Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft
File:                     u8EDVhr9epMDbRxy3UwKfCpOKc4.mft (raw, json)
Hash identifier:          tlCNLjqHEshvXEkI4fwMdZlQnOGH2HhTfZ/dcl/LRUo=
Subject key identifier:   12:98:D7:A3:BD:BE:6C:A1:FE:00:A9:38:FB:89:FC:AA:3A:39:1F:10
Authority key identifier: BB:C1:03:56:1A:FD:7A:93:03:6D:1C:72:DD:4C:0A:7C:2A:4E:29:CE
Certificate issuer:       /CN=A91F277D/serialNumber=BBC103561AFD7A93036D1C72DD4C0A7C2A4E29CE
Certificate serial:       071B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft
Manifest number:          06F7
Signing time:             Thu 16 Apr 2026 21:42:59 +0000
Manifest this update:     Thu 16 Apr 2026 21:42:58 +0000
Manifest next update:     Thu 23 Apr 2026 21:42:58 +0000
Files and hashes:         1: u8EDVhr9epMDbRxy3UwKfCpOKc4.crl (hash: SpFuBqs42xpE2Bt4BNHRjkiguYAKjMJ4vtuC8USCzf4=)
                          2: 715924988D6C11EBAFD23A2EC4F9AE02.roa (hash: p9oLeg7LyY+vlGNticT0e8fg65yu3rD7mdYWF8Pyt1o=)
                          3: CEF8E22E711711EDB49CE11AC4F9AE02.roa (hash: N9eG1bQhX1YdCDkzKaSF+f+WLANX5CsAn9fANFhO8B8=)
                          4: 70A77C348D6C11EBAFD23A2EC4F9AE02.roa (hash: VDBG2w47npIoKGnSUG19h4msTJ7z1dezZlZeedxqUyw=)
                          5: 0BABC0DCB15D11EB8937582CC4F9AE02.roa (hash: /IhoZrHLS7mKMxuodlFyZTmLLtfy6GDD39NpDwvO+Xw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.crl
                          rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:42:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1819 (0x71b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F277D, serialNumber=BBC103561AFD7A93036D1C72DD4C0A7C2A4E29CE
        Validity
            Not Before: Apr 16 21:42:58 2026 GMT
            Not After : Apr 23 21:42:58 2026 GMT
        Subject: CN=69e157e3-f76e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:ae:dc:39:6c:95:07:4f:d5:9a:47:50:11:23:
                    86:06:6e:27:a7:c9:d2:ed:6f:32:40:c4:4e:e7:fe:
                    86:d9:0f:f3:14:e4:a9:87:fc:96:e1:38:2b:fe:05:
                    16:07:3f:89:7c:24:62:48:5f:36:0a:3b:1b:c8:b2:
                    79:a9:cd:9c:a3:29:80:52:14:2b:77:8a:ce:c2:54:
                    c4:f0:75:1d:30:c9:83:a7:6e:2a:08:80:dc:cf:58:
                    4b:33:58:b4:42:f4:2c:df:4e:ff:86:4d:21:aa:5a:
                    ae:09:3d:cf:f3:e4:63:c9:50:a8:a1:e1:51:7b:76:
                    d9:ac:b0:6e:12:87:b2:60:36:99:b2:7f:8c:2e:42:
                    91:79:f9:e7:14:c4:e7:ff:92:f6:8e:8b:71:14:d8:
                    c4:d9:66:7b:d9:f5:b3:af:92:8e:cf:70:af:97:c3:
                    21:28:3b:66:bb:fa:51:62:68:ac:3a:6d:ed:bb:d6:
                    81:15:52:12:12:07:b0:e6:97:d5:2b:8e:16:ac:04:
                    d0:2a:0c:f2:73:66:3e:2e:fc:07:87:aa:84:e7:a9:
                    a9:38:99:39:17:f8:7a:fc:0d:55:f5:df:1e:ff:7d:
                    fb:75:14:fb:87:06:25:d2:d5:7c:6f:8c:a6:92:af:
