUXMkbUnVD9VzFV8pzWLA=
Subject key identifier:   AA:01:05:B9:43:95:26:D6:26:EC:53:7D:FF:AD:48:74:6E:47:F3:D3
Authority key identifier: 76:CD:12:AD:9E:60:8C:AA:2C:19:97:B6:36:F4:50:57:7B:E9:37:BC
Certificate issuer:       /CN=A91F26F1/serialNumber=76CD12AD9E608CAA2C1997B636F450577BE937BC
Certificate serial:       02E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0SrZ5gjKosGZe2NvRQV3vpN7w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/ds0SrZ5gjKosGZe2NvRQV3vpN7w.mft
Manifest number:          02E0
Signing time:             Fri 17 Apr 2026 01:14:55 +0000
Manifest this update:     Fri 17 Apr 2026 01:14:54 +0000
Manifest next update:     Fri 24 Apr 2026 01:14:54 +0000
Files and hashes:         1: ds0SrZ5gjKosGZe2NvRQV3vpN7w.crl (hash: V6sNl09lIUkHLOHI3Ip5rYWL088RjyU1IAGG1f2QGZ4=)
                          2: 150C1686283511EDABF49D69C4F9AE02.roa (hash: LLGJ17Nou/4s6iU/phgh61bl/Dsvbl9fuqtoB8+Y6Fw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/ds0SrZ5gjKosGZe2NvRQV3vpN7w.crl
                          rsync://rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/ds0SrZ5gjKosGZe2NvRQV3vpN7w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0SrZ5gjKosGZe2NvRQV3vpN7w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:14:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 745 (0x2e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F26F1, serialNumber=76CD12AD9E608CAA2C1997B636F450577BE937BC
        Validity
            Not Before: Apr 17 01:14:54 2026 GMT
            Not After : Apr 24 01:14:54 2026 GMT
        Subject: CN=69e1898e-7b26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fc:6d:2a:c2:8b:83:90:58:f2:cf:a6:3f:f8:
                    75:7b:bf:43:c5:20:76:9b:25:72:e2:bc:d1:c1:66:
                    49:d4:d1:ad:e5:4f:30:8f:c3:21:99:23:40:e0:03:
                    e2:b0:6e:60:4a:bc:ee:7f:be:60:cb:3f:e0:23:b8:
                    6d:87:bb:7b:e9:8a:71:27:b2:8b:30:61:a7:b4:5f:
                    ee:5e:84:e1:ac:29:1b:8a:c4:d4:af:cc:39:f1:3c:
                    d7:87:fa:a3:36:bc:07:1a:db:ea:b7:ca:e2:e1:b7:
                    46:dd:5f:e8:43:3b:a8:5e:17:f8:11:fd:83:19:c2:
                    10:63:61:50:ac:9f:eb:29:d9:f3:3e:3f:9e:e0:7e:
                    a4:02:b8:d7:55:33:3f:05:36:b2:a8:9e:be:aa:ed:
                    07:09:3e:b1:7d:d4:9b:6c:61:c9:e3:c3:01:05:f7:
                    1e:03:5d:5b:ab:46:7e:52:69:62:71:80:19:35:06:
                    84:af:bd:11:73:95:32:c4:c0:6e:49:10:a4:ab:15:
                    cc:17:27:78:f9:f5:33:45:ec:f5:eb:ec:22:15:64:
                    33:a7:ee:7d:a2:cb:0b:4c:22:cf:c5:2f:b9:4c:36:
                    d9:7c:96:0f:28:b7:35:ce:a3:4e:16:e5:c6:02:44:
                    11:f2:10:b5:9e:0e:cd:8e:15:82:29:83:0a:10:5d:
                    74:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:01:05:B9:43:95:26:D6:26:EC:53:7D:FF:AD:48:74:6E:47:F3:D3
            X509v3 Authority Key Identifier:
