Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft
File:                     Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft (raw, json)
Hash identifier:          EJRHNob40R2VcgRonkmQA0nKXnkcQmEHMBDoKqcKBXU=
Subject key identifier:   02:5B:78:4A:FB:1C:22:BF:4E:89:B3:4F:D7:A8:FA:4E:2E:01:2E:9A
Authority key identifier: 42:4E:0A:38:43:F3:FA:1F:44:B6:AF:2E:F3:EE:11:81:5C:4B:52:09
Certificate issuer:       /CN=A912C8AF/serialNumber=424E0A3843F3FA1F44B6AF2EF3EE11815C4B5209
Certificate serial:       07DB
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft
Manifest number:          07CF
Signing time:             Thu 16 Apr 2026 19:12:58 +0000
Manifest this update:     Thu 16 Apr 2026 19:12:58 +0000
Manifest next update:     Thu 23 Apr 2026 19:12:58 +0000
Files and hashes:         1: Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl (hash: 9QWf8rl2uc+4nvFTBJTh8uTaC1oYimv7v961Jej7gQo=)
                          2: 510308503E8211EBA910FF57C4F9AE02.roa (hash: O/lTB0pDSB8sB0dRmgz1yxjauyhwEgNkjtUoJWKHyCo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl
                          rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:12:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2011 (0x7db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C8AF, serialNumber=424E0A3843F3FA1F44B6AF2EF3EE11815C4B5209
        Validity
            Not Before: Apr 16 19:12:58 2026 GMT
            Not After : Apr 23 19:12:58 2026 GMT
        Subject: CN=69e134ba-4115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cd:2b:1f:c8:24:6c:12:d4:34:fc:e9:a6:f3:
                    73:73:1d:32:6d:46:3a:38:6f:83:1d:f0:38:5d:9c:
                    7d:05:c5:12:31:99:f7:c0:90:55:b4:cb:51:8e:ee:
                    f9:7f:b7:5f:d2:f2:66:b2:a1:7d:4b:b5:bc:1d:d3:
                    20:8a:6e:02:f8:5b:20:f4:f7:49:60:a1:0b:45:76:
                    82:f3:0b:c9:11:f3:e6:6c:34:a5:08:b8:42:05:df:
                    98:08:12:8d:58:60:7c:79:99:f9:07:df:7f:76:15:
                    8c:a8:68:de:ab:1a:fd:d2:8d:7a:15:e7:77:d5:a9:
                    dc:b6:85:58:b9:4f:b5:25:73:89:67:95:28:24:60:
                    7c:b0:63:0a:89:a5:26:53:9b:42:93:39:5b:ea:4b:
                    28:3c:50:bd:46:7b:85:bb:14:82:3c:67:f9:5e:75:
                    ec:ba:4f:03:fb:8d:1c:a1:b4:14:19:f3:d7:85:55:
                    87:4f:92:47:8d:4e:56:eb:8c:35:d1:5d:d9:d2:d1:
                    c7:24:89:f5:d1:19:76:fb:9e:59:75:f2:4c:d0:18:
                    97:ac:0e:ce:83:07:e6:ad:18:49:83:bf:b5:d8:0c:
                    fb:3d:58:66:0d:29:f4:ed:0f:7a:54:c7:a0:83:f0:
                    39:d4:b5:2d:e5:06:d6:98:9e:18:dc:fd:7f:dd:9e:
                    29:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:5B:78:4A:FB:1C:22:BF:4E:89:B3:4F:D7:A8:FA:4E:2E:01:2E:9A
