Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft
File:                     JLokRElCcw9q8rCctyPlyWNw-4s.mft (raw, json)
Hash identifier:          wmxc8H9Ag/xSa7pLPBWOId4d+CjXMEZXncb+zTaTA3Q=
Subject key identifier:   4D:59:1A:A1:17:37:88:AB:19:6E:42:33:68:AF:C5:AB:08:4A:5F:F4
Authority key identifier: 24:BA:24:44:49:42:73:0F:6A:F2:B0:9C:B7:23:E5:C9:63:70:FB:8B
Certificate issuer:       /CN=A9160DAF/serialNumber=24BA24444942730F6AF2B09CB723E5C96370FB8B
Certificate serial:       01B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLokRElCcw9q8rCctyPlyWNw-4s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft
Manifest number:          01AB
Signing time:             Sun 19 Apr 2026 03:46:47 +0000
Manifest this update:     Sun 19 Apr 2026 03:46:47 +0000
Manifest next update:     Sun 26 Apr 2026 03:46:47 +0000
Files and hashes:         1: JLokRElCcw9q8rCctyPlyWNw-4s.crl (hash: bhBLMsTzGGPiZOZsMkUdSD5M3Dw7VHWqYTN3N+HkpKE=)
                          2: BE42116AB76311EE81395B37C4F9AE02.roa (hash: WbVHpiD8F2T3FI/bwtUGHLi/kEkpiTlqVNo5rwJpXuA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.crl
                          rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLokRElCcw9q8rCctyPlyWNw-4s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 03:46:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 432 (0x1b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160DAF, serialNumber=24BA24444942730F6AF2B09CB723E5C96370FB8B
        Validity
            Not Before: Apr 19 03:46:47 2026 GMT
            Not After : Apr 26 03:46:47 2026 GMT
        Subject: CN=69e45027-83d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:95:81:53:fe:50:0c:db:d3:2c:c9:47:5a:59:
                    7a:2f:4c:96:fe:ea:67:df:88:10:18:48:1a:d6:d4:
                    fa:d5:41:ee:67:fd:8d:48:15:43:3c:f5:83:8a:fb:
                    a1:2b:80:a5:72:91:41:a1:10:3a:d0:7d:ba:d9:14:
                    79:81:57:53:8b:b2:c1:78:49:5a:03:8d:5c:c7:a3:
                    93:27:88:9a:fa:a3:8d:94:a7:d5:20:cb:cf:73:56:
                    23:ab:2d:da:b9:43:aa:f6:a5:61:27:80:4c:31:5f:
                    14:c4:4f:6d:13:b4:8e:35:cc:ee:17:f1:07:84:db:
                    1f:0f:64:25:1f:40:a1:10:b6:ca:ea:f7:f5:a1:28:
                    f4:19:18:79:e8:a3:ba:03:82:ec:2c:68:b8:23:f0:
                    8e:a0:dc:c0:16:b7:2c:a9:09:d2:11:51:d1:93:fd:
                    b5:c1:64:bc:90:ae:f5:68:65:7e:f5:2e:db:7b:1c:
                    21:81:2e:d2:e0:61:43:11:dc:2c:06:aa:0a:94:a3:
                    85:5c:e8:8d:35:7c:a1:f9:41:e6:73:d4:b7:19:75:
                    1b:53:be:81:7e:0a:c4:52:77:e6:84:9c:d7:08:fb:
                    fd:d7:ea:c6:64:a9:24:fd:e1:a2:ba:1f:a0:57:d5:
                    fb:86:6e:16:64:44:68:e9:4d:95:1e:27:69:0f:f5:
                    c6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:59:1A:A1:17:37:88:AB:19:6E:42:33:68:AF:C5:AB:08:4A:5F:F4
