Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.mft
File:                     feYHxGFdegH73UqGrVRZQBp1mSE.mft (raw, json)
Hash identifier:          yA3SsxrFL40fHQ+9ixJ6lnMY3IIjJVEAglU+869vGSo=
Subject key identifier:   91:8F:50:B5:DA:9A:69:6E:A8:96:46:FB:1B:5B:B9:9C:0A:3F:08:9D
Authority key identifier: 7D:E6:07:C4:61:5D:7A:01:FB:DD:4A:86:AD:54:59:40:1A:75:99:21
Certificate issuer:       /CN=A912442A/serialNumber=7DE607C4615D7A01FBDD4A86AD5459401A759921
Certificate serial:       01A2
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/feYHxGFdegH73UqGrVRZQBp1mSE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.mft
Manifest number:          018E
Signing time:             Fri 17 Apr 2026 00:44:05 +0000
Manifest this update:     Fri 17 Apr 2026 00:44:05 +0000
Manifest next update:     Fri 24 Apr 2026 00:44:05 +0000
Files and hashes:         1: feYHxGFdegH73UqGrVRZQBp1mSE.crl (hash: WaDZTAdTcvqiwHB9D9ISx00z03kmUSCMm1KQ2A25I8I=)
                          2: 681098C2CDA911EF89DEEE2CC4F9AE02.roa (hash: 10jgAa/oO9QvVhmXa5ryYi3X/Q5r2nOHe8sXNKlu0sI=)
                          3: B374CCF4764F11EFA343104DC4F9AE02.roa (hash: 2z+iQiOun9JI4f1KdKp9Mav00oLerc8hIDbuecZ9Avw=)
                          4: DF1CE5761E4811EF83D08212C4F9AE02.roa (hash: 9ZQJr8Gl5XR1HqKf3vTUBCTUhwF96wb5DS0J+eswdL0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.crl
                          rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/feYHxGFdegH73UqGrVRZQBp1mSE.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:44:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 418 (0x1a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912442A, serialNumber=7DE607C4615D7A01FBDD4A86AD5459401A759921
        Validity
            Not Before: Apr 17 00:44:05 2026 GMT
            Not After : Apr 24 00:44:05 2026 GMT
        Subject: CN=69e18255-4354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:02:cc:71:7a:41:20:ff:1c:e5:d6:82:06:f1:
                    74:c9:a4:d6:8c:f2:92:71:11:54:d9:cf:20:e9:8e:
                    47:6a:4c:cc:0c:29:68:eb:d5:75:79:be:54:1d:0a:
                    1c:29:3a:62:ce:e5:df:5a:61:0f:17:1e:6a:e7:10:
                    00:2f:82:90:08:9e:b4:e9:81:3b:29:fa:3c:84:f7:
                    00:13:e3:63:ff:5f:b3:56:0a:1a:f3:2f:5d:2b:51:
                    c7:b8:81:60:bf:83:85:11:eb:bd:9b:f5:82:0a:b3:
                    59:ee:65:b9:11:97:76:65:1a:ff:d0:95:7d:ad:dc:
                    98:20:dd:0f:da:b6:c5:58:95:26:46:44:ab:76:a9:
                    51:dd:71:5b:97:49:58:d0:fb:12:fd:c7:d6:6d:39:
                    85:21:b4:7d:6f:24:30:c7:82:4f:ee:c7:71:25:aa:
                    69:54:01:e0:64:1f:bb:2a:b9:6d:12:74:48:57:92:
                    8b:8b:c5:88:a8:c6:7c:d3:99:6e:8c:aa:29:b5:08:
                    25:74:f3:3a:a2:d9:e1:96:b7:9f:92:39:de:bd:f5:
                    c3:ea:41:f5:38:8e:d7:ea:02:66:14:52:33:57:db:
                    62:1f:de:d8:32:d6:b5:e5:1a:89:f5:48:1f:a8:33:
