Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/DGhYIowwF0gr3H85geiYuVbaoCk.mft
File:                     DGhYIowwF0gr3H85geiYuVbaoCk.mft (raw, json)
Hash identifier:          trrUUpbPJrBZLZ0u9MXU9BGWgvhJwK6eZuhne+kdLn0=
Subject key identifier:   4C:4A:7A:95:A0:A8:85:97:85:2F:25:3D:01:76:A9:FB:04:9B:97:A6
Authority key identifier: 0C:68:58:22:8C:30:17:48:2B:DC:7F:39:81:E8:98:B9:56:DA:A0:29
Certificate issuer:       /CN=A9170975/serialNumber=0C6858228C3017482BDC7F3981E898B956DAA029
Certificate serial:       B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGhYIowwF0gr3H85geiYuVbaoCk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/DGhYIowwF0gr3H85geiYuVbaoCk.mft
Manifest number:          AD
Signing time:             Sun 19 Apr 2026 06:48:40 +0000
Manifest this update:     Sun 19 Apr 2026 06:48:40 +0000
Manifest next update:     Sun 26 Apr 2026 06:48:40 +0000
Files and hashes:         1: DGhYIowwF0gr3H85geiYuVbaoCk.crl (hash: Dqt2v297GMQu46wT5iHv339x76c1/1dR8VdysRPKWig=)
                          2: B12A39803A2A11F09E37DB48C4F9AE02.roa (hash: CoN2ChPQA1qn/Xvwh+q1CXaNL7awqOvoz+KnawFyjQE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/DGhYIowwF0gr3H85geiYuVbaoCk.crl
                          rsync://rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/DGhYIowwF0gr3H85geiYuVbaoCk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGhYIowwF0gr3H85geiYuVbaoCk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177 (0xb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170975, serialNumber=0C6858228C3017482BDC7F3981E898B956DAA029
        Validity
            Not Before: Apr 19 06:48:40 2026 GMT
            Not After : Apr 26 06:48:40 2026 GMT
        Subject: CN=69e47ac8-6bf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:6b:e5:a5:ed:f6:eb:65:e9:49:8c:a7:9a:f3:
                    c2:0b:fc:34:ea:b3:d8:31:45:71:44:b1:4d:56:d1:
                    09:73:3d:e4:e0:da:a8:30:8d:39:fc:bd:29:dd:5e:
                    09:6a:3b:db:79:53:95:a6:16:45:6f:61:bb:77:ea:
                    99:b4:bb:2c:01:c6:04:f4:e9:ef:72:4d:11:20:00:
                    07:92:27:ce:f6:af:13:39:c7:41:20:17:c3:8e:96:
                    5a:d2:46:41:b9:59:72:1c:29:9e:af:42:76:e5:dd:
                    f6:24:ca:40:0d:4f:50:fc:ce:44:93:2c:77:a8:45:
                    a2:a0:e9:ae:02:4f:6a:9a:14:1c:ff:69:22:f3:53:
                    93:32:fc:c9:0b:6a:16:cc:39:fa:5d:b1:64:7a:94:
                    51:e0:37:61:2f:72:67:c5:8b:a0:cd:64:72:44:64:
                    e7:5a:c7:9d:84:19:17:dd:72:25:d9:03:41:e4:25:
                    ca:7d:73:8a:0c:32:13:3a:16:9e:3f:8c:d5:c2:31:
                    0f:04:f9:0f:5b:9b:ac:6d:62:f2:07:c1:0b:9b:76:
                    bf:2e:97:00:0b:8b:dd:a1:5b:71:ba:da:46:91:19:
                    ab:3c:d1:ce:b7:f9:68:9f:a6:bb:65:a1:49:95:02:
                    43:81:96:38:56:58:30:61:de:28:28:1a:57:b2:ec:
                    18:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:4A:7A:95:A0:A8:85:97:85:2F:25:3D:01:76:A9:FB:04:9B:97:A6
