Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft
File:                     zT31OqDpo5hZXpVwFRVbzKxWjRU.mft (raw, json)
Hash identifier:          wWayZfb4fbzqRQGNhCLMyEfZNET1s9j12LswBagTe8o=
Subject key identifier:   6F:04:9D:C2:B5:9E:EA:31:81:7E:45:B2:CC:B0:A2:6B:61:C0:A5:B6
Authority key identifier: CD:3D:F5:3A:A0:E9:A3:98:59:5E:95:70:15:15:5B:CC:AC:56:8D:15
Certificate issuer:       /CN=A914EBB2/serialNumber=CD3DF53AA0E9A398595E957015155BCCAC568D15
Certificate serial:       018B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft
Manifest number:          0176
Signing time:             Fri 17 Apr 2026 04:44:13 +0000
Manifest this update:     Fri 17 Apr 2026 04:44:12 +0000
Manifest next update:     Fri 24 Apr 2026 04:44:12 +0000
Files and hashes:         1: zT31OqDpo5hZXpVwFRVbzKxWjRU.crl (hash: nR49x2BLK3NaQzr/kAeLb+zSEf0D3NmYKthfFoQF8QE=)
                          2: 9292865625AA11F0A63D1D85C4F9AE02.roa (hash: UeaRLdDzY1ShESbWYDfFd7UbKiVJI/tCLkGrM3fnfPc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.crl
                          rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:44:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 395 (0x18b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EBB2, serialNumber=CD3DF53AA0E9A398595E957015155BCCAC568D15
        Validity
            Not Before: Apr 17 04:44:12 2026 GMT
            Not After : Apr 24 04:44:12 2026 GMT
        Subject: CN=69e1ba9d-d378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d9:41:1f:08:08:29:ad:06:3e:db:79:74:9c:
                    97:ea:fb:59:d4:3f:c2:6c:51:1f:7f:60:77:3b:c5:
                    ca:7a:1d:5e:33:c0:25:1c:0e:44:da:bc:7a:4c:0c:
                    af:d9:5f:b9:fc:ae:21:d8:72:3a:41:97:56:60:4d:
                    2a:69:76:43:6d:95:db:77:e5:52:7f:90:d9:57:5f:
                    f6:fc:c7:bd:81:67:e9:9a:ee:0c:ee:3d:b4:64:28:
                    1c:6c:c2:97:ad:bb:c3:3b:a8:e0:a4:20:00:35:e8:
                    b6:9e:d7:e0:7f:fa:62:67:81:d0:c9:d9:99:f9:0f:
                    43:0c:0f:a8:7a:85:27:5a:34:a5:f6:97:43:0a:3a:
                    3c:e7:6b:29:63:f9:2e:53:bc:d5:80:99:dd:8d:48:
                    7b:b2:bf:ae:e9:f0:9a:5b:1a:76:b0:5d:20:b9:14:
                    9a:aa:3a:7b:e9:61:54:87:e9:94:87:12:04:8c:73:
                    4d:27:a7:a7:85:a2:3f:35:6e:32:b7:dc:1d:24:8d:
                    c6:2e:da:72:00:69:bc:9b:57:a5:5f:e8:38:47:cd:
                    6e:e9:ea:86:cf:99:2f:a3:c9:0a:7b:a1:f7:28:1a:
                    41:ee:dc:ca:dc:54:f7:fe:9f:86:ca:67:c6:fe:de:
                    27:93:aa:8b:fe:4a:ae:d2:3a:18:5e:44:5b:0e:06:
                    7b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:04:9D:C2:B5:9E:EA:31:81:7E:45:B2:CC:B0:A2:6B:61:C0:A5:B6