                    27:d9:2e:84:d0:db:89:0a:f1:35:8a:55:96:d6:80:
                    33:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:8F:50:B5:DA:9A:69:6E:A8:96:46:FB:1B:5B:B9:9C:0A:3F:08:9D
            X509v3 Authority Key Identifier:
                keyid:7D:E6:07:C4:61:5D:7A:01:FB:DD:4A:86:AD:54:59:40:1A:75:99:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/feYHxGFdegH73UqGrVRZQBp1mSE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:7e:bf:e2:04:75:c7:b6:ca:40:96:51:9a:c1:c7:57:ed:63:
         1d:dc:c4:b9:d8:e8:80:69:88:54:84:8d:f7:d0:23:4f:b5:68:
         56:58:be:d2:1c:04:b7:ed:bf:60:99:75:8a:40:0a:03:99:28:
         e6:8a:0f:fe:6e:3a:b5:05:31:72:d4:b3:85:cf:56:98:e1:43:
         1d:c1:b2:c5:f8:33:90:19:2e:35:b6:2d:d4:21:ac:52:02:0a:
         8a:4a:d6:86:09:a8:be:0b:97:f2:c0:0b:68:f9:7d:f6:68:59:
         98:31:14:5a:f8:58:d4:35:9c:3a:25:84:cd:dd:72:29:d0:a1:
         44:33:82:70:5c:51:42:92:f0:eb:47:db:c1:ae:ac:ae:c0:65:
         5a:c1:c9:5a:38:6a:22:8d:0b:e1:07:31:44:52:18:90:c8:4f:
         18:11:a5:e8:da:7d:55:47:02:19:26:00:12:35:f1:b2:01:a1:
         fd:73:5f:b1:7a:3e:d0:cf:ce:5b:ce:5a:54:c7:88:b6:4a:ef:
         4e:8e:5f:a6:21:1a:d3:4e:97:3b:34:9b:e5:3e:de:7f:7b:23:
         8f:e1:f6:7a:c7:6c:43:29:74:d8:6c:2a:62:c5:62:25:ff:76:
         b6:7a:a5:9c:88:d2:a5:39:42:84:69:9a:04:a6:9a:4f:5e:30:
         00:2b:57:b4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjQ0MkExMTAvBgNVBAUTKDdERTYwN0M0NjE1RDdBMDFGQkRENEE4NkFENTQ1OTQw
MUE3NTk5MjEwHhcNMjYwNDE3MDA0NDA1WhcNMjYwNDI0MDA0NDA1WjAYMRYwFAYD
VQQDEw02OWUxODI1NS00MzU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArwLMcXpBIP8c5daCBvF0yaTWjPKScRFU2c8g6Y5HakzMDClo69V1eb5UHQoc
KTpizuXfWmEPFx5q5xAAL4KQCJ606YE7Kfo8hPcAE+Nj/1+zVgoa8y9dK1HHuIFg
v4OFEeu9m/WCCrNZ7mW5EZd2ZRr/0JV9rdyYIN0P2rbFWJUmRkSrdqlR3XFbl0lY
0PsS/cfWbTmFIbR9byQwx4JP7sdxJappVAHgZB+7KrltEnRIV5KLi8WIqMZ805lu
jKoptQgldPM6otnhlrefkjnevfXD6kH1OI7X6gJmFFIzV9tiH97YMta15RqJ9Ugf
qDMn2S6E0NuJCvE1ilWW1oAzlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJGPULXa
mmluqJZG+xtbuZwKPwidMB8GA1UdIwQYMBaAFH3mB8RhXXoB+91Khq1UWUAadZkh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDQyQS9FN0M0RjlERUY2
MjUxMUVFOERBRDhFMzVDNEY5QUUwMi9mZVlIeEdGZGVnSDczVXFHclZSWlFCcDFt
U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL2ZlWUh4R0ZkZWdINzNVcUdyVlJaUUJwMW1TRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NDQyQS9FN0M0RjlERUY2MjUxMUVFOERBRDhFMzVDNEY5QUUwMi9mZVlIeEdGZGVn
SDczVXFHclZSWlFCcDFtU0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJ36/4gR1x7bKQJZRmsHHV+1jHdzEudjogGmIVISN99AjT7VoVli+0hwEt+2/
YJl1ikAKA5ko5ooP/m46tQUxctSzhc9WmOFDHcGyxfgzkBkuNbYt1CGsUgIKikrW
hgmovguX8sALaPl99mhZmDEUWvhY1DWcOiWEzd1yKdChRDOCcFxRQpLw60fbwa6s
rsBlWsHJWjhqIo0L4QcxRFIYkMhPGBGl6Np9VUcCGSYAEjXxsgGh/XNfsXo+0M/O
W85aVMeItkrvTo5fpiEa006XOzSb5T7ef3sjj+H2esdsQyl02GwqYsViJf92tnql
nIjSpTlChGmaBKaaT14wACtXtA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:23:11 2026 by rpki-client