Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft
File:                     Iek1nelgenjM01kOC0SctSsXtrs.mft (raw, json)
Hash identifier:          MFEHJW72MgM4O9VsXC/dIcQ5If9gUnnWdglziOfa9Bs=
Subject key identifier:   3D:F5:7E:CA:F8:9E:26:C9:12:55:82:51:61:48:C8:9E:C2:6C:AC:8D
Authority key identifier: 21:E9:35:9D:E9:60:7A:78:CC:D3:59:0E:0B:44:9C:B5:2B:17:B6:BB
Certificate issuer:       /CN=A915C83A/serialNumber=21E9359DE9607A78CCD3590E0B449CB52B17B6BB
Certificate serial:       07D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft
Manifest number:          07BE
Signing time:             Thu 16 Apr 2026 21:20:38 +0000
Manifest this update:     Thu 16 Apr 2026 21:20:37 +0000
Manifest next update:     Thu 23 Apr 2026 21:20:37 +0000
Files and hashes:         1: Iek1nelgenjM01kOC0SctSsXtrs.crl (hash: iTLqF0FElx3DjCOkwkv8QqwitvipL+/Iy3MwxJvRRao=)
                          2: EF5A16E89F3E11EB852AB17AC4F9AE02.roa (hash: yigo59Gar+8S1aiuGB+d0Lm9hAb5K16jebQb9hDYj9o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.crl
                          rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:20:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2004 (0x7d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C83A, serialNumber=21E9359DE9607A78CCD3590E0B449CB52B17B6BB
        Validity
            Not Before: Apr 16 21:20:37 2026 GMT
            Not After : Apr 23 21:20:37 2026 GMT
        Subject: CN=69e152a6-7e13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b4:da:43:5a:6f:d8:29:ef:a0:49:38:13:b6:
                    de:00:3d:d6:ac:49:73:41:f3:a7:76:08:e3:d1:a1:
                    a3:95:57:4b:78:a3:08:cd:ac:70:42:a7:07:d3:f1:
                    3a:c5:d7:d0:bd:8b:d8:a2:ea:31:41:a4:fa:96:2a:
                    40:3f:49:0d:ed:69:35:1d:fa:13:e6:e7:31:55:b7:
                    44:3b:48:d5:56:44:ea:3b:7a:b1:b9:f7:20:df:28:
                    e7:16:1a:95:53:19:45:cb:e0:4e:13:35:13:47:a2:
                    39:e2:43:66:e2:44:e5:5a:19:a7:fd:8e:8d:d6:85:
                    02:36:8e:57:b7:b5:06:94:c9:18:83:3e:61:f0:db:
                    f3:00:cb:69:88:1b:88:20:63:7f:3e:b8:33:67:be:
                    8b:46:5d:d8:56:c3:26:b2:86:15:73:16:4f:6f:ee:
                    e9:f6:07:c9:10:31:ab:60:dd:7a:3f:2d:34:57:b2:
                    c6:f5:86:de:81:bb:9b:89:b7:4d:f7:a7:77:4f:53:
                    55:75:6c:f2:34:da:c6:ad:3e:44:29:e1:9d:61:b3:
                    8c:64:a0:67:cf:bb:c3:a6:73:a7:01:64:51:26:1b:
                    9e:22:bc:ec:ec:8f:55:f9:8e:4a:4b:2b:87:10:35:
                    57:45:2e:8b:fe:6f:8c:8c:2c:a3:34:16:11:be:2f:
                    84:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:F5:7E:CA:F8:9E:26:C9:12:55:82:51:61:48:C8:9E:C2:6C:AC:8D
