Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft
File:                     IQlGzanedd75YJiV-_Ie2Exy9Oc.mft (raw, json)
Hash identifier:          CmAvfkqk9vOf+I5eZcT/qpPtLz1Uk9DZVljZLYDxfr0=
Subject key identifier:   E7:F5:F3:AB:D0:74:A1:94:90:9F:50:BC:ED:42:4C:32:33:9A:BE:DA
Authority key identifier: 21:09:46:CD:A9:DE:75:DE:F9:60:98:95:FB:F2:1E:D8:4C:72:F4:E7
Certificate issuer:       /CN=A91F7537/serialNumber=210946CDA9DE75DEF9609895FBF21ED84C72F4E7
Certificate serial:       0113
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQlGzanedd75YJiV-_Ie2Exy9Oc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft
Manifest number:          010F
Signing time:             Sun 19 Apr 2026 05:38:08 +0000
Manifest this update:     Sun 19 Apr 2026 05:38:08 +0000
Manifest next update:     Sun 26 Apr 2026 05:38:08 +0000
Files and hashes:         1: IQlGzanedd75YJiV-_Ie2Exy9Oc.crl (hash: sGk2c2byIojtDwBQ4cl8rPpPR8h6IEJof2xdLZ0bdrk=)
                          2: 6156C7F6A27311EFBF7D5E22C4F9AE02.roa (hash: vy7IODG07pz73pTj0pY/9n2zcuO8v2L2DLhKfTMR+yA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.crl
                          rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQlGzanedd75YJiV-_Ie2Exy9Oc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 275 (0x113)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7537, serialNumber=210946CDA9DE75DEF9609895FBF21ED84C72F4E7
        Validity
            Not Before: Apr 19 05:38:08 2026 GMT
            Not After : Apr 26 05:38:08 2026 GMT
        Subject: CN=69e46a40-fe76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:17:8b:d5:66:bd:9d:b6:5e:14:68:a7:84:af:
                    a0:aa:ae:ab:42:df:f6:ff:8a:aa:8c:b8:80:aa:d4:
                    80:8a:93:21:36:e8:b1:02:68:3c:0c:7b:f7:24:b6:
                    1a:46:06:16:b5:b2:b6:9f:5d:e9:95:da:9c:0d:af:
                    01:1e:d9:d8:de:2b:e5:cd:ce:bd:e8:07:0a:ae:c1:
                    cc:b7:fc:1f:09:be:b9:9a:3c:d3:75:08:f1:8e:a1:
                    24:4d:5a:e0:e4:35:e0:94:c8:70:0e:11:d8:af:6a:
                    4c:1b:34:8d:ee:b5:2e:9e:7c:dc:d5:7e:84:6d:23:
                    a8:a9:68:9a:d9:a9:5a:47:36:b8:a4:fc:17:61:3b:
                    ee:f5:20:46:87:5c:76:2f:ff:90:b3:f2:2a:49:2f:
                    dd:83:ca:d5:aa:8f:e1:51:62:6b:47:42:81:2c:ed:
                    67:05:ef:9d:4e:bb:bf:7b:43:cc:bd:28:25:e3:32:
                    a0:7d:61:c5:62:a8:21:74:71:08:52:1f:e2:d1:db:
                    d1:76:fb:7d:8e:fb:8c:5f:83:c2:3f:06:6d:d4:34:
                    b4:b6:ac:cf:81:20:45:32:28:8d:44:40:35:79:b4:
                    96:f1:92:3e:29:24:66:68:68:14:05:e8:75:43:91:
                    38:62:0a:4b:53:0a:b1:7b:18:7b:3f:75:25:1b:4a:
                    d6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F5:F3:AB:D0:74:A1:94:90:9F:50:BC:ED:42:4C:32:33:9A:BE:DA
