Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft
File:                     2tXg1z0FSml7IoOa8fpKzZT1Cho.mft (raw, json)
Hash identifier:          s50ZcOZdH9EhynmM9PpLnF2yLJoVkul3Xb4QGuwT2d8=
Subject key identifier:   5C:55:12:88:98:A8:FF:36:58:70:68:71:24:DD:FF:26:D3:17:C9:61
Authority key identifier: DA:D5:E0:D7:3D:05:4A:69:7B:22:83:9A:F1:FA:4A:CD:94:F5:0A:1A
Certificate issuer:       /CN=A9184F65/serialNumber=DAD5E0D73D054A697B22839AF1FA4ACD94F50A1A
Certificate serial:       0175
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2tXg1z0FSml7IoOa8fpKzZT1Cho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft
Manifest number:          0165
Signing time:             Wed 15 Apr 2026 04:33:46 +0000
Manifest this update:     Wed 15 Apr 2026 04:33:46 +0000
Manifest next update:     Wed 22 Apr 2026 04:33:46 +0000
Files and hashes:         1: 2tXg1z0FSml7IoOa8fpKzZT1Cho.crl (hash: 0YdbfYw4iMRI8j/pHvShnjCdQmu/IflDsuyokn7L5uU=)
                          2: 9F0B162A252C11EFB58A7552C4F9AE02.roa (hash: U+JPeLwDFc/9KD5pjtuqdCZiF9ijWo40ru9xcuKUWDA=)
                          3: 6923942E252711EF948A5E18C4F9AE02.roa (hash: O1muA/0EJVSd9L8bh/HkeYxU93aOIw8GOb3fRQGF3F0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.crl
                          rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2tXg1z0FSml7IoOa8fpKzZT1Cho.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 04:33:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 373 (0x175)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184F65, serialNumber=DAD5E0D73D054A697B22839AF1FA4ACD94F50A1A
        Validity
            Not Before: Apr 15 04:33:46 2026 GMT
            Not After : Apr 22 04:33:46 2026 GMT
        Subject: CN=69df152a-2277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:df:e7:79:87:0c:77:aa:45:7e:18:63:5d:d8:
                    42:c1:55:a7:67:d4:ed:b5:63:ef:f0:51:91:46:bc:
                    64:8e:f4:57:f2:74:e9:01:b6:13:7a:60:31:7b:ab:
                    60:e8:15:5c:1c:7f:18:ea:66:5c:fa:8c:0d:91:7a:
                    da:b1:1a:da:1e:74:27:f6:d8:64:ca:63:44:0e:04:
                    cb:41:73:37:56:06:77:b9:89:0b:ec:8d:8c:76:fa:
                    e3:ac:1f:ba:87:66:38:16:55:bd:60:b4:06:5e:02:
                    88:33:39:6e:56:76:cf:44:58:11:d9:cf:84:46:50:
                    01:27:df:fa:30:20:74:78:84:78:3b:d4:48:ed:ee:
                    f8:b8:82:37:89:39:94:c1:73:9a:a0:63:84:78:c5:
                    6b:66:b1:0a:31:84:77:b3:46:8a:1f:bc:9c:01:01:
                    51:4c:bf:36:89:e2:49:ff:e1:0b:1e:74:22:52:2c:
                    62:c3:b5:12:fe:da:86:9f:32:09:54:39:ea:3a:18:
                    8c:4e:51:9d:d8:ae:60:5e:30:7f:b1:1b:97:0c:15:
                    64:e9:f1:ab:dd:24:69:a5:3c:c9:ab:54:e9:7c:f1:
                    54:8b:e9:75:f9:60:c9:01:76:e6:a2:d9:10:0e:58:
                    f3:bd:41:69:c9:3f:2b:5a:5f:b3:b1:f0:07:66:87:
                    d5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:55:12:88:98:A8:FF:36:58:70:68:71:24:DD:FF:26:D3:17:C9:61
            X509v3 Authority Key Identifier:
                keyid:DA:D5:E0:D7:3D:05:4A:69:7B:22:83:9A:F1:FA:4A:CD:94:F5:0A:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2tXg1z0FSml7IoOa8fpKzZT1Cho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:e0:30:3f:f2:40:31:83:0a:40:a3:06:c7:b9:58:82:12:d9:
         87:8c:09:60:05:3a:ec:d1:c4:a3:2a:30:9d:e9:92:7b:4d:08:
         06:5f:2c:19:f9:a1:15:fa:39:da:9c:14:ec:c4:16:bb:36:f7:
         45:30:36:bf:e0:a4:9b:5a:a1:d1:bb:18:ec:17:22:4b:2c:ae:
         6d:81:cb:56:d5:1c:16:03:06:e4:8c:e3:a9:56:69:53:35:bd:
         42:c5:71:d3:95:d3:ed:e5:7d:64:c9:a1:b5:93:a3:bb:62:3c:
         6c:47:c4:b5:fe:54:66:18:dc:ed:d4:33:5e:16:b3:76:e8:52:
         0d:33:4c:b8:6f:2e:da:42:20:5c:24:38:a0:48:b6:94:fa:79:
         ee:55:97:d9:34:57:a6:aa:10:fa:a6:94:f1:c0:aa:16:fd:52:
         8a:e7:d2:f7:d6:98:da:da:e7:d8:09:c7:19:cc:65:4c:5a:e5:
         30:4d:05:41:4f:dc:c6:d4:be:df:df:54:89:62:43:01:8b:74:
         6b:a2:36:e0:d2:47:f4:4d:5d:d2:0b:e6:51:51:72:f7:9d:39:
         66:0f:6f:69:3e:1b:86:61:23:c0:5c:0c:80:e6:81:9d:4b:db:
         b7:6e:7b:ff:34:63:5d:67:58:97:48:e8:8c:de:d9:ae:2e:41:
         e7:86:e4:e2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODRGNjUxMTAvBgNVBAUTKERBRDVFMEQ3M0QwNTRBNjk3QjIyODM5QUYxRkE0QUNE
OTRGNTBBMUEwHhcNMjYwNDE1MDQzMzQ2WhcNMjYwNDIyMDQzMzQ2WjAYMRYwFAYD
VQQDEw02OWRmMTUyYS0yMjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAi9/neYcMd6pFfhhjXdhCwVWnZ9TttWPv8FGRRrxkjvRX8nTpAbYTemAxe6tg
6BVcHH8Y6mZc+owNkXrasRraHnQn9thkymNEDgTLQXM3VgZ3uYkL7I2MdvrjrB+6
h2Y4FlW9YLQGXgKIMzluVnbPRFgR2c+ERlABJ9/6MCB0eIR4O9RI7e74uII3iTmU
wXOaoGOEeMVrZrEKMYR3s0aKH7ycAQFRTL82ieJJ/+ELHnQiUixiw7US/tqGnzIJ
VDnqOhiMTlGd2K5gXjB/sRuXDBVk6fGr3SRppTzJq1TpfPFUi+l1+WDJAXbmotkQ
DljzvUFpyT8rWl+zsfAHZofV8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFxVEoiY
qP82WHBocSTd/ybTF8lhMB8GA1UdIwQYMBaAFNrV4Nc9BUppeyKDmvH6Ss2U9Qoa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NEY2NS9BQzYzQURDNjI1
MjQxMUVGODJBOTVCNzRDNEY5QUUwMi8ydFhnMXowRlNtbDdJb09hOGZwS3paVDFD
aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJ0WGcxejBGU21sN0lvT2E4ZnBLelpUMUNoby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NEY2NS9BQzYzQURDNjI1MjQxMUVGODJBOTVCNzRDNEY5QUUwMi8ydFhnMXowRlNt
bDdJb09hOGZwS3paVDFDaG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANuAwP/JAMYMKQKMGx7lYghLZh4wJYAU67NHEoyownemSe00IBl8sGfmhFfo5
2pwU7MQWuzb3RTA2v+Ckm1qh0bsY7BciSyyubYHLVtUcFgMG5IzjqVZpUzW9QsVx
05XT7eV9ZMmhtZOju2I8bEfEtf5UZhjc7dQzXhazduhSDTNMuG8u2kIgXCQ4oEi2
lPp57lWX2TRXpqoQ+qaU8cCqFv1SiufS99aY2trn2AnHGcxlTFrlME0FQU/cxtS+
399UiWJDAYt0a6I24NJH9E1d0gvmUVFy9505Zg9vaT4bhmEjwFwMgOaBnUvbt257
/zRjXWdYl0jojN7Zri5B54bk4g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:34:07 2026 by rpki-client