Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft
File:                     Xx7oK_cJomzAAJlbR0geVPbzgG4.mft (raw, json)
Hash identifier:          c4jRL65IaVV5lgaHl83JDDr8huuybHtPUrVHBm7i/40=
Subject key identifier:   94:EF:42:F2:55:58:03:E2:0A:4A:84:7D:10:E9:05:14:23:C7:00:55
Authority key identifier: 5F:1E:E8:2B:F7:09:A2:6C:C0:00:99:5B:47:48:1E:54:F6:F3:80:6E
Certificate issuer:       /CN=A91F9E0A/serialNumber=5F1EE82BF709A26CC000995B47481E54F6F3806E
Certificate serial:       015F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xx7oK_cJomzAAJlbR0geVPbzgG4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft
Manifest number:          0159
Signing time:             Fri 17 Apr 2026 04:50:32 +0000
Manifest this update:     Fri 17 Apr 2026 04:50:31 +0000
Manifest next update:     Fri 24 Apr 2026 04:50:31 +0000
Files and hashes:         1: Xx7oK_cJomzAAJlbR0geVPbzgG4.crl (hash: +eaT3d4U2CXkrCqnZFGeXoCrk65f+6T6vK6Wv12dKlE=)
                          2: 9F4A37143EA511EF882FE276C4F9AE02.roa (hash: Now9TjjE+GxtdPJprgY+7PVC9jMdsLTZtrZmdMtaZ+c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.crl
                          rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xx7oK_cJomzAAJlbR0geVPbzgG4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:50:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 351 (0x15f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9E0A, serialNumber=5F1EE82BF709A26CC000995B47481E54F6F3806E
        Validity
            Not Before: Apr 17 04:50:31 2026 GMT
            Not After : Apr 24 04:50:31 2026 GMT
        Subject: CN=69e1bc18-af61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a2:9e:f8:bd:f0:dd:56:b6:4a:d1:46:cd:e2:
                    d5:d1:9b:6d:2e:fd:6c:04:92:08:6c:79:eb:95:be:
                    1c:1f:39:a8:a0:52:20:93:bf:a8:22:dd:08:30:56:
                    e2:c4:6f:5b:9b:eb:a6:89:6b:05:1e:2f:fb:21:15:
                    ce:f1:d2:31:11:3b:18:a9:46:cc:c1:28:1c:47:b9:
                    b0:23:1e:06:01:f5:92:ed:3d:e2:0e:89:9c:99:9e:
                    5b:46:0f:fe:2b:a7:f9:3a:83:47:5f:c2:42:19:c6:
                    42:eb:fe:bd:b1:0f:f0:97:24:fd:b6:af:3d:2e:a6:
                    65:ae:c5:f9:9d:59:3c:bd:f5:d1:09:4f:fb:4b:c7:
                    26:6c:f6:5a:fc:09:9d:53:4c:87:03:82:87:b0:c6:
                    f7:3c:b0:96:9e:7a:e8:5a:5a:cf:06:45:77:ad:a4:
                    57:5e:b0:e1:fa:46:0b:b6:d5:98:45:19:cf:98:2c:
                    8b:00:5e:af:6b:4b:2d:c2:ae:4b:5b:db:32:01:c4:
                    cd:6f:70:0b:b9:d0:25:6e:e6:72:c2:8f:f1:d3:92:
                    e3:f7:46:c4:e6:9a:4a:29:9a:a0:6a:ac:23:e0:a6:
                    49:5c:4a:1f:19:df:07:c1:cc:ac:2b:10:29:20:dc:
                    38:97:08:43:97:30:b0:02:d0:50:04:42:16:9e:b2:
                    99:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:EF:42:F2:55:58:03:E2:0A:4A:84:7D:10:E9:05:14:23:C7:00:55
            X509v3 Authority Key Identifier:
                keyid:5F:1E:E8:2B:F7:09:A2:6C:C0:00:99:5B:47:48:1E:54:F6:F3:80:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xx7oK_cJomzAAJlbR0geVPbzgG4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:d1:b5:30:cd:f1:1f:cb:e3:00:46:dc:ef:da:42:bc:7d:78:
         df:a3:51:49:2d:f3:ed:60:71:6b:d4:c4:1f:1c:e0:a8:0f:c7:
         b3:ba:2b:85:15:e2:2a:38:d5:35:86:08:33:f9:e3:ec:28:d6:
         c6:93:f0:8a:87:01:fa:34:71:79:1d:73:46:80:7f:b7:36:68:
         e5:fb:ab:c2:a4:4b:4b:9d:8b:20:54:66:c9:cb:b8:80:25:6c:
         7b:15:2c:9c:50:ae:17:ca:f5:74:4d:4b:0f:76:80:c3:1f:d9:
         9e:22:75:90:98:02:0d:87:8a:a0:75:b0:3b:81:c5:d0:ad:cd:
         b6:53:c0:52:83:12:8a:63:2c:01:2a:29:90:39:77:c8:ab:3e:
         55:56:b4:ae:ef:fe:d4:48:c8:44:6d:54:5f:39:44:c9:64:2a:
         bc:b6:fc:fd:17:9a:af:e6:da:18:88:ac:d2:dd:41:60:ed:bc:
         7c:93:a7:87:cf:69:8a:28:ba:32:09:8f:4e:06:5e:80:38:3d:
         ff:65:b5:62:9f:58:3e:3a:6a:25:be:7b:6a:71:15:f0:26:1a:
         59:e4:f1:a9:05:98:f0:91:a0:53:fc:06:5d:b6:b7:27:d2:0e:
         95:32:a0:0f:a1:1b:5c:6c:ac:b7:b7:09:b8:2b:3b:a1:12:ea:
         f5:37:91:95
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjlFMEExMTAvBgNVBAUTKDVGMUVFODJCRjcwOUEyNkNDMDAwOTk1QjQ3NDgxRTU0
RjZGMzgwNkUwHhcNMjYwNDE3MDQ1MDMxWhcNMjYwNDI0MDQ1MDMxWjAYMRYwFAYD
VQQDEw02OWUxYmMxOC1hZjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApKKe+L3w3Va2StFGzeLV0ZttLv1sBJIIbHnrlb4cHzmooFIgk7+oIt0IMFbi
xG9bm+umiWsFHi/7IRXO8dIxETsYqUbMwSgcR7mwIx4GAfWS7T3iDomcmZ5bRg/+
K6f5OoNHX8JCGcZC6/69sQ/wlyT9tq89LqZlrsX5nVk8vfXRCU/7S8cmbPZa/Amd
U0yHA4KHsMb3PLCWnnroWlrPBkV3raRXXrDh+kYLttWYRRnPmCyLAF6va0stwq5L
W9syAcTNb3ALudAlbuZywo/x05Lj90bE5ppKKZqgaqwj4KZJXEofGd8HwcysKxAp
INw4lwhDlzCwAtBQBEIWnrKZ7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJTvQvJV
WAPiCkqEfRDpBRQjxwBVMB8GA1UdIwQYMBaAFF8e6Cv3CaJswACZW0dIHlT284Bu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUUwQS8wM0IwNTJENDNF
NjkxMUVGQTJDRTY3NkFDNEY5QUUwMi9YeDdvS19jSm9tekFBSmxiUjBnZVZQYnpn
RzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1h4N29LX2NKb216QUFKbGJSMGdlVlBiemdHNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
OUUwQS8wM0IwNTJENDNFNjkxMUVGQTJDRTY3NkFDNEY5QUUwMi9YeDdvS19jSm9t
ekFBSmxiUjBnZVZQYnpnRzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAR9G1MM3xH8vjAEbc79pCvH1436NRSS3z7WBxa9TEHxzgqA/Hs7orhRXiKjjV
NYYIM/nj7CjWxpPwiocB+jRxeR1zRoB/tzZo5furwqRLS52LIFRmycu4gCVsexUs
nFCuF8r1dE1LD3aAwx/ZniJ1kJgCDYeKoHWwO4HF0K3NtlPAUoMSimMsASopkDl3
yKs+VVa0ru/+1EjIRG1UXzlEyWQqvLb8/Rear+baGIis0t1BYO28fJOnh89piii6
MgmPTgZegDg9/2W1Yp9YPjpqJb57anEV8CYaWeTxqQWY8JGgU/wGXba3J9IOlTKg
D6EbXGyst7cJuCs7oRLq9TeRlQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:19:11 2026 by rpki-client