Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft
File:                     rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft (raw, json)
Hash identifier:          U5e/zFnG5+GSwK223dW2LQpB++qLYPus4/m2OkAmrrs=
Subject key identifier:   60:57:E3:AC:84:9C:FB:CD:65:0B:71:EA:90:16:ED:F6:AC:9A:1F:A0
Authority key identifier: AC:88:64:26:38:24:ED:E3:65:5B:99:74:2D:FB:39:E8:83:BB:91:45
Certificate issuer:       /CN=A9120974/serialNumber=AC8864263824EDE3655B99742DFB39E883BB9145
Certificate serial:       110B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft
Manifest number:          10FF
Signing time:             Thu 16 Apr 2026 17:13:18 +0000
Manifest this update:     Thu 16 Apr 2026 17:13:17 +0000
Manifest next update:     Thu 23 Apr 2026 17:13:17 +0000
Files and hashes:         1: rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl (hash: EhTjBcq4BT9j8RSc8VkL4RRlNa7iFf0nL7V009gLYLA=)
                          2: CBAED530FE6A11ECAB640344C4F9AE02.roa (hash: RiDf1XLYKZh+wmu0a6//ACSvTiLlex2fq/GN1xb8xX0=)
                          3: 6B1B75BC756311EFB6C7E64CC4F9AE02.roa (hash: UBjBwHlmM/IFjT10AU767yueXJrZgOYMUiv13BTyuu0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl
                          rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 17:13:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4363 (0x110b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120974, serialNumber=AC8864263824EDE3655B99742DFB39E883BB9145
        Validity
            Not Before: Apr 16 17:13:17 2026 GMT
            Not After : Apr 23 17:13:17 2026 GMT
        Subject: CN=69e118ae-0ace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b7:d0:07:0a:e4:c5:95:11:75:2b:be:c8:c2:
                    a7:d7:63:ca:7b:8f:e3:9b:4a:15:94:46:a5:f3:af:
                    f9:97:04:3a:fb:fa:77:b6:d7:79:2f:8b:17:2e:61:
                    12:65:b1:c6:8c:cc:b2:5b:e1:51:4f:e7:74:82:9c:
                    f2:24:84:62:03:dc:23:13:84:cf:7d:df:ef:ea:78:
                    bc:a9:42:d6:8b:ea:c6:9f:5e:73:cb:f5:85:f6:76:
                    0a:fe:ee:6a:bf:51:9e:65:a5:8b:dc:49:d3:5e:09:
                    13:95:b1:b7:41:af:1f:73:be:11:9c:7b:c3:61:d2:
                    28:3b:48:9c:84:96:e2:0f:70:14:43:23:f0:3f:24:
                    c4:98:be:cc:b8:fc:de:b4:d9:5e:76:2f:ce:4c:dd:
                    07:56:b4:24:d3:3a:a8:28:e1:af:67:e0:68:6d:b7:
                    be:67:c4:b3:58:6f:1e:1a:44:d6:f5:3d:ac:0a:45:
                    20:de:46:c3:b4:66:5e:77:9b:05:0c:ce:3f:85:44:
                    04:71:55:b9:1a:99:da:b9:f2:99:3a:98:89:76:ab:
                    a9:cf:56:ab:24:fd:d5:f6:a3:8c:79:38:b4:0f:aa:
                    07:80:96:9e:d0:da:68:8e:20:ea:d3:81:3c:0b:12:
                    fe:f1:1e:ed:b4:6a:93:00:41:d5:9b:aa:57:91:87:
                    03:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:57:E3:AC:84:9C:FB:CD:65:0B:71:EA:90:16:ED:F6:AC:9A:1F:A0
            X509v3 Authority Key Identifier:
                keyid:AC:88:64:26:38:24:ED:E3:65:5B:99:74:2D:FB:39:E8:83:BB:91:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:ec:0f:4c:4a:ea:92:59:84:5c:0b:ea:a3:b8:db:74:b5:52:
         60:f3:87:f4:58:27:7f:4c:09:94:0a:bd:ef:e4:07:8f:38:b8:
         36:ce:ef:f6:f2:11:be:d8:e1:c0:73:07:40:31:12:c7:6e:0c:
         6c:68:43:eb:3f:5b:5d:5b:7d:84:9b:39:96:d8:d4:5a:a4:76:
         a9:ee:88:e6:fd:d2:47:96:c0:b0:09:dc:f2:f9:b8:ce:ed:55:
         66:5b:de:5d:85:cc:d9:ec:c8:ff:4d:3d:7a:4b:78:1b:be:4a:
         ec:28:a4:31:5c:4e:67:84:aa:aa:1e:6b:fc:58:48:25:0c:94:
         a4:33:0a:31:5b:e8:a3:ef:00:9d:44:39:fc:37:f9:36:f3:7f:
         07:30:f0:ef:25:41:0d:2f:fc:f9:5d:35:33:1b:03:08:2c:26:
         7f:f5:4b:3f:6c:25:98:d4:3f:8a:e0:2f:9b:e9:0c:8e:31:d8:
         90:a9:c1:e4:44:9a:c5:05:fe:f5:4c:57:e0:46:66:fe:84:7c:
         e3:5f:76:45:c3:bc:88:73:63:a9:14:6e:e2:b5:75:20:24:c4:
         02:dd:26:e9:c5:db:34:dd:c5:6d:8a:26:80:78:45:bf:9f:73:
         22:50:b0:0e:e3:fc:93:ef:89:85:b9:a7:00:24:c1:ad:d5:d8:
         b8:e4:ee:47
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjA5NzQxMTAvBgNVBAUTKEFDODg2NDI2MzgyNEVERTM2NTVCOTk3NDJERkIzOUU4
ODNCQjkxNDUwHhcNMjYwNDE2MTcxMzE3WhcNMjYwNDIzMTcxMzE3WjAYMRYwFAYD
VQQDEw02OWUxMThhZS0wYWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtLfQBwrkxZURdSu+yMKn12PKe4/jm0oVlEal86/5lwQ6+/p3ttd5L4sXLmES
ZbHGjMyyW+FRT+d0gpzyJIRiA9wjE4TPfd/v6ni8qULWi+rGn15zy/WF9nYK/u5q
v1GeZaWL3EnTXgkTlbG3Qa8fc74RnHvDYdIoO0ichJbiD3AUQyPwPyTEmL7MuPze
tNledi/OTN0HVrQk0zqoKOGvZ+Bobbe+Z8SzWG8eGkTW9T2sCkUg3kbDtGZed5sF
DM4/hUQEcVW5GpnaufKZOpiJdqupz1arJP3V9qOMeTi0D6oHgJae0NpojiDq04E8
CxL+8R7ttGqTAEHVm6pXkYcD8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGBX46yE
nPvNZQtx6pAW7fasmh+gMB8GA1UdIwQYMBaAFKyIZCY4JO3jZVuZdC37OeiDu5FF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk3NC9FMTA1QjNCQTNB
NDkxMUU5OTQwRjJEMTZDNEY5QUUwMi9ySWhrSmpnazdlTmxXNWwwTGZzNTZJTzdr
VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3JJaGtKamdrN2VObFc1bDBMZnM1NklPN2tVVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MDk3NC9FMTA1QjNCQTNBNDkxMUU5OTQwRjJEMTZDNEY5QUUwMi9ySWhrSmpnazdl
TmxXNWwwTGZzNTZJTzdrVVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYewPTErqklmEXAvqo7jbdLVSYPOH9Fgnf0wJlAq97+QHjzi4Ns7v9vIRvtjh
wHMHQDESx24MbGhD6z9bXVt9hJs5ltjUWqR2qe6I5v3SR5bAsAnc8vm4zu1VZlve
XYXM2ezI/009ekt4G75K7CikMVxOZ4Sqqh5r/FhIJQyUpDMKMVvoo+8AnUQ5/Df5
NvN/BzDw7yVBDS/8+V01MxsDCCwmf/VLP2wlmNQ/iuAvm+kMjjHYkKnB5ESaxQX+
9UxX4EZm/oR84192RcO8iHNjqRRu4rV1ICTEAt0m6cXbNN3FbYomgHhFv59zIlCw
DuP8k++JhbmnACTBrdXYuOTuRw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:24:36 2026 by rpki-client