Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.mft
File:                     U_b3klO824sdFxgs5PGdOf1JnfU.mft (raw, json)
Hash identifier:          WMfvPTId1IqPRl8soJsC1PXz5X0pCMmBTc8aCIhSKew=
Subject key identifier:   77:D4:D4:2E:87:5E:0E:AA:BD:14:8C:EE:35:91:DF:68:4B:D7:35:9D
Authority key identifier: 53:F6:F7:92:53:BC:DB:8B:1D:17:18:2C:E4:F1:9D:39:FD:49:9D:F5
Certificate issuer:       /CN=A9154340/serialNumber=53F6F79253BCDB8B1D17182CE4F19D39FD499DF5
Certificate serial:       06E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U_b3klO824sdFxgs5PGdOf1JnfU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.mft
Manifest number:          06E2
Signing time:             Thu 16 Apr 2026 22:05:57 +0000
Manifest this update:     Thu 16 Apr 2026 22:05:56 +0000
Manifest next update:     Thu 23 Apr 2026 22:05:56 +0000
Files and hashes:         1: U_b3klO824sdFxgs5PGdOf1JnfU.crl (hash: hazeMKSmVL5SYYrvKigRh8FEz+HJMwSgrUy56Vw6kVk=)
                          2: 28D1785891E311EBA138E330C4F9AE02.roa (hash: gFr9tBtN+YsBA4oZiVIoYAd+eRR5ghbNb9orW5HThAk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.crl
                          rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U_b3klO824sdFxgs5PGdOf1JnfU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:05:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1768 (0x6e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154340, serialNumber=53F6F79253BCDB8B1D17182CE4F19D39FD499DF5
        Validity
            Not Before: Apr 16 22:05:56 2026 GMT
            Not After : Apr 23 22:05:56 2026 GMT
        Subject: CN=69e15d45-6e3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:fc:56:d6:2f:fa:e0:9f:d3:6a:4e:19:26:54:
                    07:00:7a:6a:b6:77:f9:18:d7:9c:08:0d:4d:7d:90:
                    54:96:56:70:16:d9:d0:da:80:95:12:f5:32:7a:7a:
                    1f:d6:c9:e8:52:b4:dc:ff:d4:9d:63:e7:13:08:88:
                    70:b0:6f:17:42:80:59:f7:29:60:d5:e7:b0:d3:d7:
                    4f:8e:eb:04:9d:67:ec:c2:66:0a:d8:95:f8:45:4a:
                    0d:a6:a8:2d:ff:3c:c0:13:a4:1d:7a:4e:e5:a4:1d:
                    6a:5c:c4:6e:67:8b:1c:76:a3:b9:c9:ff:f3:fa:53:
                    4f:3a:ba:2c:a2:df:fb:20:0c:19:a5:25:f4:92:80:
                    09:bf:27:cc:2e:83:9d:b2:ca:e2:51:51:91:2d:88:
                    af:44:d8:e0:6e:90:ba:48:96:60:9b:37:f4:b7:57:
                    24:19:e2:e2:69:e3:7c:50:9b:5b:51:0d:51:29:99:
                    47:25:af:6e:e9:b8:3b:0e:35:ad:fa:d2:43:02:f0:
                    ee:02:c5:e1:56:6f:b1:d6:ef:9c:aa:3e:b0:c9:dd:
                    92:26:bf:93:81:36:3d:77:f7:7a:6c:8a:a7:7e:2b:
                    6c:46:cd:48:b9:4a:2f:0a:b5:e9:5a:5c:a7:cc:66:
                    20:91:b0:f3:ad:c2:9f:3e:4b:81:60:36:c7:1e:7b:
                    ce:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:D4:D4:2E:87:5E:0E:AA:BD:14:8C:EE:35:91:DF:68:4B:D7:35:9D
