Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft
File:                     Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft (raw, json)
Hash identifier:          Jcy/+R+HslCgy5JhKkXzQHviyoiNtGdPv1tW7WDrABo=
Subject key identifier:   72:50:1A:4B:55:FA:BF:85:69:CC:7D:91:76:6D:EB:52:8C:BE:97:89
Authority key identifier: 21:BE:8C:8F:E9:53:F6:EC:97:B7:F1:21:61:7E:D9:10:47:DA:A5:A4
Certificate issuer:       /CN=A9176302/serialNumber=21BE8C8FE953F6EC97B7F121617ED91047DAA5A4
Certificate serial:       015E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft
Manifest number:          0157
Signing time:             Fri 17 Apr 2026 04:46:21 +0000
Manifest this update:     Fri 17 Apr 2026 04:46:21 +0000
Manifest next update:     Fri 24 Apr 2026 04:46:21 +0000
Files and hashes:         1: Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.crl (hash: hHvDY0fnifJ1joPrUFifhWVTHlktlCGVvhPM/UHiaVA=)
                          2: 0EE57B38378F11EF88F9BF5AC4F9AE02.roa (hash: WHnvu+Pkyj9CrMAjMQLr+EPjFUT9HZOr2H0sC02K+Yc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.crl
                          rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:46:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 350 (0x15e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176302, serialNumber=21BE8C8FE953F6EC97B7F121617ED91047DAA5A4
        Validity
            Not Before: Apr 17 04:46:21 2026 GMT
            Not After : Apr 24 04:46:21 2026 GMT
        Subject: CN=69e1bb1d-d432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a6:6c:cc:68:db:f0:72:90:07:a9:92:68:af:
                    41:fb:58:59:f4:ab:bf:53:48:d6:50:68:e7:76:4a:
                    b3:77:d4:2e:d7:9a:07:0e:c9:9e:72:3f:2f:01:88:
                    cd:7f:58:22:59:a2:8f:56:d8:52:1c:96:bd:e2:d2:
                    81:d2:8c:b8:28:d0:6f:63:21:87:24:c6:ce:84:d2:
                    3a:04:8f:20:60:32:80:9b:ae:16:1f:19:f2:f8:25:
                    62:e8:0b:3b:75:7d:ff:99:b6:5e:d5:5e:5c:a7:77:
                    a1:0f:84:e6:4b:6e:dd:c3:4a:ce:fd:9a:40:a1:5e:
                    ae:b5:d4:ba:ca:78:97:5c:8e:b0:f6:a9:45:24:9f:
                    36:21:62:6b:68:a2:23:a4:6b:b7:ff:ad:42:d7:51:
                    98:73:14:5a:1c:b5:e0:7f:c9:4a:dd:74:c2:9c:e7:
                    7d:7f:fd:0f:af:d2:0c:42:1e:aa:46:dc:7d:06:95:
                    7f:a5:4b:cd:1b:cd:e0:af:db:8b:74:83:28:e9:e9:
                    03:8f:f4:0a:cb:61:69:c5:0a:6b:61:ce:03:ca:7a:
                    eb:6b:7b:2f:09:d2:da:2a:73:39:19:4b:24:9a:61:
                    48:0e:c7:95:ea:a3:31:9a:51:3f:aa:f9:61:b5:b6:
                    c4:dd:7a:22:e9:52:9b:6a:e4:88:e6:c2:a6:ef:f9:
                    2c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:50:1A:4B:55:FA:BF:85:69:CC:7D:91:76:6D:EB:52:8C:BE:97:89
