Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4130/F40EE84EC11211F0BB5A1420C4F9AE02/iDcigo7Pno3d_SRvPGeOnwUV-dI.mft
File:                     iDcigo7Pno3d_SRvPGeOnwUV-dI.mft (raw, json)
Hash identifier:          5YGWAc9hnN55dwBwJTLnInNRNMME/A6RxUChycjIYso=
Subject key identifier:   9D:7D:A2:97:E9:8F:78:B8:8F:62:29:D9:FF:11:44:27:BF:82:84:86
Authority key identifier: 88:37:22:82:8E:CF:9E:8D:DD:FD:24:6F:3C:67:8E:9F:05:15:F9:D2
Certificate issuer:       /CN=A91F4130/serialNumber=883722828ECF9E8DDDFD246F3C678E9F0515F9D2
Certificate serial:       53
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iDcigo7Pno3d_SRvPGeOnwUV-dI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4130/F40EE84EC11211F0BB5A1420C4F9AE02/iDcigo7Pno3d_SRvPGeOnwUV-dI.mft
Manifest number:          51
Signing time:             Fri 17 Apr 2026 07:53:24 +0000
Manifest this update:     Fri 17 Apr 2026 07:53:23 +0000
Manifest next update:     Fri 24 Apr 2026 07:53:23 +0000
Files and hashes:         1: iDcigo7Pno3d_SRvPGeOnwUV-dI.crl (hash: DaVA7q8SlPNdFMuBXkibRXLVYDw/FiHXrl1jIHiLBCg=)
                          2: B27ED5E6C11311F089B2CF23C4F9AE02.roa (hash: +u62azMd4pOnj3CpAjZP1k28yAPQXoJe4iMoi3wUC8U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4130/F40EE84EC11211F0BB5A1420C4F9AE02/iDcigo7Pno3d_SRvPGeOnwUV-dI.crl
                          rsync://rpki.apnic.net/member_repository/A91F4130/F40EE84EC11211F0BB5A1420C4F9AE02/iDcigo7Pno3d_SRvPGeOnwUV-dI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iDcigo7Pno3d_SRvPGeOnwUV-dI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:53:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4130, serialNumber=883722828ECF9E8DDDFD246F3C678E9F0515F9D2
        Validity
            Not Before: Apr 17 07:53:23 2026 GMT
            Not After : Apr 24 07:53:23 2026 GMT
        Subject: CN=69e1e6f4-16ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3c:c4:72:7f:27:a1:c4:12:97:d9:19:35:35:
                    77:e5:73:10:d6:6d:19:a9:c4:cf:83:5d:03:d4:03:
                    68:1a:e8:22:fc:55:ea:3e:62:0b:a4:d7:5a:e2:75:
                    c8:b4:47:ed:c7:ec:d8:b0:d6:ad:e5:61:fa:e7:aa:
                    11:f2:cb:7c:3e:86:7f:53:16:76:c1:df:0c:4d:34:
                    d8:f1:83:b7:01:05:b6:c2:b4:0a:31:05:9c:61:db:
                    f5:fd:34:2e:7c:77:7c:55:6b:ad:7e:6a:af:a7:cd:
                    8f:8e:1d:98:98:1b:d2:fe:55:80:14:11:03:5b:91:
                    7d:bb:cb:ec:80:1d:a2:3d:0f:fc:39:3c:de:af:9d:
                    0b:a5:4c:1b:27:9d:72:b3:7f:b3:5f:4a:6b:6c:1b:
                    2c:ad:dd:ea:53:c7:6b:21:36:ba:0e:b6:a8:10:47:
                    32:60:90:84:57:f8:fe:d9:39:d0:f1:d6:21:e4:40:
                    3f:99:38:54:9f:fa:a3:d4:e0:9d:03:0b:ea:f6:27:
                    59:00:b6:51:67:0c:0b:1e:5d:4c:ff:2e:3a:e5:e4:
                    23:9c:bd:76:86:9a:55:f3:b8:95:77:52:30:aa:81:
                    b2:80:b4:bf:f6:50:10:78:5e:69:6d:04:83:6d:13:
                    dc:2f:ae:55:21:46:21:92:ca:77:46:e5:6d:68:97:
