Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.mft
File:                     cDaiAHf_h_76NADX-QdrfhmDiy4.mft (raw, json)
Hash identifier:          nNHQwi/dsic/3L74EB5bdk613wSC4Rp0+8Sg0ibJR6E=
Subject key identifier:   8C:6E:97:E8:EC:FB:45:9D:22:6D:4F:BD:02:3B:69:B8:54:D2:2D:4B
Authority key identifier: 70:36:A2:00:77:FF:87:FE:FA:34:00:D7:F9:07:6B:7E:19:83:8B:2E
Certificate issuer:       /CN=A913F124/serialNumber=7036A20077FF87FEFA3400D7F9076B7E19838B2E
Certificate serial:       029A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDaiAHf_h_76NADX-QdrfhmDiy4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.mft
Manifest number:          0295
Signing time:             Fri 17 Apr 2026 01:26:27 +0000
Manifest this update:     Fri 17 Apr 2026 01:26:27 +0000
Manifest next update:     Fri 24 Apr 2026 01:26:27 +0000
Files and hashes:         1: cDaiAHf_h_76NADX-QdrfhmDiy4.crl (hash: iUv4WPdYxyKP/96vrse65AyhLkLuJUIt/EXwj7fSgPc=)
                          2: B13C376049EC11ED9EAEAC0CC4F9AE02.roa (hash: NdDZZRgK9g6DqkIOgNxd6KDbkad4VeSpXexgW2KxCEc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.crl
                          rsync://rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDaiAHf_h_76NADX-QdrfhmDiy4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:26:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 666 (0x29a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F124, serialNumber=7036A20077FF87FEFA3400D7F9076B7E19838B2E
        Validity
            Not Before: Apr 17 01:26:27 2026 GMT
            Not After : Apr 24 01:26:27 2026 GMT
        Subject: CN=69e18c43-a93d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:21:10:c8:a2:27:95:9f:16:0c:c1:b5:83:c2:
                    0b:8c:2c:ad:45:80:53:de:5a:4b:ae:c6:50:27:bf:
                    95:45:94:03:58:a3:bf:a1:b2:e1:d4:f5:af:58:62:
                    dd:33:b7:da:de:56:3b:93:ef:d9:38:2c:7b:84:cb:
                    bd:85:1c:0d:86:4b:c3:15:bb:7a:4f:60:c9:96:1f:
                    d1:ce:87:fb:9e:f4:10:77:0b:e0:b3:9c:46:b4:7e:
                    21:ee:f2:71:b9:b0:45:5f:df:f5:c3:65:ef:dc:e5:
                    13:1d:e0:1e:af:64:64:00:b7:3a:07:39:cc:ee:14:
                    0c:9c:9b:34:ad:32:ff:fb:da:09:6b:cf:af:4f:c1:
                    e4:4f:02:08:c2:16:89:0e:bd:e5:40:5f:79:2b:c1:
                    8d:f5:f3:89:bd:a0:d4:c4:00:03:81:77:0a:cb:d9:
                    4d:c3:2c:d0:53:31:10:c2:d9:a4:8a:89:19:e4:8c:
                    ad:8e:35:46:a7:82:a3:a6:12:c5:f7:78:2f:cd:f4:
                    b4:2f:c5:ef:fd:d5:2f:08:3f:f9:c4:f0:7e:29:ce:
                    db:a4:fb:02:01:de:c3:14:b7:29:bf:74:d8:cb:7b:
                    cd:e5:4e:f5:c7:45:b2:ae:10:95:8f:12:85:25:e7:
                    7d:f7:e7:d6:04:fd:f0:1f:5a:0a:48:b0:a0:56:bf:
                    c4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:6E:97:E8:EC:FB:45:9D:22:6D:4F:BD:02:3B:69:B8:54:D2:2D:4B
