Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
File:                     rYW34Ys6FvU-kpOKM07Guz64tjA.mft (raw, json)
Hash identifier:          4zzrkCbmmJ97M06aeesvtPeEJOCQSuCW4PMBcGU4BFY=
Subject key identifier:   B8:AF:AA:3F:A4:C8:B8:49:28:02:CD:20:06:91:51:FC:70:68:88:59
Authority key identifier: AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30
Certificate issuer:       /CN=A913FBB2/serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630
Certificate serial:       0221
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
Manifest number:          020F
Signing time:             Fri 17 Apr 2026 02:43:21 +0000
Manifest this update:     Fri 17 Apr 2026 02:43:21 +0000
Manifest next update:     Fri 24 Apr 2026 02:43:21 +0000
Files and hashes:         1: rYW34Ys6FvU-kpOKM07Guz64tjA.crl (hash: 9EZ9pzezDA7bxMkPts50bXjq8X2feDHhR519Cyf0leE=)
                          2: A9321C0A1B2A11EE84F40B3AC4F9AE02.roa (hash: tRTg+EzOsPEBd/CyA9yv6uVUIfA6399PeHgHdLPDFdI=)
                          3: A8C501F61B2A11EE84F40B3AC4F9AE02.roa (hash: kgK3NjgQxpDJ05PetKW0f4eD4WtSWH7QBEKwm+5D1qk=)
                          4: B97D647C1A8811EEB5AE963CC4F9AE02.roa (hash: NpABsuTNt3Of0zFwuT3M1C2R99zLqBty3uuQSGUzpfg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl
                          rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:43:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 545 (0x221)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913FBB2, serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630
        Validity
            Not Before: Apr 17 02:43:21 2026 GMT
            Not After : Apr 24 02:43:21 2026 GMT
        Subject: CN=69e19e49-d19d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3a:d6:14:8f:09:44:07:b6:5e:cb:ee:75:07:
                    4c:49:cf:0a:eb:a7:25:a2:bd:cc:39:4d:46:38:f5:
                    31:1f:8f:c7:8c:8d:2f:a3:04:ad:f4:44:c9:4c:2f:
                    76:30:86:31:af:8a:e1:be:0b:96:a2:f9:bc:6c:05:
                    cb:2c:ee:fd:e6:8c:af:b8:80:f1:ee:0b:ce:6b:83:
                    57:f4:41:1c:d7:3c:33:c2:52:dd:46:30:ac:a3:a7:
                    37:be:6a:a5:2e:41:66:5b:a7:31:0f:a3:b2:07:69:
                    d7:d2:ef:fd:21:ff:69:b2:70:07:f5:9b:9f:85:44:
                    87:fc:93:8d:7a:91:4b:4c:4f:68:a1:22:40:2a:eb:
                    0b:f9:d8:f0:13:82:08:09:5c:46:e6:7f:f5:52:2b:
                    af:2d:0e:e8:ee:ac:57:81:94:ad:a4:b4:0d:de:1d:
                    99:28:7b:a4:63:0b:15:fc:82:1b:8c:5e:8a:b2:02:
                    5f:91:4b:17:3b:89:93:0f:3e:16:c9:f1:9b:46:ca:
                    bf:5d:d1:50:2d:2d:0c:67:6b:ea:28:e5:c9:42:42:
                    48:b1:89:ce:60:a0:be:4f:f8:0d:13:78:95:5c:2f:
                    05:2b:61:8a:73:02:06:00:eb:22:fd:be:e5:b1:4e:
                    2b:dc:06:d2:57:da:90:c2:4a:7a:30:16:86:d2:59:
                    b5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:AF:AA:3F:A4:C8:B8:49:28:02:CD:20:06:91:51:FC:70:68:88:59
            X509v3 Authority Key Identifier:
                keyid:AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:57:33:ad:55:de:ef:b6:4f:95:e3:eb:a7:cd:77:f3:72:02:
         1b:09:c0:c0:d3:5d:96:e7:bf:ac:93:93:6b:b9:6f:9f:d8:16:
         b4:9b:16:dd:f1:d2:b1:06:92:3f:60:15:7e:3f:2b:6d:a7:8a:
         de:89:cc:b2:a8:ff:19:16:88:73:c1:2b:ef:82:c0:40:dc:47:
         b1:7d:96:81:07:af:d4:0c:ef:8b:5c:ed:f6:58:8d:62:6c:02:
         f7:cd:d4:2e:bc:88:45:5b:db:38:ef:b5:ee:e4:06:a4:d0:07:
         b8:42:81:a1:6c:38:ff:a1:e8:69:6c:f2:92:5e:39:e6:7f:a5:
         4b:28:df:f3:bd:9a:39:14:d1:a3:d2:8c:57:21:59:53:b4:f1:
         9f:72:57:23:70:7f:8e:71:a0:29:9a:b9:9e:56:62:b9:04:1b:
         35:50:72:31:e3:aa:52:bf:24:3b:bf:c7:c3:a4:31:9d:57:a4:
         44:5b:66:5a:54:db:07:20:19:72:0c:a1:4b:9c:98:ff:fc:bf:
         bc:cc:d4:c8:44:ed:9c:23:5a:a2:c1:1b:33:fc:f1:37:49:5c:
         32:26:6b:5d:ff:dd:d6:97:d4:ee:a0:eb:08:53:2b:bf:c6:15:
         b4:a2:25:30:64:e9:78:b8:da:aa:14:3c:ec:f7:48:4d:e9:7f:
         7c:b1:0c:dd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0ZCQjIxMTAvBgNVBAUTKEFEODVCN0UxOEIzQTE2RjUzRTkyOTM4QTMzNEVDNkJC
M0VCOEI2MzAwHhcNMjYwNDE3MDI0MzIxWhcNMjYwNDI0MDI0MzIxWjAYMRYwFAYD
VQQDEw02OWUxOWU0OS1kMTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArjrWFI8JRAe2XsvudQdMSc8K66clor3MOU1GOPUxH4/HjI0vowSt9ETJTC92
MIYxr4rhvguWovm8bAXLLO795oyvuIDx7gvOa4NX9EEc1zwzwlLdRjCso6c3vmql
LkFmW6cxD6OyB2nX0u/9If9psnAH9ZufhUSH/JONepFLTE9ooSJAKusL+djwE4II
CVxG5n/1UiuvLQ7o7qxXgZStpLQN3h2ZKHukYwsV/IIbjF6KsgJfkUsXO4mTDz4W
yfGbRsq/XdFQLS0MZ2vqKOXJQkJIsYnOYKC+T/gNE3iVXC8FK2GKcwIGAOsi/b7l
sU4r3AbSV9qQwkp6MBaG0lm1AQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLivqj+k
yLhJKALNIAaRUfxwaIhZMB8GA1UdIwQYMBaAFK2Ft+GLOhb1PpKTijNOxrs+uLYw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkJCMi8wRTI3MDU0NDFB
ODYxMUVFQTBBQTg3MTZDNEY5QUUwMi9yWVczNFlzNkZ2VS1rcE9LTTA3R3V6NjR0
akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JZVzM0WXM2RnZVLWtwT0tNMDdHdXo2NHRqQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RkJCMi8wRTI3MDU0NDFBODYxMUVFQTBBQTg3MTZDNEY5QUUwMi9yWVczNFlzNkZ2
VS1rcE9LTTA3R3V6NjR0akEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIlczrVXe77ZPlePrp81383ICGwnAwNNdlue/rJOTa7lvn9gWtJsW3fHSsQaS
P2AVfj8rbaeK3onMsqj/GRaIc8Er74LAQNxHsX2WgQev1Azvi1zt9liNYmwC983U
LryIRVvbOO+17uQGpNAHuEKBoWw4/6HoaWzykl455n+lSyjf872aORTRo9KMVyFZ
U7Txn3JXI3B/jnGgKZq5nlZiuQQbNVByMeOqUr8kO7/Hw6QxnVekRFtmWlTbByAZ
cgyhS5yY//y/vMzUyETtnCNaosEbM/zxN0lcMiZrXf/d1pfU7qDrCFMrv8YVtKIl
MGTpeLjaqhQ87PdITel/fLEM3Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:59:03 2026 by rpki-client