Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.mft
File:                     x40eWVkb4MdSTTa9-FyKxuoZD44.mft (raw, json)
Hash identifier:          UR4JoYuzErZEli89VT9BWjFTyUQESzd3UakabWAMyrA=
Subject key identifier:   C4:FE:02:E6:EC:EC:A4:DA:57:AA:62:61:C2:E0:7E:F0:04:9C:7F:C2
Authority key identifier: C7:8D:1E:59:59:1B:E0:C7:52:4D:36:BD:F8:5C:8A:C6:EA:19:0F:8E
Certificate issuer:       /CN=A91554E6/serialNumber=C78D1E59591BE0C7524D36BDF85C8AC6EA190F8E
Certificate serial:       01DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x40eWVkb4MdSTTa9-FyKxuoZD44.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.mft
Manifest number:          0548
Signing time:             Fri 17 Apr 2026 00:45:21 +0000
Manifest this update:     Fri 17 Apr 2026 00:45:20 +0000
Manifest next update:     Fri 24 Apr 2026 00:45:20 +0000
Files and hashes:         1: x40eWVkb4MdSTTa9-FyKxuoZD44.crl (hash: CG1Fs5f6O7G4fr4eTtBfa10ngqbuTtsQmC0CCnre/zU=)
                          2: 2F9887306F0D11EE9B369C60C4F9AE02.roa (hash: J6f5Iwq0hCkPy85AsFOXOv2n5dM2/bZSE2OvIibeXCQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.crl
                          rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x40eWVkb4MdSTTa9-FyKxuoZD44.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:45:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 475 (0x1db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91554E6, serialNumber=C78D1E59591BE0C7524D36BDF85C8AC6EA190F8E
        Validity
            Not Before: Apr 17 00:45:20 2026 GMT
            Not After : Apr 24 00:45:20 2026 GMT
        Subject: CN=69e182a1-8964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:96:2c:0b:cc:d5:72:e8:23:2c:18:bb:6b:aa:
                    27:07:ca:23:48:47:bf:99:d3:2c:a4:12:59:83:a3:
                    ef:f1:c2:5a:5d:1f:0a:b3:5d:b1:01:b0:fa:cb:e1:
                    59:d7:60:8c:ce:15:f1:1f:db:f3:a5:d6:88:61:40:
                    bd:36:e9:41:c4:ed:35:c5:79:a8:de:2c:d7:fd:15:
                    0a:9b:42:91:77:ff:f1:94:ca:b6:94:f3:e4:7f:da:
                    b5:14:09:84:af:d3:a5:28:e9:78:39:fc:18:16:1a:
                    39:dd:e0:c6:17:df:65:be:cb:05:26:b3:d4:9e:ea:
                    27:2f:80:41:c6:1f:46:f6:f2:a0:43:c9:42:e7:3f:
                    6d:e8:c8:ac:ff:ef:ea:d7:c3:84:98:d3:23:f9:28:
                    ab:2a:38:95:99:27:46:ba:ae:b3:1f:07:73:8b:74:
                    60:a8:b6:87:20:fa:51:06:44:30:27:a6:b3:4d:7c:
                    ce:ad:bd:94:1c:ac:da:48:b1:44:97:84:93:0e:06:
                    e8:b5:d9:da:8d:0d:be:74:06:5a:93:4d:67:1b:af:
                    31:db:eb:05:f5:8c:d4:39:96:36:45:48:01:0f:74:
                    6c:84:cc:31:5a:e8:58:c6:19:5b:fe:25:ed:00:98:
                    ec:07:fc:30:45:97:a7:cf:9a:e4:fb:2f:28:50:2e:
                    6b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:FE:02:E6:EC:EC:A4:DA:57:AA:62:61:C2:E0:7E:F0:04:9C:7F:C2
            X509v3 Authority Key Identifier:
                keyid:C7:8D:1E:59:59:1B:E0:C7:52:4D:36:BD:F8:5C:8A:C6:EA:19:0F:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x40eWVkb4MdSTTa9-FyKxuoZD44.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:bc:28:07:fd:2a:26:b5:f8:54:e7:4a:11:6d:a2:64:84:94:
         5b:5e:26:f6:ee:46:28:f3:56:8a:59:76:29:d6:9c:65:b8:5e:
         33:7f:98:b8:dd:21:65:bb:58:63:c1:51:e9:1d:a8:1e:c4:3e:
         1a:46:6f:7f:0a:d9:90:1a:85:5f:c5:b7:bc:f9:97:bc:4e:a7:
         6a:c5:06:31:da:ea:e7:46:b9:9c:56:0b:8b:3b:97:ad:13:7d:
         b1:dc:ce:e6:6a:f8:f0:9e:e2:0b:fd:ad:d2:41:c6:23:2c:62:
         40:ae:36:b1:83:b2:d9:94:59:10:75:4b:96:a9:38:20:fd:96:
         17:30:ab:f5:3a:30:6c:d7:2a:f7:86:e7:da:99:f8:17:24:b5:
         e3:8a:75:43:54:c0:70:e0:8c:5a:0f:eb:15:50:4f:b5:79:cb:
         b9:c1:c2:c5:bc:02:30:93:b5:18:0e:f7:59:8e:87:6f:b4:f4:
         9b:68:a3:a8:ef:da:0c:b5:06:be:6f:c7:52:70:e3:70:b6:a2:
         d1:f6:7e:ed:0e:ff:17:9f:a7:aa:a2:e4:bc:c8:5d:9d:f7:33:
         3b:87:e4:20:9b:f1:03:96:0d:5c:f9:ec:22:55:4e:99:10:e5:
         38:a5:2d:56:92:26:57:e1:62:b7:a4:44:bc:fd:3c:e4:32:89:
         c0:16:68:1e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTU0RTYxMTAvBgNVBAUTKEM3OEQxRTU5NTkxQkUwQzc1MjREMzZCREY4NUM4QUM2
RUExOTBGOEUwHhcNMjYwNDE3MDA0NTIwWhcNMjYwNDI0MDA0NTIwWjAYMRYwFAYD
VQQDEw02OWUxODJhMS04OTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuZYsC8zVcugjLBi7a6onB8ojSEe/mdMspBJZg6Pv8cJaXR8Ks12xAbD6y+FZ
12CMzhXxH9vzpdaIYUC9NulBxO01xXmo3izX/RUKm0KRd//xlMq2lPPkf9q1FAmE
r9OlKOl4OfwYFho53eDGF99lvssFJrPUnuonL4BBxh9G9vKgQ8lC5z9t6Mis/+/q
18OEmNMj+SirKjiVmSdGuq6zHwdzi3RgqLaHIPpRBkQwJ6azTXzOrb2UHKzaSLFE
l4STDgbotdnajQ2+dAZak01nG68x2+sF9YzUOZY2RUgBD3RshMwxWuhYxhlb/iXt
AJjsB/wwRZenz5rk+y8oUC5rYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMT+Aubs
7KTaV6piYcLgfvAEnH/CMB8GA1UdIwQYMBaAFMeNHllZG+DHUk02vfhcisbqGQ+O
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTRFNi85RjA2Nzc0OEVE
NEIxMUVDQUI4RkFBNzdDNEY5QUUwMi94NDBlV1ZrYjRNZFNUVGE5LUZ5S3h1b1pE
NDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3g0MGVXVmtiNE1kU1RUYTktRnlLeHVvWkQ0NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NTRFNi85RjA2Nzc0OEVENEIxMUVDQUI4RkFBNzdDNEY5QUUwMi94NDBlV1ZrYjRN
ZFNUVGE5LUZ5S3h1b1pENDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQrwoB/0qJrX4VOdKEW2iZISUW14m9u5GKPNWill2KdacZbheM3+YuN0hZbtY
Y8FR6R2oHsQ+GkZvfwrZkBqFX8W3vPmXvE6nasUGMdrq50a5nFYLizuXrRN9sdzO
5mr48J7iC/2t0kHGIyxiQK42sYOy2ZRZEHVLlqk4IP2WFzCr9TowbNcq94bn2pn4
FyS144p1Q1TAcOCMWg/rFVBPtXnLucHCxbwCMJO1GA73WY6Hb7T0m2ijqO/aDLUG
vm/HUnDjcLai0fZ+7Q7/F5+nqqLkvMhdnfczO4fkIJvxA5YNXPnsIlVOmRDlOKUt
VpImV+Fit6REvP085DKJwBZoHg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:03:45 2026 by rpki-client