Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.mft
File:                     ezWJ19jaa93mDzmOflK6heWuM1c.mft (raw, json)
Hash identifier:          D4FIPTMoClnWhUbHBysmOO62V5KtI/d0uqnLdOBxj+c=
Subject key identifier:   8F:74:65:53:70:34:AD:6F:29:06:71:5B:2B:92:A3:A9:A6:D6:B7:B7
Authority key identifier: 7B:35:89:D7:D8:DA:6B:DD:E6:0F:39:8E:7E:52:BA:85:E5:AE:33:57
Certificate issuer:       /CN=A916EF76/serialNumber=7B3589D7D8DA6BDDE60F398E7E52BA85E5AE3357
Certificate serial:       18A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezWJ19jaa93mDzmOflK6heWuM1c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.mft
Manifest number:          189C
Signing time:             Thu 16 Apr 2026 16:25:50 +0000
Manifest this update:     Thu 16 Apr 2026 16:25:49 +0000
Manifest next update:     Thu 23 Apr 2026 16:25:49 +0000
Files and hashes:         1: ezWJ19jaa93mDzmOflK6heWuM1c.crl (hash: InhNcpzxHTAKAX4KP6Bkikcm0OpE8ib0d1Njem/8j9w=)
                          2: B4F0A9F800A011E8B6C9E20AC4F9AE02.roa (hash: uLAMMJ1ZH6DI7iyetTkGs+yUb4BJj72QELCzByPN7qk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.crl
                          rsync://rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezWJ19jaa93mDzmOflK6heWuM1c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 16:25:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6311 (0x18a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916EF76, serialNumber=7B3589D7D8DA6BDDE60F398E7E52BA85E5AE3357
        Validity
            Not Before: Apr 16 16:25:49 2026 GMT
            Not After : Apr 23 16:25:49 2026 GMT
        Subject: CN=69e10d8d-af83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5c:77:25:e7:2a:00:9b:cc:fc:1d:e3:2c:d5:
                    e3:13:e7:0b:c7:55:b3:06:d4:54:f2:c9:7d:3c:23:
                    24:71:b5:52:44:0d:15:27:10:10:cc:e4:7a:b7:0f:
                    13:43:73:10:a0:90:bd:ce:67:2d:7a:30:0d:9a:cc:
                    86:c0:09:10:3c:a6:87:c1:33:05:82:87:61:b4:70:
                    85:ff:16:63:53:db:3d:e7:1e:ae:b9:05:4e:b6:fa:
                    d1:08:15:d3:3c:ba:6c:e5:3e:c5:c0:2e:6a:8f:f9:
                    df:79:cc:4f:ec:00:29:0f:0c:9d:9c:5a:10:17:f8:
                    d3:12:91:c9:b6:09:af:65:c4:d9:8b:3f:fd:ea:c4:
                    bc:ba:f4:95:4c:d9:e8:9b:1e:c8:8c:d5:d4:1f:a3:
                    2b:ea:b3:05:0e:97:ee:7b:c8:65:d2:d5:86:25:11:
                    d3:59:7d:ff:e4:8e:31:5b:37:98:72:e2:58:dc:e0:
                    91:73:e3:f7:42:ae:d6:a1:11:18:57:03:10:b6:a8:
                    ed:c5:50:3d:74:0f:74:59:79:e0:1d:11:69:19:ed:
                    1c:3d:53:00:db:71:1c:cc:e2:9a:f1:c1:f8:1f:b2:
                    31:0a:b1:97:f5:46:5a:a4:b4:3d:11:b0:0c:b2:37:
                    11:f4:fc:96:e7:ab:d1:ac:ff:44:b4:cc:3d:ba:b8:
                    d2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:74:65:53:70:34:AD:6F:29:06:71:5B:2B:92:A3:A9:A6:D6:B7:B7
            X509v3 Authority Key Identifier:
                keyid:7B:35:89:D7:D8:DA:6B:DD:E6:0F:39:8E:7E:52:BA:85:E5:AE:33:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezWJ19jaa93mDzmOflK6heWuM1c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:41:33:c5:3a:81:97:a9:bd:0a:2e:1e:1f:e0:1c:ae:f0:ad:
         4d:c7:3f:d9:cc:16:f2:d2:1e:c6:02:ce:c0:d7:38:9f:32:90:
         5d:49:12:22:e2:c9:64:b8:82:2f:80:4f:81:95:79:ce:a7:a1:
         90:35:bc:a8:1c:26:8a:01:2b:26:50:dc:e3:c1:34:ad:c3:2f:
         f6:9c:f9:e5:5e:5a:78:fe:f7:fe:63:47:8a:5f:13:eb:58:3b:
         2d:f5:69:82:c9:27:3c:5f:78:99:86:e9:ce:c9:7b:f2:fa:9c:
         1a:24:a4:38:b5:49:64:5c:44:f9:28:c8:87:9a:36:da:34:eb:
         66:06:20:aa:b4:bb:3f:d2:67:4b:c2:ee:4c:5d:7f:d0:b6:72:
         0d:d2:be:95:b0:37:78:b5:a7:56:e4:e0:3a:09:b8:7f:79:0f:
         3d:e9:54:72:78:d4:22:8c:fe:9e:c2:2f:4a:e9:ca:0c:f7:9d:
         57:25:71:6e:b1:ef:75:fd:ff:7f:e1:98:f4:e6:31:5e:14:b1:
         e6:df:4f:5c:87:4b:33:e1:98:6c:07:b0:7a:2b:3a:cb:9c:4b:
         ab:67:14:61:88:1f:3b:11:b6:b3:c8:7f:48:53:61:cd:eb:4d:
         68:b5:80:27:3f:f6:91:e8:6f:fd:fd:06:4f:07:d9:87:e8:3a:
         22:bc:af:8d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkVGNzYxMTAvBgNVBAUTKDdCMzU4OUQ3RDhEQTZCRERFNjBGMzk4RTdFNTJCQTg1
RTVBRTMzNTcwHhcNMjYwNDE2MTYyNTQ5WhcNMjYwNDIzMTYyNTQ5WjAYMRYwFAYD
VQQDEw02OWUxMGQ4ZC1hZjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAolx3JecqAJvM/B3jLNXjE+cLx1WzBtRU8sl9PCMkcbVSRA0VJxAQzOR6tw8T
Q3MQoJC9zmctejANmsyGwAkQPKaHwTMFgodhtHCF/xZjU9s95x6uuQVOtvrRCBXT
PLps5T7FwC5qj/nfecxP7AApDwydnFoQF/jTEpHJtgmvZcTZiz/96sS8uvSVTNno
mx7IjNXUH6Mr6rMFDpfue8hl0tWGJRHTWX3/5I4xWzeYcuJY3OCRc+P3Qq7WoREY
VwMQtqjtxVA9dA90WXngHRFpGe0cPVMA23EczOKa8cH4H7IxCrGX9UZapLQ9EbAM
sjcR9PyW56vRrP9EtMw9urjSnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI90ZVNw
NK1vKQZxWyuSo6mm1re3MB8GA1UdIwQYMBaAFHs1idfY2mvd5g85jn5SuoXlrjNX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUY3Ni8yOUJFNThGMEI4
Q0QxMUU3OUU0MzE4NjFDNEY5QUUwMi9leldKMTlqYWE5M21Eem1PZmxLNmhlV3VN
MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2V6V0oxOWphYTkzbUR6bU9mbEs2aGVXdU0xYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RUY3Ni8yOUJFNThGMEI4Q0QxMUU3OUU0MzE4NjFDNEY5QUUwMi9leldKMTlqYWE5
M21Eem1PZmxLNmhlV3VNMWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAi0EzxTqBl6m9Ci4eH+AcrvCtTcc/2cwW8tIexgLOwNc4nzKQXUkSIuLJZLiC
L4BPgZV5zqehkDW8qBwmigErJlDc48E0rcMv9pz55V5aeP73/mNHil8T61g7LfVp
gsknPF94mYbpzsl78vqcGiSkOLVJZFxE+SjIh5o22jTrZgYgqrS7P9JnS8LuTF1/
0LZyDdK+lbA3eLWnVuTgOgm4f3kPPelUcnjUIoz+nsIvSunKDPedVyVxbrHvdf3/
f+GY9OYxXhSx5t9PXIdLM+GYbAeweis6y5xLq2cUYYgfOxG2s8h/SFNhzetNaLWA
Jz/2kehv/f0GTwfZh+g6IryvjQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:37:46 2026 by rpki-client