Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft
File:                     4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft (raw, json)
Hash identifier:          ngOlRXrsOQ7tXRs5bXji2m3VAZy0evPbZ5bsq6nG5T8=
Subject key identifier:   CF:F3:C8:8D:AD:E3:13:7E:AD:A6:FF:4A:AD:8A:E2:1A:AE:70:4A:ED
Authority key identifier: E0:E8:08:30:65:95:FE:68:D5:F2:81:A9:62:AF:6D:F5:1E:86:F9:32
Certificate issuer:       /CN=A914D0E3/serialNumber=E0E808306595FE68D5F281A962AF6DF51E86F932
Certificate serial:       0125
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OgIMGWV_mjV8oGpYq9t9R6G-TI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft
Manifest number:          011D
Signing time:             Fri 17 Apr 2026 05:30:58 +0000
Manifest this update:     Fri 17 Apr 2026 05:30:58 +0000
Manifest next update:     Fri 24 Apr 2026 05:30:58 +0000
Files and hashes:         1: 4OgIMGWV_mjV8oGpYq9t9R6G-TI.crl (hash: jDBNp+OEDbAUu1ZZm0rxmJRdPXfVmi/kxurpZKmWZFo=)
                          2: 793E79A68D1811EF92E90C51C4F9AE02.roa (hash: FZWu1eNv8uHcQDNf81sl/oJ0iCfpzPgZBc4wD/nd7tU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.crl
                          rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OgIMGWV_mjV8oGpYq9t9R6G-TI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:30:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 293 (0x125)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D0E3, serialNumber=E0E808306595FE68D5F281A962AF6DF51E86F932
        Validity
            Not Before: Apr 17 05:30:58 2026 GMT
            Not After : Apr 24 05:30:58 2026 GMT
        Subject: CN=69e1c592-7b74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:34:d3:c5:17:ed:05:dd:f3:8f:4d:53:1b:58:
                    c0:30:34:ff:15:f3:de:d6:d5:c2:aa:5b:3f:57:67:
                    96:56:21:af:42:8b:6b:a6:9e:8c:6c:9f:ed:97:50:
                    66:e8:1e:2e:59:e8:b3:72:9e:df:55:b3:aa:cb:5f:
                    07:bc:b5:55:da:e2:3b:5f:77:6b:a9:0c:bd:17:d4:
                    70:a6:d1:c1:c7:28:0b:fd:16:d8:dc:4d:49:2a:27:
                    2d:a2:32:d2:86:72:bd:06:56:b3:ea:4a:bf:2c:65:
                    3c:66:72:55:89:c3:a2:e3:22:8c:a0:37:dd:9c:05:
                    67:e1:f3:b3:fe:90:68:02:f4:cd:9c:9d:48:63:b2:
                    51:f7:a3:c7:2c:d2:a7:01:66:57:42:50:06:d6:34:
                    fc:98:5e:c2:1a:c2:b4:3d:e7:91:22:b9:6c:ba:07:
                    9e:30:26:77:f1:12:66:26:2d:1c:42:5b:05:b5:a6:
                    75:e2:75:0d:e6:70:b8:79:22:b4:8b:b8:f4:f2:f8:
                    c0:cd:bc:22:38:3f:19:a7:c6:42:e5:4d:e5:63:0a:
                    68:29:e9:75:f5:b2:54:3d:d4:71:9f:90:16:f8:0b:
                    9f:06:77:03:cd:30:15:f6:27:41:66:8b:f1:fc:9e:
                    4e:d9:11:b8:ae:58:86:9b:f7:41:d2:6f:0c:43:8b:
                    8e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:F3:C8:8D:AD:E3:13:7E:AD:A6:FF:4A:AD:8A:E2:1A:AE:70:4A:ED
            X509v3 Authority Key Identifier:
                keyid:E0:E8:08:30:65:95:FE:68:D5:F2:81:A9:62:AF:6D:F5:1E:86:F9:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OgIMGWV_mjV8oGpYq9t9R6G-TI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:31:24:05:5d:f2:0b:ae:5e:fd:d7:c0:64:67:53:79:6e:c3:
         69:bd:66:91:bb:7b:01:a9:2c:4d:bb:7f:3c:85:1b:45:f2:57:
         c7:28:84:51:ac:d7:9e:88:4e:89:d0:a4:1e:ce:54:f5:6a:47:
         9a:21:76:9e:ea:1c:66:06:20:d6:60:0f:92:20:6c:ce:7e:88:
         8b:ff:f1:88:c5:53:86:c8:51:4e:c9:ba:fa:6d:1e:0a:81:65:
         35:81:15:8f:9e:cb:e1:95:e4:28:06:90:cb:33:a5:0d:c7:8e:
         94:b2:8a:17:22:aa:f6:a0:18:96:3f:91:5b:a5:8a:5c:2b:7f:
         54:1b:66:b0:ca:66:59:9b:6a:1f:c1:8e:d8:9c:ee:29:05:b5:
         fb:6c:bc:ca:52:35:4e:9d:1f:ed:3c:58:6b:d7:09:d6:39:38:
         9e:29:f4:55:85:10:d1:06:68:3c:b8:75:18:d6:6e:9a:6b:da:
         f5:ab:06:32:c8:af:00:1e:bb:90:11:32:39:f2:4b:80:ac:6d:
         9d:19:d6:56:e9:65:a5:71:89:06:63:8d:f4:3b:6f:b0:0c:3e:
         af:87:6e:24:1f:14:4a:7f:9d:3c:49:c5:ca:2c:26:6c:54:de:
         b1:cf:18:7c:4b:96:eb:c1:dd:73:98:b3:27:45:22:6b:c9:e5:
         17:73:2c:5f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEQwRTMxMTAvBgNVBAUTKEUwRTgwODMwNjU5NUZFNjhENUYyODFBOTYyQUY2REY1
MUU4NkY5MzIwHhcNMjYwNDE3MDUzMDU4WhcNMjYwNDI0MDUzMDU4WjAYMRYwFAYD
VQQDEw02OWUxYzU5Mi03Yjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAljTTxRftBd3zj01TG1jAMDT/FfPe1tXCqls/V2eWViGvQotrpp6MbJ/tl1Bm
6B4uWeizcp7fVbOqy18HvLVV2uI7X3drqQy9F9RwptHBxygL/RbY3E1JKictojLS
hnK9Blaz6kq/LGU8ZnJVicOi4yKMoDfdnAVn4fOz/pBoAvTNnJ1IY7JR96PHLNKn
AWZXQlAG1jT8mF7CGsK0PeeRIrlsugeeMCZ38RJmJi0cQlsFtaZ14nUN5nC4eSK0
i7j08vjAzbwiOD8Zp8ZC5U3lYwpoKel19bJUPdRxn5AW+AufBncDzTAV9idBZovx
/J5O2RG4rliGm/dB0m8MQ4uO7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM/zyI2t
4xN+rab/Sq2K4hqucErtMB8GA1UdIwQYMBaAFODoCDBllf5o1fKBqWKvbfUehvky
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDBFMy9BQTk4NTlGODhD
N0UxMUVGOEU5MkU3MUJDNEY5QUUwMi80T2dJTUdXVl9talY4b0dwWXE5dDlSNkct
VEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzRPZ0lNR1dWX21qVjhvR3BZcTl0OVI2Ry1USS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RDBFMy9BQTk4NTlGODhDN0UxMUVGOEU5MkU3MUJDNEY5QUUwMi80T2dJTUdXVl9t
alY4b0dwWXE5dDlSNkctVEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXjEkBV3yC65e/dfAZGdTeW7Dab1mkbt7AaksTbt/PIUbRfJXxyiEUazXnohO
idCkHs5U9WpHmiF2nuocZgYg1mAPkiBszn6Ii//xiMVThshRTsm6+m0eCoFlNYEV
j57L4ZXkKAaQyzOlDceOlLKKFyKq9qAYlj+RW6WKXCt/VBtmsMpmWZtqH8GO2Jzu
KQW1+2y8ylI1Tp0f7TxYa9cJ1jk4nin0VYUQ0QZoPLh1GNZummva9asGMsivAB67
kBEyOfJLgKxtnRnWVullpXGJBmON9DtvsAw+r4duJB8USn+dPEnFyiwmbFTesc8Y
fEuW68Hdc5izJ0Uia8nlF3MsXw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:31:00 2026 by rpki-client