                    c6:80:2c:00:78:ca:13:4f:33:b4:f9:61:f8:a4:3b:
                    cc:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:98:D7:A3:BD:BE:6C:A1:FE:00:A9:38:FB:89:FC:AA:3A:39:1F:10
            X509v3 Authority Key Identifier:
                keyid:BB:C1:03:56:1A:FD:7A:93:03:6D:1C:72:DD:4C:0A:7C:2A:4E:29:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:db:5c:da:76:1c:ca:cd:74:4a:93:47:8d:42:f5:27:93:fe:
         a3:5a:71:4e:b5:d9:7d:b4:bd:a7:5a:32:5c:02:60:76:f4:90:
         e2:f6:9e:13:0a:13:72:fb:e4:24:fe:c5:f8:37:67:3f:11:27:
         fd:ed:dd:1d:17:f8:82:4a:97:be:60:f4:7e:f7:e6:eb:c0:ff:
         d4:ed:0a:fd:a6:3c:e0:82:84:73:65:ce:34:c9:24:a0:82:ba:
         27:5a:0f:2a:a4:8f:74:f2:5f:89:7a:09:09:b9:1e:64:3c:cc:
         1d:e5:98:00:cb:13:91:07:3f:a1:aa:72:69:cd:08:53:4b:d2:
         4a:96:63:22:57:d1:27:f7:20:c5:c1:ce:96:95:0b:06:39:2c:
         2a:fb:73:75:2d:96:91:75:a4:5f:a6:1a:a7:26:b1:b4:29:3a:
         aa:0e:95:60:48:53:79:e0:32:87:30:66:5a:35:c5:15:d9:65:
         ff:55:15:72:a7:9d:f4:26:4c:da:db:f6:1d:ae:b6:22:24:ab:
         b8:7a:8a:f5:1b:c8:d0:18:8d:0b:e7:55:7f:1c:6e:ba:cb:15:
         3f:19:84:eb:e7:f5:b9:70:31:c9:d7:90:85:8b:f0:49:ee:42:
         e5:25:64:8f:14:e8:fc:84:3a:91:e3:f5:3a:c6:58:15:cb:2f:
         1c:95:4d:a0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBxswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjI3N0QxMTAvBgNVBAUTKEJCQzEwMzU2MUFGRDdBOTMwMzZEMUM3MkRENEMwQTdD
MkE0RTI5Q0UwHhcNMjYwNDE2MjE0MjU4WhcNMjYwNDIzMjE0MjU4WjAYMRYwFAYD
VQQDEw02OWUxNTdlMy1mNzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8a7cOWyVB0/VmkdQESOGBm4np8nS7W8yQMRO5/6G2Q/zFOSph/yW4Tgr/gUW
Bz+JfCRiSF82CjsbyLJ5qc2coymAUhQrd4rOwlTE8HUdMMmDp24qCIDcz1hLM1i0
QvQs307/hk0hqlquCT3P8+RjyVCooeFRe3bZrLBuEoeyYDaZsn+MLkKRefnnFMTn
/5L2jotxFNjE2WZ72fWzr5KOz3Cvl8MhKDtmu/pRYmisOm3tu9aBFVISEgew5pfV
K44WrATQKgzyc2Y+LvwHh6qE56mpOJk5F/h6/A1V9d8e/337dRT7hwYl0tV8b4ym
kq/GgCwAeMoTTzO0+WH4pDvMowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBKY16O9
vmyh/gCpOPuJ/Ko6OR8QMB8GA1UdIwQYMBaAFLvBA1Ya/XqTA20cct1MCnwqTinO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjc3RC83OEExRDA4RThE
NkIxMUVCOTg0MEUwNUZDNEY5QUUwMi91OEVEVmhyOWVwTURiUnh5M1V3S2ZDcE9L
YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3U4RURWaHI5ZXBNRGJSeHkzVXdLZkNwT0tjNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
Mjc3RC83OEExRDA4RThENkIxMUVCOTg0MEUwNUZDNEY5QUUwMi91OEVEVmhyOWVw
TURiUnh5M1V3S2ZDcE9LYzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKdtc2nYcys10SpNHjUL1J5P+o1pxTrXZfbS9p1oyXAJgdvSQ4vaeEwoTcvvk
JP7F+DdnPxEn/e3dHRf4gkqXvmD0fvfm68D/1O0K/aY84IKEc2XONMkkoIK6J1oP
KqSPdPJfiXoJCbkeZDzMHeWYAMsTkQc/oapyac0IU0vSSpZjIlfRJ/cgxcHOlpUL
BjksKvtzdS2WkXWkX6YapyaxtCk6qg6VYEhTeeAyhzBmWjXFFdll/1UVcqed9CZM
2tv2Ha62IiSruHqK9RvI0BiNC+dVfxxuussVPxmE6+f1uXAxydeQhYvwSe5C5SVk
jxTo/IQ6keP1OsZYFcsvHJVNoA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:24:23 2026 by rpki-client