Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180669/77E904C824B111F0A05B0064C4F9AE02/rLhNci0lVbSDPOQGgw_b_pgrfGY.mft
File:                     rLhNci0lVbSDPOQGgw_b_pgrfGY.mft (raw, json)
Hash identifier:          Ws5fd0SudI3t1kT90C42GHbObaPHtn8A7OqUq7NDS04=
Subject key identifier:   5B:B4:BE:35:57:7C:74:FB:F3:F3:05:7B:BE:33:70:F3:AC:E6:A9:0A
Authority key identifier: AC:B8:4D:72:2D:25:55:B4:83:3C:E4:06:83:0F:DB:FE:98:2B:7C:66
Certificate issuer:       /CN=A9180669/serialNumber=ACB84D722D2555B4833CE406830FDBFE982B7C66
Certificate serial:       B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLhNci0lVbSDPOQGgw_b_pgrfGY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180669/77E904C824B111F0A05B0064C4F9AE02/rLhNci0lVbSDPOQGgw_b_pgrfGY.mft
Manifest number:          B4
Signing time:             Fri 17 Apr 2026 06:45:48 +0000
Manifest this update:     Fri 17 Apr 2026 06:45:47 +0000
Manifest next update:     Fri 24 Apr 2026 06:45:47 +0000
Files and hashes:         1: rLhNci0lVbSDPOQGgw_b_pgrfGY.crl (hash: G/+09SC3f9yavXORSWmAdCEJFZvSBPmAMQ4PQc/HLjs=)
                          2: 7D1BFC5E24B411F08834DE10C4F9AE02.roa (hash: VUJM2ojAhkllD4gh361hqeaKIphDeFpY6K+WKL7Se80=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180669/77E904C824B111F0A05B0064C4F9AE02/rLhNci0lVbSDPOQGgw_b_pgrfGY.crl
                          rsync://rpki.apnic.net/member_repository/A9180669/77E904C824B111F0A05B0064C4F9AE02/rLhNci0lVbSDPOQGgw_b_pgrfGY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLhNci0lVbSDPOQGgw_b_pgrfGY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:45:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182 (0xb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180669, serialNumber=ACB84D722D2555B4833CE406830FDBFE982B7C66
        Validity
            Not Before: Apr 17 06:45:47 2026 GMT
            Not After : Apr 24 06:45:47 2026 GMT
        Subject: CN=69e1d71c-8b7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4e:19:ca:59:39:18:06:35:a5:b2:31:50:94:
                    d6:eb:35:f8:45:3c:1f:fb:71:47:c7:d0:13:06:e3:
                    2e:c0:f3:54:a8:21:db:dc:34:2d:c7:bd:2d:db:0b:
                    37:22:6b:a0:ac:1b:30:c6:8b:db:9f:00:fd:f5:22:
                    b5:e9:12:dd:e5:18:75:32:a3:92:fd:77:39:8a:4c:
                    a5:1f:45:28:b4:3d:ea:50:f3:14:41:3e:fb:49:cc:
                    3f:db:50:ff:aa:9e:cb:2e:14:cd:4c:52:ce:aa:72:
                    cd:ed:2f:de:3f:ed:fc:59:2f:04:3c:8f:c9:e0:fa:
                    f8:01:13:4f:63:2a:e8:bc:86:5c:c5:67:67:2e:61:
                    93:e3:5b:83:75:2a:20:22:7f:8a:fe:96:43:b9:2a:
                    0c:d6:2c:b0:47:a7:08:d4:e5:cf:0e:01:20:53:ef:
                    c7:9c:a2:86:58:76:2c:cc:51:3e:f6:4d:4f:4a:65:
                    60:8d:96:ea:65:ed:2f:13:28:db:cc:ce:e5:aa:b5:
                    e6:1c:17:3b:08:fa:89:91:f0:a7:57:51:9c:66:9f:
                    3b:3f:a7:3b:bc:3e:8c:c5:b3:05:1f:a7:e9:56:3a:
                    58:2e:9a:b2:88:51:ff:4f:cf:a3:83:ff:59:0f:80:
                    02:77:66:cc:2d:de:dd:41:43:4a:49:7f:5e:30:16:
                    86:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B4:BE:35:57:7C:74:FB:F3:F3:05:7B:BE:33:70:F3:AC:E6:A9:0A
            X509v3 Authority Key Identifier:
                keyid:AC:B8:4D:72:2D:25:55:B4:83:3C:E4:06:83:0F:DB:FE:98:2B:7C:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180669/77E904C824B111F0A05B0064C4F9AE02/rLhNci0lVbSDPOQGgw_b_pgrfGY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLhNci0lVbSDPOQGgw_b_pgrfGY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180669/77E904C824B111F0A05B0064C4F9AE02/rLhNci0lVbSDPOQGgw_b_pgrfGY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:4b:b7:a7:71:9d:1a:9c:7b:2a:b6:19:27:7e:ee:de:64:17:
         f2:ce:7b:89:76:5a:16:c2:fa:c0:40:83:2b:83:c2:35:dd:7a:
         c4:70:2b:79:64:8f:69:c0:17:34:54:a3:28:e6:bb:30:fa:df:
         29:19:b6:f8:c1:11:f3:e9:36:19:f7:0d:b2:cd:7a:46:b2:46:
         d6:6e:05:f1:51:1f:fb:53:17:b8:63:b1:f2:2b:17:93:23:61:
         33:d3:8d:ec:39:1b:a6:7c:2b:1e:ff:8d:68:c5:d3:cd:79:f2:
         54:4d:b7:30:db:c6:e9:01:9c:5d:8d:37:46:62:7e:46:5a:25:
         ef:c5:bd:8f:b1:7d:4c:63:79:45:c7:c1:37:b2:d8:fe:d3:64:
         9f:76:13:a9:8f:6e:04:76:30:ff:fa:f3:67:71:12:b3:4a:76:
         3c:43:9c:13:b6:69:d7:4e:8a:20:6e:11:c4:1c:94:38:38:3d:
         37:ef:28:5b:05:7d:36:d7:3c:de:51:ef:a9:00:b2:72:62:be:
         20:4f:b2:72:d1:f1:51:75:59:ff:16:13:5a:5b:bb:d9:73:ab:
         cb:28:3f:22:e8:9b:a0:d9:c1:7f:f7:ce:e9:2c:28:02:cd:4c:
         fc:8f:5f:d2:0f:6e:bd:7f:f1:bc:2a:bc:e8:fc:72:3f:f4:9c:
         d2:d6:ef:4e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODA2NjkxMTAvBgNVBAUTKEFDQjg0RDcyMkQyNTU1QjQ4MzNDRTQwNjgzMEZEQkZF
OTgyQjdDNjYwHhcNMjYwNDE3MDY0NTQ3WhcNMjYwNDI0MDY0NTQ3WjAYMRYwFAYD
VQQDEw02OWUxZDcxYy04YjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt04Zylk5GAY1pbIxUJTW6zX4RTwf+3FHx9ATBuMuwPNUqCHb3DQtx70t2ws3
ImugrBswxovbnwD99SK16RLd5Rh1MqOS/Xc5ikylH0UotD3qUPMUQT77Scw/21D/
qp7LLhTNTFLOqnLN7S/eP+38WS8EPI/J4Pr4ARNPYyrovIZcxWdnLmGT41uDdSog
In+K/pZDuSoM1iywR6cI1OXPDgEgU+/HnKKGWHYszFE+9k1PSmVgjZbqZe0vEyjb
zM7lqrXmHBc7CPqJkfCnV1GcZp87P6c7vD6MxbMFH6fpVjpYLpqyiFH/T8+jg/9Z
D4ACd2bMLd7dQUNKSX9eMBaG9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFu0vjVX
fHT78/MFe74zcPOs5qkKMB8GA1UdIwQYMBaAFKy4TXItJVW0gzzkBoMP2/6YK3xm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDY2OS83N0U5MDRDODI0
QjExMUYwQTA1QjAwNjRDNEY5QUUwMi9yTGhOY2kwbFZiU0RQT1FHZ3dfYl9wZ3Jm
R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JMaE5jaTBsVmJTRFBPUUdnd19iX3BncmZHWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MDY2OS83N0U5MDRDODI0QjExMUYwQTA1QjAwNjRDNEY5QUUwMi9yTGhOY2kwbFZi
U0RQT1FHZ3dfYl9wZ3JmR1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAp0u3p3GdGpx7KrYZJ37u3mQX8s57iXZaFsL6wECDK4PCNd16xHAreWSPacAX
NFSjKOa7MPrfKRm2+MER8+k2GfcNss16RrJG1m4F8VEf+1MXuGOx8isXkyNhM9ON
7DkbpnwrHv+NaMXTzXnyVE23MNvG6QGcXY03RmJ+Rlol78W9j7F9TGN5RcfBN7LY
/tNkn3YTqY9uBHYw//rzZ3ESs0p2PEOcE7Zp106KIG4RxByUODg9N+8oWwV9Ntc8
3lHvqQCycmK+IE+yctHxUXVZ/xYTWlu72XOryyg/IuiboNnBf/fO6SwoAs1M/I9f
0g9uvX/xvCq86PxyP/Sc0tbvTg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:37:52 2026 by rpki-client