            X509v3 Authority Key Identifier:
                keyid:0C:68:58:22:8C:30:17:48:2B:DC:7F:39:81:E8:98:B9:56:DA:A0:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/DGhYIowwF0gr3H85geiYuVbaoCk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGhYIowwF0gr3H85geiYuVbaoCk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/DGhYIowwF0gr3H85geiYuVbaoCk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:24:3f:2b:8e:10:78:df:ee:08:ba:d5:95:30:98:fd:86:ce:
         c5:0d:1e:1f:70:52:93:ba:13:52:25:5f:46:bf:8e:61:05:12:
         f2:02:b5:59:46:3c:a5:e1:90:95:b4:80:0e:56:4e:fc:3e:e3:
         e3:2f:c8:44:6f:81:5a:3d:f8:e6:10:bf:2d:df:3d:77:c1:a3:
         94:fb:27:c8:9f:51:ef:91:0a:d3:84:2b:ac:8b:45:6a:0a:46:
         74:1d:7d:28:f9:71:b3:8d:dc:f4:13:8f:ae:b6:25:62:0d:77:
         52:45:b2:6a:75:26:2a:49:b2:cb:81:c9:12:8e:9c:6f:82:e5:
         91:a3:c9:0e:4b:bf:a9:8d:03:26:00:e5:23:ab:d4:64:aa:7c:
         0d:3a:64:00:8a:8e:9c:a9:dc:ea:0d:57:4c:a2:f5:b2:cb:12:
         b4:e9:38:2d:c3:d2:1f:a6:8e:2d:b4:c3:20:f0:45:62:22:27:
         b7:47:52:aa:f5:0b:cd:d3:75:50:01:f9:fe:1a:c6:f3:61:24:
         40:87:4f:64:cd:4e:90:39:7b:c3:1a:0b:00:7d:dc:66:7c:c1:
         91:fa:4b:ad:b4:58:1a:bd:a1:82:a9:b6:84:e4:78:3f:ad:42:
         e3:3b:10:66:3f:06:17:46:60:1e:55:d8:d2:bd:a1:fe:79:a9:
         f0:72:43:7b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzA5NzUxMTAvBgNVBAUTKDBDNjg1ODIyOEMzMDE3NDgyQkRDN0YzOTgxRTg5OEI5
NTZEQUEwMjkwHhcNMjYwNDE5MDY0ODQwWhcNMjYwNDI2MDY0ODQwWjAYMRYwFAYD
VQQDEw02OWU0N2FjOC02YmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7mvlpe3262XpSYynmvPCC/w06rPYMUVxRLFNVtEJcz3k4NqoMI05/L0p3V4J
ajvbeVOVphZFb2G7d+qZtLssAcYE9Onvck0RIAAHkifO9q8TOcdBIBfDjpZa0kZB
uVlyHCmer0J25d32JMpADU9Q/M5Ekyx3qEWioOmuAk9qmhQc/2ki81OTMvzJC2oW
zDn6XbFkepRR4DdhL3JnxYugzWRyRGTnWsedhBkX3XIl2QNB5CXKfXOKDDITOhae
P4zVwjEPBPkPW5usbWLyB8ELm3a/LpcAC4vdoVtxutpGkRmrPNHOt/lon6a7ZaFJ
lQJDgZY4VlgwYd4oKBpXsuwYHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFExKepWg
qIWXhS8lPQF2qfsEm5emMB8GA1UdIwQYMBaAFAxoWCKMMBdIK9x/OYHomLlW2qAp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDk3NS82N0M3QTQyQTNB
MjYxMUYwQkNDRjVFMUZDNEY5QUUwMi9ER2hZSW93d0YwZ3IzSDg1Z2VpWXVWYmFv
Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RHaFlJb3d3RjBncjNIODVnZWlZdVZiYW9Day5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MDk3NS82N0M3QTQyQTNBMjYxMUYwQkNDRjVFMUZDNEY5QUUwMi9ER2hZSW93d0Yw
Z3IzSDg1Z2VpWXVWYmFvQ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMCQ/K44QeN/uCLrVlTCY/YbOxQ0eH3BSk7oTUiVfRr+OYQUS8gK1WUY8peGQ
lbSADlZO/D7j4y/IRG+BWj345hC/Ld89d8GjlPsnyJ9R75EK04QrrItFagpGdB19
KPlxs43c9BOPrrYlYg13UkWyanUmKkmyy4HJEo6cb4LlkaPJDku/qY0DJgDlI6vU
ZKp8DTpkAIqOnKnc6g1XTKL1sssStOk4LcPSH6aOLbTDIPBFYiInt0dSqvULzdN1
UAH5/hrG82EkQIdPZM1OkDl7wxoLAH3cZnzBkfpLrbRYGr2hgqm2hOR4P61C4zsQ
Zj8GF0ZgHlXY0r2h/nmp8HJDew==
-----END CERTIFICATE-----
Generated at Sun Apr 19 13:01:01 2026 by rpki-client