Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE81E/EA7820D8B08811F09C222B2EC4F9AE02/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.mft
File:                     IXYFpd7eLWIvmK6mwvb5XY-uG2Y.mft (raw, json)
Hash identifier:          eFDBBQiTxNSUyk262+UI3Uste7huHbsdeA/SKCG6c7A=
Subject key identifier:   00:96:59:13:1C:4A:F8:A8:19:78:36:E5:C9:85:A1:AA:80:15:9D:C6
Authority key identifier: 21:76:05:A5:DE:DE:2D:62:2F:98:AE:A6:C2:F6:F9:5D:8F:AE:1B:66
Certificate issuer:       /CN=A91AE81E/serialNumber=217605A5DEDE2D622F98AEA6C2F6F95D8FAE1B66
Certificate serial:       58
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE81E/EA7820D8B08811F09C222B2EC4F9AE02/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.mft
Manifest number:          54
Signing time:             Wed 25 Mar 2026 07:24:17 +0000
Manifest this update:     Wed 25 Mar 2026 07:24:17 +0000
Manifest next update:     Wed 01 Apr 2026 07:24:17 +0000
Files and hashes:         1: IXYFpd7eLWIvmK6mwvb5XY-uG2Y.crl (hash: xcpeXspU/KK0c1teAXvpjo0m2oxIdDRwJGKJd3SF9go=)
                          2: 06048736B08B11F087892851C4F9AE02.roa (hash: lH1PbCUckjd4Z/IAYvlhe3AJ9Dotnfr+gAbzTEeakhg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE81E/EA7820D8B08811F09C222B2EC4F9AE02/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.crl
                          rsync://rpki.apnic.net/member_repository/A91AE81E/EA7820D8B08811F09C222B2EC4F9AE02/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:24:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE81E, serialNumber=217605A5DEDE2D622F98AEA6C2F6F95D8FAE1B66
        Validity
            Not Before: Mar 25 07:24:17 2026 GMT
            Not After : Apr  1 07:24:17 2026 GMT
        Subject: CN=69c38da1-c73a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:84:76:2d:97:1a:c5:3c:97:67:57:4a:d5:8b:
                    47:6c:f6:48:72:be:e8:b8:fa:5b:86:c3:54:34:b3:
                    6f:72:14:72:0f:63:e9:65:e1:32:c0:14:36:9a:ed:
                    35:2b:01:3c:f7:13:2b:86:db:ce:5f:79:a1:7e:70:
                    1b:50:67:8e:ea:28:51:ee:29:29:6e:f0:52:46:84:
                    05:6d:ae:19:df:80:aa:10:ca:55:b6:0d:95:88:b0:
                    a1:c2:10:62:1d:80:ea:dc:0a:cd:05:2e:6d:0b:a5:
                    1f:25:c2:63:cf:e2:46:85:20:45:70:c7:e0:d0:30:
                    ed:e4:ae:eb:dc:a7:d8:fe:13:c2:f2:87:d0:74:41:
                    76:94:9f:11:cf:c0:1f:68:6c:7a:da:a1:65:14:90:
                    23:61:81:c3:4a:67:f5:1e:c2:f8:c2:fc:ef:ae:75:
                    3e:d0:5b:48:bb:eb:5a:01:0d:23:d9:ea:11:02:1d:
                    37:57:c3:10:8f:a1:d3:6b:d8:79:cc:84:4f:eb:d1:
                    84:98:a1:77:ac:fb:f4:33:6e:be:a9:cd:d3:ef:0f:
                    ea:3f:18:d5:e3:a0:11:78:c5:18:75:e7:ff:dd:5c:
                    4c:b9:43:50:69:25:3a:60:99:b8:a3:e7:32:6d:89:
                    3f:6f:f0:b9:a4:a9:88:e7:56:6c:92:aa:be:f2:c4:
                    a2:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:96:59:13:1C:4A:F8:A8:19:78:36:E5:C9:85:A1:AA:80:15:9D:C6
            X509v3 Authority Key Identifier:
                keyid:21:76:05:A5:DE:DE:2D:62:2F:98:AE:A6:C2:F6:F9:5D:8F:AE:1B:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE81E/EA7820D8B08811F09C222B2EC4F9AE02/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE81E/EA7820D8B08811F09C222B2EC4F9AE02/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:08:7b:e3:69:38:7e:a5:58:21:ed:d0:eb:3c:9c:3d:b0:14:
         52:26:55:a5:49:1f:14:2b:9e:cf:db:ef:03:89:80:0c:ae:92:
         4d:8e:b8:d2:f8:43:ed:d1:c7:1b:0e:fb:7f:18:7b:8d:30:07:
         ec:02:5e:cd:ef:fc:dc:22:6b:25:70:33:b0:8b:49:ee:c4:ae:
         59:3e:8a:04:b7:eb:b0:5a:77:a5:62:d0:5b:17:9d:0f:e5:89:
         30:ae:5b:3f:15:57:a3:0c:5a:ca:cf:37:93:11:b2:8e:e7:e4:
         27:55:de:3b:97:95:b3:61:b6:54:60:69:78:54:fa:22:18:e6:
         2b:e7:5c:48:98:2b:a5:34:3c:1b:1c:4c:1e:4a:83:c2:ed:4d:
         59:57:b4:71:42:27:52:ac:c1:7e:24:45:10:cf:9d:ce:29:4e:
         40:32:8a:f7:91:0e:cd:ba:b5:03:9c:91:6a:57:9d:5f:76:a1:
         83:55:c4:ce:cf:54:e4:a5:94:d3:55:f2:e8:77:4e:22:a7:b4:
         75:20:df:0a:e0:8e:04:d9:6f:2a:a5:e9:a8:e1:71:cc:8f:94:
         58:a5:5d:ea:e4:40:87:1e:21:bf:12:26:05:53:f7:81:c9:1a:
         b1:f2:14:33:5f:16:a9:da:db:d7:e9:c6:45:18:24:5c:39:2c:
         9d:ba:08:6f
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
RTgxRTExMC8GA1UEBRMoMjE3NjA1QTVERURFMkQ2MjJGOThBRUE2QzJGNkY5NUQ4
RkFFMUI2NjAeFw0yNjAzMjUwNzI0MTdaFw0yNjA0MDEwNzI0MTdaMBgxFjAUBgNV
BAMTDTY5YzM4ZGExLWM3M2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDQhHYtlxrFPJdnV0rVi0ds9khyvui4+luGw1Q0s29yFHIPY+ll4TLAFDaa7TUr
ATz3EyuG285feaF+cBtQZ47qKFHuKSlu8FJGhAVtrhnfgKoQylW2DZWIsKHCEGId
gOrcCs0FLm0LpR8lwmPP4kaFIEVwx+DQMO3kruvcp9j+E8Lyh9B0QXaUnxHPwB9o
bHraoWUUkCNhgcNKZ/UewvjC/O+udT7QW0i761oBDSPZ6hECHTdXwxCPodNr2HnM
hE/r0YSYoXes+/Qzbr6pzdPvD+o/GNXjoBF4xRh15//dXEy5Q1BpJTpgmbij5zJt
iT9v8LmkqYjnVmySqr7yxKJZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUAJZZExxK
+KgZeDblyYWhqoAVncYwHwYDVR0jBBgwFoAUIXYFpd7eLWIvmK6mwvb5XY+uG2Yw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFFODFFL0VBNzgyMEQ4QjA4
ODExRjA5QzIyMkIyRUM0RjlBRTAyL0lYWUZwZDdlTFdJdm1LNm13dmI1WFktdUcy
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvSVhZRnBkN2VMV0l2bUs2bXd2YjVYWS11RzJZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFF
ODFFL0VBNzgyMEQ4QjA4ODExRjA5QzIyMkIyRUM0RjlBRTAyL0lYWUZwZDdlTFdJ
dm1LNm13dmI1WFktdUcyWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCACHvjaTh+pVgh7dDrPJw9sBRSJlWlSR8UK57P2+8DiYAMrpJNjrjS+EPt0ccb
Dvt/GHuNMAfsAl7N7/zcImslcDOwi0nuxK5ZPooEt+uwWnelYtBbF50P5Ykwrls/
FVejDFrKzzeTEbKO5+QnVd47l5WzYbZUYGl4VPoiGOYr51xImCulNDwbHEweSoPC
7U1ZV7RxQidSrMF+JEUQz53OKU5AMor3kQ7NurUDnJFqV51fdqGDVcTOz1TkpZTT
VfLod04ip7R1IN8K4I4E2W8qpemo4XHMj5RYpV3q5ECHHiG/EiYFU/eByRqx8hQz
Xxap2tvX6cZFGCRcOSydughv
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:15:48 2026 by rpki-client