            X509v3 Authority Key Identifier:
                keyid:53:F6:F7:92:53:BC:DB:8B:1D:17:18:2C:E4:F1:9D:39:FD:49:9D:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U_b3klO824sdFxgs5PGdOf1JnfU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:63:0c:2f:c5:65:3e:d1:3e:9f:d4:9f:0d:92:54:75:9d:49:
         09:5b:45:a7:81:78:de:82:fe:31:04:87:df:38:c2:87:aa:b0:
         d7:2f:9c:d3:35:58:72:35:70:85:da:b9:69:c2:4d:c7:ca:26:
         2b:73:c4:c6:38:9e:11:1a:69:fe:92:c7:78:ee:69:91:f0:18:
         ad:96:44:90:9b:de:4d:bc:60:bc:24:14:62:28:e4:7b:e4:13:
         1c:0c:38:15:ad:0b:11:a2:6a:53:c0:2a:54:d3:4d:9d:07:7e:
         3c:06:a1:10:72:08:81:c4:9a:5a:72:3c:4a:2f:98:72:0a:25:
         bd:e2:29:f2:41:55:44:a7:d7:46:d5:62:ad:2c:ec:c7:31:c1:
         93:91:5e:28:e3:de:6c:63:7d:c1:29:28:91:8d:14:2f:ca:f3:
         7e:f6:10:5e:03:e2:83:16:67:ca:bd:c2:cc:aa:63:6f:ef:da:
         71:fb:87:1b:4f:82:70:d7:87:02:10:fd:08:af:47:8f:7a:61:
         20:e8:77:a7:eb:45:6e:fc:8b:2b:79:e8:3c:5c:06:dd:fd:f1:
         af:fb:ed:77:cd:dd:84:54:ab:b0:34:36:c6:10:3d:97:f1:94:
         98:75:26:5a:e9:bb:3a:af:8c:44:45:60:55:a6:42:16:1f:c6:
         17:f8:ae:f5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBugwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTQzNDAxMTAvBgNVBAUTKDUzRjZGNzkyNTNCQ0RCOEIxRDE3MTgyQ0U0RjE5RDM5
RkQ0OTlERjUwHhcNMjYwNDE2MjIwNTU2WhcNMjYwNDIzMjIwNTU2WjAYMRYwFAYD
VQQDEw02OWUxNWQ0NS02ZTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3vxW1i/64J/Tak4ZJlQHAHpqtnf5GNecCA1NfZBUllZwFtnQ2oCVEvUyenof
1snoUrTc/9SdY+cTCIhwsG8XQoBZ9ylg1eew09dPjusEnWfswmYK2JX4RUoNpqgt
/zzAE6Qdek7lpB1qXMRuZ4scdqO5yf/z+lNPOrosot/7IAwZpSX0koAJvyfMLoOd
ssriUVGRLYivRNjgbpC6SJZgmzf0t1ckGeLiaeN8UJtbUQ1RKZlHJa9u6bg7DjWt
+tJDAvDuAsXhVm+x1u+cqj6wyd2SJr+TgTY9d/d6bIqnfitsRs1IuUovCrXpWlyn
zGYgkbDzrcKfPkuBYDbHHnvOYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHfU1C6H
Xg6qvRSM7jWR32hL1zWdMB8GA1UdIwQYMBaAFFP295JTvNuLHRcYLOTxnTn9SZ31
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDM0MC83QzFGRDFEMjkx
RTExMUVCQjY4NzhDMkVDNEY5QUUwMi9VX2Iza2xPODI0c2RGeGdzNVBHZE9mMUpu
ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VfYjNrbE84MjRzZEZ4Z3M1UEdkT2YxSm5mVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NDM0MC83QzFGRDFEMjkxRTExMUVCQjY4NzhDMkVDNEY5QUUwMi9VX2Iza2xPODI0
c2RGeGdzNVBHZE9mMUpuZlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAk2MML8VlPtE+n9SfDZJUdZ1JCVtFp4F43oL+MQSH3zjCh6qw1y+c0zVYcjVw
hdq5acJNx8omK3PExjieERpp/pLHeO5pkfAYrZZEkJveTbxgvCQUYijke+QTHAw4
Fa0LEaJqU8AqVNNNnQd+PAahEHIIgcSaWnI8Si+YcgolveIp8kFVRKfXRtVirSzs
xzHBk5FeKOPebGN9wSkokY0UL8rzfvYQXgPigxZnyr3CzKpjb+/acfuHG0+CcNeH
AhD9CK9Hj3phIOh3p+tFbvyLK3noPFwG3f3xr/vtd83dhFSrsDQ2xhA9l/GUmHUm
Wum7Oq+MREVgVaZCFh/GF/iu9Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:26:46 2026 by rpki-client