Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/iTEhgF-UFH033MbXS2N4Rvcjl8U.mft
File:                     iTEhgF-UFH033MbXS2N4Rvcjl8U.mft (raw, json)
Hash identifier:          GwVHiCm3IP+dNpcs9xuWfAwVRDFwh9eYY/VZ/ZYRoUk=
Subject key identifier:   D4:29:E2:AF:67:4A:52:B6:B5:70:46:65:F8:0C:FF:C2:52:9B:CE:E5
Authority key identifier: 89:31:21:80:5F:94:14:7D:37:DC:C6:D7:4B:63:78:46:F7:23:97:C5
Certificate issuer:       /CN=A917E00F/serialNumber=893121805F94147D37DCC6D74B637846F72397C5
Certificate serial:       05FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iTEhgF-UFH033MbXS2N4Rvcjl8U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/iTEhgF-UFH033MbXS2N4Rvcjl8U.mft
Manifest number:          07A2
Signing time:             Thu 16 Apr 2026 22:49:28 +0000
Manifest this update:     Thu 16 Apr 2026 22:49:27 +0000
Manifest next update:     Thu 23 Apr 2026 22:49:27 +0000
Files and hashes:         1: iTEhgF-UFH033MbXS2N4Rvcjl8U.crl (hash: +dtm0gtQVqanYUWYF/vsZjg7+/oEZXaNg23eKKT3tFo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/iTEhgF-UFH033MbXS2N4Rvcjl8U.crl
                          rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/iTEhgF-UFH033MbXS2N4Rvcjl8U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iTEhgF-UFH033MbXS2N4Rvcjl8U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:49:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1530 (0x5fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E00F, serialNumber=893121805F94147D37DCC6D74B637846F72397C5
        Validity
            Not Before: Apr 16 22:49:27 2026 GMT
            Not After : Apr 23 22:49:27 2026 GMT
        Subject: CN=69e16778-f5b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:12:30:e7:24:7b:c2:92:ca:5d:2b:df:fd:5c:
                    45:bd:ae:fb:9a:01:76:12:81:9a:60:1b:b9:59:2a:
                    da:64:b3:fe:e5:dc:84:f1:37:62:e3:27:aa:71:5c:
                    d7:9c:42:d6:bc:4f:c2:b4:d3:25:f2:cd:5e:7d:ad:
                    bd:f5:2c:61:77:47:5d:12:fd:45:88:e0:2e:c2:88:
                    6a:24:78:4d:03:49:ad:95:db:4e:18:1a:61:6b:5d:
                    3d:9a:c2:5c:25:0a:b4:ff:36:e1:44:ab:08:f7:be:
                    b4:0b:f6:94:c8:64:b3:33:7b:40:10:0c:29:5f:fc:
                    54:76:e3:32:45:0c:e1:e4:ac:65:83:8e:58:e2:a2:
                    46:99:3d:9a:ae:fc:b8:e4:78:4a:d7:f5:4a:a1:d6:
                    80:72:23:a9:49:f3:4b:61:b5:2f:c4:1d:69:10:47:
                    4e:49:48:e5:af:95:a9:31:4f:fb:ee:02:9a:4e:c0:
                    d6:b7:9f:65:2a:9e:f0:55:96:07:19:c5:d2:b8:f6:
                    78:2b:dc:bb:38:68:be:1b:e9:b4:dd:8f:e2:bc:76:
                    9f:47:f6:40:7d:5e:da:21:68:be:67:11:5b:9c:22:
                    6e:27:39:0e:f0:bc:57:c7:aa:54:3a:c6:b3:2c:d5:
                    2d:60:55:5e:aa:3a:1e:6e:b7:21:b7:8a:ec:11:e3:
                    68:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:29:E2:AF:67:4A:52:B6:B5:70:46:65:F8:0C:FF:C2:52:9B:CE:E5