            X509v3 Authority Key Identifier:
                keyid:21:BE:8C:8F:E9:53:F6:EC:97:B7:F1:21:61:7E:D9:10:47:DA:A5:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:bc:16:3d:98:52:36:3b:f6:31:63:44:5c:96:57:b6:79:6c:
         e4:5e:98:a5:26:1a:ac:89:23:ed:66:f3:f8:85:7d:b4:b1:ac:
         03:11:d9:6b:c7:b3:76:d1:6a:fc:e2:ac:f5:7a:e3:14:d7:00:
         28:f4:62:39:55:e2:2a:75:95:f3:f4:1e:4f:78:37:37:60:a1:
         c1:ce:c6:7c:d5:17:57:da:cf:73:26:ba:db:b6:93:13:87:88:
         38:ae:a3:dc:49:11:31:41:ca:5a:ec:2f:20:a2:11:b8:48:31:
         ae:92:46:ad:83:fe:52:17:09:c1:e0:c0:75:fd:d3:e4:44:30:
         73:39:58:df:d8:ab:f7:e4:29:78:5e:74:c0:c3:e6:86:bc:3b:
         71:cd:70:46:e9:07:5e:97:06:19:1a:71:65:b3:cf:6c:2b:5b:
         5a:05:60:31:17:22:02:5d:3f:6c:c0:20:3a:c4:bc:ad:a2:94:
         a8:11:05:ed:89:85:3f:b8:f7:32:fc:80:58:81:31:a0:9c:ab:
         31:3c:15:4d:92:5d:cc:65:cc:a4:44:49:0a:a8:11:2a:e3:af:
         4d:7e:f6:d4:9c:ed:a7:9b:59:2d:6a:2a:5e:de:74:90:e9:e0:
         6b:9c:99:42:24:fe:92:d8:ea:24:62:a0:b7:ae:92:96:0c:99:
         a5:20:d2:27
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzYzMDIxMTAvBgNVBAUTKDIxQkU4QzhGRTk1M0Y2RUM5N0I3RjEyMTYxN0VEOTEw
NDdEQUE1QTQwHhcNMjYwNDE3MDQ0NjIxWhcNMjYwNDI0MDQ0NjIxWjAYMRYwFAYD
VQQDEw02OWUxYmIxZC1kNDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqaZszGjb8HKQB6mSaK9B+1hZ9Ku/U0jWUGjndkqzd9Qu15oHDsmecj8vAYjN
f1giWaKPVthSHJa94tKB0oy4KNBvYyGHJMbOhNI6BI8gYDKAm64WHxny+CVi6As7
dX3/mbZe1V5cp3ehD4TmS27dw0rO/ZpAoV6utdS6yniXXI6w9qlFJJ82IWJraKIj
pGu3/61C11GYcxRaHLXgf8lK3XTCnOd9f/0Pr9IMQh6qRtx9BpV/pUvNG83gr9uL
dIMo6ekDj/QKy2FpxQprYc4Dynrra3svCdLaKnM5GUskmmFIDseV6qMxmlE/qvlh
tbbE3Xoi6VKbauSI5sKm7/ksGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHJQGktV
+r+Facx9kXZt61KMvpeJMB8GA1UdIwQYMBaAFCG+jI/pU/bsl7fxIWF+2RBH2qWk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjMwMi9BMzJGREZERTM3
NDYxMUVGOTY2NTMzMjZDNEY5QUUwMi9JYjZNai1sVDl1eVh0X0VoWVg3WkVFZmFw
YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0liNk1qLWxUOXV5WHRfRWhZWDdaRUVmYXBhUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NjMwMi9BMzJGREZERTM3NDYxMUVGOTY2NTMzMjZDNEY5QUUwMi9JYjZNai1sVDl1
eVh0X0VoWVg3WkVFZmFwYVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAK7wWPZhSNjv2MWNEXJZXtnls5F6YpSYarIkj7Wbz+IV9tLGsAxHZa8ezdtFq
/OKs9XrjFNcAKPRiOVXiKnWV8/QeT3g3N2Chwc7GfNUXV9rPcya627aTE4eIOK6j
3EkRMUHKWuwvIKIRuEgxrpJGrYP+UhcJweDAdf3T5EQwczlY39ir9+QpeF50wMPm
hrw7cc1wRukHXpcGGRpxZbPPbCtbWgVgMRciAl0/bMAgOsS8raKUqBEF7YmFP7j3
MvyAWIExoJyrMTwVTZJdzGXMpERJCqgRKuOvTX721Jztp5tZLWoqXt50kOnga5yZ
QiT+ktjqJGKgt66SlgyZpSDSJw==
-----END CERTIFICATE-----
Generated at Sat Apr 18 06:29:43 2026 by rpki-client