Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.mft
File:                     svBcLOw1UNLTyetRODn0egAqhy4.mft (raw, json)
Hash identifier:          CeH9pFVFiun21f+aVw8eg4bephAPBeKjBZxrpr2uN5Q=
Subject key identifier:   D6:F7:D9:5B:3F:5E:8B:15:BD:DA:6E:08:49:6F:E0:BD:6C:B5:60:46
Authority key identifier: B2:F0:5C:2C:EC:35:50:D2:D3:C9:EB:51:38:39:F4:7A:00:2A:87:2E
Certificate issuer:       /CN=A9172D88/serialNumber=B2F05C2CEC3550D2D3C9EB513839F47A002A872E
Certificate serial:       0470
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svBcLOw1UNLTyetRODn0egAqhy4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.mft
Manifest number:          0462
Signing time:             Fri 17 Apr 2026 00:05:11 +0000
Manifest this update:     Fri 17 Apr 2026 00:05:10 +0000
Manifest next update:     Fri 24 Apr 2026 00:05:10 +0000
Files and hashes:         1: svBcLOw1UNLTyetRODn0egAqhy4.crl (hash: Jk0YnpuZI6jxahKSgr/6L/lvxX2Lv4p+4CE4VnVIYAM=)
                          2: C5B008F2E19211F09AA40CD1456F56BC.roa (hash: v/uYO1obaTTcY8Dn10CKOuvFJ4ozleO37cDiIW7WoAk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.crl
                          rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svBcLOw1UNLTyetRODn0egAqhy4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1136 (0x470)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172D88, serialNumber=B2F05C2CEC3550D2D3C9EB513839F47A002A872E
        Validity
            Not Before: Apr 17 00:05:10 2026 GMT
            Not After : Apr 24 00:05:10 2026 GMT
        Subject: CN=69e17937-f670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7c:0a:c4:c0:5a:5a:eb:63:98:c6:dc:fa:5d:
                    12:3b:22:28:54:c6:74:12:69:d5:83:84:f3:cf:25:
                    2a:01:a7:0a:f5:da:05:60:95:a6:7f:41:35:62:01:
                    e6:8a:a1:85:54:83:3e:ac:92:4f:41:97:54:be:c7:
                    37:5d:25:86:e2:ea:2c:ec:3d:95:b3:56:a6:98:54:
                    65:9f:6d:01:39:22:65:2e:89:91:6a:7e:d8:8a:ef:
                    43:02:11:32:39:a4:0f:50:9a:f5:a2:e5:e2:c5:56:
                    5d:9b:1f:83:77:bd:b9:11:2b:7f:72:31:d0:29:c2:
                    55:e3:0a:03:c5:f1:de:d6:ba:f5:0f:49:84:9e:ce:
                    73:cd:5a:ae:9d:c0:e6:2c:d2:59:92:ff:c1:42:0f:
                    2d:75:eb:fd:fa:32:8b:46:69:60:ba:32:c5:aa:d2:
                    7f:dc:54:a3:bb:3b:74:c2:5e:73:a3:ca:05:e5:9a:
                    79:66:f0:0f:47:55:9b:8e:cb:94:f7:de:f5:c3:94:
                    01:aa:14:f3:5e:e4:4f:9e:68:bd:74:04:f2:80:2e:
                    09:e5:de:22:f4:9d:b3:2c:ce:ec:07:3c:db:b1:b2:
                    51:ec:5c:ed:36:63:9f:42:8f:d9:6a:e1:21:fd:e5:
                    ee:91:9d:51:7a:b1:d6:b4:72:13:74:e1:1b:56:db:
                    c9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:F7:D9:5B:3F:5E:8B:15:BD:DA:6E:08:49:6F:E0:BD:6C:B5:60:46
