Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft
File:                     fjqkjWfrmWmcArgfcWlt9GWopuU.mft (raw, json)
Hash identifier:          Q6kFPdylCQYlgy//ANdO3AYeLpQegeD9zQGjYxJFE7w=
Subject key identifier:   26:57:72:F2:E1:58:E0:86:B5:89:D7:2F:0F:6D:F8:A0:CD:A4:76:A3
Authority key identifier: 7E:3A:A4:8D:67:EB:99:69:9C:02:B8:1F:71:69:6D:F4:65:A8:A6:E5
Certificate issuer:       /CN=A9142420/serialNumber=7E3AA48D67EB99699C02B81F71696DF465A8A6E5
Certificate serial:       010E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fjqkjWfrmWmcArgfcWlt9GWopuU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft
Manifest number:          0106
Signing time:             Fri 17 Apr 2026 05:48:18 +0000
Manifest this update:     Fri 17 Apr 2026 05:48:17 +0000
Manifest next update:     Fri 24 Apr 2026 05:48:17 +0000
Files and hashes:         1: fjqkjWfrmWmcArgfcWlt9GWopuU.crl (hash: vRcIecBpWllZA30MSTcpdjZrZRjIhL2pLQy3Ll/5elQ=)
                          2: E010D234AC8D11EF93B1CB46C4F9AE02.roa (hash: pMb/fzhxQo8B4/8r3buBhCAOx+HEOaBzUhA5CpNJUgw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.crl
                          rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fjqkjWfrmWmcArgfcWlt9GWopuU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 270 (0x10e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142420, serialNumber=7E3AA48D67EB99699C02B81F71696DF465A8A6E5
        Validity
            Not Before: Apr 17 05:48:17 2026 GMT
            Not After : Apr 24 05:48:17 2026 GMT
        Subject: CN=69e1c9a2-142b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:41:aa:36:62:e2:96:3b:ec:e5:99:49:df:e5:
                    6d:42:a1:1d:a6:5c:11:a0:16:cd:67:46:2d:ed:8c:
                    17:43:4b:67:8a:04:c1:7d:5f:d5:38:4a:bd:a4:7a:
                    b4:53:9d:c5:0d:21:76:c5:82:6c:2d:c3:2c:8e:f4:
                    2d:01:f2:bf:32:2b:21:be:66:ff:e0:ca:34:1e:fb:
                    c9:69:0b:1d:a0:57:7e:e6:13:a6:c2:fb:b2:d1:4b:
                    42:b9:f7:aa:ae:58:d4:94:d9:88:d9:c8:16:86:42:
                    8a:fd:e2:34:44:e8:77:ad:76:6c:d6:d1:85:07:5f:
                    28:da:72:8f:e6:ed:1a:50:83:a4:f2:98:f7:09:fe:
                    72:31:e3:20:ad:2b:9e:98:07:90:36:ff:8e:2e:7b:
                    cb:07:3a:f0:d9:42:f8:de:5a:c4:9c:7a:9d:99:59:
                    0f:00:db:c8:8b:5b:46:32:7c:6d:18:ff:d8:4e:30:
                    f0:ce:a4:d7:f1:96:ce:20:6d:2f:02:ca:09:b9:5a:
                    f6:70:bc:4c:14:ec:92:45:57:10:96:76:2c:23:75:
                    a9:48:6d:cb:e1:ee:07:52:6d:74:36:c7:b7:23:1a:
                    52:b6:ba:26:7e:a0:45:73:d1:02:11:8e:f8:b5:6c:
                    06:90:73:93:fc:6f:af:49:24:6b:4b:c5:b3:8c:36:
                    e9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:57:72:F2:E1:58:E0:86:B5:89:D7:2F:0F:6D:F8:A0:CD:A4:76:A3
