Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.mft
File:                     bkVzNIaAMm09remFIV0iZii58Ws.mft (raw, json)
Hash identifier:          6MQffS87eJzf9eHjjbrWh+mT/b/KSL2FzzUt2a/zHY4=
Subject key identifier:   B7:DC:DA:40:74:9B:7B:0A:C0:C4:73:17:7F:DC:79:C2:0D:89:DE:52
Authority key identifier: 6E:45:73:34:86:80:32:6D:3D:AD:E9:85:21:5D:22:66:28:B9:F1:6B
Certificate issuer:       /CN=A915A0FB/serialNumber=6E4573348680326D3DADE985215D226628B9F16B
Certificate serial:       0184
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkVzNIaAMm09remFIV0iZii58Ws.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.mft
Manifest number:          017B
Signing time:             Fri 17 Apr 2026 04:23:48 +0000
Manifest this update:     Fri 17 Apr 2026 04:23:47 +0000
Manifest next update:     Fri 24 Apr 2026 04:23:47 +0000
Files and hashes:         1: bkVzNIaAMm09remFIV0iZii58Ws.crl (hash: iZiJxfpiAMMpvSR25VTneCgVwPv6YZ9kNdWKBMuajbc=)
                          2: 47B1ABEA005711EF9DA70542C4F9AE02.roa (hash: gVmzpA9zRHnYukGpUCnMcrjZvxQuC2VsY3N1/rrLsw0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.crl
                          rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkVzNIaAMm09remFIV0iZii58Ws.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 388 (0x184)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0FB, serialNumber=6E4573348680326D3DADE985215D226628B9F16B
        Validity
            Not Before: Apr 17 04:23:47 2026 GMT
            Not After : Apr 24 04:23:47 2026 GMT
        Subject: CN=69e1b5d3-920d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c6:6d:8e:20:be:c2:cb:61:cb:fe:5f:33:2b:
                    8a:23:c6:f8:b6:bb:94:55:09:3b:bd:eb:9b:07:8c:
                    d5:8b:27:b1:ba:96:f5:75:b0:27:c1:bd:a6:b3:4c:
                    9b:4e:e3:bb:ad:b6:79:df:19:01:1d:d8:63:67:c3:
                    99:ae:72:6b:95:af:63:e9:4b:01:9f:2b:53:e2:78:
                    f9:da:3e:ee:50:e3:aa:c2:56:37:8d:e4:9e:92:35:
                    94:a7:2b:27:81:ac:c7:59:74:43:5d:19:dc:0f:f5:
                    e2:fc:88:3a:18:59:03:d1:df:f0:dc:91:ab:78:75:
                    bf:21:fb:fa:c9:bb:4d:43:19:75:30:3c:3c:1e:12:
                    53:bf:9b:30:18:fe:ef:5a:87:51:44:0e:1d:c3:54:
                    e9:9e:98:50:48:8d:57:22:17:3e:ec:fe:06:45:d7:
                    ab:0e:30:61:7b:71:54:08:fd:ba:34:97:e0:7a:63:
                    b7:09:28:9e:1e:ff:e9:ff:9d:82:b1:00:49:0e:64:
                    3e:35:19:f1:ff:c9:89:34:9c:b3:7f:d6:51:5b:28:
                    23:f3:e1:c1:d0:9b:c8:c5:29:71:9a:94:a2:14:83:
                    a7:d3:7e:c1:80:0d:c3:ea:c6:bd:da:24:d3:5c:d1:
                    ff:f2:8e:44:a9:e1:cb:0b:66:e1:36:0c:78:45:26:
                    18:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:DC:DA:40:74:9B:7B:0A:C0:C4:73:17:7F:DC:79:C2:0D:89:DE:52