            X509v3 Authority Key Identifier:
                keyid:21:09:46:CD:A9:DE:75:DE:F9:60:98:95:FB:F2:1E:D8:4C:72:F4:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQlGzanedd75YJiV-_Ie2Exy9Oc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:ea:26:a3:a1:c9:9c:d2:d5:25:9a:6c:40:73:8b:69:79:35:
         a2:76:e1:b4:03:ed:3e:22:54:91:d2:e6:28:1f:57:80:12:69:
         9e:5b:89:8e:e1:c1:41:19:ab:4a:78:f3:4b:ce:ea:ef:d3:92:
         9f:8f:b3:a6:87:b9:4f:1d:3b:d3:bb:54:f5:8f:77:21:a1:e6:
         c5:67:6a:b2:d8:d6:83:dd:bd:a8:76:f1:df:8d:1f:37:23:24:
         d0:b7:87:a7:f5:bb:15:97:ef:db:03:91:31:f9:96:7d:7a:40:
         4a:e3:16:b6:ad:3f:ad:47:57:3c:51:94:8d:bb:78:6b:fc:d9:
         42:42:ca:bd:66:06:8a:d6:70:8a:a0:8e:bc:7f:4a:b4:f0:a4:
         42:39:c9:5f:ab:be:42:82:06:03:aa:eb:ed:ea:00:5f:c0:7f:
         e3:a4:1b:9c:ff:2a:76:4a:04:85:27:5a:50:96:7d:37:18:ae:
         e8:9e:27:60:04:1b:a0:d3:fc:8f:3e:78:b8:0a:12:7f:57:5a:
         5e:99:cf:cc:49:67:19:51:0b:11:35:31:d6:3f:03:c5:f0:eb:
         9b:0f:85:c8:da:6d:4e:7a:cf:71:6e:dc:eb:54:73:fb:76:dd:
         21:b7:e4:35:fa:70:b2:51:99:f1:76:9c:0a:27:bd:20:db:cd:
         10:22:e6:c7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjc1MzcxMTAvBgNVBAUTKDIxMDk0NkNEQTlERTc1REVGOTYwOTg5NUZCRjIxRUQ4
NEM3MkY0RTcwHhcNMjYwNDE5MDUzODA4WhcNMjYwNDI2MDUzODA4WjAYMRYwFAYD
VQQDEw02OWU0NmE0MC1mZTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3ReL1Wa9nbZeFGinhK+gqq6rQt/2/4qqjLiAqtSAipMhNuixAmg8DHv3JLYa
RgYWtbK2n13pldqcDa8BHtnY3ivlzc696AcKrsHMt/wfCb65mjzTdQjxjqEkTVrg
5DXglMhwDhHYr2pMGzSN7rUunnzc1X6EbSOoqWia2alaRza4pPwXYTvu9SBGh1x2
L/+Qs/IqSS/dg8rVqo/hUWJrR0KBLO1nBe+dTru/e0PMvSgl4zKgfWHFYqghdHEI
Uh/i0dvRdvt9jvuMX4PCPwZt1DS0tqzPgSBFMiiNREA1ebSW8ZI+KSRmaGgUBeh1
Q5E4YgpLUwqxexh7P3UlG0rWQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOf186vQ
dKGUkJ9QvO1CTDIzmr7aMB8GA1UdIwQYMBaAFCEJRs2p3nXe+WCYlfvyHthMcvTn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzUzNy84N0RENTQ4Q0Ey
NzExMUVGQTM5MkYwNzlDNEY5QUUwMi9JUWxHemFuZWRkNzVZSmlWLV9JZTJFeHk5
T2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lRbEd6YW5lZGQ3NVlKaVYtX0llMkV4eTlPYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NzUzNy84N0RENTQ4Q0EyNzExMUVGQTM5MkYwNzlDNEY5QUUwMi9JUWxHemFuZWRk
NzVZSmlWLV9JZTJFeHk5T2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVOomo6HJnNLVJZpsQHOLaXk1onbhtAPtPiJUkdLmKB9XgBJpnluJjuHBQRmr
SnjzS87q79OSn4+zpoe5Tx0707tU9Y93IaHmxWdqstjWg929qHbx340fNyMk0LeH
p/W7FZfv2wORMfmWfXpASuMWtq0/rUdXPFGUjbt4a/zZQkLKvWYGitZwiqCOvH9K
tPCkQjnJX6u+QoIGA6rr7eoAX8B/46QbnP8qdkoEhSdaUJZ9Nxiu6J4nYAQboNP8
jz54uAoSf1daXpnPzElnGVELETUx1j8DxfDrmw+FyNptTnrPcW7c61Rz+3bdIbfk
NfpwslGZ8XacCie9INvNECLmxw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:17:20 2026 by rpki-client