Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft
File:                     jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft (raw, json)
Hash identifier:          i4XsMMA5CTtAojrpLmX615tw89Msqwh31Xbhk0yWFxM=
Subject key identifier:   E3:22:A7:16:2C:3A:79:E1:8F:7B:46:BD:0B:CA:F0:91:7D:1E:33:A3
Authority key identifier: 8E:52:61:23:EF:52:CF:84:95:58:26:A2:72:8A:33:07:57:F1:E8:0C
Certificate issuer:       /CN=A917A2D1/serialNumber=8E526123EF52CF84955826A2728A330757F1E80C
Certificate serial:       014E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft
Manifest number:          0149
Signing time:             Sun 19 Apr 2026 04:50:24 +0000
Manifest this update:     Sun 19 Apr 2026 04:50:24 +0000
Manifest next update:     Sun 26 Apr 2026 04:50:24 +0000
Files and hashes:         1: jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl (hash: l3sxBLazJ0SVlyYVrB/JSFsNYmLGrSX/5Rwu/utK40U=)
                          2: 29703A0645A911EF965B5A37C4F9AE02.roa (hash: 4wQRTSw2OhfPX3cX/N9IwTaFMJyIxBXNPos7xtpMpfE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl
                          rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 334 (0x14e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A2D1, serialNumber=8E526123EF52CF84955826A2728A330757F1E80C
        Validity
            Not Before: Apr 19 04:50:24 2026 GMT
            Not After : Apr 26 04:50:24 2026 GMT
        Subject: CN=69e45f10-cab5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:23:2d:0d:3f:1a:5c:a9:c0:01:31:41:45:35:
                    00:7f:17:cd:30:b7:a1:26:02:1c:81:30:a3:73:ce:
                    1b:07:e3:89:f0:bf:3e:c1:dc:55:d1:a8:7d:39:7a:
                    cb:10:0f:b7:57:64:a6:da:d2:c7:84:7e:d9:a1:05:
                    55:42:53:c3:dd:db:7b:6c:9b:57:e9:2f:94:3e:c3:
                    b2:c9:ba:ad:de:ee:63:8a:a3:7d:68:e0:bc:97:1a:
                    73:90:ef:ee:82:db:61:39:8b:f3:70:8e:60:ef:82:
                    62:ec:b8:76:c6:32:f7:12:f3:0e:f3:0a:80:e2:d8:
                    86:4d:d9:db:31:94:63:53:08:77:51:f7:86:db:0f:
                    a0:9d:cf:ea:b6:90:e3:6d:e3:45:a5:40:b0:79:d0:
                    68:d6:ed:c2:e3:0e:51:e9:5a:b3:36:a2:d9:27:4a:
                    78:a5:b7:e2:a4:f1:68:37:b1:f2:d8:50:96:eb:7d:
                    bc:00:6d:69:1c:8e:7a:ef:69:34:a0:b6:f4:bf:bd:
                    06:a1:78:4f:50:1a:0a:34:2e:ca:26:37:0f:f8:95:
                    5c:91:6c:69:56:26:33:9e:0b:64:27:82:b3:db:25:
                    b8:39:c6:4a:89:e3:84:ba:55:28:05:bb:40:a3:6e:
                    d9:c6:a9:8b:2a:01:7b:6e:eb:40:dc:78:aa:b4:34:
                    77:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:22:A7:16:2C:3A:79:E1:8F:7B:46:BD:0B:CA:F0:91:7D:1E:33:A3
            X509v3 Authority Key Identifier:
                keyid:8E:52:61:23:EF:52:CF:84:95:58:26:A2:72:8A:33:07:57:F1:E8:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jlJhI-9Sz4SVWCaicoozB1fx6Aw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A2D1/CFEB8DAA45A811EF95C6FD2DC4F9AE02/jlJhI-9Sz4SVWCaicoozB1fx6Aw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:54:12:f2:b1:49:f3:d3:ad:65:59:9e:cd:0d:2b:a4:f2:e1:
         b9:ab:5d:d9:8d:6d:a8:69:7c:b7:51:86:82:2b:ff:6e:0c:1a:
         47:c5:2e:b7:2e:11:ee:5f:a2:07:3e:5a:10:4a:b3:f0:ce:d1:
         d2:95:44:06:ba:47:59:42:55:a7:6e:e8:0e:f5:b5:dc:57:9d:
         9d:2f:c7:07:d2:11:cd:0c:a3:07:ff:94:26:a7:15:4c:f3:4a:
         2f:3c:be:0d:cc:6a:56:b2:1d:9e:a5:38:f9:2b:b5:51:76:04:
         f7:59:0a:b1:6e:47:38:ea:d9:26:92:c0:33:b0:f9:fe:52:a0:
         2c:e1:70:c7:07:4c:f9:8c:40:2d:fd:be:57:c5:c4:7c:a9:6e:
         fe:8e:58:72:78:ab:ae:f5:56:d0:9a:03:5a:a8:d0:ea:ad:07:
         57:89:b5:78:46:03:c8:b1:54:45:5e:55:c4:4b:05:c2:5f:02:
         18:d5:aa:4e:55:ee:55:dc:bd:98:ba:77:7b:b3:c3:88:f3:95:
         ba:42:07:51:d3:5f:7e:db:e2:18:d7:ea:0d:a5:65:e6:56:bc:
         cc:6a:8e:b3:49:2c:5e:bf:57:5a:e3:25:ba:e1:a6:5c:cc:8c:
         94:6b:4c:1f:3c:f1:3d:a9:18:a1:db:83:03:be:39:b9:5f:eb:
         9b:e3:cd:d9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0EyRDExMTAvBgNVBAUTKDhFNTI2MTIzRUY1MkNGODQ5NTU4MjZBMjcyOEEzMzA3
NTdGMUU4MEMwHhcNMjYwNDE5MDQ1MDI0WhcNMjYwNDI2MDQ1MDI0WjAYMRYwFAYD
VQQDEw02OWU0NWYxMC1jYWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqCMtDT8aXKnAATFBRTUAfxfNMLehJgIcgTCjc84bB+OJ8L8+wdxV0ah9OXrL
EA+3V2Sm2tLHhH7ZoQVVQlPD3dt7bJtX6S+UPsOyybqt3u5jiqN9aOC8lxpzkO/u
gtthOYvzcI5g74Ji7Lh2xjL3EvMO8wqA4tiGTdnbMZRjUwh3UfeG2w+gnc/qtpDj
beNFpUCwedBo1u3C4w5R6VqzNqLZJ0p4pbfipPFoN7Hy2FCW6328AG1pHI5672k0
oLb0v70GoXhPUBoKNC7KJjcP+JVckWxpViYzngtkJ4Kz2yW4OcZKieOEulUoBbtA
o27ZxqmLKgF7butA3HiqtDR3mQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOMipxYs
Onnhj3tGvQvK8JF9HjOjMB8GA1UdIwQYMBaAFI5SYSPvUs+ElVgmonKKMwdX8egM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTJEMS9DRkVCOERBQTQ1
QTgxMUVGOTVDNkZEMkRDNEY5QUUwMi9qbEpoSS05U3o0U1ZXQ2FpY29vekIxZng2
QXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2psSmhJLTlTejRTVldDYWljb296QjFmeDZBdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QTJEMS9DRkVCOERBQTQ1QTgxMUVGOTVDNkZEMkRDNEY5QUUwMi9qbEpoSS05U3o0
U1ZXQ2FpY29vekIxZng2QXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAB1QS8rFJ89OtZVmezQ0rpPLhuatd2Y1tqGl8t1GGgiv/bgwaR8Uuty4R7l+i
Bz5aEEqz8M7R0pVEBrpHWUJVp27oDvW13FednS/HB9IRzQyjB/+UJqcVTPNKLzy+
DcxqVrIdnqU4+Su1UXYE91kKsW5HOOrZJpLAM7D5/lKgLOFwxwdM+YxALf2+V8XE
fKlu/o5YcnirrvVW0JoDWqjQ6q0HV4m1eEYDyLFURV5VxEsFwl8CGNWqTlXuVdy9
mLp3e7PDiPOVukIHUdNfftviGNfqDaVl5la8zGqOs0ksXr9XWuMluuGmXMyMlGtM
HzzxPakYoduDA745uV/rm+PN2Q==
-----END CERTIFICATE-----
Generated at Sun Apr 19 12:45:01 2026 by rpki-client