Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/IAmPtDvZCsAy3VDJ-ufauiCggp4.mft
File:                     IAmPtDvZCsAy3VDJ-ufauiCggp4.mft (raw, json)
Hash identifier:          CSKB7Q2SjAbS1maeCicVdb5Fr/LulpRjUkIOCievr5I=
Subject key identifier:   32:52:E1:47:B4:77:86:CF:41:45:1F:5E:10:A0:24:45:D2:BC:F6:5A
Authority key identifier: 20:09:8F:B4:3B:D9:0A:C0:32:DD:50:C9:FA:E7:DA:BA:20:A0:82:9E
Certificate issuer:       /CN=A914334E/serialNumber=20098FB43BD90AC032DD50C9FAE7DABA20A0829E
Certificate serial:       026C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAmPtDvZCsAy3VDJ-ufauiCggp4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/IAmPtDvZCsAy3VDJ-ufauiCggp4.mft
Manifest number:          025E
Signing time:             Fri 17 Apr 2026 02:00:22 +0000
Manifest this update:     Fri 17 Apr 2026 02:00:21 +0000
Manifest next update:     Fri 24 Apr 2026 02:00:21 +0000
Files and hashes:         1: IAmPtDvZCsAy3VDJ-ufauiCggp4.crl (hash: vfBzLgzXzLBHybMbmj5QwA6b1Z7gCsoFoRmCSw+z1Mk=)
                          2: DF49E576A61711ED887EC04CC4F9AE02.roa (hash: QBNiuWqsSFvTii1XjINxNAIsFqpiHDWIk0XlWF5qx7w=)
                          3: CC636E14FFE011EDA35F8946C4F9AE02.roa (hash: ldsVU3+f9Ys8c9jjGtZsorbtRuuuB7CFx692x5DpYKg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/IAmPtDvZCsAy3VDJ-ufauiCggp4.crl
                          rsync://rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/IAmPtDvZCsAy3VDJ-ufauiCggp4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAmPtDvZCsAy3VDJ-ufauiCggp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 620 (0x26c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914334E, serialNumber=20098FB43BD90AC032DD50C9FAE7DABA20A0829E
        Validity
            Not Before: Apr 17 02:00:21 2026 GMT
            Not After : Apr 24 02:00:21 2026 GMT
        Subject: CN=69e19436-3806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:be:98:f8:1c:dd:46:34:e4:c9:ad:2e:f3:e9:
                    58:14:ab:ac:21:7a:ad:5a:4e:f1:e7:5e:83:44:71:
                    f1:89:82:d8:eb:c4:0b:e0:83:f2:10:4f:54:f1:c4:
                    4e:78:b9:d5:90:7d:b6:42:c2:e0:51:b3:75:d6:de:
                    ba:35:b8:f9:2f:5d:a6:74:5e:55:33:5c:cf:98:7a:
                    cd:2d:c8:da:1f:e8:5f:76:78:41:2f:63:86:95:1f:
                    a9:1e:36:52:d1:e5:4d:17:5f:14:1c:8f:f1:1b:1d:
                    b2:a3:5b:54:00:34:55:89:45:9c:4f:3d:78:76:9d:
                    b8:a5:ff:ce:c5:2a:e4:08:3e:c0:18:2e:f6:4c:4f:
                    a3:5e:f5:ee:68:ce:72:48:01:b9:2f:7e:0b:0b:10:
                    03:25:32:a1:48:83:f2:c0:15:75:df:bd:1d:ce:4d:
                    e0:f4:b1:31:eb:2f:c5:be:1d:c3:7d:b8:24:0b:c0:
                    00:11:a8:63:69:b9:19:3c:f7:98:d5:84:77:81:0f:
                    c2:d0:71:01:0d:c5:75:01:14:b9:f7:80:da:32:ad:
                    42:d5:16:4b:8f:3a:d5:f5:93:63:25:60:ec:42:07:
                    52:43:ff:87:c6:19:8f:b6:55:0f:56:e6:c3:fe:cb:
                    51:fc:3b:e9:ae:36:a9:8e:5b:70:17:13:5d:b8:fe:
                    63:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:52:E1:47:B4:77:86:CF:41:45:1F:5E:10:A0:24:45:D2:BC:F6:5A
            X509v3 Authority Key Identifier:
                keyid:20:09:8F:B4:3B:D9:0A:C0:32:DD:50:C9:FA:E7:DA:BA:20:A0:82:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/IAmPtDvZCsAy3VDJ-ufauiCggp4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAmPtDvZCsAy3VDJ-ufauiCggp4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/IAmPtDvZCsAy3VDJ-ufauiCggp4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:f9:54:01:e3:d7:2b:f4:bc:67:1f:7f:66:6d:a5:71:26:b9:
         0b:f7:1f:51:e0:3d:c5:56:2b:ba:30:b7:bd:fc:3f:ce:28:e0:
         14:f6:92:ca:82:76:4d:17:12:d1:c1:c6:43:fa:67:90:e1:a3:
         82:6a:37:a6:47:91:46:02:57:67:80:01:ea:e0:a6:05:07:33:
         bf:4a:8c:8f:89:1a:38:85:f1:f4:ff:35:e3:71:25:16:46:57:
         54:fc:ac:96:78:23:e7:c7:82:45:9f:07:07:fe:cf:c5:9a:42:
         08:51:8d:ca:80:b2:94:18:7f:de:1c:87:d1:7c:a2:a2:f8:af:
         42:42:71:21:90:b6:09:17:10:1a:dd:e6:c5:0a:eb:29:6d:ac:
         b5:6f:38:10:dd:43:b2:73:40:74:0d:a4:66:ba:ad:65:2f:26:
         3d:23:47:ee:01:2b:5c:2e:ff:09:f1:87:01:2b:2c:ca:ff:a5:
         18:0e:38:24:63:d7:4a:ac:e4:fb:62:04:5f:87:e2:26:21:a9:
         e7:dc:3a:9e:37:f4:62:9f:b5:62:70:ab:f3:64:7c:b5:4c:35:
         e3:01:d3:03:37:10:66:af:fe:96:b6:08:c9:87:dd:d2:a2:eb:
         4f:ad:99:88:aa:3b:6a:27:05:36:e2:ed:44:9a:8f:05:90:ef:
         7f:f8:b0:d7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDMzNEUxMTAvBgNVBAUTKDIwMDk4RkI0M0JEOTBBQzAzMkRENTBDOUZBRTdEQUJB
MjBBMDgyOUUwHhcNMjYwNDE3MDIwMDIxWhcNMjYwNDI0MDIwMDIxWjAYMRYwFAYD
VQQDEw02OWUxOTQzNi0zODA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwL6Y+BzdRjTkya0u8+lYFKusIXqtWk7x516DRHHxiYLY68QL4IPyEE9U8cRO
eLnVkH22QsLgUbN11t66Nbj5L12mdF5VM1zPmHrNLcjaH+hfdnhBL2OGlR+pHjZS
0eVNF18UHI/xGx2yo1tUADRViUWcTz14dp24pf/OxSrkCD7AGC72TE+jXvXuaM5y
SAG5L34LCxADJTKhSIPywBV1370dzk3g9LEx6y/Fvh3DfbgkC8AAEahjabkZPPeY
1YR3gQ/C0HEBDcV1ARS594DaMq1C1RZLjzrV9ZNjJWDsQgdSQ/+HxhmPtlUPVubD
/stR/DvprjapjltwFxNduP5j6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDJS4Ue0
d4bPQUUfXhCgJEXSvPZaMB8GA1UdIwQYMBaAFCAJj7Q72QrAMt1Qyfrn2rogoIKe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzM0RS9BMEYwNzM2MEE2
MTQxMUVEQjFBNDI3NDhDNEY5QUUwMi9JQW1QdER2WkNzQXkzVkRKLXVmYXVpQ2dn
cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lBbVB0RHZaQ3NBeTNWREotdWZhdWlDZ2dwNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MzM0RS9BMEYwNzM2MEE2MTQxMUVEQjFBNDI3NDhDNEY5QUUwMi9JQW1QdER2WkNz
QXkzVkRKLXVmYXVpQ2dncDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAs/lUAePXK/S8Zx9/Zm2lcSa5C/cfUeA9xVYrujC3vfw/zijgFPaSyoJ2TRcS
0cHGQ/pnkOGjgmo3pkeRRgJXZ4AB6uCmBQczv0qMj4kaOIXx9P8143ElFkZXVPys
lngj58eCRZ8HB/7PxZpCCFGNyoCylBh/3hyH0XyiovivQkJxIZC2CRcQGt3mxQrr
KW2stW84EN1DsnNAdA2kZrqtZS8mPSNH7gErXC7/CfGHASssyv+lGA44JGPXSqzk
+2IEX4fiJiGp59w6njf0Yp+1YnCr82R8tUw14wHTAzcQZq/+lrYIyYfd0qLrT62Z
iKo7aicFNuLtRJqPBZDvf/iw1w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:48:03 2026 by rpki-client