Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.mft
File:                     luWqcIJLjRPdz-YfzJogytZeYME.mft (raw, json)
Hash identifier:          mx/Y1ccETDp6dDZN8SyoBKSu1BDdQXa4quKZoGtCXCc=
Subject key identifier:   05:8E:BF:05:76:37:36:7B:9F:BB:FE:75:4D:D2:0E:43:65:48:8C:D2
Authority key identifier: 96:E5:AA:70:82:4B:8D:13:DD:CF:E6:1F:CC:9A:20:CA:D6:5E:60:C1
Certificate issuer:       /CN=A9155688/serialNumber=96E5AA70824B8D13DDCFE61FCC9A20CAD65E60C1
Certificate serial:       0718
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/luWqcIJLjRPdz-YfzJogytZeYME.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.mft
Manifest number:          070D
Signing time:             Thu 16 Apr 2026 21:53:15 +0000
Manifest this update:     Thu 16 Apr 2026 21:53:15 +0000
Manifest next update:     Thu 23 Apr 2026 21:53:15 +0000
Files and hashes:         1: luWqcIJLjRPdz-YfzJogytZeYME.crl (hash: BIfum5ryQIm8fmMZbPHZPCQpu4rMinwK5ZNC9ARsMNI=)
                          2: 69FB4E726DC511F08948D952C4F9AE02.roa (hash: oqAlnaUcx9JNieA6F+CPVnYYPfmCQlgospCXz8hR6LQ=)
                          3: 6656B366814C11EB913AEC78C4F9AE02.roa (hash: hv1K6R23OHguzYK6jFAFYzQEskAA+OZXxw5xTMUnVbY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.crl
                          rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/luWqcIJLjRPdz-YfzJogytZeYME.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:53:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1816 (0x718)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155688, serialNumber=96E5AA70824B8D13DDCFE61FCC9A20CAD65E60C1
        Validity
            Not Before: Apr 16 21:53:15 2026 GMT
            Not After : Apr 23 21:53:15 2026 GMT
        Subject: CN=69e15a4b-dc01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fc:21:23:b6:23:60:a4:6d:6e:f5:61:1f:eb:
                    d0:68:5d:6b:fd:72:63:7e:2e:6c:ea:46:3b:78:3f:
                    00:fd:81:be:84:d4:1c:be:0a:f3:f3:02:6d:0d:85:
                    0f:5e:32:88:1f:f6:72:61:29:46:53:79:af:ad:2e:
                    17:f2:d5:70:12:f3:92:20:9c:56:40:23:71:f9:5c:
                    47:fb:4d:35:16:a7:f6:41:a8:1d:c5:c9:75:8b:b4:
                    1d:9a:cb:f9:76:c8:e7:12:99:5d:d5:37:c7:ce:3f:
                    ae:1c:1f:53:20:a1:06:4b:41:28:fa:59:a0:6b:c6:
                    a6:19:73:b4:06:e4:df:9e:6a:68:86:ee:73:18:57:
                    90:2f:79:de:4e:16:b4:af:e1:b4:18:35:f4:96:82:
                    d4:f6:3a:ee:b8:54:e3:35:43:61:04:31:f6:9d:23:
                    01:76:56:d7:c4:dc:35:db:9d:f8:98:11:4f:9e:b8:
                    88:7e:25:d3:01:b6:4a:f3:c2:09:70:4d:92:cf:aa:
                    69:db:22:71:78:db:63:82:2b:e4:11:b6:0d:61:16:
                    54:aa:5d:65:d1:d7:07:33:e7:3f:c2:39:d9:5c:b8:
                    7f:75:1d:af:19:90:0b:ca:3c:fd:48:2d:83:3a:f6:
                    6c:50:cf:a7:21:73:a7:75:8c:1a:47:af:9e:b3:c5:
                    2b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:8E:BF:05:76:37:36:7B:9F:BB:FE:75:4D:D2:0E:43:65:48:8C:D2
            X509v3 Authority Key Identifier:
                keyid:96:E5:AA:70:82:4B:8D:13:DD:CF:E6:1F:CC:9A:20:CA:D6:5E:60:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/luWqcIJLjRPdz-YfzJogytZeYME.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:af:37:cc:71:b9:62:bc:be:93:d7:18:77:b9:ea:e7:2c:80:
         32:e4:52:5b:c2:44:b3:d0:18:cf:11:08:46:a7:0b:49:44:91:
         f8:ce:c5:28:3e:cd:e5:15:6a:5f:9a:aa:12:61:b2:d2:b2:e2:
         f1:d6:21:29:e7:d7:c2:1e:c8:ef:70:0c:d0:f7:17:7e:b8:03:
         be:b3:b7:a0:be:b9:ef:98:7e:e6:07:49:35:a8:b4:bb:7c:f2:
         81:ed:fe:57:2e:2e:6b:89:66:b9:c6:3a:ad:91:21:3d:a0:bc:
         72:29:f0:db:43:50:c6:58:f9:9b:ec:7c:8c:fc:fa:82:31:79:
         f1:4c:24:74:8f:fb:b9:b1:2d:49:1c:2e:2f:3f:ae:ea:46:c2:
         5c:ba:a4:bb:4a:93:2a:db:68:99:5a:68:f5:f4:5e:14:0a:a8:
         db:12:6e:69:92:d9:c4:4f:70:02:02:4b:cf:a7:0f:af:1d:70:
         d0:a1:c1:f4:ed:64:e7:4b:58:b0:0a:4c:df:97:b7:ae:fe:14:
         18:68:84:28:e1:86:f1:90:e2:8d:0d:c5:ea:f7:59:dc:8f:33:
         f9:cb:ca:5f:16:41:21:b6:c2:ee:72:6e:86:1b:3c:46:e2:44:
         c6:31:5a:3a:c4:15:6a:be:54:6b:ee:95:a0:a4:0f:75:16:62:
         79:d5:f7:ed
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBxgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTU2ODgxMTAvBgNVBAUTKDk2RTVBQTcwODI0QjhEMTNERENGRTYxRkNDOUEyMENB
RDY1RTYwQzEwHhcNMjYwNDE2MjE1MzE1WhcNMjYwNDIzMjE1MzE1WjAYMRYwFAYD
VQQDEw02OWUxNWE0Yi1kYzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1fwhI7YjYKRtbvVhH+vQaF1r/XJjfi5s6kY7eD8A/YG+hNQcvgrz8wJtDYUP
XjKIH/ZyYSlGU3mvrS4X8tVwEvOSIJxWQCNx+VxH+001Fqf2Qagdxcl1i7Qdmsv5
dsjnEpld1TfHzj+uHB9TIKEGS0Eo+lmga8amGXO0BuTfnmpohu5zGFeQL3neTha0
r+G0GDX0loLU9jruuFTjNUNhBDH2nSMBdlbXxNw12534mBFPnriIfiXTAbZK88IJ
cE2Sz6pp2yJxeNtjgivkEbYNYRZUql1l0dcHM+c/wjnZXLh/dR2vGZALyjz9SC2D
OvZsUM+nIXOndYwaR6+es8Ur4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAWOvwV2
NzZ7n7v+dU3SDkNlSIzSMB8GA1UdIwQYMBaAFJblqnCCS40T3c/mH8yaIMrWXmDB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTY4OC85RDU2MjlBMDgx
NDIxMUVCQkQ4QzQyODRDNEY5QUUwMi9sdVdxY0lKTGpSUGR6LVlmekpvZ3l0WmVZ
TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2x1V3FjSUpMalJQZHotWWZ6Sm9neXRaZVlNRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NTY4OC85RDU2MjlBMDgxNDIxMUVCQkQ4QzQyODRDNEY5QUUwMi9sdVdxY0lKTGpS
UGR6LVlmekpvZ3l0WmVZTUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAX683zHG5Yry+k9cYd7nq5yyAMuRSW8JEs9AYzxEIRqcLSUSR+M7FKD7N5RVq
X5qqEmGy0rLi8dYhKefXwh7I73AM0PcXfrgDvrO3oL6575h+5gdJNai0u3zyge3+
Vy4ua4lmucY6rZEhPaC8cinw20NQxlj5m+x8jPz6gjF58UwkdI/7ubEtSRwuLz+u
6kbCXLqku0qTKttomVpo9fReFAqo2xJuaZLZxE9wAgJLz6cPrx1w0KHB9O1k50tY
sApM35e3rv4UGGiEKOGG8ZDijQ3F6vdZ3I8z+cvKXxZBIbbC7nJuhhs8RuJExjFa
OsQVar5Ua+6VoKQPdRZiedX37Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:42:33 2026 by rpki-client