Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.mft
File:                     H9jsfGVHrsUq1-DgvDLPfKoiHjc.mft (raw, json)
Hash identifier:          6q2iV9Hu6nmoYAUHNeaankbN5tB7IyGjfFJE3OV1zd0=
Subject key identifier:   EE:F2:4F:DA:62:B7:E9:03:1F:F1:80:86:D8:92:F9:51:E0:57:8D:8B
Authority key identifier: 1F:D8:EC:7C:65:47:AE:C5:2A:D7:E0:E0:BC:32:CF:7C:AA:22:1E:37
Certificate issuer:       /CN=A917B4DF/serialNumber=1FD8EC7C6547AEC52AD7E0E0BC32CF7CAA221E37
Certificate serial:       06A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9jsfGVHrsUq1-DgvDLPfKoiHjc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.mft
Manifest number:          069D
Signing time:             Thu 16 Apr 2026 22:20:45 +0000
Manifest this update:     Thu 16 Apr 2026 22:20:44 +0000
Manifest next update:     Thu 23 Apr 2026 22:20:44 +0000
Files and hashes:         1: H9jsfGVHrsUq1-DgvDLPfKoiHjc.crl (hash: ozZQWkiiBjLKaOy/PMjJ8hPdxk/w0i9QENnlLZLEJQE=)
                          2: F8CE85E2B30211EBA63AE482C4F9AE02.roa (hash: 2Lk4CmVFEj2uOR0iFzgVtffOiiM041R6QTALbm/THG0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.crl
                          rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9jsfGVHrsUq1-DgvDLPfKoiHjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:20:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1701 (0x6a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B4DF, serialNumber=1FD8EC7C6547AEC52AD7E0E0BC32CF7CAA221E37
        Validity
            Not Before: Apr 16 22:20:44 2026 GMT
            Not After : Apr 23 22:20:44 2026 GMT
        Subject: CN=69e160bd-bfae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f4:c4:0d:b4:2b:68:55:4b:ea:04:dc:d2:e9:
                    27:26:52:bd:60:5a:15:3a:9e:11:e4:10:c9:c4:d4:
                    c8:a4:63:69:43:46:82:8e:18:d5:f9:65:30:32:1e:
                    52:4b:2b:3d:1c:5a:45:d6:f3:2e:26:19:47:a8:1f:
                    f9:a1:13:69:c1:ae:75:cc:9c:14:8d:c8:75:72:1b:
                    58:26:5f:be:48:6b:aa:51:62:60:3a:77:e4:1c:d8:
                    97:ff:af:ff:38:14:c6:81:86:00:a7:92:55:15:9e:
                    70:76:ac:7e:9f:50:a5:ad:f2:ca:f5:ca:99:fe:30:
                    7f:70:46:8f:2c:84:91:11:59:e0:7a:29:07:e5:9d:
                    a4:16:6c:5e:58:a0:d7:ed:b8:6a:24:b6:08:84:a9:
                    3e:06:ad:27:06:c8:3b:10:c9:40:f1:61:ff:52:fd:
                    a2:f2:01:04:24:01:7c:5a:43:ed:e0:13:0a:98:dc:
                    e1:0e:4e:c5:fb:44:83:e6:ec:f2:f6:5a:12:a7:35:
                    69:b2:02:e2:07:de:6f:8f:ca:18:24:e5:fc:ba:c8:
                    ca:16:37:32:21:a2:ed:fd:7a:53:f2:0a:d9:10:cc:
                    2c:16:32:f0:89:fd:85:2e:06:ed:0a:1c:61:22:f5:
                    17:fb:86:cf:6a:b3:db:f8:c3:39:fc:33:6d:c6:57:
                    3d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F2:4F:DA:62:B7:E9:03:1F:F1:80:86:D8:92:F9:51:E0:57:8D:8B
            X509v3 Authority Key Identifier:
                keyid:1F:D8:EC:7C:65:47:AE:C5:2A:D7:E0:E0:BC:32:CF:7C:AA:22:1E:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9jsfGVHrsUq1-DgvDLPfKoiHjc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:3a:46:2b:39:ad:b8:cb:4b:df:8f:e7:f1:ea:57:6e:a2:e3:
         03:79:23:10:89:b4:a5:69:48:6b:a7:7c:1f:5b:a1:2f:5f:4d:
         cd:31:08:6b:04:0f:1d:da:ab:a9:a3:e9:43:53:01:19:19:d3:
         de:b8:26:50:8c:cf:53:fa:55:d4:f3:85:5a:62:f6:24:2d:49:
         45:b1:2f:1f:16:63:a4:bc:c5:a8:39:e6:bb:b0:af:2c:72:50:
         7c:af:b0:91:d9:b4:4b:f8:35:d6:41:88:fb:35:ba:40:48:f0:
         35:d9:95:1d:9e:4e:37:90:8c:12:e8:80:be:cc:fb:2b:ba:54:
         43:b8:55:2d:98:c5:70:cf:31:16:5f:8b:96:75:7c:05:65:02:
         26:76:0f:94:39:4e:c4:d8:50:97:fa:d8:5d:1b:90:2a:17:05:
         99:56:5e:04:b9:5a:b6:cd:dc:0a:da:aa:99:9e:a1:d0:b8:24:
         7a:6d:e4:d0:4b:c7:39:90:e4:b6:14:77:60:6e:99:81:94:d7:
         19:34:2e:90:ee:65:96:f0:c3:bd:6b:b3:1e:5a:90:87:6c:d0:
         d5:b9:4a:ff:14:c2:ef:de:60:2c:31:e4:43:b7:a1:12:a6:56:
         2e:39:0f:e8:cf:cd:8e:7f:52:e0:06:a0:1a:c4:5e:6d:b0:3c:
         3a:2b:1b:ac
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0I0REYxMTAvBgNVBAUTKDFGRDhFQzdDNjU0N0FFQzUyQUQ3RTBFMEJDMzJDRjdD
QUEyMjFFMzcwHhcNMjYwNDE2MjIyMDQ0WhcNMjYwNDIzMjIyMDQ0WjAYMRYwFAYD
VQQDEw02OWUxNjBiZC1iZmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx/TEDbQraFVL6gTc0uknJlK9YFoVOp4R5BDJxNTIpGNpQ0aCjhjV+WUwMh5S
Sys9HFpF1vMuJhlHqB/5oRNpwa51zJwUjch1chtYJl++SGuqUWJgOnfkHNiX/6//
OBTGgYYAp5JVFZ5wdqx+n1ClrfLK9cqZ/jB/cEaPLISREVngeikH5Z2kFmxeWKDX
7bhqJLYIhKk+Bq0nBsg7EMlA8WH/Uv2i8gEEJAF8WkPt4BMKmNzhDk7F+0SD5uzy
9loSpzVpsgLiB95vj8oYJOX8usjKFjcyIaLt/XpT8grZEMwsFjLwif2FLgbtChxh
IvUX+4bParPb+MM5/DNtxlc9jQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO7yT9pi
t+kDH/GAhtiS+VHgV42LMB8GA1UdIwQYMBaAFB/Y7HxlR67FKtfg4Lwyz3yqIh43
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjRERi81Q0YxRjdBMkFE
NUUxMUVCQUREOTA1NzlDNEY5QUUwMi9IOWpzZkdWSHJzVXExLURndkRMUGZLb2lI
amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0g5anNmR1ZIcnNVcTEtRGd2RExQZktvaUhqYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QjRERi81Q0YxRjdBMkFENUUxMUVCQUREOTA1NzlDNEY5QUUwMi9IOWpzZkdWSHJz
VXExLURndkRMUGZLb2lIamMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAazpGKzmtuMtL34/n8epXbqLjA3kjEIm0pWlIa6d8H1uhL19NzTEIawQPHdqr
qaPpQ1MBGRnT3rgmUIzPU/pV1POFWmL2JC1JRbEvHxZjpLzFqDnmu7CvLHJQfK+w
kdm0S/g11kGI+zW6QEjwNdmVHZ5ON5CMEuiAvsz7K7pUQ7hVLZjFcM8xFl+LlnV8
BWUCJnYPlDlOxNhQl/rYXRuQKhcFmVZeBLlats3cCtqqmZ6h0Lgkem3k0EvHOZDk
thR3YG6ZgZTXGTQukO5llvDDvWuzHlqQh2zQ1blK/xTC795gLDHkQ7ehEqZWLjkP
6M/Njn9S4AagGsRebbA8OisbrA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:32:06 2026 by rpki-client