            X509v3 Authority Key Identifier:
                keyid:CD:3D:F5:3A:A0:E9:A3:98:59:5E:95:70:15:15:5B:CC:AC:56:8D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:7c:c6:6a:e7:d5:04:13:b2:91:81:0c:08:81:b1:4e:90:57:
         ea:af:f6:35:a2:cd:a5:3c:2f:e3:70:d3:9f:bf:4c:1e:df:18:
         ec:b1:b3:46:fa:df:2b:5d:d5:36:bc:1b:40:38:aa:02:3f:bc:
         c7:89:32:f2:e4:23:f6:b3:a4:e2:85:49:d3:18:83:6f:8d:ed:
         fd:4d:71:d9:60:35:6a:d5:79:f0:65:5c:8a:b6:b6:8a:1c:7e:
         16:d8:a2:c6:54:f1:d7:29:94:77:6a:b6:20:41:f3:d0:35:6c:
         24:87:f2:f9:02:c2:e8:f2:d2:07:82:49:7f:3c:1d:16:2e:98:
         f9:9d:05:5f:26:07:44:06:06:75:57:a8:14:8c:6b:26:f7:9e:
         16:85:a9:12:61:8a:fb:ad:97:c9:61:f1:2f:07:da:bf:e9:65:
         56:a1:cc:37:ff:b6:0a:39:bb:d8:69:55:f5:46:db:1a:1a:d1:
         75:de:40:50:cd:56:5e:0e:7f:cb:c2:17:1d:ce:96:af:0f:6b:
         4d:30:3c:ec:91:85:b4:13:51:bb:0c:1f:92:d6:5a:c2:af:c4:
         b9:b2:c1:b4:25:39:31:c8:a9:a9:49:4d:89:85:70:c0:38:40:
         b7:f9:eb:43:16:9e:9a:f2:0d:35:a0:1b:f3:b4:2e:a2:c6:8b:
         cc:29:4c:1a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEVCQjIxMTAvBgNVBAUTKENEM0RGNTNBQTBFOUEzOTg1OTVFOTU3MDE1MTU1QkND
QUM1NjhEMTUwHhcNMjYwNDE3MDQ0NDEyWhcNMjYwNDI0MDQ0NDEyWjAYMRYwFAYD
VQQDEw02OWUxYmE5ZC1kMzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlNlBHwgIKa0GPtt5dJyX6vtZ1D/CbFEff2B3O8XKeh1eM8AlHA5E2rx6TAyv
2V+5/K4h2HI6QZdWYE0qaXZDbZXbd+VSf5DZV1/2/Me9gWfpmu4M7j20ZCgcbMKX
rbvDO6jgpCAANei2ntfgf/piZ4HQydmZ+Q9DDA+oeoUnWjSl9pdDCjo852spY/ku
U7zVgJndjUh7sr+u6fCaWxp2sF0guRSaqjp76WFUh+mUhxIEjHNNJ6enhaI/NW4y
t9wdJI3GLtpyAGm8m1elX+g4R81u6eqGz5kvo8kKe6H3KBpB7tzK3FT3/p+GymfG
/t4nk6qL/kqu0joYXkRbDgZ7HQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG8EncK1
nuoxgX5FssywomthwKW2MB8GA1UdIwQYMBaAFM099Tqg6aOYWV6VcBUVW8ysVo0V
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUJCMi9GMzdGMjQ2RTMy
OTUxMUVGOUE0ODJGNTVDNEY5QUUwMi96VDMxT3FEcG81aFpYcFZ3RlJWYnpLeFdq
UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pUMzFPcURwbzVoWlhwVndGUlZiekt4V2pSVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RUJCMi9GMzdGMjQ2RTMyOTUxMUVGOUE0ODJGNTVDNEY5QUUwMi96VDMxT3FEcG81
aFpYcFZ3RlJWYnpLeFdqUlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAl3zGaufVBBOykYEMCIGxTpBX6q/2NaLNpTwv43DTn79MHt8Y7LGzRvrfK13V
NrwbQDiqAj+8x4ky8uQj9rOk4oVJ0xiDb43t/U1x2WA1atV58GVcira2ihx+Ftii
xlTx1ymUd2q2IEHz0DVsJIfy+QLC6PLSB4JJfzwdFi6Y+Z0FXyYHRAYGdVeoFIxr
JveeFoWpEmGK+62XyWHxLwfav+llVqHMN/+2Cjm72GlV9UbbGhrRdd5AUM1WXg5/
y8IXHc6Wrw9rTTA87JGFtBNRuwwfktZawq/EubLBtCU5McipqUlNiYVwwDhAt/nr
QxaemvINNaAb87QuosaLzClMGg==
-----END CERTIFICATE-----
Generated at Sat Apr 18 00:37:14 2026 by rpki-client