            X509v3 Authority Key Identifier:
                keyid:24:BA:24:44:49:42:73:0F:6A:F2:B0:9C:B7:23:E5:C9:63:70:FB:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLokRElCcw9q8rCctyPlyWNw-4s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DAF/C2DE6AE4B53211EEB1C1BF4DC4F9AE02/JLokRElCcw9q8rCctyPlyWNw-4s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:6e:54:f4:d5:4d:6d:4f:bf:63:60:cf:b5:8c:70:c8:10:4f:
         a7:37:b5:11:e5:7f:2d:49:e3:e7:02:4e:87:c4:5b:4f:60:30:
         3f:de:5e:81:5c:f4:14:93:e9:0e:fd:d8:02:5d:d3:31:4e:4c:
         76:a9:76:4d:73:52:13:06:32:0d:83:1d:a7:07:db:61:f6:c7:
         95:90:40:ea:33:0a:a4:b9:98:77:3f:fc:28:67:5c:98:f7:70:
         19:f7:59:74:3f:ca:ef:56:2b:75:e0:87:60:47:52:86:0c:7c:
         57:a9:fb:b2:a6:3d:e3:de:4e:76:b3:6a:1b:16:1b:ac:1c:76:
         f5:86:75:41:12:41:85:b7:1d:85:d5:77:20:6a:c1:dd:0a:1e:
         5a:62:f6:b0:dc:7d:55:ba:a5:b8:1e:80:91:51:f9:de:5d:95:
         b1:03:3d:70:9d:7e:14:ca:2d:9c:50:27:38:ab:bd:b1:35:a6:
         c3:19:36:93:fd:1f:1a:a8:e3:89:59:03:69:0d:61:0e:52:17:
         ed:f2:97:64:7f:1d:e2:d9:52:9c:7b:33:39:ed:98:3b:74:b0:
         80:f6:eb:6b:32:2d:1c:f5:05:c7:ae:f6:67:66:82:f3:99:42:
         a7:15:e5:6e:c1:2c:de:d2:20:22:ec:30:92:33:77:d6:c0:48:
         43:f5:50:07
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjBEQUYxMTAvBgNVBAUTKDI0QkEyNDQ0NDk0MjczMEY2QUYyQjA5Q0I3MjNFNUM5
NjM3MEZCOEIwHhcNMjYwNDE5MDM0NjQ3WhcNMjYwNDI2MDM0NjQ3WjAYMRYwFAYD
VQQDEw02OWU0NTAyNy04M2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlZWBU/5QDNvTLMlHWll6L0yW/upn34gQGEga1tT61UHuZ/2NSBVDPPWDivuh
K4ClcpFBoRA60H262RR5gVdTi7LBeElaA41cx6OTJ4ia+qONlKfVIMvPc1Yjqy3a
uUOq9qVhJ4BMMV8UxE9tE7SONczuF/EHhNsfD2QlH0ChELbK6vf1oSj0GRh56KO6
A4LsLGi4I/COoNzAFrcsqQnSEVHRk/21wWS8kK71aGV+9S7bexwhgS7S4GFDEdws
BqoKlKOFXOiNNXyh+UHmc9S3GXUbU76BfgrEUnfmhJzXCPv91+rGZKkk/eGiuh+g
V9X7hm4WZERo6U2VHidpD/XGswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE1ZGqEX
N4irGW5CM2ivxasISl/0MB8GA1UdIwQYMBaAFCS6JERJQnMPavKwnLcj5cljcPuL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MERBRi9DMkRFNkFFNEI1
MzIxMUVFQjFDMUJGNERDNEY5QUUwMi9KTG9rUkVsQ2N3OXE4ckNjdHlQbHlXTnct
NHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pMb2tSRWxDY3c5cThyQ2N0eVBseVdOdy00cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MERBRi9DMkRFNkFFNEI1MzIxMUVFQjFDMUJGNERDNEY5QUUwMi9KTG9rUkVsQ2N3
OXE4ckNjdHlQbHlXTnctNHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdG5U9NVNbU+/Y2DPtYxwyBBPpze1EeV/LUnj5wJOh8RbT2AwP95egVz0FJPp
Dv3YAl3TMU5Mdql2TXNSEwYyDYMdpwfbYfbHlZBA6jMKpLmYdz/8KGdcmPdwGfdZ
dD/K71YrdeCHYEdShgx8V6n7sqY9495OdrNqGxYbrBx29YZ1QRJBhbcdhdV3IGrB
3QoeWmL2sNx9VbqluB6AkVH53l2VsQM9cJ1+FMotnFAnOKu9sTWmwxk2k/0fGqjj
iVkDaQ1hDlIX7fKXZH8d4tlSnHszOe2YO3SwgPbrazItHPUFx672Z2aC85lCpxXl
bsEs3tIgIuwwkjN31sBIQ/VQBw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:17:06 2026 by rpki-client