            X509v3 Authority Key Identifier:
                keyid:42:4E:0A:38:43:F3:FA:1F:44:B6:AF:2E:F3:EE:11:81:5C:4B:52:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:a6:b2:b0:5b:18:f6:0b:8e:a3:02:0b:20:2c:3b:68:07:53:
         42:2c:f3:f8:31:3b:d9:d1:06:37:b5:9a:aa:a9:ae:09:2d:ba:
         e4:da:ca:5f:54:f8:c0:2e:48:68:ea:a4:5b:9c:8f:a4:9f:21:
         c5:fe:bd:79:39:43:90:53:08:1c:3d:18:a9:3f:60:a1:c4:87:
         ec:db:59:93:ae:2d:7c:c5:29:5b:7c:02:e3:b7:c6:29:f4:f5:
         05:36:c0:e2:39:d5:a5:17:58:13:0b:2a:f4:91:53:73:52:64:
         2b:e7:76:1f:e2:8c:17:10:6b:d2:02:79:f3:87:ca:3b:c3:45:
         61:5c:a1:ba:8e:dd:f3:3c:82:30:4f:03:c2:97:18:7f:04:27:
         8e:b5:1e:e4:39:89:68:f9:87:44:2a:93:5c:7a:c2:e7:18:aa:
         88:9e:ba:eb:d6:f6:b8:3e:59:b8:55:6d:39:38:09:2f:e3:44:
         5a:91:7b:a4:84:0b:66:26:11:92:36:b9:90:d2:f9:85:d3:23:
         5b:9a:ab:58:36:8e:03:10:fc:f3:9e:b9:3e:3e:a3:87:8e:39:
         07:11:52:29:c8:c8:18:ff:49:44:3c:c5:0d:66:f9:15:75:6f:
         3f:b1:8a:06:6f:91:d6:ef:d6:59:35:a8:d5:f0:c9:a3:25:72:
         ad:69:6f:50
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB9swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkM4QUYxMTAvBgNVBAUTKDQyNEUwQTM4NDNGM0ZBMUY0NEI2QUYyRUYzRUUxMTgx
NUM0QjUyMDkwHhcNMjYwNDE2MTkxMjU4WhcNMjYwNDIzMTkxMjU4WjAYMRYwFAYD
VQQDEw02OWUxMzRiYS00MTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAps0rH8gkbBLUNPzppvNzcx0ybUY6OG+DHfA4XZx9BcUSMZn3wJBVtMtRju75
f7df0vJmsqF9S7W8HdMgim4C+Fsg9PdJYKELRXaC8wvJEfPmbDSlCLhCBd+YCBKN
WGB8eZn5B99/dhWMqGjeqxr90o16Fed31anctoVYuU+1JXOJZ5UoJGB8sGMKiaUm
U5tCkzlb6ksoPFC9RnuFuxSCPGf5XnXsuk8D+40cobQUGfPXhVWHT5JHjU5W64w1
0V3Z0tHHJIn10Rl2+55ZdfJM0BiXrA7OgwfmrRhJg7+12Az7PVhmDSn07Q96VMeg
g/A51LUt5QbWmJ4Y3P1/3Z4pdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAJbeEr7
HCK/TomzT9eo+k4uAS6aMB8GA1UdIwQYMBaAFEJOCjhD8/ofRLavLvPuEYFcS1IJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhBRi9FRTBBRUVDQTNF
ODExMUVCOUFCRDkyMEZDNEY5QUUwMi9RazRLT0VQei1oOUV0cTh1OC00UmdWeExV
Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL1FrNEtPRVB6LWg5RXRxOHU4LTRSZ1Z4TFVnay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QzhBRi9FRTBBRUVDQTNFODExMUVCOUFCRDkyMEZDNEY5QUUwMi9RazRLT0VQei1o
OUV0cTh1OC00UmdWeExVZ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmaaysFsY9guOowILICw7aAdTQizz+DE72dEGN7WaqqmuCS265NrKX1T4wC5I
aOqkW5yPpJ8hxf69eTlDkFMIHD0YqT9gocSH7NtZk64tfMUpW3wC47fGKfT1BTbA
4jnVpRdYEwsq9JFTc1JkK+d2H+KMFxBr0gJ584fKO8NFYVyhuo7d8zyCME8DwpcY
fwQnjrUe5DmJaPmHRCqTXHrC5xiqiJ6669b2uD5ZuFVtOTgJL+NEWpF7pIQLZiYR
kja5kNL5hdMjW5qrWDaOAxD88565Pj6jh445BxFSKcjIGP9JRDzFDWb5FXVvP7GK
Bm+R1u/WWTWo1fDJoyVyrWlvUA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:21:14 2026 by rpki-client