Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916732F/06B56150D91711EB89918D7DC4F9AE02/H7TDxXlvFLOd9R77qdra_Vzr0Js.mft
File:                     H7TDxXlvFLOd9R77qdra_Vzr0Js.mft (raw, json)
Hash identifier:          q6B3AQGVb3bGaBP4PcW3NfHQGqWcyvX1iblUqifGils=
Subject key identifier:   C7:81:53:4F:ED:BA:D1:35:C6:95:8C:4B:2A:3B:54:AB:26:AB:F8:BE
Authority key identifier: 1F:B4:C3:C5:79:6F:14:B3:9D:F5:1E:FB:A9:DA:DA:FD:5C:EB:D0:9B
Certificate issuer:       /CN=A916732F/serialNumber=1FB4C3C5796F14B39DF51EFBA9DADAFD5CEBD09B
Certificate serial:       066A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7TDxXlvFLOd9R77qdra_Vzr0Js.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916732F/06B56150D91711EB89918D7DC4F9AE02/H7TDxXlvFLOd9R77qdra_Vzr0Js.mft
Manifest number:          064A
Signing time:             Sat 18 Apr 2026 22:39:48 +0000
Manifest this update:     Sat 18 Apr 2026 22:39:48 +0000
Manifest next update:     Sat 25 Apr 2026 22:39:48 +0000
Files and hashes:         1: H7TDxXlvFLOd9R77qdra_Vzr0Js.crl (hash: CfetaJ1CCeTa8vpqGLQRviIcOp1mlLkq0GxrsfsdP/o=)
                          2: 2EF7E9168D2811F0B3A81665C4F9AE02.roa (hash: AY2cMcE+jdXTc0+YGnWe4hGr2sKHPxx6mbQlYz370BQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916732F/06B56150D91711EB89918D7DC4F9AE02/H7TDxXlvFLOd9R77qdra_Vzr0Js.crl
                          rsync://rpki.apnic.net/member_repository/A916732F/06B56150D91711EB89918D7DC4F9AE02/H7TDxXlvFLOd9R77qdra_Vzr0Js.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7TDxXlvFLOd9R77qdra_Vzr0Js.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 22:39:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1642 (0x66a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916732F, serialNumber=1FB4C3C5796F14B39DF51EFBA9DADAFD5CEBD09B
        Validity
            Not Before: Apr 18 22:39:48 2026 GMT
            Not After : Apr 25 22:39:48 2026 GMT
        Subject: CN=69e40834-6f27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d6:12:ad:5e:4d:1e:f0:7f:c6:5a:0d:3f:f1:
                    51:d3:60:2e:0a:b5:94:b7:61:29:6c:94:b5:b9:41:
                    f8:fe:87:bd:d0:ba:07:76:2d:41:f3:02:64:3f:58:
                    eb:fe:8b:07:de:36:4b:0b:65:77:8e:76:8b:b8:2a:
                    b1:51:f6:9e:45:75:58:6c:bd:e6:55:ec:9a:49:a1:
                    51:c6:9e:ec:98:0b:68:d6:2b:ea:a7:20:67:0b:27:
                    6a:37:2b:ae:84:d9:93:be:75:bb:8e:e0:31:46:65:
                    65:52:63:26:63:6e:86:67:3e:b1:4a:ff:f7:73:ae:
                    b0:d2:ef:b9:c6:ac:3e:43:3f:37:7a:81:5b:34:e4:
                    52:89:1a:84:b2:2d:0c:52:8c:e1:09:d2:38:be:74:
                    1c:0b:74:57:9b:3f:27:17:2d:7b:2f:a4:f7:e2:60:
                    1a:68:bd:f0:7c:19:cd:ec:f8:0e:b0:7d:08:2f:df:
                    33:06:1b:a2:91:d2:cb:4b:76:e9:db:9e:7e:c1:dc:
                    6e:20:19:02:f1:f3:34:30:a8:82:c5:6e:66:49:34:
                    ee:cd:52:e9:9d:8b:7a:70:18:a1:ca:8d:35:2d:23:
                    8b:73:ce:f9:40:33:a5:76:0e:d9:a0:c0:1e:3d:17:
                    bc:9d:2c:d6:8f:ce:79:52:b4:ed:8f:1a:72:f7:89:
                    d0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:81:53:4F:ED:BA:D1:35:C6:95:8C:4B:2A:3B:54:AB:26:AB:F8:BE
            X509v3 Authority Key Identifier:
                keyid:1F:B4:C3:C5:79:6F:14:B3:9D:F5:1E:FB:A9:DA:DA:FD:5C:EB:D0:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916732F/06B56150D91711EB89918D7DC4F9AE02/H7TDxXlvFLOd9R77qdra_Vzr0Js.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7TDxXlvFLOd9R77qdra_Vzr0Js.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916732F/06B56150D91711EB89918D7DC4F9AE02/H7TDxXlvFLOd9R77qdra_Vzr0Js.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:0b:aa:7a:c4:ab:75:4c:64:03:35:5a:c4:52:8c:f5:77:48:
         29:94:eb:60:05:23:22:25:d9:56:01:63:5d:f9:59:4c:b4:84:
         1e:b6:6b:6b:ae:96:0e:28:7c:3f:02:3c:ec:27:62:26:7f:5d:
         0b:5a:99:6d:78:12:44:ae:d5:44:48:d9:23:f2:c9:bb:6f:4d:
         ce:76:1c:54:46:2f:b7:22:91:9a:5f:2e:af:3e:49:b5:b8:01:
         f6:20:01:5c:ae:7c:2a:60:2a:0c:07:95:61:3f:15:33:3c:2e:
         3c:25:82:97:a9:7e:c6:0c:9f:b0:7f:de:74:ba:4c:94:ad:3a:
         d3:a1:59:17:44:46:10:2a:cc:c9:6e:dd:1f:f5:92:30:08:20:
         c4:3c:59:03:94:be:b0:50:88:f0:98:aa:f5:af:98:60:96:fa:
         0c:3b:46:f2:c8:69:2e:a4:dd:b9:a5:27:d8:7c:eb:57:7d:fe:
         a7:45:57:29:e9:cd:5d:5c:8b:14:62:db:52:ff:51:07:e6:cd:
         a7:d1:b4:c7:88:60:3d:0a:d3:f7:05:89:a2:16:6b:88:82:22:
         02:10:e9:6f:82:fc:35:c9:e9:97:58:b8:19:37:99:c3:39:91:
         95:0a:fd:02:87:ed:b9:ad:3d:e3:4f:b2:22:79:16:2d:52:73:
         c7:ab:c8:0c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBmowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjczMkYxMTAvBgNVBAUTKDFGQjRDM0M1Nzk2RjE0QjM5REY1MUVGQkE5REFEQUZE
NUNFQkQwOUIwHhcNMjYwNDE4MjIzOTQ4WhcNMjYwNDI1MjIzOTQ4WjAYMRYwFAYD
VQQDEw02OWU0MDgzNC02ZjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvNYSrV5NHvB/xloNP/FR02AuCrWUt2EpbJS1uUH4/oe90LoHdi1B8wJkP1jr
/osH3jZLC2V3jnaLuCqxUfaeRXVYbL3mVeyaSaFRxp7smAto1ivqpyBnCydqNyuu
hNmTvnW7juAxRmVlUmMmY26GZz6xSv/3c66w0u+5xqw+Qz83eoFbNORSiRqEsi0M
UozhCdI4vnQcC3RXmz8nFy17L6T34mAaaL3wfBnN7PgOsH0IL98zBhuikdLLS3bp
255+wdxuIBkC8fM0MKiCxW5mSTTuzVLpnYt6cBihyo01LSOLc875QDOldg7ZoMAe
PRe8nSzWj855UrTtjxpy94nQBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMeBU0/t
utE1xpWMSyo7VKsmq/i+MB8GA1UdIwQYMBaAFB+0w8V5bxSznfUe+6na2v1c69Cb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzMyRi8wNkI1NjE1MEQ5
MTcxMUVCODk5MThEN0RDNEY5QUUwMi9IN1REeFhsdkZMT2Q5Ujc3cWRyYV9WenIw
SnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0g3VER4WGx2RkxPZDlSNzdxZHJhX1Z6cjBKcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NzMyRi8wNkI1NjE1MEQ5MTcxMUVCODk5MThEN0RDNEY5QUUwMi9IN1REeFhsdkZM
T2Q5Ujc3cWRyYV9WenIwSnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPQuqesSrdUxkAzVaxFKM9XdIKZTrYAUjIiXZVgFjXflZTLSEHrZra66WDih8
PwI87CdiJn9dC1qZbXgSRK7VREjZI/LJu29NznYcVEYvtyKRml8urz5JtbgB9iAB
XK58KmAqDAeVYT8VMzwuPCWCl6l+xgyfsH/edLpMlK0606FZF0RGECrMyW7dH/WS
MAggxDxZA5S+sFCI8Jiq9a+YYJb6DDtG8shpLqTduaUn2HzrV33+p0VXKenNXVyL
FGLbUv9RB+bNp9G0x4hgPQrT9wWJohZriIIiAhDpb4L8Ncnpl1i4GTeZwzmRlQr9
Aoftua0940+yInkWLVJzx6vIDA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 15:32:19 2026 by rpki-client