Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.mft
File:                     10rBuKMzUkP8svmQW8UdvcsOI20.mft (raw, json)
Hash identifier:          TeMZaJVLC0MbtStBvs3A0GUcJhT5TtU2i4fVaLg89po=
Subject key identifier:   02:7D:62:0F:84:8E:C8:AA:B8:41:26:A1:BD:99:0C:63:A5:E5:7B:2E
Authority key identifier: D7:4A:C1:B8:A3:33:52:43:FC:B2:F9:90:5B:C5:1D:BD:CB:0E:23:6D
Certificate issuer:       /CN=A917E726/serialNumber=D74AC1B8A3335243FCB2F9905BC51DBDCB0E236D
Certificate serial:       0B81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10rBuKMzUkP8svmQW8UdvcsOI20.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.mft
Manifest number:          0B6C
Signing time:             Sat 18 Apr 2026 19:04:57 +0000
Manifest this update:     Sat 18 Apr 2026 19:04:57 +0000
Manifest next update:     Sat 25 Apr 2026 19:04:57 +0000
Files and hashes:         1: 10rBuKMzUkP8svmQW8UdvcsOI20.crl (hash: gbvecfNNtTn+df4VFf+eIt2HjaCjm/PTo7yezIZcN2M=)
                          2: DDFB4716AB0D11F0A533CC38C4F9AE02.roa (hash: KGvT+BXS36LSoZFMU3mIKXzE14xRPswPDroW0OYanv8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.crl
                          rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10rBuKMzUkP8svmQW8UdvcsOI20.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 19:04:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2945 (0xb81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E726, serialNumber=D74AC1B8A3335243FCB2F9905BC51DBDCB0E236D
        Validity
            Not Before: Apr 18 19:04:57 2026 GMT
            Not After : Apr 25 19:04:57 2026 GMT
        Subject: CN=69e3d5d9-6ace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:71:34:fa:95:4d:65:1d:19:6d:e7:2e:e5:be:
                    f6:77:e2:38:ee:26:0c:27:a2:b8:a3:8a:29:fe:4e:
                    e7:85:61:ff:da:b6:16:fa:35:ee:5e:d0:88:b2:b7:
                    0b:20:41:fa:03:f6:a7:1f:f9:97:00:f5:d5:77:ac:
                    4e:24:85:7f:1b:a0:52:d1:a6:d8:04:aa:af:36:41:
                    5e:78:69:68:41:e6:2e:52:25:08:73:46:b5:be:59:
                    8f:ca:37:9a:96:e8:0f:05:6e:9b:4b:c5:ff:83:fb:
                    42:21:6e:bf:88:86:67:30:f0:48:93:96:d5:4c:a9:
                    f1:75:27:84:b0:3a:0a:cf:78:ad:67:77:e7:2e:28:
                    d9:ec:56:e0:8e:1c:96:d1:d1:a5:61:99:76:96:6f:
                    c5:d2:6b:0a:6f:8e:16:a5:aa:cf:38:87:42:19:1f:
                    56:79:6c:a9:91:2b:72:07:1a:9d:6d:13:e9:b9:57:
                    79:a3:6d:ea:44:19:0e:ca:23:60:b5:63:73:d0:04:
                    e6:81:25:32:4d:ff:24:75:a2:83:f9:1c:dd:4d:2b:
                    68:77:1d:9a:5b:a8:8a:33:b5:73:28:08:38:55:da:
                    3b:8e:76:d6:ff:99:e3:c6:92:16:9f:de:8b:d7:27:
                    d3:64:d2:fa:fe:35:34:4d:de:85:5e:28:95:20:96:
                    c9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:7D:62:0F:84:8E:C8:AA:B8:41:26:A1:BD:99:0C:63:A5:E5:7B:2E
