Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.mft
File:                     SC1I47aWHxIIwGcVJOCOkDOV9lk.mft (raw, json)
Hash identifier:          apxnvcAPP8QM8TD+fCs5cv+DlpVBYsAVX5H5WmBp8+Y=
Subject key identifier:   E1:51:14:EA:BA:23:9F:F9:29:C2:E0:59:2E:F7:34:6E:5A:AC:01:37
Authority key identifier: 48:2D:48:E3:B6:96:1F:12:08:C0:67:15:24:E0:8E:90:33:95:F6:59
Certificate issuer:       /CN=A915BCE2/serialNumber=482D48E3B6961F1208C0671524E08E903395F659
Certificate serial:       01BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC1I47aWHxIIwGcVJOCOkDOV9lk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.mft
Manifest number:          01B9
Signing time:             Fri 17 Apr 2026 03:38:43 +0000
Manifest this update:     Fri 17 Apr 2026 03:38:43 +0000
Manifest next update:     Fri 24 Apr 2026 03:38:43 +0000
Files and hashes:         1: SC1I47aWHxIIwGcVJOCOkDOV9lk.crl (hash: r4MMYiIZp+latYo2s7T0WxbmS2tVms82R/O1SnzEXJ0=)
                          2: EDE9D100B03B11F09472550DC4F9AE02.roa (hash: cPLdFGXiXR/WYDO7jUKAWbiNRii4uYKJ6ALY5+hpRWM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.crl
                          rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC1I47aWHxIIwGcVJOCOkDOV9lk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:38:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 445 (0x1bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BCE2, serialNumber=482D48E3B6961F1208C0671524E08E903395F659
        Validity
            Not Before: Apr 17 03:38:43 2026 GMT
            Not After : Apr 24 03:38:43 2026 GMT
        Subject: CN=69e1ab43-8ede
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:32:e0:a6:12:83:20:fc:66:37:f1:7c:3d:5d:
                    06:33:b3:3e:58:9d:00:ed:04:be:f9:1a:5f:b7:e0:
                    89:28:2b:87:aa:fd:bb:06:09:8f:c7:e2:3f:44:52:
                    81:86:a3:cd:12:ee:23:c2:84:25:7b:d0:87:fe:87:
                    58:3a:ac:77:35:73:09:d0:bd:4f:d2:60:6b:31:0a:
                    c4:21:82:b0:84:1a:94:f6:e2:95:f6:6f:21:fc:e0:
                    bf:60:d5:31:b8:ee:f3:7a:7f:1e:ea:e3:fe:04:a1:
                    68:fe:e3:78:52:73:05:cc:e0:b8:4d:9e:e1:09:a4:
                    88:85:fb:05:a5:3e:ad:4e:9a:50:b5:5c:1a:cf:77:
                    93:be:2e:66:3e:21:9e:1f:d9:13:68:6a:d5:af:63:
                    b1:03:4a:9f:51:b1:cd:d5:a2:02:69:00:bd:e8:4d:
                    3e:e7:a4:f2:6c:19:ac:d4:cc:9e:83:c8:ac:17:ee:
                    72:8a:de:19:ca:a5:d6:3d:46:1b:19:80:33:e2:60:
                    32:73:ac:cd:aa:3b:8b:2d:23:91:67:89:d7:2d:7b:
                    75:db:d9:02:6d:25:37:69:b0:63:ea:8f:16:22:6c:
                    14:bd:00:be:8b:12:df:db:43:98:23:3c:60:73:dc:
                    70:7a:b3:1a:19:4c:d7:ea:81:86:b2:f4:7b:07:44:
                    b5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:51:14:EA:BA:23:9F:F9:29:C2:E0:59:2E:F7:34:6E:5A:AC:01:37
            X509v3 Authority Key Identifier:
                keyid:48:2D:48:E3:B6:96:1F:12:08:C0:67:15:24:E0:8E:90:33:95:F6:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC1I47aWHxIIwGcVJOCOkDOV9lk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:08:1a:4d:16:a6:05:11:2f:45:98:ff:f3:f3:a8:13:6c:18:
         c6:d7:86:05:ff:d9:b2:9f:c9:6f:ee:3b:e7:4a:b5:74:fb:45:
         33:15:90:02:8d:b9:e4:dc:c4:52:b6:00:3c:a6:f7:58:3f:aa:
         5b:e4:44:d7:cc:0d:91:45:a5:7f:c8:a1:4d:06:24:f4:14:f6:
         c8:d5:14:7e:ab:7c:61:2e:4c:06:c3:5d:46:90:64:32:9a:2e:
         1e:42:7e:0b:3f:96:52:3e:80:c8:bb:59:2d:2b:2a:f6:75:bb:
         6a:bc:61:99:3a:61:81:8c:4e:0e:bd:2f:01:95:66:32:f1:16:
         05:83:cc:ae:39:e6:72:09:18:05:15:39:b8:09:e3:25:e8:29:
         79:ba:82:d7:4f:25:81:69:76:ee:41:f2:a1:ba:f9:94:e3:e6:
         44:d2:a4:91:4e:8a:5b:27:4f:de:80:f3:6b:4e:50:b4:1d:be:
         42:61:a8:b2:7d:ba:ac:57:55:31:d3:19:ae:e8:a8:93:72:5f:
         f6:0c:12:26:cb:d5:4d:46:3e:2a:db:a6:65:1b:95:a9:73:a0:
         c5:6e:f7:70:2e:28:45:e2:71:6e:76:bc:03:a9:e1:83:c9:b5:
         d0:bd:24:ec:a3:12:76:a1:77:84:c4:ec:5e:3b:45:c2:59:35:
         a5:48:b6:c4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUJDRTIxMTAvBgNVBAUTKDQ4MkQ0OEUzQjY5NjFGMTIwOEMwNjcxNTI0RTA4RTkw
MzM5NUY2NTkwHhcNMjYwNDE3MDMzODQzWhcNMjYwNDI0MDMzODQzWjAYMRYwFAYD
VQQDEw02OWUxYWI0My04ZWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvzLgphKDIPxmN/F8PV0GM7M+WJ0A7QS++Rpft+CJKCuHqv27BgmPx+I/RFKB
hqPNEu4jwoQle9CH/odYOqx3NXMJ0L1P0mBrMQrEIYKwhBqU9uKV9m8h/OC/YNUx
uO7zen8e6uP+BKFo/uN4UnMFzOC4TZ7hCaSIhfsFpT6tTppQtVwaz3eTvi5mPiGe
H9kTaGrVr2OxA0qfUbHN1aICaQC96E0+56TybBms1Myeg8isF+5yit4ZyqXWPUYb
GYAz4mAyc6zNqjuLLSORZ4nXLXt129kCbSU3abBj6o8WImwUvQC+ixLf20OYIzxg
c9xwerMaGUzX6oGGsvR7B0S1RQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOFRFOq6
I5/5KcLgWS73NG5arAE3MB8GA1UdIwQYMBaAFEgtSOO2lh8SCMBnFSTgjpAzlfZZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkNFMi8yNEY3RTI3RTk3
QzgxMUVFOTEwMjg4MEFDNEY5QUUwMi9TQzFJNDdhV0h4SUl3R2NWSk9DT2tET1Y5
bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NDMUk0N2FXSHhJSXdHY1ZKT0NPa0RPVjlsay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QkNFMi8yNEY3RTI3RTk3QzgxMUVFOTEwMjg4MEFDNEY5QUUwMi9TQzFJNDdhV0h4
SUl3R2NWSk9DT2tET1Y5bGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPQgaTRamBREvRZj/8/OoE2wYxteGBf/Zsp/Jb+4750q1dPtFMxWQAo255NzE
UrYAPKb3WD+qW+RE18wNkUWlf8ihTQYk9BT2yNUUfqt8YS5MBsNdRpBkMpouHkJ+
Cz+WUj6AyLtZLSsq9nW7arxhmTphgYxODr0vAZVmMvEWBYPMrjnmcgkYBRU5uAnj
JegpebqC108lgWl27kHyobr5lOPmRNKkkU6KWydP3oDza05QtB2+QmGosn26rFdV
MdMZruiok3Jf9gwSJsvVTUY+KtumZRuVqXOgxW73cC4oReJxbna8A6nhg8m10L0k
7KMSdqF3hMTsXjtFwlk1pUi2xA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:04:59 2026 by rpki-client