            X509v3 Authority Key Identifier:
                keyid:7E:3A:A4:8D:67:EB:99:69:9C:02:B8:1F:71:69:6D:F4:65:A8:A6:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fjqkjWfrmWmcArgfcWlt9GWopuU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:cb:68:ad:3e:57:fa:e6:c9:a8:69:ba:23:a6:ac:ec:91:74:
         62:69:4b:45:86:ac:d1:aa:d2:da:70:8e:ef:77:70:8a:ab:4f:
         ac:0f:ca:34:d2:c1:1a:ad:d7:d8:00:48:94:6c:05:fc:a4:9e:
         ae:b5:e4:64:b5:5a:88:28:73:4e:db:e4:d9:5b:d3:f4:c9:41:
         25:06:72:fb:51:7d:d6:c6:cd:c6:04:9e:62:5f:61:a9:60:c5:
         28:56:b4:80:56:72:02:8a:5b:9a:b0:6f:16:15:f9:51:f4:02:
         e5:46:ab:33:42:58:5d:7a:a0:5e:04:da:4b:6e:b1:d0:47:98:
         f7:3a:2c:d3:e7:85:b4:be:b3:fa:f9:4b:26:17:6a:9f:16:5f:
         57:96:65:bb:dc:3f:e1:fa:fc:15:a3:4e:5b:be:82:4e:01:c2:
         e5:3b:14:6d:a6:15:10:82:ce:b4:bc:28:b2:3c:3c:43:76:a2:
         3f:f9:49:f8:d1:d4:f1:93:b7:72:16:10:fd:ce:5a:07:c9:11:
         1a:47:83:bd:e6:ce:c2:4b:b6:e6:57:2a:f1:30:01:ff:8d:a9:
         bc:47:26:a3:59:58:e3:53:9d:a6:f9:f3:53:58:9c:5d:bc:56:
         72:bc:b6:fa:26:71:11:27:4a:48:29:1f:5c:d1:ce:e8:6c:2e:
         a8:ab:70:04
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDI0MjAxMTAvBgNVBAUTKDdFM0FBNDhENjdFQjk5Njk5QzAyQjgxRjcxNjk2REY0
NjVBOEE2RTUwHhcNMjYwNDE3MDU0ODE3WhcNMjYwNDI0MDU0ODE3WjAYMRYwFAYD
VQQDEw02OWUxYzlhMi0xNDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvUGqNmLiljvs5ZlJ3+VtQqEdplwRoBbNZ0Yt7YwXQ0tnigTBfV/VOEq9pHq0
U53FDSF2xYJsLcMsjvQtAfK/Mishvmb/4Mo0HvvJaQsdoFd+5hOmwvuy0UtCufeq
rljUlNmI2cgWhkKK/eI0ROh3rXZs1tGFB18o2nKP5u0aUIOk8pj3Cf5yMeMgrSue
mAeQNv+OLnvLBzrw2UL43lrEnHqdmVkPANvIi1tGMnxtGP/YTjDwzqTX8ZbOIG0v
AsoJuVr2cLxMFOySRVcQlnYsI3WpSG3L4e4HUm10Nse3IxpStromfqBFc9ECEY74
tWwGkHOT/G+vSSRrS8WzjDbpBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCZXcvLh
WOCGtYnXLw9t+KDNpHajMB8GA1UdIwQYMBaAFH46pI1n65lpnAK4H3FpbfRlqKbl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjQyMC9DNDJCMzNENEFD
OEQxMUVGODg2MEJFMzRDNEY5QUUwMi9manFraldmcm1XbWNBcmdmY1dsdDlHV29w
dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2ZqcWtqV2ZybVdtY0FyZ2ZjV2x0OUdXb3B1VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MjQyMC9DNDJCMzNENEFDOEQxMUVGODg2MEJFMzRDNEY5QUUwMi9manFraldmcm1X
bWNBcmdmY1dsdDlHV29wdVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAstorT5X+ubJqGm6I6as7JF0YmlLRYas0arS2nCO73dwiqtPrA/KNNLBGq3X
2ABIlGwF/KSerrXkZLVaiChzTtvk2VvT9MlBJQZy+1F91sbNxgSeYl9hqWDFKFa0
gFZyAopbmrBvFhX5UfQC5UarM0JYXXqgXgTaS26x0EeY9zos0+eFtL6z+vlLJhdq
nxZfV5Zlu9w/4fr8FaNOW76CTgHC5TsUbaYVEILOtLwosjw8Q3aiP/lJ+NHU8ZO3
chYQ/c5aB8kRGkeDvebOwku25lcq8TAB/42pvEcmo1lY41OdpvnzU1icXbxWcry2
+iZxESdKSCkfXNHO6GwuqKtwBA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:08:32 2026 by rpki-client