Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142127/C48FA8FAD74811F0BA1B0D9E6BD3641D/7KeHdUGmkz3VBhpsggg9O4ORXIU.mft
File:                     7KeHdUGmkz3VBhpsggg9O4ORXIU.mft (raw, json)
Hash identifier:          nlNks38RCNtRyoFL09Jz23zMr1gdKkXRNhF4zlXVtS8=
Subject key identifier:   40:62:F4:C1:46:F1:1F:0D:DC:81:70:76:5C:01:48:AA:33:9F:D6:03
Authority key identifier: EC:A7:87:75:41:A6:93:3D:D5:06:1A:6C:82:08:3D:3B:83:91:5C:85
Certificate issuer:       /CN=A9142127/serialNumber=ECA7877541A6933DD5061A6C82083D3B83915C85
Certificate serial:       4D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7KeHdUGmkz3VBhpsggg9O4ORXIU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142127/C48FA8FAD74811F0BA1B0D9E6BD3641D/7KeHdUGmkz3VBhpsggg9O4ORXIU.mft
Manifest number:          4A
Signing time:             Thu 16 Apr 2026 19:08:23 +0000
Manifest this update:     Thu 16 Apr 2026 19:08:23 +0000
Manifest next update:     Thu 23 Apr 2026 19:08:23 +0000
Files and hashes:         1: 7KeHdUGmkz3VBhpsggg9O4ORXIU.crl (hash: IT1v9EZMaLHikACXmWIZ7Xi0v2kUJ/iPnrxHMu33Pf0=)
                          2: 0A6F23BCD89011F0809DF24792D3641D.roa (hash: LF3tnAF+s60btudK/C+MWOKUVDskcOU/sbbTIojV6RQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142127/C48FA8FAD74811F0BA1B0D9E6BD3641D/7KeHdUGmkz3VBhpsggg9O4ORXIU.crl
                          rsync://rpki.apnic.net/member_repository/A9142127/C48FA8FAD74811F0BA1B0D9E6BD3641D/7KeHdUGmkz3VBhpsggg9O4ORXIU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7KeHdUGmkz3VBhpsggg9O4ORXIU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:08:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142127, serialNumber=ECA7877541A6933DD5061A6C82083D3B83915C85
        Validity
            Not Before: Apr 16 19:08:23 2026 GMT
            Not After : Apr 23 19:08:23 2026 GMT
        Subject: CN=69e133a7-0a59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ae:e4:0c:ca:c6:a9:48:22:0d:f3:b9:4b:dc:
                    5c:99:e3:4d:ea:9b:28:d6:6f:29:10:28:99:3d:60:
                    f0:92:ea:fb:a9:6a:da:ba:49:00:9d:38:24:82:8a:
                    e4:bc:37:87:28:bb:10:2d:cd:8b:bd:88:b7:5a:89:
                    56:aa:9a:3a:a6:1f:0b:81:a2:25:79:e5:73:ce:ac:
                    d6:69:8f:1b:76:26:ab:7a:8f:94:d6:8b:68:14:24:
                    bd:1f:5a:15:a7:54:e1:9e:6f:dc:23:20:90:e9:7b:
                    15:8c:38:ee:77:94:74:d7:e7:7e:96:4a:4b:d9:89:
                    f0:c9:55:a6:e1:88:b9:09:34:cf:ec:d1:34:66:ff:
                    74:eb:48:70:59:ca:81:9b:0e:42:8d:75:af:ae:49:
                    ec:2c:fa:80:ad:e9:82:27:23:d4:39:f8:27:15:99:
                    de:2d:40:34:1f:df:43:f4:93:26:e5:22:02:b0:4d:
                    38:f9:0c:cc:fb:78:44:0f:0b:f0:5f:75:d8:28:f7:
                    50:18:aa:2c:a9:17:51:a9:3d:3c:46:c2:ef:81:22:
                    de:91:5f:55:d3:c0:93:c1:ad:75:46:ac:c6:d0:8a:
                    af:f6:70:90:94:9c:7c:cc:06:57:aa:20:eb:1f:bb:
                    4c:54:90:81:1e:43:dc:12:50:0d:d1:c0:6d:b1:15:
                    22:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:62:F4:C1:46:F1:1F:0D:DC:81:70:76:5C:01:48:AA:33:9F:D6:03
            X509v3 Authority Key Identifier:
                keyid:EC:A7:87:75:41:A6:93:3D:D5:06:1A:6C:82:08:3D:3B:83:91:5C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142127/C48FA8FAD74811F0BA1B0D9E6BD3641D/7KeHdUGmkz3VBhpsggg9O4ORXIU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7KeHdUGmkz3VBhpsggg9O4ORXIU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142127/C48FA8FAD74811F0BA1B0D9E6BD3641D/7KeHdUGmkz3VBhpsggg9O4ORXIU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:19:62:84:3b:0d:30:99:f3:30:fa:2d:26:71:78:a6:de:e7:
         c4:11:e7:25:d5:b4:e0:91:88:cd:7f:c7:f1:74:fd:19:e0:1a:
         4c:a3:3e:3c:5c:3a:17:9a:bc:29:3e:c1:fd:ef:1f:f5:8f:36:
         31:a1:f0:4a:cb:cd:f6:2f:e0:13:21:46:b8:98:4b:50:a0:01:
         6e:32:82:2a:74:9c:a6:08:b3:90:e4:b6:fc:c0:58:ca:f3:d1:
         b9:8c:c3:21:ea:83:05:46:28:03:4d:20:44:5f:e2:09:52:4e:
         e1:ec:c6:1c:22:35:b1:a0:76:18:96:f8:69:25:84:3a:4b:0a:
         d5:d1:4e:3f:9f:bd:bd:2a:66:8c:69:7a:1d:00:2f:e3:f2:46:
         27:11:fb:3c:cf:10:25:96:d5:ac:76:1d:33:f9:ff:06:4f:ae:
         bd:13:d4:15:86:19:16:18:d1:c0:05:45:20:84:c8:19:e1:41:
         e7:33:c3:27:06:75:9b:95:56:83:65:2b:66:a2:72:c5:a2:b2:
         72:dd:38:dc:e3:dc:55:9a:39:37:46:29:ca:a6:2d:07:ae:53:
         65:9e:f5:c7:4d:80:49:15:10:ef:6a:b9:78:7b:cf:71:04:7a:
         7b:76:94:b5:82:fd:0e:3c:49:1c:a3:62:43:49:c2:8c:f3:d3:
         c1:6d:38:01
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
MjEyNzExMC8GA1UEBRMoRUNBNzg3NzU0MUE2OTMzREQ1MDYxQTZDODIwODNEM0I4
MzkxNUM4NTAeFw0yNjA0MTYxOTA4MjNaFw0yNjA0MjMxOTA4MjNaMBgxFjAUBgNV
BAMTDTY5ZTEzM2E3LTBhNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC3ruQMysapSCIN87lL3FyZ403qmyjWbykQKJk9YPCS6vupatq6SQCdOCSCiuS8
N4couxAtzYu9iLdaiVaqmjqmHwuBoiV55XPOrNZpjxt2Jqt6j5TWi2gUJL0fWhWn
VOGeb9wjIJDpexWMOO53lHTX536WSkvZifDJVabhiLkJNM/s0TRm/3TrSHBZyoGb
DkKNda+uSews+oCt6YInI9Q5+CcVmd4tQDQf30P0kyblIgKwTTj5DMz7eEQPC/Bf
ddgo91AYqiypF1GpPTxGwu+BIt6RX1XTwJPBrXVGrMbQiq/2cJCUnHzMBleqIOsf
u0xUkIEeQ9wSUA3RwG2xFSK7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUQGL0wUbx
Hw3cgXB2XAFIqjOf1gMwHwYDVR0jBBgwFoAU7KeHdUGmkz3VBhpsggg9O4ORXIUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyMTI3L0M0OEZBOEZBRDc0
ODExRjBCQTFCMEQ5RTZCRDM2NDFELzdLZUhkVUdta3ozVkJocHNnZ2c5TzRPUlhJ
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvN0tlSGRVR21rejNWQmhwc2dnZzlPNE9SWElVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy
MTI3L0M0OEZBOEZBRDc0ODExRjBCQTFCMEQ5RTZCRDM2NDFELzdLZUhkVUdta3oz
VkJocHNnZ2c5TzRPUlhJVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCdGWKEOw0wmfMw+i0mcXim3ufEEecl1bTgkYjNf8fxdP0Z4BpMoz48XDoXmrwp
PsH97x/1jzYxofBKy832L+ATIUa4mEtQoAFuMoIqdJymCLOQ5Lb8wFjK89G5jMMh
6oMFRigDTSBEX+IJUk7h7MYcIjWxoHYYlvhpJYQ6SwrV0U4/n729KmaMaXodAC/j
8kYnEfs8zxAlltWsdh0z+f8GT669E9QVhhkWGNHABUUghMgZ4UHnM8MnBnWblVaD
ZStmonLForJy3Tjc49xVmjk3RinKpi0HrlNlnvXHTYBJFRDvarl4e89xBHp7dpS1
gv0OPEkco2JDScKM89PBbTgB
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:39:16 2026 by rpki-client