Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft
File:                     kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft (raw, json)
Hash identifier:          jj5t+YzczXqG2eClBvM7v7KOS+kdo8MR3Zw9apFQwsY=
Subject key identifier:   F6:FE:F3:88:04:B1:B9:1C:77:3A:90:AD:E1:E7:50:FE:11:08:CC:8E
Authority key identifier: 92:24:16:65:95:58:21:7C:93:62:7B:96:D9:C9:EA:FA:C1:FA:A3:EE
Certificate issuer:       /CN=A91774FB/serialNumber=922416659558217C93627B96D9C9EAFAC1FAA3EE
Certificate serial:       015A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kiQWZZVYIXyTYnuW2cnq-sH6o-4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft
Manifest number:          0155
Signing time:             Fri 17 Apr 2026 04:45:25 +0000
Manifest this update:     Fri 17 Apr 2026 04:45:25 +0000
Manifest next update:     Fri 24 Apr 2026 04:45:25 +0000
Files and hashes:         1: kiQWZZVYIXyTYnuW2cnq-sH6o-4.crl (hash: TO2YWPeV9kCDfR0ex4Zu8i2+/149Bb5mviOypptgIvQ=)
                          2: 671EAC66343D11EFB36ED310C4F9AE02.roa (hash: czoz5UivPk2DZLmeDI+JHyZhgkVk8064UwjiPvLfMg4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.crl
                          rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kiQWZZVYIXyTYnuW2cnq-sH6o-4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:45:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 346 (0x15a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91774FB, serialNumber=922416659558217C93627B96D9C9EAFAC1FAA3EE
        Validity
            Not Before: Apr 17 04:45:25 2026 GMT
            Not After : Apr 24 04:45:25 2026 GMT
        Subject: CN=69e1bae5-1ae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:54:65:40:8d:c3:0a:50:11:84:d4:69:79:25:
                    df:4c:87:de:fe:ea:30:91:6c:3f:ec:a0:73:fc:e5:
                    e4:62:ec:43:e7:0a:03:04:bb:21:3c:de:03:c4:b6:
                    54:e4:b9:a5:ad:8a:94:89:8e:2e:82:3e:db:7a:06:
                    87:31:a6:4d:a9:b0:87:18:5e:7e:3b:a6:3d:ac:03:
                    d5:04:b1:ec:01:e1:2d:50:04:e3:4f:24:7d:a7:08:
                    e1:46:5e:11:f8:20:c6:60:82:bd:12:1f:2b:72:19:
                    f5:bf:f5:f3:ec:e1:69:95:68:e4:32:bb:c9:1e:f2:
                    07:c9:b8:86:e9:b4:a9:7a:67:7c:41:44:c4:8a:a0:
                    3a:36:95:d1:c9:38:2d:c3:f1:4b:fe:5e:d5:a1:17:
                    fd:51:88:a2:22:c1:04:0c:5a:5b:d3:96:57:1a:ea:
                    87:e7:0c:e1:ee:99:3b:cf:42:16:fd:67:06:f3:09:
                    84:d5:f4:66:6f:b5:2b:1c:3b:32:de:1e:bf:dc:ab:
                    40:16:f0:98:d0:ba:6d:01:d5:6f:22:69:28:ff:cc:
                    5e:33:12:23:d2:38:6d:9b:d9:e1:52:09:8f:e5:e2:
                    2b:b5:28:00:1d:6f:b8:a2:9a:8e:cd:74:f1:ef:f9:
                    38:a2:bb:b0:e4:7d:39:86:78:9b:20:da:64:3e:7b:
                    90:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:FE:F3:88:04:B1:B9:1C:77:3A:90:AD:E1:E7:50:FE:11:08:CC:8E
            X509v3 Authority Key Identifier:
                keyid:92:24:16:65:95:58:21:7C:93:62:7B:96:D9:C9:EA:FA:C1:FA:A3:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kiQWZZVYIXyTYnuW2cnq-sH6o-4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:e0:50:96:b1:c7:c0:6f:52:30:d3:79:92:4d:56:db:70:18:
         df:df:87:69:f9:69:4d:29:72:ca:f1:61:0b:57:6d:5a:a4:4f:
         bd:a4:b6:bb:09:ee:c9:33:f3:f4:76:52:02:67:1e:13:4e:09:
         57:d8:8d:c3:9c:51:15:b7:4d:2e:1b:d8:73:35:67:1b:d7:a6:
         58:5a:1c:00:e8:1b:53:a0:20:ad:4c:28:ec:0d:ca:0e:49:0c:
         59:2a:d0:a1:12:c9:87:86:b1:9d:73:dd:ff:c3:4f:1d:02:9f:
         f8:aa:30:b3:b3:3a:ab:01:be:32:b6:bc:6b:ca:9e:2d:c5:80:
         68:5a:72:1f:33:a0:64:65:52:f3:ec:a3:50:03:ed:a2:a5:03:
         e2:44:32:d3:4f:11:5c:6d:6d:30:69:06:85:91:e6:bb:48:30:
         63:85:85:c1:14:27:f8:83:da:e6:42:a5:9a:8f:78:b1:e8:28:
         03:25:34:e9:85:48:a0:dc:fd:58:47:63:ad:bc:02:7c:66:07:
         82:d0:31:a8:eb:2f:d8:bf:de:d2:71:f4:cc:0f:a1:1e:91:bc:
         d1:94:ec:28:e1:8d:c9:30:e4:9a:1a:53:dc:55:a0:7d:c4:0e:
         dd:6d:4f:35:7f:41:53:86:74:bb:18:64:10:48:9b:69:5e:d3:
         07:87:d4:96
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Nzc0RkIxMTAvBgNVBAUTKDkyMjQxNjY1OTU1ODIxN0M5MzYyN0I5NkQ5QzlFQUZB
QzFGQUEzRUUwHhcNMjYwNDE3MDQ0NTI1WhcNMjYwNDI0MDQ0NTI1WjAYMRYwFAYD
VQQDEw02OWUxYmFlNS0xYWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArFRlQI3DClARhNRpeSXfTIfe/uowkWw/7KBz/OXkYuxD5woDBLshPN4DxLZU
5LmlrYqUiY4ugj7begaHMaZNqbCHGF5+O6Y9rAPVBLHsAeEtUATjTyR9pwjhRl4R
+CDGYIK9Eh8rchn1v/Xz7OFplWjkMrvJHvIHybiG6bSpemd8QUTEiqA6NpXRyTgt
w/FL/l7VoRf9UYiiIsEEDFpb05ZXGuqH5wzh7pk7z0IW/WcG8wmE1fRmb7UrHDsy
3h6/3KtAFvCY0LptAdVvImko/8xeMxIj0jhtm9nhUgmP5eIrtSgAHW+4opqOzXTx
7/k4oruw5H05hnibINpkPnuQ9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPb+84gE
sbkcdzqQreHnUP4RCMyOMB8GA1UdIwQYMBaAFJIkFmWVWCF8k2J7ltnJ6vrB+qPu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzRGQi84MTY5NzJDNjM0
MzkxMUVGOUMzRDIxM0VDNEY5QUUwMi9raVFXWlpWWUlYeVRZbnVXMmNucS1zSDZv
LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tpUVdaWlZZSVh5VFludVcyY25xLXNINm8tNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NzRGQi84MTY5NzJDNjM0MzkxMUVGOUMzRDIxM0VDNEY5QUUwMi9raVFXWlpWWUlY
eVRZbnVXMmNucS1zSDZvLTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYOBQlrHHwG9SMNN5kk1W23AY39+HaflpTSlyyvFhC1dtWqRPvaS2uwnuyTPz
9HZSAmceE04JV9iNw5xRFbdNLhvYczVnG9emWFocAOgbU6AgrUwo7A3KDkkMWSrQ
oRLJh4axnXPd/8NPHQKf+Kows7M6qwG+Mra8a8qeLcWAaFpyHzOgZGVS8+yjUAPt
oqUD4kQy008RXG1tMGkGhZHmu0gwY4WFwRQn+IPa5kKlmo94segoAyU06YVIoNz9
WEdjrbwCfGYHgtAxqOsv2L/e0nH0zA+hHpG80ZTsKOGNyTDkmhpT3FWgfcQO3W1P
NX9BU4Z0uxhkEEibaV7TB4fUlg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:07:42 2026 by rpki-client