Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft
File:                     Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft (raw, json)
Hash identifier:          jrw/H5wcEat7vvOpgUcxHA3A33M78WSqvMDD/H79nHg=
Subject key identifier:   F3:4C:19:58:45:C9:B7:1A:A4:E4:47:FC:32:A0:71:1B:1F:E8:87:83
Authority key identifier: 06:DF:52:D2:91:50:3D:0E:2B:11:72:D3:85:C2:B1:87:79:4C:79:C7
Certificate issuer:       /CN=A91F6E7D/serialNumber=06DF52D291503D0E2B1172D385C2B187794C79C7
Certificate serial:       0A6A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bt9S0pFQPQ4rEXLThcKxh3lMecc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft
Manifest number:          0A60
Signing time:             Thu 16 Apr 2026 19:32:46 +0000
Manifest this update:     Thu 16 Apr 2026 19:32:45 +0000
Manifest next update:     Thu 23 Apr 2026 19:32:45 +0000
Files and hashes:         1: Bt9S0pFQPQ4rEXLThcKxh3lMecc.crl (hash: H0eYIdYHggSj4IQXrdSnTy40fuq9HoljzQjYh62oAxI=)
                          2: 401EA996B5B511EABB640052C4F9AE02.roa (hash: 3UdrZqdhdDJ0HDKYCaHDQZmp3LAxyKD7mCp5FO7bhxY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.crl
                          rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bt9S0pFQPQ4rEXLThcKxh3lMecc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:32:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2666 (0xa6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F6E7D, serialNumber=06DF52D291503D0E2B1172D385C2B187794C79C7
        Validity
            Not Before: Apr 16 19:32:45 2026 GMT
            Not After : Apr 23 19:32:45 2026 GMT
        Subject: CN=69e1395d-5401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:eb:f4:ba:7e:d7:78:7a:bd:5c:c8:c2:ec:48:
                    81:ea:bd:e7:1a:6a:b5:4f:f8:ae:e7:ce:86:b6:19:
                    ec:53:66:7a:df:d1:f5:03:f2:8e:37:4c:a6:fd:72:
                    c0:01:8f:b8:63:af:05:3b:d1:de:cb:e2:a2:a8:47:
                    8c:ff:6b:87:c8:30:e9:43:52:44:52:70:a5:f3:f5:
                    30:ab:80:6e:f3:64:c8:fc:f0:2d:42:e9:75:99:1c:
                    9f:3d:b1:59:5f:97:fb:16:68:06:36:55:ee:75:16:
                    75:9e:7b:65:8c:87:72:e9:d5:a2:a8:7e:ed:d1:7f:
                    35:97:04:2c:97:4a:59:5d:7f:31:82:01:c3:01:77:
                    96:4e:6c:c7:a3:8f:91:1c:66:da:1c:70:0f:1c:8c:
                    c4:9b:78:8c:16:3a:1b:d9:90:ac:ac:d7:ad:fd:fc:
                    d8:7c:1b:fd:ff:dd:71:8e:36:35:f0:be:8f:33:9c:
                    3b:3b:95:f8:08:d3:1a:57:11:d0:e9:00:d3:80:02:
                    ca:22:47:02:6f:79:bf:31:a4:4f:e4:53:95:66:99:
                    dd:55:15:8c:fd:35:7f:43:62:fa:71:bc:cd:14:e0:
                    2a:79:38:6e:91:af:c5:a9:4f:32:22:ab:80:74:3f:
                    a0:3a:da:ae:80:58:ca:40:05:85:b5:94:f1:00:7e:
                    71:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:4C:19:58:45:C9:B7:1A:A4:E4:47:FC:32:A0:71:1B:1F:E8:87:83
