Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
File:                     kMIvc5OFDo7Pa18eMg0HstGs2P0.mft (raw, json)
Hash identifier:          nA77rB430CmNJUqNyWEnNM12OjIV+bpfMN1Cu8Ji+jU=
Subject key identifier:   4D:30:7F:0E:28:DC:92:D4:CB:87:D4:58:0B:A5:49:77:5E:49:39:26
Authority key identifier: 90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD
Certificate issuer:       /CN=A918495F/serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD
Certificate serial:       189C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
Manifest number:          1820
Signing time:             Thu 16 Apr 2026 16:29:37 +0000
Manifest this update:     Thu 16 Apr 2026 16:29:37 +0000
Manifest next update:     Thu 23 Apr 2026 16:29:37 +0000
Files and hashes:         1: kMIvc5OFDo7Pa18eMg0HstGs2P0.crl (hash: jbGOUT5CfgXcuJavS+rQhOFp2SpnMIoplwr2N4h524g=)
                          2: 694CCE66E53911EF9DD1B90DC4F9AE02.roa (hash: HZBfZMAFJxlkSmjIQOZstgSCx4ashGb51vkWovEUYbs=)
                          3: 4C0C96C6022E11EBA920EA37C4F9AE02.roa (hash: OEgEDUAjf9BTlI+eiF5A69LmOCeN7jWjg18CXPzKJG4=)
                          4: E8118BFA022C11EBAC47A831C4F9AE02.roa (hash: LlVbkIBf55WD9ol7tZ+8YsYWKIE8b97eX9bCwSF3NSs=)
                          5: 7E2725DAAC7611EAB766A74CC4F9AE02.roa (hash: 4QNrndXiZuD30u6eautmZHQMpuP/Z26DQJUBDiWiMvc=)
                          6: DD145D6E023A11EBBDF8B35FC4F9AE02.roa (hash: /8pZ9hmnX1KrX5+xHUTJd205PrwYJNS6PnS3wtcG9wI=)
                          7: 696975861A3611EEA597E872C4F9AE02.roa (hash: g5hRhUjRB9v/my+gZgSF2vbEiEILSavEGnsxaVKF6Gc=)
                          8: 07EE827ADFEE11E7B0E71D1CC4F9AE02.roa (hash: yYFIGBneEQXcRJvNNN1W9kEQ69UHSaUHBezF58BxRJY=)
                          9: A2C8B57074B711EB8491BC63C4F9AE02.roa (hash: lvExdvN+lyTanXvVTvJV8T9/V8jM577ymUYa0b51pmw=)
                          10: B04675FC959711EA9F290A33C4F9AE02.roa (hash: wWZc4DPL/CIi2uHPFRZ5kI0NT8FM5d7k/tcwO50MfhM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl
                          rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 16:29:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6300 (0x189c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918495F, serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD
        Validity
            Not Before: Apr 16 16:29:37 2026 GMT
            Not After : Apr 23 16:29:37 2026 GMT
        Subject: CN=69e10e71-b482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:07:31:9e:56:e5:2f:2f:c4:73:1e:83:0a:1b:
                    64:e4:82:17:3c:ad:c5:21:df:00:6e:f3:fd:9f:a9:
                    95:95:0d:89:23:ff:b6:9c:2b:9a:47:c2:ca:1d:6f:
                    2e:54:a7:96:6b:1b:81:dc:e6:be:05:df:16:a6:da:
                    fd:e1:94:9a:0d:0b:57:f3:c1:97:d5:fd:a9:7b:5d:
                    16:1f:e1:3b:b6:32:44:cb:70:c8:d6:2e:ef:3c:0c:
                    9a:f2:8a:b1:e5:0d:f7:f7:66:76:bc:af:ea:7e:60:
                    f8:2f:b4:89:f0:c6:4e:f1:cd:5a:a0:ff:f7:54:9c:
                    17:98:5e:5b:f1:16:7e:c9:bd:c3:28:2f:d8:01:35:
                    3d:4c:b1:66:46:2d:fc:8f:da:20:2d:d4:fd:14:78:
                    9e:7a:d4:42:60:61:b9:83:f3:60:1e:d7:06:7a:7c:
                    9f:80:f0:68:42:2e:a6:e0:ad:69:1a:a0:2d:01:29:
                    6e:7f:84:9e:f6:c1:98:cb:b2:13:41:6e:96:ef:c3:
                    c5:17:8f:60:4b:13:58:e8:7c:cf:49:42:93:bc:05:
                    4a:b4:24:02:10:d8:c6:11:ab:cf:8c:09:a5:c7:15:
                    be:a5:cd:3e:3e:aa:6c:99:58:c1:a9:6d:63:8a:27:
                    60:12:5a:95:1e:c9:7c:42:4b:01:d6:ab:01:50:3b:
                    fb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:30:7F:0E:28:DC:92:D4:CB:87:D4:58:0B:A5:49:77:5E:49:39:26
            X509v3 Authority Key Identifier:
                keyid:90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:88:1d:ca:2c:30:54:80:96:1c:c2:8b:4c:49:78:e9:ed:12:
         a4:e0:6a:ae:1f:9c:e3:2e:e0:fa:79:cf:c1:a0:e5:7a:be:32:
         6c:0b:c4:7b:eb:7d:21:8b:7e:8e:3f:11:4f:b7:ba:f5:b7:c6:
         ea:df:32:78:63:18:93:60:37:c7:7f:17:49:d5:8d:19:12:a7:
         be:00:91:0f:81:b4:0b:eb:5e:e3:cb:81:83:f9:28:0e:6d:ad:
         73:a2:47:f6:df:6e:4d:ab:1f:54:2b:69:d2:d4:3d:df:6b:0d:
         f5:ea:92:04:10:9f:38:e5:2c:d1:a6:3e:64:a2:dd:3f:47:e6:
         15:43:89:bb:2f:06:37:3f:7c:e8:0a:c6:b3:d6:19:07:9a:a8:
         fa:16:3d:fb:5f:51:58:dd:b0:48:12:34:f1:2f:15:62:99:89:
         06:7e:ba:4b:40:ed:ab:67:02:5d:44:62:8d:39:3b:03:b7:2f:
         9f:91:1e:38:ba:55:d7:05:d2:b6:4b:67:cd:67:54:3d:60:91:
         76:d1:6c:bc:8c:7a:c3:1b:5d:b4:b6:98:32:ae:c1:82:a0:4a:
         91:1e:98:2d:5f:fd:c3:c8:c9:76:aa:b7:8f:94:3b:ef:37:97:
         21:5c:54:2e:c1:af:08:3c:84:f0:0b:8e:5c:9e:19:52:cd:9b:
         35:b9:11:91
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQ5NUYxMTAvBgNVBAUTKDkwQzIyRjczOTM4NTBFOEVDRjZCNUYxRTMyMEQwN0Iy
RDFBQ0Q4RkQwHhcNMjYwNDE2MTYyOTM3WhcNMjYwNDIzMTYyOTM3WjAYMRYwFAYD
VQQDEw02OWUxMGU3MS1iNDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7QcxnlblLy/Ecx6DChtk5IIXPK3FId8AbvP9n6mVlQ2JI/+2nCuaR8LKHW8u
VKeWaxuB3Oa+Bd8Wptr94ZSaDQtX88GX1f2pe10WH+E7tjJEy3DI1i7vPAya8oqx
5Q3392Z2vK/qfmD4L7SJ8MZO8c1aoP/3VJwXmF5b8RZ+yb3DKC/YATU9TLFmRi38
j9ogLdT9FHieetRCYGG5g/NgHtcGenyfgPBoQi6m4K1pGqAtASluf4Se9sGYy7IT
QW6W78PFF49gSxNY6HzPSUKTvAVKtCQCENjGEavPjAmlxxW+pc0+PqpsmVjBqW1j
iidgElqVHsl8QksB1qsBUDv7fQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE0wfw4o
3JLUy4fUWAulSXdeSTkmMB8GA1UdIwQYMBaAFJDCL3OThQ6Oz2tfHjINB7LRrNj9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDk1Ri84NDhDODU3Q0RG
RUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9rTUl2YzVPRkRvN1BhMThlTWcwSHN0R3My
UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tNSXZjNU9GRG83UGExOGVNZzBIc3RHczJQMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NDk1Ri84NDhDODU3Q0RGRUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9rTUl2YzVPRkRv
N1BhMThlTWcwSHN0R3MyUDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADYgdyiwwVICWHMKLTEl46e0SpOBqrh+c4y7g+nnPwaDler4ybAvEe+t9IYt+
jj8RT7e69bfG6t8yeGMYk2A3x38XSdWNGRKnvgCRD4G0C+te48uBg/koDm2tc6JH
9t9uTasfVCtp0tQ932sN9eqSBBCfOOUs0aY+ZKLdP0fmFUOJuy8GNz986ArGs9YZ
B5qo+hY9+19RWN2wSBI08S8VYpmJBn66S0Dtq2cCXURijTk7A7cvn5EeOLpV1wXS
tktnzWdUPWCRdtFsvIx6wxtdtLaYMq7BgqBKkR6YLV/9w8jJdqq3j5Q77zeXIVxU
LsGvCDyE8AuOXJ4ZUs2bNbkRkQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:30:11 2026 by rpki-client