Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft
File:                     hkRKM0kVEhS08nEbLF2gy5nlDxM.mft (raw, json)
Hash identifier:          T4mAJGVgmrZN2lre7/Df7ZodNoEUx42TL6n/fMCCYN8=
Subject key identifier:   6B:08:97:7A:F4:58:51:19:9A:48:C1:00:5C:D1:D2:21:B2:BA:E0:A9
Authority key identifier: 86:44:4A:33:49:15:12:14:B4:F2:71:1B:2C:5D:A0:CB:99:E5:0F:13
Certificate issuer:       /CN=A915C48D/serialNumber=86444A3349151214B4F2711B2C5DA0CB99E50F13
Certificate serial:       0113
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft
Manifest number:          0107
Signing time:             Wed 15 Apr 2026 05:45:00 +0000
Manifest this update:     Wed 15 Apr 2026 05:44:59 +0000
Manifest next update:     Wed 22 Apr 2026 05:44:59 +0000
Files and hashes:         1: hkRKM0kVEhS08nEbLF2gy5nlDxM.crl (hash: Tl8TulOY5mLUlvJkBwNvtmx4JfqVbt4I2zoM38YT+w0=)
                          2: DE1B9460EDF511EF86CB7315C4F9AE02.roa (hash: E7TlvkUoTphr1MZbzvUv/cwDmCu/Xr2dNOXdFLK7X2o=)
                          3: B2BB920001CE11F182556E3A746F56BC.roa (hash: jrD4pqdoiKJI9NO9x+4SiaHnYuar82tQXf2WpPGDnIU=)
                          4: 55EFA6C0ECF711EF88590A69C4F9AE02.roa (hash: 9kbxY7GStAtFWFHK4CxfmaeBQ9+u1bor9LZiasl/Umo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.crl
                          rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 05:44:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 275 (0x113)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C48D, serialNumber=86444A3349151214B4F2711B2C5DA0CB99E50F13
        Validity
            Not Before: Apr 15 05:44:59 2026 GMT
            Not After : Apr 22 05:44:59 2026 GMT
        Subject: CN=69df25db-22c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:94:93:88:e2:79:02:52:75:93:a6:a0:04:da:
                    48:7c:49:bb:33:ca:44:de:cb:00:df:89:f4:c9:12:
                    b8:20:43:66:c2:ff:bd:1e:64:41:55:6a:53:36:eb:
                    99:7b:84:9f:80:ab:fe:69:65:34:21:b6:3e:c1:f5:
                    da:9c:12:e5:38:22:fa:a6:0d:c3:0f:64:84:4d:3e:
                    cb:9d:d7:e7:0d:18:db:2c:92:c9:5e:9e:4b:1e:72:
                    8d:04:b3:30:93:00:b1:37:69:ea:a4:0e:d3:62:45:
                    31:e1:b2:6e:5c:6e:13:59:5f:1c:6c:25:a2:44:ec:
                    6c:2a:dc:79:58:94:1f:c8:04:34:ba:1d:98:bf:c4:
                    46:6a:c5:18:5f:7b:c3:01:97:1b:9e:47:79:98:cc:
                    cc:c1:64:e3:08:d2:ed:2e:37:d5:b3:37:39:35:f1:
                    15:ba:2d:65:1d:3e:3b:58:9b:5c:93:b6:b9:aa:c0:
                    0b:04:d3:f2:1c:5e:e2:31:4c:ec:26:1d:61:e3:f7:
                    8c:e6:aa:49:2d:8d:25:27:61:d1:18:e4:76:51:bc:
                    ef:71:28:3d:cf:11:52:3d:37:85:84:e6:da:69:e8:
                    fe:09:bb:b0:e1:36:bc:27:40:63:ab:f3:0f:02:3e:
                    e0:38:e4:05:8a:36:ac:ad:cd:72:e2:21:2b:6e:42:
                    4b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:08:97:7A:F4:58:51:19:9A:48:C1:00:5C:D1:D2:21:B2:BA:E0:A9
            X509v3 Authority Key Identifier:
                keyid:86:44:4A:33:49:15:12:14:B4:F2:71:1B:2C:5D:A0:CB:99:E5:0F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:38:74:5d:cf:39:5e:cf:26:a9:0c:2d:1e:f2:25:66:b6:4b:
         3a:bf:8d:3d:5e:d0:b5:49:aa:f9:7b:22:5b:94:a7:7c:9b:13:
         6b:ce:09:be:ac:f9:dc:b4:8e:50:14:7a:6e:92:fc:98:8d:f7:
         62:87:24:6c:f9:11:78:1d:4c:e3:93:d8:98:04:b2:b3:c4:f3:
         5e:1b:24:04:e8:b5:f2:f0:9e:d6:c5:d0:87:79:1e:99:0a:8d:
         26:67:f6:a7:9e:ee:46:bc:47:3b:ee:eb:bb:c4:1c:f6:bb:da:
         4a:30:3d:83:cc:61:20:41:01:d7:b4:9b:33:17:af:dc:88:48:
         f1:49:76:c3:2c:e5:00:42:72:84:7a:f9:f7:ab:da:50:c8:c8:
         f6:3f:41:94:f0:13:97:3e:d7:db:b2:df:1c:65:5e:1f:7f:e1:
         80:16:fa:cd:76:63:03:dd:6d:a8:05:8c:89:2c:e4:09:5f:6b:
         c6:f7:40:92:dc:ee:88:13:03:f8:56:a3:4f:1e:f2:6b:71:7c:
         21:32:06:21:bc:84:87:0d:b4:84:a0:b7:a7:92:ef:16:1a:24:
         d1:df:64:33:ed:81:0d:f7:dd:a3:28:45:92:61:55:dd:cc:b3:
         0a:fc:c1:36:aa:37:d9:c4:4b:fd:6a:00:79:2d:f3:1c:7a:05:
         7e:fd:1b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 00:04:00 2026 by rpki-client