Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.mft
File:                     v4hgssA3e7Xv7b461A8c8YnyrLI.mft (raw, json)
Hash identifier:          VwKZD7S0JXyc8AuIoKaPM/zwlZGlcC/kjOdUnLihBso=
Subject key identifier:   4B:DB:C9:10:E9:34:D8:07:81:4F:95:A3:07:4A:C0:61:E2:7D:65:15
Authority key identifier: BF:88:60:B2:C0:37:7B:B5:EF:ED:BE:3A:D4:0F:1C:F1:89:F2:AC:B2
Certificate issuer:       /CN=A9157B74/serialNumber=BF8860B2C0377BB5EFEDBE3AD40F1CF189F2ACB2
Certificate serial:       B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v4hgssA3e7Xv7b461A8c8YnyrLI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.mft
Manifest number:          AD
Signing time:             Fri 17 Apr 2026 06:53:53 +0000
Manifest this update:     Fri 17 Apr 2026 06:53:52 +0000
Manifest next update:     Fri 24 Apr 2026 06:53:52 +0000
Files and hashes:         1: v4hgssA3e7Xv7b461A8c8YnyrLI.crl (hash: bY20nyR+3mFY8KYOL/lwp6yiIuaLXWeKzcBy1XW7JIU=)
                          2: 074A7A1436C511F0A4E5C52BC4F9AE02.roa (hash: Z9wsNscGW8jTuOrPcKnc3KiOXLu3fKLaOWy4uh1nNqc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.crl
                          rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v4hgssA3e7Xv7b461A8c8YnyrLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:53:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177 (0xb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157B74, serialNumber=BF8860B2C0377BB5EFEDBE3AD40F1CF189F2ACB2
        Validity
            Not Before: Apr 17 06:53:52 2026 GMT
            Not After : Apr 24 06:53:52 2026 GMT
        Subject: CN=69e1d901-0880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:99:5c:87:d7:b7:07:bd:d1:08:81:57:42:5a:
                    1f:aa:60:f4:19:0b:af:d4:7a:da:d6:ea:2a:c1:73:
                    b8:7b:43:53:de:89:3e:cb:e4:86:d0:18:42:a4:00:
                    ae:a7:96:d3:00:cb:27:1a:71:3e:f7:f6:cd:41:6e:
                    82:fd:eb:70:16:60:8a:f3:7f:ac:d1:5f:93:2a:1b:
                    57:46:c5:5a:94:2d:c9:aa:63:63:b4:3b:f3:fc:01:
                    d4:7b:6b:d8:40:7a:21:eb:ea:d7:40:b9:6a:6a:f7:
                    72:91:3a:77:c0:cd:38:f9:08:ea:44:42:4c:28:7a:
                    fd:ca:39:65:19:68:c4:01:0f:7c:32:3d:cb:57:e9:
                    61:5a:e6:4f:22:e5:6d:13:08:ce:3c:4b:dc:b1:72:
                    54:59:7b:e4:cb:5c:79:f3:a6:62:7e:ed:bf:3c:3e:
                    8a:c0:6f:82:54:30:5e:df:9d:54:cd:38:05:60:05:
                    e8:02:58:8b:fa:93:32:6b:b5:d9:c1:2c:f3:b2:aa:
                    20:34:83:b9:21:b2:86:b9:34:16:6f:8a:0b:68:f2:
                    57:48:c8:83:e1:e3:13:80:55:ed:a1:ab:7f:ca:28:
                    aa:a2:f0:43:0e:ee:27:d7:ee:d9:b4:38:a5:73:63:
                    a7:a1:1d:8d:9f:05:f3:ba:3b:c3:43:96:c3:67:b1:
                    5d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:DB:C9:10:E9:34:D8:07:81:4F:95:A3:07:4A:C0:61:E2:7D:65:15
