Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.mft
File:                     T96UkP8v8-m_k7SY108x916p_P8.mft (raw, json)
Hash identifier:          yOnH5jGN4qGmyRZ89gT6GwQC5LevBeb+CmA/ChkqPpE=
Subject key identifier:   AA:69:E5:97:4D:CE:06:0A:9D:3C:D7:E2:B7:E7:1F:73:C4:4A:08:1C
Authority key identifier: 4F:DE:94:90:FF:2F:F3:E9:BF:93:B4:98:D7:4F:31:F7:5E:A9:FC:FF
Certificate issuer:       /CN=A912D14B/serialNumber=4FDE9490FF2FF3E9BF93B498D74F31F75EA9FCFF
Certificate serial:       0448
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T96UkP8v8-m_k7SY108x916p_P8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.mft
Manifest number:          0430
Signing time:             Fri 17 Apr 2026 00:15:10 +0000
Manifest this update:     Fri 17 Apr 2026 00:15:09 +0000
Manifest next update:     Fri 24 Apr 2026 00:15:09 +0000
Files and hashes:         1: T96UkP8v8-m_k7SY108x916p_P8.crl (hash: Wf0W8j1brWBzdz/zxYElVyB6rphUifpa9Pn5IhMTQLE=)
                          2: D791DEB48DEE11EEB451D416C4F9AE02.roa (hash: zhGf6vgm0C3GTje/jua3UnPl3jt39EY1BOnME5mb/HE=)
                          3: 152E5750901211EEA25BED1EC4F9AE02.roa (hash: S393tIRXjqwIgNjaze8iQkcL22A9fRb/vcetFTNN4As=)
                          4: D226E012A4EA11ECA8C4D151C4F9AE02.roa (hash: dTIeQPJRfWnwh+dbEE9eI/CeKDdf7lQeG6UlGPB4vHc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.crl
                          rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T96UkP8v8-m_k7SY108x916p_P8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:15:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1096 (0x448)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D14B, serialNumber=4FDE9490FF2FF3E9BF93B498D74F31F75EA9FCFF
        Validity
            Not Before: Apr 17 00:15:09 2026 GMT
            Not After : Apr 24 00:15:09 2026 GMT
        Subject: CN=69e17b8e-7d4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e2:03:fb:f0:1c:dc:b3:82:7d:e2:a8:e6:e7:
                    90:dc:7e:7a:83:35:32:a3:65:af:d6:9a:25:51:58:
                    f3:dc:7d:ed:18:76:6a:f4:cb:4b:e9:ef:f2:f9:eb:
                    f9:43:7d:27:d9:5a:eb:4b:7a:e3:f4:60:93:39:47:
                    59:ec:35:c7:51:f2:13:24:79:0d:a0:cd:f5:63:2e:
                    e0:4c:86:bf:57:91:e7:50:1a:9c:d2:2e:6e:ec:d2:
                    ce:0a:6c:c5:ae:41:c1:91:2d:bf:df:5f:42:3f:52:
                    3c:48:23:f1:bb:38:d0:80:a6:c3:c6:68:ac:ec:25:
                    c3:ac:0f:8e:1b:ba:39:41:7d:d9:5f:24:65:42:cd:
                    15:5c:fe:e7:d7:13:70:a9:07:42:e6:3f:bd:38:9f:
                    3c:09:0e:3f:56:82:e0:6d:9e:8b:84:96:3a:43:50:
                    f1:4a:08:cd:2a:c5:ae:0c:92:49:2e:fd:26:f9:67:
                    61:65:5b:33:83:3d:64:b9:f4:c4:35:8d:38:fa:d2:
                    8a:5c:cd:a3:7d:cc:f0:66:32:59:ed:34:67:af:30:
                    0b:53:b9:c7:d3:6c:f1:01:f9:3b:f8:02:4e:fb:df:
                    8e:96:fa:d7:1d:7d:dc:66:36:f4:a5:de:8d:7e:eb:
                    d8:94:b5:70:58:79:0b:9f:61:f6:8c:4b:88:cf:53:
                    49:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:69:E5:97:4D:CE:06:0A:9D:3C:D7:E2:B7:E7:1F:73:C4:4A:08:1C
            X509v3 Authority Key Identifier:
                keyid:4F:DE:94:90:FF:2F:F3:E9:BF:93:B4:98:D7:4F:31:F7:5E:A9:FC:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T96UkP8v8-m_k7SY108x916p_P8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:76:1e:1e:cc:b8:e1:53:45:bf:c1:10:43:dc:65:d9:56:c8:
         94:8a:18:d4:65:b4:d1:52:70:c7:fc:5d:bc:52:31:3d:f3:8b:
         b6:3a:f9:8f:55:bd:d1:aa:c6:94:64:e0:ae:11:d5:88:e0:fa:
         02:73:04:da:91:50:b8:6d:cc:ff:8e:c9:f7:57:83:e7:1d:e2:
         3d:1a:90:7c:87:a2:a9:0b:4a:e0:c2:e0:6e:60:d6:2d:8b:e4:
         c9:6b:a8:a6:4b:41:a4:71:ae:b4:25:65:5f:f6:09:cb:24:e9:
         7a:08:ab:7a:f7:0e:5f:78:45:e5:26:b6:84:a8:8c:f7:98:d5:
         b6:cc:d5:ca:fd:32:46:ef:75:dd:8e:9c:55:d8:30:7d:88:cb:
         ca:f8:2f:35:d0:b1:4b:e6:73:5b:18:21:41:25:d8:ef:a8:d7:
         dd:22:d7:7c:24:06:4b:63:13:b5:e5:85:79:5e:45:43:c1:eb:
         96:48:32:1a:1f:1e:b5:93:64:3b:62:19:9a:18:b1:c5:a4:61:
         cb:c7:b1:e5:f9:3d:54:a8:45:a7:ec:f9:21:2a:e1:b4:0e:0d:
         7c:14:78:80:af:6e:9e:89:57:fd:bc:fd:83:70:f3:f5:ef:be:
         40:45:4b:68:d5:d0:0c:ac:f4:06:fc:83:a1:16:6a:18:8e:b8:
         4f:60:83:e8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkQxNEIxMTAvBgNVBAUTKDRGREU5NDkwRkYyRkYzRTlCRjkzQjQ5OEQ3NEYzMUY3
NUVBOUZDRkYwHhcNMjYwNDE3MDAxNTA5WhcNMjYwNDI0MDAxNTA5WjAYMRYwFAYD
VQQDEw02OWUxN2I4ZS03ZDRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAk+ID+/Ac3LOCfeKo5ueQ3H56gzUyo2Wv1polUVjz3H3tGHZq9MtL6e/y+ev5
Q30n2VrrS3rj9GCTOUdZ7DXHUfITJHkNoM31Yy7gTIa/V5HnUBqc0i5u7NLOCmzF
rkHBkS2/319CP1I8SCPxuzjQgKbDxmis7CXDrA+OG7o5QX3ZXyRlQs0VXP7n1xNw
qQdC5j+9OJ88CQ4/VoLgbZ6LhJY6Q1DxSgjNKsWuDJJJLv0m+WdhZVszgz1kufTE
NY04+tKKXM2jfczwZjJZ7TRnrzALU7nH02zxAfk7+AJO+9+OlvrXHX3cZjb0pd6N
fuvYlLVwWHkLn2H2jEuIz1NJPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKpp5ZdN
zgYKnTzX4rfnH3PESggcMB8GA1UdIwQYMBaAFE/elJD/L/Ppv5O0mNdPMfdeqfz/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDE0Qi9EQzFFNzIxNEE0
RTYxMUVDOUVGNDMxNERDNEY5QUUwMi9UOTZVa1A4djgtbV9rN1NZMTA4eDkxNnBf
UDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Q5NlVrUDh2OC1tX2s3U1kxMDh4OTE2cF9QOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RDE0Qi9EQzFFNzIxNEE0RTYxMUVDOUVGNDMxNERDNEY5QUUwMi9UOTZVa1A4djgt
bV9rN1NZMTA4eDkxNnBfUDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAU3YeHsy44VNFv8EQQ9xl2VbIlIoY1GW00VJwx/xdvFIxPfOLtjr5j1W90arG
lGTgrhHViOD6AnME2pFQuG3M/47J91eD5x3iPRqQfIeiqQtK4MLgbmDWLYvkyWuo
pktBpHGutCVlX/YJyyTpegirevcOX3hF5Sa2hKiM95jVtszVyv0yRu913Y6cVdgw
fYjLyvgvNdCxS+ZzWxghQSXY76jX3SLXfCQGS2MTteWFeV5FQ8HrlkgyGh8etZNk
O2IZmhixxaRhy8ex5fk9VKhFp+z5ISrhtA4NfBR4gK9unolX/bz9g3Dz9e++QEVL
aNXQDKz0BvyDoRZqGI64T2CD6A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:44:40 2026 by rpki-client