            X509v3 Authority Key Identifier:
                keyid:6E:45:73:34:86:80:32:6D:3D:AD:E9:85:21:5D:22:66:28:B9:F1:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkVzNIaAMm09remFIV0iZii58Ws.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:72:7e:50:bd:5a:68:d9:aa:e8:88:8a:61:f1:14:db:f6:c2:
         bf:70:97:11:73:d7:a1:6e:83:41:d2:d9:01:67:97:56:a4:33:
         ea:40:25:44:ce:02:5d:69:39:75:79:5b:26:5e:9a:a4:b9:e1:
         fb:d5:ea:94:af:dc:2e:06:80:81:bd:48:04:4d:1c:a0:3b:e5:
         67:54:4b:1c:f0:c7:bf:33:e7:aa:23:26:95:91:e1:52:b8:2e:
         aa:82:f7:93:c8:ea:12:ed:e5:8b:90:88:89:c2:8f:da:62:17:
         d4:f0:91:90:2f:4b:3a:ef:34:5d:9a:f3:0b:e6:01:2c:cd:5a:
         56:81:77:8e:d4:7b:32:5a:d4:6b:b8:d4:d0:24:04:0a:16:7a:
         14:81:b3:74:89:3c:15:2a:3d:22:75:80:72:a3:3d:55:96:ad:
         3f:79:88:4a:dc:fb:8f:cc:d3:70:b9:15:94:a6:4f:b4:b4:18:
         a9:b0:14:46:b2:0a:0a:ef:d8:c7:1a:99:93:2d:8a:4f:c0:10:
         3a:73:ec:6b:95:80:08:93:ce:76:73:89:13:84:cb:59:0b:6a:
         78:29:fe:e7:2e:79:78:c9:8c:e2:ae:37:3a:7d:0e:7e:09:af:
         7e:9b:8f:93:f5:53:fc:49:c6:8b:3f:9a:f2:d8:c2:32:cd:5e:
         25:d4:09:17
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUEwRkIxMTAvBgNVBAUTKDZFNDU3MzM0ODY4MDMyNkQzREFERTk4NTIxNUQyMjY2
MjhCOUYxNkIwHhcNMjYwNDE3MDQyMzQ3WhcNMjYwNDI0MDQyMzQ3WjAYMRYwFAYD
VQQDEw02OWUxYjVkMy05MjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp8ZtjiC+wsthy/5fMyuKI8b4truUVQk7veubB4zViyexupb1dbAnwb2ms0yb
TuO7rbZ53xkBHdhjZ8OZrnJrla9j6UsBnytT4nj52j7uUOOqwlY3jeSekjWUpysn
gazHWXRDXRncD/Xi/Ig6GFkD0d/w3JGreHW/Ifv6ybtNQxl1MDw8HhJTv5swGP7v
WodRRA4dw1TpnphQSI1XIhc+7P4GRderDjBhe3FUCP26NJfgemO3CSieHv/p/52C
sQBJDmQ+NRnx/8mJNJyzf9ZRWygj8+HB0JvIxSlxmpSiFIOn037BgA3D6sa92iTT
XNH/8o5EqeHLC2bhNgx4RSYY9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLfc2kB0
m3sKwMRzF3/cecINid5SMB8GA1UdIwQYMBaAFG5FczSGgDJtPa3phSFdImYoufFr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBGQi81MDU2QzhCMjAw
NTYxMUVGQTU0RDYxNDBDNEY5QUUwMi9ia1Z6TklhQU1tMDlyZW1GSVYwaVppaTU4
V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JrVnpOSWFBTW0wOXJlbUZJVjBpWmlpNThXcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QTBGQi81MDU2QzhCMjAwNTYxMUVGQTU0RDYxNDBDNEY5QUUwMi9ia1Z6TklhQU1t
MDlyZW1GSVYwaVppaTU4V3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgnJ+UL1aaNmq6IiKYfEU2/bCv3CXEXPXoW6DQdLZAWeXVqQz6kAlRM4CXWk5
dXlbJl6apLnh+9XqlK/cLgaAgb1IBE0coDvlZ1RLHPDHvzPnqiMmlZHhUrguqoL3
k8jqEu3li5CIicKP2mIX1PCRkC9LOu80XZrzC+YBLM1aVoF3jtR7MlrUa7jU0CQE
ChZ6FIGzdIk8FSo9InWAcqM9VZatP3mIStz7j8zTcLkVlKZPtLQYqbAURrIKCu/Y
xxqZky2KT8AQOnPsa5WACJPOdnOJE4TLWQtqeCn+5y55eMmM4q43On0OfgmvfpuP
k/VT/EnGiz+a8tjCMs1eJdQJFw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:03:36 2026 by rpki-client