            X509v3 Authority Key Identifier:
                keyid:BF:88:60:B2:C0:37:7B:B5:EF:ED:BE:3A:D4:0F:1C:F1:89:F2:AC:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v4hgssA3e7Xv7b461A8c8YnyrLI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B74/CE00425A36BC11F081D55F17C4F9AE02/v4hgssA3e7Xv7b461A8c8YnyrLI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:d3:fb:70:7c:e7:c2:df:b5:8e:39:35:09:85:17:bb:57:ba:
         b7:2e:36:00:7c:31:a2:eb:12:2c:f1:6d:a4:c5:f6:d4:48:10:
         1e:0c:4f:f3:44:75:65:9d:c9:9d:7d:93:63:6d:84:e1:63:c6:
         e7:ed:b3:8a:bd:1a:65:ad:30:b6:8c:e5:1e:c1:80:96:a7:c4:
         8f:4f:ce:42:e4:17:46:80:59:b8:df:11:59:ea:c7:ba:1a:25:
         e1:59:7f:f4:43:5b:4f:1c:b5:c6:2e:cd:ac:33:b9:bb:78:c9:
         89:a7:43:95:cb:05:15:28:42:30:21:ac:3e:a7:b8:cf:3d:69:
         63:b9:15:c8:b3:b7:e6:08:93:dd:17:88:f9:5d:2d:7a:4e:b3:
         77:2d:85:4c:ce:79:9e:13:62:54:46:7b:a5:a5:85:1e:b5:53:
         21:b1:b6:9b:9a:54:9c:d2:40:47:a8:10:23:1c:d4:89:40:49:
         cb:bc:6a:ae:dc:7d:20:47:23:26:9a:ee:a9:a7:d6:7a:cf:bf:
         30:ba:a4:56:a9:fc:52:a1:62:3d:ef:aa:4a:74:a0:5b:fd:3a:
         cd:a5:ce:8c:db:d9:28:63:70:bd:06:53:1d:7d:28:09:4a:28:
         41:d7:cd:ee:e4:0b:4f:fd:ee:7d:77:d9:df:23:a3:f9:63:b1:
         17:a6:96:ac
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTdCNzQxMTAvBgNVBAUTKEJGODg2MEIyQzAzNzdCQjVFRkVEQkUzQUQ0MEYxQ0Yx
ODlGMkFDQjIwHhcNMjYwNDE3MDY1MzUyWhcNMjYwNDI0MDY1MzUyWjAYMRYwFAYD
VQQDEw02OWUxZDkwMS0wODgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuZlch9e3B73RCIFXQlofqmD0GQuv1Hra1uoqwXO4e0NT3ok+y+SG0BhCpACu
p5bTAMsnGnE+9/bNQW6C/etwFmCK83+s0V+TKhtXRsValC3JqmNjtDvz/AHUe2vY
QHoh6+rXQLlqavdykTp3wM04+QjqREJMKHr9yjllGWjEAQ98Mj3LV+lhWuZPIuVt
EwjOPEvcsXJUWXvky1x586Zifu2/PD6KwG+CVDBe351UzTgFYAXoAliL+pMya7XZ
wSzzsqogNIO5IbKGuTQWb4oLaPJXSMiD4eMTgFXtoat/yiiqovBDDu4n1+7ZtDil
c2OnoR2NnwXzujvDQ5bDZ7FdMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEvbyRDp
NNgHgU+VowdKwGHifWUVMB8GA1UdIwQYMBaAFL+IYLLAN3u17+2+OtQPHPGJ8qyy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0I3NC9DRTAwNDI1QTM2
QkMxMUYwODFENTVGMTdDNEY5QUUwMi92NGhnc3NBM2U3WHY3YjQ2MUE4YzhZbnly
TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Y0aGdzc0EzZTdYdjdiNDYxQThjOFlueXJMSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
N0I3NC9DRTAwNDI1QTM2QkMxMUYwODFENTVGMTdDNEY5QUUwMi92NGhnc3NBM2U3
WHY3YjQ2MUE4YzhZbnlyTEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAptP7cHznwt+1jjk1CYUXu1e6ty42AHwxousSLPFtpMX21EgQHgxP80R1ZZ3J
nX2TY22E4WPG5+2zir0aZa0wtozlHsGAlqfEj0/OQuQXRoBZuN8RWerHuhol4Vl/
9ENbTxy1xi7NrDO5u3jJiadDlcsFFShCMCGsPqe4zz1pY7kVyLO35giT3ReI+V0t
ek6zdy2FTM55nhNiVEZ7paWFHrVTIbG2m5pUnNJAR6gQIxzUiUBJy7xqrtx9IEcj
JpruqafWes+/MLqkVqn8UqFiPe+qSnSgW/06zaXOjNvZKGNwvQZTHX0oCUooQdfN
7uQLT/3ufXfZ3yOj+WOxF6aWrA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:56:09 2026 by rpki-client