            X509v3 Authority Key Identifier:
                keyid:70:36:A2:00:77:FF:87:FE:FA:34:00:D7:F9:07:6B:7E:19:83:8B:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDaiAHf_h_76NADX-QdrfhmDiy4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:47:41:c6:ef:d2:b7:e3:d5:da:b9:b8:b5:19:61:5c:d8:df:
         b0:83:f6:c9:c0:78:3f:52:a4:7f:0f:e4:5d:d3:ea:49:5b:94:
         0e:70:67:ea:8b:50:fa:eb:23:35:2d:33:2c:6a:34:ae:fe:a0:
         72:4b:a7:1b:7a:4f:bd:4d:41:bf:b9:53:bf:12:10:1b:32:2b:
         cc:97:f5:58:d0:e0:9d:32:aa:83:82:fa:8b:d4:7d:25:82:e4:
         46:be:9c:71:9b:d5:3f:10:18:17:cb:c1:5f:9d:aa:47:1d:83:
         88:d5:90:d0:f4:4c:41:9b:33:66:eb:92:8d:24:bc:24:f0:b1:
         d0:66:20:4c:36:10:97:53:d8:ea:9c:c0:d8:0a:60:81:60:43:
         76:cb:c8:a3:38:24:b9:50:91:53:38:06:b2:d7:50:29:fc:9d:
         ce:46:85:49:dd:9f:14:21:04:be:fd:56:b7:01:b6:11:c8:8b:
         30:54:5e:1d:a8:8d:f7:16:c5:d4:7c:b6:ac:b7:ca:18:32:f2:
         8f:92:1a:e0:ce:94:b1:f3:61:69:b8:f5:37:3e:f1:ef:e0:06:
         ac:c0:d9:65:49:2b:c5:dc:c7:c1:e8:06:31:64:1b:96:c6:ab:
         ac:55:4f:20:4c:1f:ab:1a:e6:a0:fb:96:a6:ec:c0:d7:45:33:
         d2:71:df:20
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICApowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0YxMjQxMTAvBgNVBAUTKDcwMzZBMjAwNzdGRjg3RkVGQTM0MDBEN0Y5MDc2QjdF
MTk4MzhCMkUwHhcNMjYwNDE3MDEyNjI3WhcNMjYwNDI0MDEyNjI3WjAYMRYwFAYD
VQQDEw02OWUxOGM0My1hOTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwiEQyKInlZ8WDMG1g8ILjCytRYBT3lpLrsZQJ7+VRZQDWKO/obLh1PWvWGLd
M7fa3lY7k+/ZOCx7hMu9hRwNhkvDFbt6T2DJlh/Rzof7nvQQdwvgs5xGtH4h7vJx
ubBFX9/1w2Xv3OUTHeAer2RkALc6BznM7hQMnJs0rTL/+9oJa8+vT8HkTwIIwhaJ
Dr3lQF95K8GN9fOJvaDUxAADgXcKy9lNwyzQUzEQwtmkiokZ5IytjjVGp4KjphLF
93gvzfS0L8Xv/dUvCD/5xPB+Kc7bpPsCAd7DFLcpv3TYy3vN5U71x0WyrhCVjxKF
Jed99+fWBP3wH1oKSLCgVr/EXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIxul+js
+0WdIm1PvQI7abhU0i1LMB8GA1UdIwQYMBaAFHA2ogB3/4f++jQA1/kHa34Zg4su
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjEyNC81NjU1REE3NjQ5
RTgxMUVEOTQzQzQ5ODRDNEY5QUUwMi9jRGFpQUhmX2hfNzZOQURYLVFkcmZobURp
eTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NEYWlBSGZfaF83Nk5BRFgtUWRyZmhtRGl5NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RjEyNC81NjU1REE3NjQ5RTgxMUVEOTQzQzQ5ODRDNEY5QUUwMi9jRGFpQUhmX2hf
NzZOQURYLVFkcmZobURpeTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlkdBxu/St+PV2rm4tRlhXNjfsIP2ycB4P1Kkfw/kXdPqSVuUDnBn6otQ+usj
NS0zLGo0rv6gckunG3pPvU1Bv7lTvxIQGzIrzJf1WNDgnTKqg4L6i9R9JYLkRr6c
cZvVPxAYF8vBX52qRx2DiNWQ0PRMQZszZuuSjSS8JPCx0GYgTDYQl1PY6pzA2Apg
gWBDdsvIozgkuVCRUzgGstdQKfydzkaFSd2fFCEEvv1WtwG2EciLMFReHaiN9xbF
1Hy2rLfKGDLyj5Ia4M6UsfNhabj1Nz7x7+AGrMDZZUkrxdzHwegGMWQblsarrFVP
IEwfqxrmoPuWpuzA10Uz0nHfIA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:00:33 2026 by rpki-client