            X509v3 Authority Key Identifier:
                keyid:D7:4A:C1:B8:A3:33:52:43:FC:B2:F9:90:5B:C5:1D:BD:CB:0E:23:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10rBuKMzUkP8svmQW8UdvcsOI20.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:5b:93:45:01:ac:dc:41:0a:76:25:ce:ef:60:d9:2e:2a:ad:
         45:bd:99:7c:bc:4e:5c:0f:b3:e7:a8:9e:c6:37:96:0d:b0:b3:
         5e:38:49:23:0d:52:02:86:8b:49:a3:16:bf:58:1a:e7:e0:94:
         d0:9e:56:a6:57:3e:77:1d:8a:ec:d6:ea:6b:70:6c:da:dc:5d:
         77:f6:7c:76:14:73:ec:5b:5f:1c:b2:21:6a:c1:95:4b:ae:36:
         80:ad:86:53:19:0e:a2:84:c8:e6:aa:50:36:c6:5f:4a:4c:82:
         00:a4:d0:6c:4b:f2:98:0e:66:ea:c1:0a:20:19:8e:63:87:58:
         95:90:6a:a0:e6:46:f6:bb:85:56:f0:d7:6b:61:7d:9f:0b:ee:
         52:59:e3:57:20:16:f0:3d:82:3b:e6:39:c7:b5:da:7a:d8:00:
         10:1d:d5:b8:ce:d7:42:95:a3:cb:be:03:55:08:9a:36:2b:0f:
         89:f1:fa:72:df:d0:4b:bc:09:01:1b:9c:d5:71:6e:db:e1:93:
         36:c9:7e:0c:e7:e3:d4:7f:ab:e4:23:06:c6:9a:2f:bc:74:43:
         ce:27:4b:2d:14:dc:a4:5e:cd:a1:3d:07:d2:40:67:d7:0f:65:
         bb:7e:91:be:7d:7b:8e:4e:ae:ac:a8:e7:73:48:27:04:97:46:
         1c:dd:e0:37
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC4EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0U3MjYxMTAvBgNVBAUTKEQ3NEFDMUI4QTMzMzUyNDNGQ0IyRjk5MDVCQzUxREJE
Q0IwRTIzNkQwHhcNMjYwNDE4MTkwNDU3WhcNMjYwNDI1MTkwNDU3WjAYMRYwFAYD
VQQDEw02OWUzZDVkOS02YWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoXE0+pVNZR0Zbecu5b72d+I47iYMJ6K4o4op/k7nhWH/2rYW+jXuXtCIsrcL
IEH6A/anH/mXAPXVd6xOJIV/G6BS0abYBKqvNkFeeGloQeYuUiUIc0a1vlmPyjea
lugPBW6bS8X/g/tCIW6/iIZnMPBIk5bVTKnxdSeEsDoKz3itZ3fnLijZ7FbgjhyW
0dGlYZl2lm/F0msKb44WparPOIdCGR9WeWypkStyBxqdbRPpuVd5o23qRBkOyiNg
tWNz0ATmgSUyTf8kdaKD+RzdTStodx2aW6iKM7VzKAg4Vdo7jnbW/5njxpIWn96L
1yfTZNL6/jU0Td6FXiiVIJbJ4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAJ9Yg+E
jsiquEEmob2ZDGOl5XsuMB8GA1UdIwQYMBaAFNdKwbijM1JD/LL5kFvFHb3LDiNt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTcyNi82REJGQTM4QTUy
RDkxMUVBODI3REQwODJDNEY5QUUwMi8xMHJCdUtNelVrUDhzdm1RVzhVZHZjc09J
MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzEwckJ1S016VWtQOHN2bVFXOFVkdmNzT0kyMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RTcyNi82REJGQTM4QTUyRDkxMUVBODI3REQwODJDNEY5QUUwMi8xMHJCdUtNelVr
UDhzdm1RVzhVZHZjc09JMjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANluTRQGs3EEKdiXO72DZLiqtRb2ZfLxOXA+z56iexjeWDbCzXjhJIw1SAoaL
SaMWv1ga5+CU0J5Wplc+dx2K7Nbqa3Bs2txdd/Z8dhRz7FtfHLIhasGVS642gK2G
UxkOooTI5qpQNsZfSkyCAKTQbEvymA5m6sEKIBmOY4dYlZBqoOZG9ruFVvDXa2F9
nwvuUlnjVyAW8D2CO+Y5x7XaetgAEB3VuM7XQpWjy74DVQiaNisPifH6ct/QS7wJ
ARuc1XFu2+GTNsl+DOfj1H+r5CMGxpovvHRDzidLLRTcpF7NoT0H0kBn1w9lu36R
vn17jk6urKjnc0gnBJdGHN3gNw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:20:55 2026 by rpki-client