            X509v3 Authority Key Identifier:
                keyid:21:E9:35:9D:E9:60:7A:78:CC:D3:59:0E:0B:44:9C:B5:2B:17:B6:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:d1:47:8d:7c:b4:07:cb:c5:19:49:cc:ff:aa:56:00:b0:e5:
         c7:61:57:e6:60:2c:b5:09:db:41:42:88:c2:a8:8c:85:53:7d:
         96:c6:e7:eb:f4:21:9d:a0:ff:ca:e3:fc:57:f2:78:c1:3b:4a:
         95:60:03:e1:fb:b2:73:8f:bc:38:e3:53:ca:72:bd:ce:e9:6c:
         54:39:1a:8f:4b:7b:84:05:9b:46:67:f0:21:49:6c:d2:25:24:
         5c:f3:b1:d2:c3:3f:d1:d3:a0:c3:6e:91:79:41:77:29:c9:92:
         dc:6c:be:12:82:03:44:c2:01:01:62:f8:a9:a7:55:fd:f6:62:
         b8:fb:13:ad:22:ab:1a:e8:5a:ce:7a:1f:f1:0c:8e:1c:25:ea:
         ee:c0:a9:69:fd:83:6b:9f:9c:76:65:ff:df:e9:eb:ac:81:3a:
         23:a6:b8:1a:76:94:89:01:da:c9:67:44:f1:35:71:2d:35:49:
         c5:c0:8b:8c:11:04:6c:e8:f6:96:ab:e7:42:a2:ee:d0:c6:21:
         74:c3:f0:85:06:67:d9:6a:4d:36:ce:5f:60:09:85:67:89:d6:
         93:8d:41:05:1d:f1:3a:50:de:d5:8a:da:f6:8c:38:23:58:53:
         ae:61:a6:98:52:7e:e7:fe:6e:ec:9a:ec:f5:5a:b6:93:9e:03:
         dc:e8:80:f2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB9QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUM4M0ExMTAvBgNVBAUTKDIxRTkzNTlERTk2MDdBNzhDQ0QzNTkwRTBCNDQ5Q0I1
MkIxN0I2QkIwHhcNMjYwNDE2MjEyMDM3WhcNMjYwNDIzMjEyMDM3WjAYMRYwFAYD
VQQDEw02OWUxNTJhNi03ZTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwrTaQ1pv2CnvoEk4E7beAD3WrElzQfOndgjj0aGjlVdLeKMIzaxwQqcH0/E6
xdfQvYvYouoxQaT6lipAP0kN7Wk1HfoT5ucxVbdEO0jVVkTqO3qxufcg3yjnFhqV
UxlFy+BOEzUTR6I54kNm4kTlWhmn/Y6N1oUCNo5Xt7UGlMkYgz5h8NvzAMtpiBuI
IGN/PrgzZ76LRl3YVsMmsoYVcxZPb+7p9gfJEDGrYN16Py00V7LG9YbegbubibdN
96d3T1NVdWzyNNrGrT5EKeGdYbOMZKBnz7vDpnOnAWRRJhueIrzs7I9V+Y5KSyuH
EDVXRS6L/m+MjCyjNBYRvi+EjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD31fsr4
nibJElWCUWFIyJ7CbKyNMB8GA1UdIwQYMBaAFCHpNZ3pYHp4zNNZDgtEnLUrF7a7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzgzQS80NzE3MENEODNE
RUMxMUVCOTA0QTBDNjVDNEY5QUUwMi9JZWsxbmVsZ2Vuak0wMWtPQzBTY3RTc1h0
cnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0llazFuZWxnZW5qTTAxa09DMFNjdFNzWHRycy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QzgzQS80NzE3MENEODNERUMxMUVCOTA0QTBDNjVDNEY5QUUwMi9JZWsxbmVsZ2Vu
ak0wMWtPQzBTY3RTc1h0cnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKtFHjXy0B8vFGUnM/6pWALDlx2FX5mAstQnbQUKIwqiMhVN9lsbn6/QhnaD/
yuP8V/J4wTtKlWAD4fuyc4+8OONTynK9zulsVDkaj0t7hAWbRmfwIUls0iUkXPOx
0sM/0dOgw26ReUF3KcmS3Gy+EoIDRMIBAWL4qadV/fZiuPsTrSKrGuhaznof8QyO
HCXq7sCpaf2Da5+cdmX/3+nrrIE6I6a4GnaUiQHayWdE8TVxLTVJxcCLjBEEbOj2
lqvnQqLu0MYhdMPwhQZn2WpNNs5fYAmFZ4nWk41BBR3xOlDe1Yra9ow4I1hTrmGm
mFJ+5/5u7Jrs9Vq2k54D3OiA8g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:56:22 2026 by rpki-client