            X509v3 Authority Key Identifier:
                keyid:B2:F0:5C:2C:EC:35:50:D2:D3:C9:EB:51:38:39:F4:7A:00:2A:87:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svBcLOw1UNLTyetRODn0egAqhy4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:86:44:a1:58:fd:18:ad:b4:08:5a:66:f9:cf:52:06:69:7c:
         47:1f:63:4a:a4:e9:eb:2a:7a:17:d6:8f:a1:1d:74:af:b7:d8:
         f4:89:b4:82:81:b6:a0:e6:b6:d1:90:5c:a0:cd:60:2e:af:4a:
         fc:1c:c7:16:49:10:be:40:94:32:1a:f5:85:a1:e5:4e:33:de:
         5a:a9:ba:58:10:17:fc:12:41:4a:05:c0:5c:d5:bc:bc:6f:0f:
         8c:8c:cd:f8:5f:be:0a:1b:f0:0d:ee:85:7a:c5:55:f9:38:99:
         78:98:86:8c:49:3b:5e:6c:b4:06:11:9f:91:29:63:f6:3a:ec:
         fe:7d:24:e6:17:84:6c:9a:72:eb:ff:13:7c:86:c7:80:05:4a:
         1e:b6:7e:f2:fb:a0:53:9f:85:3c:b9:7d:5c:c7:87:dc:8a:7a:
         b5:69:c5:a5:e4:22:bc:68:7c:b3:28:3e:df:16:9f:47:89:ef:
         1d:3d:28:48:97:66:34:2e:4e:b9:0e:6d:d3:39:fe:0d:30:9f:
         70:64:f9:a0:f9:c4:3c:7a:5b:06:1d:7f:f4:4f:be:a2:e4:77:
         20:28:c0:d6:39:9f:3d:79:55:9b:62:da:4e:58:bd:32:44:19:
         41:c9:64:d7:f0:ac:da:c7:d2:63:3e:b1:ae:87:ab:90:53:60:
         c4:18:98:d4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzJEODgxMTAvBgNVBAUTKEIyRjA1QzJDRUMzNTUwRDJEM0M5RUI1MTM4MzlGNDdB
MDAyQTg3MkUwHhcNMjYwNDE3MDAwNTEwWhcNMjYwNDI0MDAwNTEwWjAYMRYwFAYD
VQQDEw02OWUxNzkzNy1mNjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsXwKxMBaWutjmMbc+l0SOyIoVMZ0EmnVg4TzzyUqAacK9doFYJWmf0E1YgHm
iqGFVIM+rJJPQZdUvsc3XSWG4uos7D2Vs1ammFRln20BOSJlLomRan7Yiu9DAhEy
OaQPUJr1ouXixVZdmx+Dd725ESt/cjHQKcJV4woDxfHe1rr1D0mEns5zzVquncDm
LNJZkv/BQg8tdev9+jKLRmlgujLFqtJ/3FSjuzt0wl5zo8oF5Zp5ZvAPR1WbjsuU
9971w5QBqhTzXuRPnmi9dATygC4J5d4i9J2zLM7sBzzbsbJR7FztNmOfQo/ZauEh
/eXukZ1RerHWtHITdOEbVtvJkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNb32Vs/
XosVvdpuCElv4L1stWBGMB8GA1UdIwQYMBaAFLLwXCzsNVDS08nrUTg59HoAKocu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkQ4OC9GMUI3RUFCQTkz
QUMxMUVDQjY3QTMxNTJDNEY5QUUwMi9zdkJjTE93MVVOTFR5ZXRST0RuMGVnQXFo
eTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3N2QmNMT3cxVU5MVHlldFJPRG4wZWdBcWh5NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MkQ4OC9GMUI3RUFCQTkzQUMxMUVDQjY3QTMxNTJDNEY5QUUwMi9zdkJjTE93MVVO
TFR5ZXRST0RuMGVnQXFoeTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfYZEoVj9GK20CFpm+c9SBml8Rx9jSqTp6yp6F9aPoR10r7fY9Im0goG2oOa2
0ZBcoM1gLq9K/BzHFkkQvkCUMhr1haHlTjPeWqm6WBAX/BJBSgXAXNW8vG8PjIzN
+F++ChvwDe6FesVV+TiZeJiGjEk7Xmy0BhGfkSlj9jrs/n0k5heEbJpy6/8TfIbH
gAVKHrZ+8vugU5+FPLl9XMeH3Ip6tWnFpeQivGh8syg+3xafR4nvHT0oSJdmNC5O
uQ5t0zn+DTCfcGT5oPnEPHpbBh1/9E++ouR3ICjA1jmfPXlVm2LaTli9MkQZQclk
1/Cs2sfSYz6xroerkFNgxBiY1A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:43:55 2026 by rpki-client