                keyid:76:CD:12:AD:9E:60:8C:AA:2C:19:97:B6:36:F4:50:57:7B:E9:37:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/ds0SrZ5gjKosGZe2NvRQV3vpN7w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0SrZ5gjKosGZe2NvRQV3vpN7w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/ds0SrZ5gjKosGZe2NvRQV3vpN7w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:e4:c5:a6:3c:75:ee:40:ef:72:82:e8:a3:e7:48:79:f3:ab:
         94:6d:7e:0a:62:f7:1f:57:f4:77:bb:85:7a:0b:76:ae:93:81:
         e8:b6:db:22:ae:ca:77:41:ff:96:62:d8:bf:d6:a7:2e:5e:18:
         5c:a5:7a:48:4a:f0:5f:ab:59:dc:67:34:ee:b7:a4:c7:46:91:
         e7:ac:8d:18:f2:a1:8d:50:70:6d:18:db:2e:e2:38:8c:bf:5a:
         2c:e5:cd:dd:78:4b:c2:83:91:f3:53:a0:95:f1:6c:c7:f1:95:
         2d:a4:d7:91:9c:4b:73:e4:81:70:94:c3:da:c0:6f:f2:4d:49:
         e9:03:79:16:01:c3:35:b4:01:c8:16:f5:72:ed:8d:ed:9f:23:
         83:35:03:d4:6e:ee:6d:a9:f5:d8:65:e3:da:22:2f:67:9a:c4:
         3a:21:93:d9:ca:31:b0:37:26:de:58:30:4e:31:26:67:b9:d3:
         a5:bc:e5:60:4f:93:e9:b9:28:d2:69:df:ff:e8:34:d1:a4:a7:
         cc:57:09:a0:ab:9e:36:ee:b4:34:0d:71:9c:b0:76:79:64:26:
         49:d3:27:98:47:2d:2b:9e:8e:43:1f:42:85:5b:ea:e6:45:97:
         59:c9:ae:7a:5e:c3:d8:55:df:27:52:aa:26:48:dd:d7:4e:1c:
         f7:9d:c7:06
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAukwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjI2RjExMTAvBgNVBAUTKDc2Q0QxMkFEOUU2MDhDQUEyQzE5OTdCNjM2RjQ1MDU3
N0JFOTM3QkMwHhcNMjYwNDE3MDExNDU0WhcNMjYwNDI0MDExNDU0WjAYMRYwFAYD
VQQDEw02OWUxODk4ZS03YjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlvxtKsKLg5BY8s+mP/h1e79DxSB2myVy4rzRwWZJ1NGt5U8wj8MhmSNA4APi
sG5gSrzuf75gyz/gI7hth7t76YpxJ7KLMGGntF/uXoThrCkbisTUr8w58TzXh/qj
NrwHGtvqt8ri4bdG3V/oQzuoXhf4Ef2DGcIQY2FQrJ/rKdnzPj+e4H6kArjXVTM/
BTayqJ6+qu0HCT6xfdSbbGHJ48MBBfceA11bq0Z+UmlicYAZNQaEr70Rc5UyxMBu
SRCkqxXMFyd4+fUzRez16+wiFWQzp+59ossLTCLPxS+5TDbZfJYPKLc1zqNOFuXG
AkQR8hC1ng7NjhWCKYMKEF10GwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKoBBblD
lSbWJuxTff+tSHRuR/PTMB8GA1UdIwQYMBaAFHbNEq2eYIyqLBmXtjb0UFd76Te8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjZGMS84OEYxQzc4NDI4
MzExMUVEOTQ5NUQ0MkFDNEY5QUUwMi9kczBTclo1Z2pLb3NHWmUyTnZSUVYzdnBO
N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RzMFNyWjVnaktvc0daZTJOdlJRVjN2cE43dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MjZGMS84OEYxQzc4NDI4MzExMUVEOTQ5NUQ0MkFDNEY5QUUwMi9kczBTclo1Z2pL
b3NHWmUyTnZSUVYzdnBON3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAROTFpjx17kDvcoLoo+dIefOrlG1+CmL3H1f0d7uFegt2rpOB6LbbIq7Kd0H/
lmLYv9anLl4YXKV6SErwX6tZ3Gc07rekx0aR56yNGPKhjVBwbRjbLuI4jL9aLOXN
3XhLwoOR81OglfFsx/GVLaTXkZxLc+SBcJTD2sBv8k1J6QN5FgHDNbQByBb1cu2N
7Z8jgzUD1G7uban12GXj2iIvZ5rEOiGT2coxsDcm3lgwTjEmZ7nTpbzlYE+T6bko
0mnf/+g00aSnzFcJoKueNu60NA1xnLB2eWQmSdMnmEctK56OQx9ChVvq5kWXWcmu
el7D2FXfJ1KqJkjd104c953HBg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:44:46 2026 by rpki-client