Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.mft
File:                     _2p8LLPdLXe95os2uoNseVip1No.mft (raw, json)
Hash identifier:          B39vdsJtFffKCbt1UAytnCqIUa1fqkpzPAhyLir6PAw=
Subject key identifier:   22:AA:4D:9F:6E:E1:71:7F:6C:C2:56:22:68:CD:D7:85:E1:15:10:0C
Authority key identifier: FF:6A:7C:2C:B3:DD:2D:77:BD:E6:8B:36:BA:83:6C:79:58:A9:D4:DA
Certificate issuer:       /CN=A91F7506/serialNumber=FF6A7C2CB3DD2D77BDE68B36BA836C7958A9D4DA
Certificate serial:       0257
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2p8LLPdLXe95os2uoNseVip1No.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.mft
Manifest number:          024F
Signing time:             Fri 17 Apr 2026 02:06:01 +0000
Manifest this update:     Fri 17 Apr 2026 02:06:00 +0000
Manifest next update:     Fri 24 Apr 2026 02:06:00 +0000
Files and hashes:         1: _2p8LLPdLXe95os2uoNseVip1No.crl (hash: WEFPOGp8id3NyAZ0cGmwZCa65pZFrpmNjP2Ubxi/xzQ=)
                          2: 6903848C20A911EEBEC77485C4F9AE02.roa (hash: mW1iWwpQQylY6iE8sdWE8tVgfHzsd3lPnfRwdKX9dm8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.crl
                          rsync://rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2p8LLPdLXe95os2uoNseVip1No.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 599 (0x257)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7506, serialNumber=FF6A7C2CB3DD2D77BDE68B36BA836C7958A9D4DA
        Validity
            Not Before: Apr 17 02:06:00 2026 GMT
            Not After : Apr 24 02:06:00 2026 GMT
        Subject: CN=69e19589-5205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:fb:33:e0:1c:fb:52:e5:35:1b:9d:8b:a0:56:
                    14:ea:70:ad:ac:f1:03:70:2e:21:c1:cb:f5:e4:b2:
                    b6:98:ad:d4:45:a2:08:4d:0c:15:c6:cd:b0:49:b6:
                    dd:ff:f2:73:d7:07:c9:43:c5:96:9b:bf:cf:95:fb:
                    85:98:07:13:a6:e7:54:6f:98:3d:e2:9d:f2:c9:bb:
                    de:d8:f5:8d:73:68:63:ec:8d:36:12:28:5f:fd:ed:
                    3f:b0:22:9b:cf:2a:9b:06:19:13:1d:5c:90:9d:64:
                    89:ee:de:a6:04:ba:05:77:11:c4:1b:5a:2d:75:57:
                    52:c5:57:04:75:60:53:19:42:49:62:f1:9e:fd:79:
                    0f:9c:6d:2f:1b:f7:6d:b7:3d:11:d0:00:6e:50:85:
                    2f:a6:07:07:47:fd:b2:5e:0d:c8:5d:e3:52:f4:92:
                    65:d4:f7:0e:fd:db:19:50:05:bf:75:d6:0f:0d:b4:
                    62:21:93:b1:80:54:d0:1a:8a:1b:9a:75:1c:8e:0f:
                    61:a8:a4:25:50:bf:14:f3:ca:29:d0:6a:74:2f:f2:
                    7d:81:c3:99:96:2c:34:c9:07:a0:f8:34:06:3f:a3:
                    01:3e:4a:2a:5e:03:cf:59:6a:61:20:54:09:8c:7e:
                    0b:d0:94:6f:54:7c:85:63:65:99:79:eb:cf:ce:7b:
                    c8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:AA:4D:9F:6E:E1:71:7F:6C:C2:56:22:68:CD:D7:85:E1:15:10:0C