                    e2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:7D:A2:97:E9:8F:78:B8:8F:62:29:D9:FF:11:44:27:BF:82:84:86
            X509v3 Authority Key Identifier:
                keyid:88:37:22:82:8E:CF:9E:8D:DD:FD:24:6F:3C:67:8E:9F:05:15:F9:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4130/F40EE84EC11211F0BB5A1420C4F9AE02/iDcigo7Pno3d_SRvPGeOnwUV-dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iDcigo7Pno3d_SRvPGeOnwUV-dI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4130/F40EE84EC11211F0BB5A1420C4F9AE02/iDcigo7Pno3d_SRvPGeOnwUV-dI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:e9:62:b6:a0:e6:9d:07:b3:b7:73:eb:bf:51:fe:27:5d:47:
         a1:f6:12:2e:39:e0:ab:6a:a1:17:6b:df:fd:19:27:11:18:61:
         47:2a:cc:b2:e0:a2:5c:cf:80:6c:2e:91:d7:39:0e:f9:7d:cb:
         d1:1d:d6:0f:92:7b:a9:b2:1e:8b:e6:81:af:39:58:12:e6:01:
         64:98:96:5c:e0:81:83:55:a3:47:fd:df:aa:7c:66:20:07:16:
         a4:40:12:0b:4f:50:01:35:bd:71:ad:7f:00:38:6e:8d:18:01:
         b3:56:6d:bf:dd:aa:5a:c0:e1:4e:6c:e3:9a:26:fd:95:8f:f4:
         c8:03:ab:1e:5f:60:6c:22:ee:b5:19:79:b4:35:b6:95:79:a7:
         ce:1d:85:42:2c:e1:b8:de:2e:af:7e:cd:5e:ea:73:b7:f2:b6:
         c7:9d:41:0b:5a:07:fb:4b:53:c1:0b:9c:d8:cc:b6:5f:71:8a:
         08:d1:f0:36:56:14:67:dc:c9:65:b4:fb:d3:f6:5c:49:a6:fa:
         d2:00:59:ea:e4:3f:98:4f:26:d5:04:ae:6c:8c:10:a2:8c:cb:
         18:c3:3c:1a:4a:c9:7a:9f:35:21:23:fe:f3:14:e2:89:86:19:
         6f:18:f0:98:23:98:af:41:d0:2c:df:70:ec:28:11:93:1c:3a:
         25:36:4f:0a
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
NDEzMDExMC8GA1UEBRMoODgzNzIyODI4RUNGOUU4RERERkQyNDZGM0M2NzhFOUYw
NTE1RjlEMjAeFw0yNjA0MTcwNzUzMjNaFw0yNjA0MjQwNzUzMjNaMBgxFjAUBgNV
BAMTDTY5ZTFlNmY0LTE2YWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDGPMRyfyehxBKX2Rk1NXflcxDWbRmpxM+DXQPUA2ga6CL8Veo+Yguk11ridci0
R+3H7Niw1q3lYfrnqhHyy3w+hn9TFnbB3wxNNNjxg7cBBbbCtAoxBZxh2/X9NC58
d3xVa61+aq+nzY+OHZiYG9L+VYAUEQNbkX27y+yAHaI9D/w5PN6vnQulTBsnnXKz
f7NfSmtsGyyt3epTx2shNroOtqgQRzJgkIRX+P7ZOdDx1iHkQD+ZOFSf+qPU4J0D
C+r2J1kAtlFnDAseXUz/Ljrl5COcvXaGmlXzuJV3UjCqgbKAtL/2UBB4XmltBINt
E9wvrlUhRiGSyndG5W1ol+LhAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUnX2il+mP
eLiPYinZ/xFEJ7+ChIYwHwYDVR0jBBgwFoAUiDcigo7Pno3d/SRvPGeOnwUV+dIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY0MTMwL0Y0MEVFODRFQzEx
MjExRjBCQjVBMTQyMEM0RjlBRTAyL2lEY2lnbzdQbm8zZF9TUnZQR2VPbndVVi1k
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvaURjaWdvN1BubzNkX1NSdlBHZU9ud1VWLWRJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY0
MTMwL0Y0MEVFODRFQzExMjExRjBCQjVBMTQyMEM0RjlBRTAyL2lEY2lnbzdQbm8z
ZF9TUnZQR2VPbndVVi1kSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCB6WK2oOadB7O3c+u/Uf4nXUeh9hIuOeCraqEXa9/9GScRGGFHKsyy4KJcz4Bs
LpHXOQ75fcvRHdYPknupsh6L5oGvOVgS5gFkmJZc4IGDVaNH/d+qfGYgBxakQBIL
T1ABNb1xrX8AOG6NGAGzVm2/3apawOFObOOaJv2Vj/TIA6seX2BsIu61GXm0NbaV
eafOHYVCLOG43i6vfs1e6nO38rbHnUELWgf7S1PBC5zYzLZfcYoI0fA2VhRn3Mll
tPvT9lxJpvrSAFnq5D+YTybVBK5sjBCijMsYwzwaSsl6nzUhI/7zFOKJhhlvGPCY
I5ivQdAs33DsKBGTHDolNk8K
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:57:40 2026 by rpki-client