Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft
File:                     w9iTsikbOh4b9fTwQdEFLizLslo.mft (raw, json)
Hash identifier:          3wPWVaVnOdKyAP1HQ6QVOtnAjacZGyreMoIQdglIEbQ=
Subject key identifier:   26:C1:1A:30:22:E7:74:1C:9D:D6:2C:83:CC:A3:BF:CE:B4:84:14:3A
Authority key identifier: C3:D8:93:B2:29:1B:3A:1E:1B:F5:F4:F0:41:D1:05:2E:2C:CB:B2:5A
Certificate issuer:       /CN=A915ADC4/serialNumber=C3D893B2291B3A1E1BF5F4F041D1052E2CCBB25A
Certificate serial:       01F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft
Manifest number:          01DB
Signing time:             Wed 15 Apr 2026 04:36:33 +0000
Manifest this update:     Wed 15 Apr 2026 04:36:33 +0000
Manifest next update:     Wed 22 Apr 2026 04:36:33 +0000
Files and hashes:         1: w9iTsikbOh4b9fTwQdEFLizLslo.crl (hash: Bn6NdTgiMlwkNVj3+iQBm58lc6lu3e2c0ZB13xCXkxA=)
                          2: ACFC76964A0E11EF91642A7AC4F9AE02.roa (hash: t0ohuFfdaakmzrww/Q0JMVR9B+akqFaPf0gzMitcQI0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.crl
                          rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 04:36:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 505 (0x1f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915ADC4, serialNumber=C3D893B2291B3A1E1BF5F4F041D1052E2CCBB25A
        Validity
            Not Before: Apr 15 04:36:33 2026 GMT
            Not After : Apr 22 04:36:33 2026 GMT
        Subject: CN=69df15d1-f4aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:32:cc:a8:42:ad:c3:85:96:f9:20:53:0c:e6:
                    3d:52:97:1b:0d:01:49:14:59:b6:d9:22:15:9e:d3:
                    a2:e6:94:5c:d7:e7:8c:79:df:db:fc:cd:59:2a:c9:
                    2d:36:89:ce:6d:1c:2c:b4:47:5e:0a:58:86:f7:1a:
                    7c:e2:91:c3:ed:53:2a:4c:56:67:73:98:d4:f7:c5:
                    e1:7e:53:ad:02:7b:87:8c:69:7b:41:32:0f:20:95:
                    9a:24:1e:6c:f4:3c:23:72:a2:03:41:4a:5e:c9:cb:
                    69:6e:74:f9:f9:88:de:d4:5b:70:b8:02:be:80:19:
                    80:79:62:64:76:81:a6:1a:37:5c:e3:02:cf:e5:f9:
                    43:b5:9f:53:da:bd:af:a8:70:af:87:33:fb:fb:80:
                    e1:57:57:16:a5:00:ea:54:0a:70:cb:60:a5:fd:34:
                    7c:c2:53:65:bc:be:8a:2b:e4:be:d0:62:9c:0e:8d:
                    87:1e:f5:66:0b:3a:29:e2:bd:39:d7:d0:f6:4c:47:
                    cf:8c:f3:7e:c2:42:51:e9:15:ed:05:bc:bb:cd:72:
                    b5:f3:e6:ce:83:ca:96:12:51:02:a0:65:f7:e6:23:
                    6f:33:0b:e8:60:f0:bd:55:6f:5f:67:36:02:05:cf:
                    95:9b:05:55:44:e2:6b:f0:0f:9d:29:8e:ca:e6:57:
                    7b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C1:1A:30:22:E7:74:1C:9D:D6:2C:83:CC:A3:BF:CE:B4:84:14:3A