            X509v3 Authority Key Identifier:
                keyid:FF:6A:7C:2C:B3:DD:2D:77:BD:E6:8B:36:BA:83:6C:79:58:A9:D4:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2p8LLPdLXe95os2uoNseVip1No.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:fd:14:d0:42:83:32:35:5b:b8:93:f5:1b:92:41:03:17:07:
         40:24:77:ae:ce:17:e1:fa:a2:4b:0b:11:b1:b9:45:1d:6f:81:
         b0:1d:f3:93:52:0d:1b:a4:85:68:fe:97:12:62:25:fc:5d:a3:
         ae:94:71:bc:4e:c0:e9:53:36:d2:e3:eb:d9:cc:39:6b:32:89:
         5f:56:8c:db:dd:26:5c:ab:d0:9b:79:17:4f:8b:18:f0:f0:2c:
         a2:9f:0d:84:48:5c:29:e9:6b:d2:34:b3:b2:e8:74:0f:ea:06:
         5a:ba:45:a0:ae:e7:2e:de:8c:11:ec:3a:06:57:2e:46:22:8f:
         43:41:1b:5a:13:1c:01:07:6a:e2:48:cb:1f:08:a0:38:52:43:
         94:a6:7f:c7:93:f8:8b:26:06:a5:48:8d:1a:09:b4:d9:e6:63:
         97:b4:1b:5b:0d:07:54:ae:e1:5d:ca:1b:4f:1a:5e:f6:18:01:
         5b:3d:f2:36:9f:28:12:63:74:82:73:0d:2f:3e:58:a8:a1:16:
         4a:d5:b1:1f:ea:4e:b5:02:4f:fd:9a:16:78:28:36:aa:a0:ed:
         96:94:cb:3c:f4:68:18:60:f2:34:56:cc:61:54:42:3d:15:0a:
         06:7b:99:fe:66:bf:d6:6c:05:01:db:01:46:ad:4f:7d:09:32:
         64:b8:97:3b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAlcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjc1MDYxMTAvBgNVBAUTKEZGNkE3QzJDQjNERDJENzdCREU2OEIzNkJBODM2Qzc5
NThBOUQ0REEwHhcNMjYwNDE3MDIwNjAwWhcNMjYwNDI0MDIwNjAwWjAYMRYwFAYD
VQQDEw02OWUxOTU4OS01MjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3fsz4Bz7UuU1G52LoFYU6nCtrPEDcC4hwcv15LK2mK3URaIITQwVxs2wSbbd
//Jz1wfJQ8WWm7/PlfuFmAcTpudUb5g94p3yybve2PWNc2hj7I02Eihf/e0/sCKb
zyqbBhkTHVyQnWSJ7t6mBLoFdxHEG1otdVdSxVcEdWBTGUJJYvGe/XkPnG0vG/dt
tz0R0ABuUIUvpgcHR/2yXg3IXeNS9JJl1PcO/dsZUAW/ddYPDbRiIZOxgFTQGoob
mnUcjg9hqKQlUL8U88op0Gp0L/J9gcOZliw0yQeg+DQGP6MBPkoqXgPPWWphIFQJ
jH4L0JRvVHyFY2WZeevPznvIywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCKqTZ9u
4XF/bMJWImjN14XhFRAMMB8GA1UdIwQYMBaAFP9qfCyz3S13veaLNrqDbHlYqdTa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzUwNi85NTU0MjY2MkI2
ODMxMUVEOEExODVDMURDNEY5QUUwMi9fMnA4TExQZExYZTk1b3MydW9Oc2VWaXAx
Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL18ycDhMTFBkTFhlOTVvczJ1b05zZVZpcDFOby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NzUwNi85NTU0MjY2MkI2ODMxMUVEOEExODVDMURDNEY5QUUwMi9fMnA4TExQZExY
ZTk1b3MydW9Oc2VWaXAxTm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAz/0U0EKDMjVbuJP1G5JBAxcHQCR3rs4X4fqiSwsRsblFHW+BsB3zk1ING6SF
aP6XEmIl/F2jrpRxvE7A6VM20uPr2cw5azKJX1aM290mXKvQm3kXT4sY8PAsop8N
hEhcKelr0jSzsuh0D+oGWrpFoK7nLt6MEew6BlcuRiKPQ0EbWhMcAQdq4kjLHwig
OFJDlKZ/x5P4iyYGpUiNGgm02eZjl7QbWw0HVK7hXcobTxpe9hgBWz3yNp8oEmN0
gnMNLz5YqKEWStWxH+pOtQJP/ZoWeCg2qqDtlpTLPPRoGGDyNFbMYVRCPRUKBnuZ
/ma/1mwFAdsBRq1PfQkyZLiXOw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:58:27 2026 by rpki-client