Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft
File:                     CkIqY5fY62yzV3UpfOtVpeGP4eI.mft (raw, json)
Hash identifier:          vYss+olaupTNnCtHn/8hH3lCZdWB+Fy/Ct5BJEj5KrM=
Subject key identifier:   FE:77:57:84:C8:CB:45:DD:E4:BD:6C:1C:11:66:5C:10:1A:B7:33:85
Authority key identifier: 0A:42:2A:63:97:D8:EB:6C:B3:57:75:29:7C:EB:55:A5:E1:8F:E1:E2
Certificate issuer:       /CN=A9176AFD/serialNumber=0A422A6397D8EB6CB35775297CEB55A5E18FE1E2
Certificate serial:       197E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkIqY5fY62yzV3UpfOtVpeGP4eI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft
Manifest number:          196A
Signing time:             Sat 18 Apr 2026 16:20:31 +0000
Manifest this update:     Sat 18 Apr 2026 16:20:31 +0000
Manifest next update:     Sat 25 Apr 2026 16:20:31 +0000
Files and hashes:         1: CkIqY5fY62yzV3UpfOtVpeGP4eI.crl (hash: pqp6f2acER4NnPtIStdi3T3TFQVsVA+ICgULbxkXgLI=)
                          2: D6D99A3EBE3711EDA6617C5DC4F9AE02.roa (hash: FF3AIYHnenSUuGagUXAW6Yxw88+RVwJAWvdOH/bQVLA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.crl
                          rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkIqY5fY62yzV3UpfOtVpeGP4eI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 16:20:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6526 (0x197e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176AFD, serialNumber=0A422A6397D8EB6CB35775297CEB55A5E18FE1E2
        Validity
            Not Before: Apr 18 16:20:31 2026 GMT
            Not After : Apr 25 16:20:31 2026 GMT
        Subject: CN=69e3af4f-51af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:af:bc:f2:12:80:92:6b:03:37:c4:a5:3d:f3:
                    67:66:92:03:3a:d5:23:e6:e6:63:6d:12:c7:e6:02:
                    aa:69:58:b5:8c:57:53:e3:e2:00:63:20:42:74:b6:
                    d9:db:86:ab:f2:26:38:36:66:87:04:a2:40:10:38:
                    2f:5b:6e:22:f7:71:20:48:54:94:b1:aa:bd:88:38:
                    23:9d:0e:9d:2f:ad:91:30:00:90:e4:de:6b:40:a0:
                    78:ad:5b:ec:f2:ba:fb:5d:e3:ae:73:b2:8a:77:1d:
                    5a:b2:0b:25:cf:0a:b5:6f:73:e7:77:8b:48:79:2f:
                    f2:a5:96:82:cb:fb:76:df:38:fd:0f:64:87:db:70:
                    93:0a:f3:df:59:a8:79:02:6a:34:85:46:a8:f1:fe:
                    f3:f1:2f:53:e6:06:5f:8c:5c:d9:c5:8b:c4:c4:6b:
                    a7:eb:3e:55:2f:a0:3f:f0:38:b5:5c:0d:de:15:d1:
                    12:36:00:da:88:4e:d3:3d:ed:17:05:7a:37:27:97:
                    e8:17:01:8b:58:33:e2:8b:ec:ec:d5:57:0a:e4:51:
                    59:5c:c5:a4:45:2d:b1:3a:a5:60:4b:6d:60:66:ba:
                    52:78:0f:7b:e4:c2:65:df:e2:9b:b4:79:96:73:4b:
                    8f:67:62:71:91:5a:12:f9:5c:d6:0e:53:1b:14:5e:
                    a4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:77:57:84:C8:CB:45:DD:E4:BD:6C:1C:11:66:5C:10:1A:B7:33:85
            X509v3 Authority Key Identifier:
                keyid:0A:42:2A:63:97:D8:EB:6C:B3:57:75:29:7C:EB:55:A5:E1:8F:E1:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkIqY5fY62yzV3UpfOtVpeGP4eI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:b7:3b:58:61:ed:33:c6:e1:51:bb:36:14:1c:1a:3e:c7:1b:
         94:78:a1:34:7b:78:bd:6d:f3:dd:11:ca:04:1a:36:40:2b:d3:
         64:47:3f:c8:8c:a0:89:19:8d:bd:e3:2f:d0:a2:17:1a:bd:d7:
         83:81:61:b1:75:bd:d8:71:07:73:02:56:79:96:62:24:8f:c2:
         c0:0a:74:47:8c:7d:a4:d7:44:07:c1:ec:21:4a:22:fc:f0:6c:
         07:a2:1d:95:8c:f7:1a:d6:d1:7b:16:78:cd:96:2e:c0:63:e0:
         27:b2:9b:c0:4e:79:78:bb:c1:e3:19:71:19:a3:5d:79:c3:bb:
         80:ce:46:f5:9e:69:18:f8:2f:10:d2:b7:88:51:04:f1:75:eb:
         2f:cd:22:57:2f:2f:58:54:a3:9b:b9:8f:2f:f4:fc:06:a4:7a:
         a3:2a:5b:a3:3e:ee:97:2c:3e:64:bb:24:c2:c2:a4:86:59:6f:
         ac:45:d9:36:96:d8:f5:31:47:46:ef:60:63:9f:19:33:e4:89:
         98:aa:dc:15:23:50:95:69:f4:c9:0a:5e:c6:34:7d:e4:32:0d:
         59:02:ed:fc:65:0a:91:80:cb:4f:9d:89:d2:eb:66:8a:d6:bf:
         c1:14:d6:83:e6:76:ff:29:bb:08:6c:99:e2:8f:ef:88:bf:7f:
         21:bf:b3:43
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzZBRkQxMTAvBgNVBAUTKDBBNDIyQTYzOTdEOEVCNkNCMzU3NzUyOTdDRUI1NUE1
RTE4RkUxRTIwHhcNMjYwNDE4MTYyMDMxWhcNMjYwNDI1MTYyMDMxWjAYMRYwFAYD
VQQDEw02OWUzYWY0Zi01MWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA06+88hKAkmsDN8SlPfNnZpIDOtUj5uZjbRLH5gKqaVi1jFdT4+IAYyBCdLbZ
24ar8iY4NmaHBKJAEDgvW24i93EgSFSUsaq9iDgjnQ6dL62RMACQ5N5rQKB4rVvs
8rr7XeOuc7KKdx1asgslzwq1b3Pnd4tIeS/ypZaCy/t23zj9D2SH23CTCvPfWah5
Amo0hUao8f7z8S9T5gZfjFzZxYvExGun6z5VL6A/8Di1XA3eFdESNgDaiE7TPe0X
BXo3J5foFwGLWDPii+zs1VcK5FFZXMWkRS2xOqVgS21gZrpSeA975MJl3+KbtHmW
c0uPZ2JxkVoS+VzWDlMbFF6kWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP53V4TI
y0Xd5L1sHBFmXBAatzOFMB8GA1UdIwQYMBaAFApCKmOX2Otss1d1KXzrVaXhj+Hi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkFGRC81QkIyMjMwQTky
RjgxMUU3ODRDQTBFNUNDNEY5QUUwMi9Da0lxWTVmWTYyeXpWM1VwZk90VnBlR1A0
ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NrSXFZNWZZNjJ5elYzVXBmT3RWcGVHUDRlSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NkFGRC81QkIyMjMwQTkyRjgxMUU3ODRDQTBFNUNDNEY5QUUwMi9Da0lxWTVmWTYy
eXpWM1VwZk90VnBlR1A0ZUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANLc7WGHtM8bhUbs2FBwaPscblHihNHt4vW3z3RHKBBo2QCvTZEc/yIygiRmN
veMv0KIXGr3Xg4FhsXW92HEHcwJWeZZiJI/CwAp0R4x9pNdEB8HsIUoi/PBsB6Id
lYz3GtbRexZ4zZYuwGPgJ7KbwE55eLvB4xlxGaNdecO7gM5G9Z5pGPgvENK3iFEE
8XXrL80iVy8vWFSjm7mPL/T8BqR6oypboz7ulyw+ZLskwsKkhllvrEXZNpbY9TFH
Ru9gY58ZM+SJmKrcFSNQlWn0yQpexjR95DINWQLt/GUKkYDLT52J0utmita/wRTW
g+Z2/ym7CGyZ4o/viL9/Ib+zQw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:16:45 2026 by rpki-client