Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft
File:                     86DXLWMw1yFWoA2fRuqwyfyTvIw.mft (raw, json)
Hash identifier:          12z7yj5/cMYZYKa7Tb6YGPy+rQ3jcGvk1FA+4s3hazI=
Subject key identifier:   08:C7:48:04:6B:38:9D:9D:BA:BC:CA:A6:8F:34:5D:46:4A:30:7E:77
Authority key identifier: F3:A0:D7:2D:63:30:D7:21:56:A0:0D:9F:46:EA:B0:C9:FC:93:BC:8C
Certificate issuer:       /CN=A9135395/serialNumber=F3A0D72D6330D72156A00D9F46EAB0C9FC93BC8C
Certificate serial:       028A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft
Manifest number:          0282
Signing time:             Fri 17 Apr 2026 01:38:32 +0000
Manifest this update:     Fri 17 Apr 2026 01:38:32 +0000
Manifest next update:     Fri 24 Apr 2026 01:38:32 +0000
Files and hashes:         1: 86DXLWMw1yFWoA2fRuqwyfyTvIw.crl (hash: +j+Zjvc3YrW12lMD0UGtqHzXrPTb8fvOUFFqyHGELbw=)
                          2: 5F0ACC76962011F09F73D036C4F9AE02.roa (hash: zxI7VE3eg0TasmD62sh1djQSdFuNkWLF/C/+dkz7utI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.crl
                          rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:38:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 650 (0x28a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135395, serialNumber=F3A0D72D6330D72156A00D9F46EAB0C9FC93BC8C
        Validity
            Not Before: Apr 17 01:38:32 2026 GMT
            Not After : Apr 24 01:38:32 2026 GMT
        Subject: CN=69e18f18-0399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d5:7c:9c:d9:dd:a7:19:d0:48:ec:8a:17:71:
                    e3:f8:d1:fc:2c:5c:b3:3c:1d:1c:bc:dc:1a:bc:0e:
                    56:55:50:94:6c:90:1a:ab:ba:1e:00:34:00:00:06:
                    af:d1:b5:4c:2c:26:97:e3:09:72:16:60:e1:bc:35:
                    b9:05:10:5b:26:ad:3f:d9:57:c4:1f:fb:b0:b8:13:
                    f3:ed:13:a4:25:0c:f9:0e:38:51:d9:40:ac:a3:96:
                    41:d1:96:2d:58:b0:8a:09:2f:71:15:49:be:94:bb:
                    35:73:ab:ca:d6:6c:7c:25:ee:92:17:9d:43:c2:b7:
                    de:4b:72:00:ae:76:2f:52:ff:19:02:58:02:7b:c9:
                    a6:d0:96:ed:55:38:76:de:c3:a5:3b:63:eb:45:47:
                    f9:52:89:0b:13:6f:42:2b:c2:ec:2f:8b:f8:9f:74:
                    09:f1:bc:8d:f7:00:49:e9:b3:e3:a9:bb:3e:ab:6b:
                    c2:3f:0c:91:9d:5f:82:f7:33:e6:dd:98:8a:a2:f8:
                    07:ab:ec:67:c5:c7:5d:b7:73:8e:93:51:74:d0:72:
                    6c:b0:df:30:57:c3:c2:b1:67:a3:6c:ea:84:5e:06:
                    86:d7:0e:2e:47:12:5f:f5:af:9e:d5:5c:71:c9:31:
                    55:c6:68:7b:49:d0:ab:73:4d:1e:74:9b:8b:52:19:
                    6e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:C7:48:04:6B:38:9D:9D:BA:BC:CA:A6:8F:34:5D:46:4A:30:7E:77