            X509v3 Authority Key Identifier:
                keyid:06:DF:52:D2:91:50:3D:0E:2B:11:72:D3:85:C2:B1:87:79:4C:79:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bt9S0pFQPQ4rEXLThcKxh3lMecc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:98:03:05:80:6b:4b:36:6c:50:50:c7:a1:8c:6c:92:df:cc:
         e4:a5:39:e3:ef:af:d2:a6:c7:9d:f8:fe:af:a2:10:d8:3d:22:
         54:76:37:e6:5a:57:b2:27:a1:f7:ec:08:e1:b5:37:57:5b:d3:
         ee:6b:2e:0b:2a:da:39:25:1c:c2:9e:81:4d:0a:9e:3a:7c:de:
         11:90:6c:1d:a3:1c:e7:43:9b:40:8b:22:22:06:70:96:ab:2c:
         8a:16:36:f9:f2:3b:82:51:24:f6:c9:bf:e4:cd:4c:95:81:94:
         4b:0c:de:f5:07:45:aa:d1:ff:ba:40:22:78:c9:bf:3f:3a:85:
         92:3e:39:54:1f:d7:1f:f1:cc:b9:b4:80:73:83:29:2e:88:5f:
         11:59:74:d8:ac:1d:73:00:66:40:f0:0a:ff:60:05:bd:f3:a5:
         5c:a8:76:08:1a:42:44:74:19:95:34:cb:2c:76:25:19:4d:4d:
         d6:2e:bb:d3:74:ab:39:70:66:5d:81:94:c7:f0:d8:5c:d8:c8:
         08:8a:7d:1e:30:a4:ce:60:f0:27:e4:ea:8d:a5:97:40:e3:52:
         69:f4:a6:25:20:7d:2c:77:f2:eb:6d:20:d1:5f:ce:ce:85:a7:
         95:cc:e6:3d:e4:db:61:a7:02:b7:26:41:dd:1c:30:98:23:c1:
         8b:69:05:83
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCmowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjZFN0QxMTAvBgNVBAUTKDA2REY1MkQyOTE1MDNEMEUyQjExNzJEMzg1QzJCMTg3
Nzk0Qzc5QzcwHhcNMjYwNDE2MTkzMjQ1WhcNMjYwNDIzMTkzMjQ1WjAYMRYwFAYD
VQQDEw02OWUxMzk1ZC01NDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuuv0un7XeHq9XMjC7EiB6r3nGmq1T/iu586GthnsU2Z639H1A/KON0ym/XLA
AY+4Y68FO9Hey+KiqEeM/2uHyDDpQ1JEUnCl8/Uwq4Bu82TI/PAtQul1mRyfPbFZ
X5f7FmgGNlXudRZ1nntljIdy6dWiqH7t0X81lwQsl0pZXX8xggHDAXeWTmzHo4+R
HGbaHHAPHIzEm3iMFjob2ZCsrNet/fzYfBv9/91xjjY18L6PM5w7O5X4CNMaVxHQ
6QDTgALKIkcCb3m/MaRP5FOVZpndVRWM/TV/Q2L6cbzNFOAqeThuka/FqU8yIquA
dD+gOtqugFjKQAWFtZTxAH5xcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPNMGVhF
ybcapORH/DKgcRsf6IeDMB8GA1UdIwQYMBaAFAbfUtKRUD0OKxFy04XCsYd5THnH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkU3RC8xNzU5RTRDODgz
ODExMUVBQUNCOUJDMzBDNEY5QUUwMi9CdDlTMHBGUVBRNHJFWExUaGNLeGgzbE1l
Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0J0OVMwcEZRUFE0ckVYTFRoY0t4aDNsTWVjYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NkU3RC8xNzU5RTRDODgzODExMUVBQUNCOUJDMzBDNEY5QUUwMi9CdDlTMHBGUVBR
NHJFWExUaGNLeGgzbE1lY2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA15gDBYBrSzZsUFDHoYxskt/M5KU54++v0qbHnfj+r6IQ2D0iVHY35lpXsieh
9+wI4bU3V1vT7msuCyraOSUcwp6BTQqeOnzeEZBsHaMc50ObQIsiIgZwlqssihY2
+fI7glEk9sm/5M1MlYGUSwze9QdFqtH/ukAieMm/PzqFkj45VB/XH/HMubSAc4Mp
LohfEVl02KwdcwBmQPAK/2AFvfOlXKh2CBpCRHQZlTTLLHYlGU1N1i6703SrOXBm
XYGUx/DYXNjICIp9HjCkzmDwJ+TqjaWXQONSafSmJSB9LHfy620g0V/OzoWnlczm
PeTbYacCtyZB3RwwmCPBi2kFgw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:08:40 2026 by rpki-client