            X509v3 Authority Key Identifier:
                keyid:C3:D8:93:B2:29:1B:3A:1E:1B:F5:F4:F0:41:D1:05:2E:2C:CB:B2:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:1a:1f:b9:db:da:07:43:cf:2d:c2:f0:85:3d:ec:94:8f:e0:
         c6:a9:0a:b3:54:f6:3d:73:b3:f8:9a:e5:10:fb:68:f7:e9:18:
         33:2c:2d:26:ee:a1:6d:67:85:e8:8d:0d:f1:9f:82:cd:4d:c7:
         1d:9a:99:5f:5a:0f:14:ef:65:5f:a8:39:18:24:6a:87:6b:53:
         33:57:d5:77:06:bc:0b:72:ab:d5:87:75:ae:ac:44:be:33:22:
         19:dc:78:03:4d:73:9e:2a:8c:8d:ce:3a:84:23:cb:60:c8:8b:
         7b:9d:75:80:be:e9:76:94:78:27:91:56:28:16:4b:73:02:d8:
         4e:5b:d6:ca:60:86:c7:1b:9d:21:ee:a8:5e:8f:5f:4a:7a:6f:
         3f:d0:90:84:8f:f4:87:49:9c:03:48:64:86:3e:3d:2e:6f:eb:
         3a:20:d8:61:af:3b:0d:45:dd:80:b3:c0:cb:01:9b:20:b2:72:
         80:b0:bf:c0:be:54:36:45:c9:c3:f1:7f:4b:4f:0d:09:0d:f3:
         05:21:b3:79:ee:b8:4e:95:84:ee:68:28:a3:42:c7:69:6d:2e:
         a6:e2:3c:ba:9b:0d:71:30:cc:5c:aa:fd:76:ff:2d:d0:a7:85:
         ea:3f:5c:4b:ae:e9:37:18:88:e7:b9:4b:28:71:87:5d:75:de:
         f0:c8:8d:5a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUFEQzQxMTAvBgNVBAUTKEMzRDg5M0IyMjkxQjNBMUUxQkY1RjRGMDQxRDEwNTJF
MkNDQkIyNUEwHhcNMjYwNDE1MDQzNjMzWhcNMjYwNDIyMDQzNjMzWjAYMRYwFAYD
VQQDEw02OWRmMTVkMS1mNGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3jLMqEKtw4WW+SBTDOY9UpcbDQFJFFm22SIVntOi5pRc1+eMed/b/M1ZKskt
NonObRwstEdeCliG9xp84pHD7VMqTFZnc5jU98XhflOtAnuHjGl7QTIPIJWaJB5s
9DwjcqIDQUpeyctpbnT5+Yje1FtwuAK+gBmAeWJkdoGmGjdc4wLP5flDtZ9T2r2v
qHCvhzP7+4DhV1cWpQDqVApwy2Cl/TR8wlNlvL6KK+S+0GKcDo2HHvVmCzop4r05
19D2TEfPjPN+wkJR6RXtBby7zXK18+bOg8qWElECoGX35iNvMwvoYPC9VW9fZzYC
Bc+VmwVVROJr8A+dKY7K5ld7SwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCbBGjAi
53QcndYsg8yjv860hBQ6MB8GA1UdIwQYMBaAFMPYk7IpGzoeG/X08EHRBS4sy7Ja
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QURDNC8yRkE0MzRDQUFB
QTYxMUVFOTYzQUE2M0FDNEY5QUUwMi93OWlUc2lrYk9oNGI5ZlR3UWRFRkxpekxz
bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3c5aVRzaWtiT2g0YjlmVHdRZEVGTGl6THNsby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QURDNC8yRkE0MzRDQUFBQTYxMUVFOTYzQUE2M0FDNEY5QUUwMi93OWlUc2lrYk9o
NGI5ZlR3UWRFRkxpekxzbG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACRofudvaB0PPLcLwhT3slI/gxqkKs1T2PXOz+JrlEPto9+kYMywtJu6hbWeF
6I0N8Z+CzU3HHZqZX1oPFO9lX6g5GCRqh2tTM1fVdwa8C3Kr1Yd1rqxEvjMiGdx4
A01zniqMjc46hCPLYMiLe511gL7pdpR4J5FWKBZLcwLYTlvWymCGxxudIe6oXo9f
SnpvP9CQhI/0h0mcA0hkhj49Lm/rOiDYYa87DUXdgLPAywGbILJygLC/wL5UNkXJ
w/F/S08NCQ3zBSGzee64TpWE7mgoo0LHaW0upuI8upsNcTDMXKr9dv8t0KeF6j9c
S67pNxiI57lLKHGHXXXe8MiNWg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:27:46 2026 by rpki-client