            X509v3 Authority Key Identifier:
                keyid:F3:A0:D7:2D:63:30:D7:21:56:A0:0D:9F:46:EA:B0:C9:FC:93:BC:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:90:07:fa:28:af:1a:cc:f0:c3:8c:6f:44:02:4e:d7:b4:24:
         c1:1d:a0:95:bb:a9:b9:73:ef:2d:b0:04:62:90:b0:eb:97:a2:
         35:a9:5b:05:7e:25:42:6a:6b:75:a4:09:7f:ee:6e:71:f1:c5:
         72:82:cc:00:d9:22:ab:88:9f:e2:38:76:3b:d2:43:15:25:fe:
         da:38:b1:e8:e1:43:e9:a3:9c:33:62:b4:fd:38:c8:34:66:c1:
         2e:33:9f:61:03:19:92:8f:f0:a9:50:25:87:8f:b2:16:d8:d3:
         41:75:65:62:84:8c:7c:32:f3:35:ab:c7:ef:26:d5:22:b3:fa:
         45:e6:94:09:05:28:39:5f:e5:1c:bf:da:c1:be:26:e6:d0:33:
         06:af:9c:44:27:ec:eb:52:5b:77:4e:fd:c8:bc:22:e5:3f:64:
         9b:89:81:51:be:24:a7:6c:14:20:55:f3:bd:7b:d7:df:b3:0f:
         a4:18:70:99:8d:7a:4a:16:d7:95:6f:24:e0:e1:08:02:d7:2d:
         5d:4b:d0:73:4e:50:61:68:d5:a2:7c:3a:36:35:b8:58:02:78:
         d3:33:cf:d6:6f:6f:84:0e:80:f0:93:e3:94:0b:9a:24:3b:b6:
         8e:c6:00:c8:c1:2b:90:29:41:22:4c:bf:9f:81:a0:4d:db:51:
         09:fc:06:7d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzUzOTUxMTAvBgNVBAUTKEYzQTBENzJENjMzMEQ3MjE1NkEwMEQ5RjQ2RUFCMEM5
RkM5M0JDOEMwHhcNMjYwNDE3MDEzODMyWhcNMjYwNDI0MDEzODMyWjAYMRYwFAYD
VQQDEw02OWUxOGYxOC0wMzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmtV8nNndpxnQSOyKF3Hj+NH8LFyzPB0cvNwavA5WVVCUbJAaq7oeADQAAAav
0bVMLCaX4wlyFmDhvDW5BRBbJq0/2VfEH/uwuBPz7ROkJQz5DjhR2UCso5ZB0ZYt
WLCKCS9xFUm+lLs1c6vK1mx8Je6SF51DwrfeS3IArnYvUv8ZAlgCe8mm0JbtVTh2
3sOlO2PrRUf5UokLE29CK8LsL4v4n3QJ8byN9wBJ6bPjqbs+q2vCPwyRnV+C9zPm
3ZiKovgHq+xnxcddt3OOk1F00HJssN8wV8PCsWejbOqEXgaG1w4uRxJf9a+e1Vxx
yTFVxmh7SdCrc00edJuLUhlujQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAjHSARr
OJ2durzKpo80XUZKMH53MB8GA1UdIwQYMBaAFPOg1y1jMNchVqANn0bqsMn8k7yM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTM5NS81N0UxRDE4NDZB
RTkxMUVEQkNEQUFFMjJDNEY5QUUwMi84NkRYTFdNdzF5RldvQTJmUnVxd3lmeVR2
SXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzg2RFhMV013MXlGV29BMmZSdXF3eWZ5VHZJdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NTM5NS81N0UxRDE4NDZBRTkxMUVEQkNEQUFFMjJDNEY5QUUwMi84NkRYTFdNdzF5
RldvQTJmUnVxd3lmeVR2SXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFpAH+iivGszww4xvRAJO17QkwR2glbupuXPvLbAEYpCw65eiNalbBX4lQmpr
daQJf+5ucfHFcoLMANkiq4if4jh2O9JDFSX+2jix6OFD6aOcM2K0/TjINGbBLjOf
YQMZko/wqVAlh4+yFtjTQXVlYoSMfDLzNavH7ybVIrP6ReaUCQUoOV/lHL/awb4m
5tAzBq+cRCfs61Jbd079yLwi5T9km4mBUb4kp2wUIFXzvXvX37MPpBhwmY16ShbX
lW8k4OEIAtctXUvQc05QYWjVonw6NjW4WAJ40zPP1m9vhA6A8JPjlAuaJDu2jsYA
yMErkClBIky/n4GgTdtRCfwGfQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:04:16 2026 by rpki-client