Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft
File:                     MGSQ23RcleyGYUmf_IJkZnumf4o.mft (raw, json)
Hash identifier:          XjXvga9DKVFWAgmqQoJiMcfW/RaJGiecGFjOXfW7zQ8=
Subject key identifier:   F4:AC:7E:08:AA:7D:A9:15:D6:70:41:41:02:E3:5C:CE:4D:9A:2F:B3
Authority key identifier: 30:64:90:DB:74:5C:95:EC:86:61:49:9F:FC:82:64:66:7B:A6:7F:8A
Certificate issuer:       /CN=A91CE7A4/serialNumber=306490DB745C95EC8661499FFC8264667BA67F8A
Certificate serial:       EA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGSQ23RcleyGYUmf_IJkZnumf4o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft
Manifest number:          E7
Signing time:             Wed 25 Mar 2026 05:40:31 +0000
Manifest this update:     Wed 25 Mar 2026 05:40:31 +0000
Manifest next update:     Wed 01 Apr 2026 05:40:31 +0000
Files and hashes:         1: MGSQ23RcleyGYUmf_IJkZnumf4o.crl (hash: Za9syUqEE+PckeKpx/ZIc5ei06LTTHIqOjZ9cYJd9hg=)
                          2: 19C407C0CC1011EFBC7E0050C4F9AE02.roa (hash: YhEgP7BtjPiAKP/DklQo7tOfqEOazq/YqPHJ1ipjURA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.crl
                          rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGSQ23RcleyGYUmf_IJkZnumf4o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:40:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 234 (0xea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE7A4, serialNumber=306490DB745C95EC8661499FFC8264667BA67F8A
        Validity
            Not Before: Mar 25 05:40:31 2026 GMT
            Not After : Apr  1 05:40:31 2026 GMT
        Subject: CN=69c3754f-42ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f7:66:2b:71:4d:bc:9a:26:11:6d:0b:71:d1:
                    33:92:95:4c:f5:62:6e:00:f9:1b:d0:41:e6:e7:a6:
                    ad:c5:ec:91:fb:ea:c0:46:8b:64:94:28:c1:19:6a:
                    cf:58:03:8c:c3:43:0b:ad:ee:b3:28:9d:d2:21:28:
                    49:02:3b:79:51:36:b4:74:e8:e9:30:60:bf:30:59:
                    07:9f:e9:d3:65:c4:59:97:23:0a:ba:3a:e6:b4:f3:
                    a7:7e:22:09:b0:65:5a:13:3d:89:68:0a:86:82:eb:
                    cf:40:19:19:a7:50:01:83:17:df:ad:aa:31:d8:33:
                    08:e0:8a:b9:a3:ca:e7:26:a6:81:e0:13:e2:21:e3:
                    61:d6:68:60:60:e1:ea:31:eb:69:ff:44:73:0c:e4:
                    bb:94:a3:9c:2d:5c:92:e9:4b:8a:8c:a0:31:19:b9:
                    49:cb:84:06:25:af:ab:ef:a6:99:13:4e:5e:c0:10:
                    fd:7a:66:e3:fd:4f:4f:d6:08:bb:2a:57:89:7e:e9:
                    01:75:d0:f8:b4:0f:87:29:4d:b1:84:24:73:b5:7c:
                    67:66:c7:13:f7:08:3b:60:db:0c:d6:d3:47:48:50:
                    47:c1:dd:82:a8:b0:3b:e3:3c:97:19:c6:3a:4f:91:
                    08:44:1d:a0:88:2a:b7:0c:ab:86:4e:dd:af:49:50:
                    e5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:AC:7E:08:AA:7D:A9:15:D6:70:41:41:02:E3:5C:CE:4D:9A:2F:B3
            X509v3 Authority Key Identifier:
                keyid:30:64:90:DB:74:5C:95:EC:86:61:49:9F:FC:82:64:66:7B:A6:7F:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGSQ23RcleyGYUmf_IJkZnumf4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:04:b4:94:31:a6:0b:86:f2:c9:81:65:3c:ce:4a:eb:35:85:
         2a:b1:10:46:cf:1a:05:60:7a:de:c9:d5:5e:8f:c0:5b:a6:45:
         b2:8a:03:05:92:d2:b3:ac:3b:ef:73:d1:3e:da:c1:78:51:eb:
         2e:de:71:56:89:8a:cc:10:40:46:7e:1b:2d:fb:1c:b7:d7:f0:
         a8:77:f4:fe:8d:44:ec:ef:07:a8:a7:21:0c:72:cc:fe:be:91:
         77:e6:8c:24:eb:56:60:2a:fe:ca:43:64:66:b1:da:64:7a:a2:
         a0:de:06:a1:58:37:46:65:78:a4:6a:90:f4:a4:3e:7e:2c:e8:
         03:b4:15:2a:a2:35:82:54:15:5d:25:fc:51:97:29:1d:27:20:
         b4:f9:ea:f4:28:56:84:83:4d:53:18:0d:05:a6:0c:9d:5b:4c:
         d6:5f:7b:e0:45:7d:cb:fe:18:0b:2a:08:be:5a:fb:8b:91:92:
         c6:d5:31:58:c1:5f:ef:f9:e6:e4:f2:b4:b9:fc:d3:7a:82:83:
         38:bd:9c:19:c7:61:b3:8a:64:8a:43:cd:e9:d5:a2:d8:2e:c6:
         2a:c0:2e:05:31:dc:b7:95:ea:a3:0d:bf:3c:1a:fa:d1:40:a6:
         81:62:30:ef:d6:81:bd:4f:e6:b1:d2:2d:1d:5e:3e:82:02:13:
         33:0e:8b:e1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0U3QTQxMTAvBgNVBAUTKDMwNjQ5MERCNzQ1Qzk1RUM4NjYxNDk5RkZDODI2NDY2
N0JBNjdGOEEwHhcNMjYwMzI1MDU0MDMxWhcNMjYwNDAxMDU0MDMxWjAYMRYwFAYD
VQQDEw02OWMzNzU0Zi00MmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlfdmK3FNvJomEW0LcdEzkpVM9WJuAPkb0EHm56atxeyR++rARotklCjBGWrP
WAOMw0MLre6zKJ3SIShJAjt5UTa0dOjpMGC/MFkHn+nTZcRZlyMKujrmtPOnfiIJ
sGVaEz2JaAqGguvPQBkZp1ABgxffraox2DMI4Iq5o8rnJqaB4BPiIeNh1mhgYOHq
Metp/0RzDOS7lKOcLVyS6UuKjKAxGblJy4QGJa+r76aZE05ewBD9embj/U9P1gi7
KleJfukBddD4tA+HKU2xhCRztXxnZscT9wg7YNsM1tNHSFBHwd2CqLA74zyXGcY6
T5EIRB2giCq3DKuGTt2vSVDlPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPSsfgiq
fakV1nBBQQLjXM5Nmi+zMB8GA1UdIwQYMBaAFDBkkNt0XJXshmFJn/yCZGZ7pn+K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTdBNC9CODkwREZEMkND
MEYxMUVGQTI3OEZENENDNEY5QUUwMi9NR1NRMjNSY2xleUdZVW1mX0lKa1pudW1m
NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL01HU1EyM1JjbGV5R1lVbWZfSUprWm51bWY0by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RTdBNC9CODkwREZEMkNDMEYxMUVGQTI3OEZENENDNEY5QUUwMi9NR1NRMjNSY2xl
eUdZVW1mX0lKa1pudW1mNG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATAS0lDGmC4byyYFlPM5K6zWFKrEQRs8aBWB63snVXo/AW6ZFsooDBZLSs6w7
73PRPtrBeFHrLt5xVomKzBBARn4bLfsct9fwqHf0/o1E7O8HqKchDHLM/r6Rd+aM
JOtWYCr+ykNkZrHaZHqioN4GoVg3RmV4pGqQ9KQ+fizoA7QVKqI1glQVXSX8UZcp
HScgtPnq9ChWhINNUxgNBaYMnVtM1l974EV9y/4YCyoIvlr7i5GSxtUxWMFf7/nm
5PK0ufzTeoKDOL2cGcdhs4pkikPN6dWi2C7GKsAuBTHct5Xqow2/PBr60UCmgWIw
79aBvU/msdItHV4+ggITMw6L4Q==
-----END CERTIFICATE-----
Generated at Fri Mar 27 01:50:22 2026 by rpki-client