            X509v3 Authority Key Identifier:
                keyid:89:31:21:80:5F:94:14:7D:37:DC:C6:D7:4B:63:78:46:F7:23:97:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/iTEhgF-UFH033MbXS2N4Rvcjl8U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iTEhgF-UFH033MbXS2N4Rvcjl8U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/iTEhgF-UFH033MbXS2N4Rvcjl8U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:af:69:f9:70:0f:90:0e:65:76:fa:c3:b5:6f:e5:22:2d:fb:
         0c:e4:17:ce:0a:a6:8f:8b:98:ab:04:8a:e7:94:62:b1:0c:0c:
         3e:da:64:39:e2:be:5d:6c:b3:91:a4:a4:ea:78:b9:b5:bf:a7:
         72:a9:94:f5:f4:fe:9f:87:47:13:b9:60:93:f5:76:52:47:4d:
         a8:f3:13:1a:04:ae:14:b8:51:80:87:45:04:26:13:5f:7f:e1:
         78:30:4e:cd:85:cc:d5:66:84:85:60:17:f4:b7:f5:19:87:b0:
         d3:f8:53:84:41:77:37:c6:04:06:75:35:c8:c6:00:ab:c5:dc:
         53:ce:69:4c:66:47:5f:87:96:66:6b:00:89:32:f6:e9:c1:10:
         43:c1:d1:4b:78:66:17:84:81:71:cd:60:c8:65:b6:7a:6b:38:
         5d:0e:9b:dc:08:84:6f:45:6b:a8:91:99:c3:cf:c9:9f:72:7b:
         f8:c6:aa:de:06:6d:68:84:cd:57:61:a7:44:99:91:24:7d:92:
         07:af:66:a0:ea:4f:06:fe:e5:f6:bc:db:67:86:40:9e:b8:89:
         db:63:63:58:78:4e:4c:43:5f:84:ad:08:0a:2a:b3:16:f9:3f:
         64:84:e8:e3:41:77:c7:e2:ef:1d:98:fd:0c:f3:35:cd:30:4d:
         fb:77:23:22
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0UwMEYxMTAvBgNVBAUTKDg5MzEyMTgwNUY5NDE0N0QzN0RDQzZENzRCNjM3ODQ2
RjcyMzk3QzUwHhcNMjYwNDE2MjI0OTI3WhcNMjYwNDIzMjI0OTI3WjAYMRYwFAYD
VQQDEw02OWUxNjc3OC1mNWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtRIw5yR7wpLKXSvf/VxFva77mgF2EoGaYBu5WSraZLP+5dyE8Tdi4yeqcVzX
nELWvE/CtNMl8s1efa299Sxhd0ddEv1FiOAuwohqJHhNA0mtldtOGBpha109msJc
JQq0/zbhRKsI9760C/aUyGSzM3tAEAwpX/xUduMyRQzh5Kxlg45Y4qJGmT2arvy4
5HhK1/VKodaAciOpSfNLYbUvxB1pEEdOSUjlr5WpMU/77gKaTsDWt59lKp7wVZYH
GcXSuPZ4K9y7OGi+G+m03Y/ivHafR/ZAfV7aIWi+ZxFbnCJuJzkO8LxXx6pUOsaz
LNUtYFVeqjoebrcht4rsEeNo7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNQp4q9n
SlK2tXBGZfgM/8JSm87lMB8GA1UdIwQYMBaAFIkxIYBflBR9N9zG10tjeEb3I5fF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTAwRi9FREU0OEI5Q0VF
MjkxMUVCODA4NEI2MzhDNEY5QUUwMi9pVEVoZ0YtVUZIMDMzTWJYUzJONFJ2Y2ps
OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lURWhnRi1VRkgwMzNNYlhTMk40UnZjamw4VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RTAwRi9FREU0OEI5Q0VFMjkxMUVCODA4NEI2MzhDNEY5QUUwMi9pVEVoZ0YtVUZI
MDMzTWJYUzJONFJ2Y2psOFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApK9p+XAPkA5ldvrDtW/lIi37DOQXzgqmj4uYqwSK55RisQwMPtpkOeK+XWyz
kaSk6ni5tb+ncqmU9fT+n4dHE7lgk/V2UkdNqPMTGgSuFLhRgIdFBCYTX3/heDBO
zYXM1WaEhWAX9Lf1GYew0/hThEF3N8YEBnU1yMYAq8XcU85pTGZHX4eWZmsAiTL2
6cEQQ8HRS3hmF4SBcc1gyGW2ems4XQ6b3AiEb0VrqJGZw8/Jn3J7+Maq3gZtaITN
V2GnRJmRJH2SB69moOpPBv7l9rzbZ4ZAnriJ22NjWHhOTENfhK0ICiqzFvk/ZITo
40F3x+LvHZj9DPM1zTBN+3cjIg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:25:12 2026 by rpki-client