Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.mft
File:                     jgK1xN61PytxL_B33gSQg3XoE9s.mft (raw, json)
Hash identifier:          BohcG73t5dMxVmpdlnJmU0IncLXxQI1VYEwq9q6a1Oc=
Subject key identifier:   EE:02:60:6A:17:0D:A2:CB:92:6A:2F:71:A4:FC:0F:0B:BC:B9:5B:13
Authority key identifier: 8E:02:B5:C4:DE:B5:3F:2B:71:2F:F0:77:DE:04:90:83:75:E8:13:DB
Certificate issuer:       /CN=A9185B6D/serialNumber=8E02B5C4DEB53F2B712FF077DE04908375E813DB
Certificate serial:       018E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jgK1xN61PytxL_B33gSQg3XoE9s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.mft
Manifest number:          0187
Signing time:             Fri 17 Apr 2026 04:13:53 +0000
Manifest this update:     Fri 17 Apr 2026 04:13:52 +0000
Manifest next update:     Fri 24 Apr 2026 04:13:52 +0000
Files and hashes:         1: jgK1xN61PytxL_B33gSQg3XoE9s.crl (hash: wJv02o75Psa9lcCh21OrY3Olw8wlo8anv0+4LAnU4X4=)
                          2: 6F09FF784B3111F0AED6945EC4F9AE02.roa (hash: 9h9Wk9aH9jFwNi1AyO/YADoC/2y5/5H+OC8YAZoQcg8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.crl
                          rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jgK1xN61PytxL_B33gSQg3XoE9s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:13:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 398 (0x18e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185B6D, serialNumber=8E02B5C4DEB53F2B712FF077DE04908375E813DB
        Validity
            Not Before: Apr 17 04:13:52 2026 GMT
            Not After : Apr 24 04:13:52 2026 GMT
        Subject: CN=69e1b381-7d95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0c:d4:c2:8f:29:d4:39:8a:f0:2c:6e:1c:08:
                    e8:e3:9f:f8:0b:42:76:80:9e:1d:77:57:cb:0d:90:
                    8c:49:b1:b6:e5:78:8b:76:18:c7:82:4e:6d:53:02:
                    08:da:67:ef:65:ac:4e:4a:d0:32:c2:39:dc:88:48:
                    4e:e4:0d:fd:a7:9d:13:8e:32:54:ba:8f:4a:49:19:
                    51:a4:8e:ac:50:05:94:ec:53:92:e0:12:db:01:69:
                    f0:f8:3a:08:12:7f:0d:b4:37:e6:0c:e7:08:fa:ec:
                    eb:f2:d0:ca:b3:e3:8c:d1:7b:c3:52:2b:dd:13:e6:
                    c1:0f:53:22:07:86:ab:a3:cb:b7:7a:60:d6:c8:17:
                    e9:13:9c:d6:85:31:53:51:33:a2:31:89:43:95:14:
                    53:6b:63:40:90:c1:58:42:42:82:91:7c:88:75:9a:
                    1e:13:b2:7a:32:96:18:7a:93:04:d0:0b:73:a5:15:
                    c3:84:27:c0:ad:59:f0:7c:7f:39:e0:49:1c:27:76:
                    bd:92:d0:24:25:11:d2:f0:c6:c6:b7:cd:d3:0b:c1:
                    4a:72:59:28:54:72:51:fa:ea:84:0a:a7:a6:f8:f0:
                    fc:07:51:a0:7b:76:0d:52:7e:57:de:ac:66:79:eb:
                    a2:58:39:4a:d5:8a:e2:f9:76:ac:fb:13:30:1d:73:
                    d4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:02:60:6A:17:0D:A2:CB:92:6A:2F:71:A4:FC:0F:0B:BC:B9:5B:13
            X509v3 Authority Key Identifier:
                keyid:8E:02:B5:C4:DE:B5:3F:2B:71:2F:F0:77:DE:04:90:83:75:E8:13:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jgK1xN61PytxL_B33gSQg3XoE9s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:d1:70:4f:fd:5e:dd:75:8e:ce:fd:fe:57:c0:ed:20:76:c7:
         7d:71:af:7f:0f:3b:94:a3:24:41:da:d8:33:3f:2f:49:24:1a:
         56:cb:74:89:1f:ea:c1:d9:69:df:d5:61:76:92:6e:e1:70:5b:
         9d:21:2a:0f:9a:ba:17:4f:99:49:c6:57:df:a2:6b:73:b4:3a:
         73:5f:15:b5:e7:6c:09:e8:9e:1e:f9:d2:1b:ac:f4:67:c2:4f:
         02:ad:8a:ab:f4:02:a0:35:7f:44:e5:af:af:f1:36:d7:ff:fb:
         b4:f2:b1:67:6e:c2:4d:26:48:a6:0f:34:2a:a7:cd:ad:65:c8:
         b9:87:54:2f:cc:e2:61:26:e6:07:ed:c5:e2:70:ef:8a:20:71:
         80:cf:66:57:5a:26:c5:b1:76:de:77:43:ce:ff:86:d8:d7:70:
         04:fd:d2:4c:be:1c:59:d6:6c:67:6f:ce:33:03:c9:11:12:69:
         7a:ba:f2:14:49:49:bc:1f:f8:3d:b1:1a:89:6c:b4:17:93:87:
         75:ec:30:c0:2f:e4:9f:ba:62:3e:3a:c5:e1:63:f2:5b:e2:62:
         d0:69:29:8c:d6:b6:42:3a:be:8a:50:e1:35:65:51:b5:b6:c8:
         e2:3e:61:50:c6:9a:ee:1f:05:87:93:21:16:23:bf:1c:8b:fb:
         be:75:18:bb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODVCNkQxMTAvBgNVBAUTKDhFMDJCNUM0REVCNTNGMkI3MTJGRjA3N0RFMDQ5MDgz
NzVFODEzREIwHhcNMjYwNDE3MDQxMzUyWhcNMjYwNDI0MDQxMzUyWjAYMRYwFAYD
VQQDEw02OWUxYjM4MS03ZDk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvgzUwo8p1DmK8CxuHAjo45/4C0J2gJ4dd1fLDZCMSbG25XiLdhjHgk5tUwII
2mfvZaxOStAywjnciEhO5A39p50TjjJUuo9KSRlRpI6sUAWU7FOS4BLbAWnw+DoI
En8NtDfmDOcI+uzr8tDKs+OM0XvDUivdE+bBD1MiB4aro8u3emDWyBfpE5zWhTFT
UTOiMYlDlRRTa2NAkMFYQkKCkXyIdZoeE7J6MpYYepME0AtzpRXDhCfArVnwfH85
4EkcJ3a9ktAkJRHS8MbGt83TC8FKclkoVHJR+uqECqem+PD8B1Gge3YNUn5X3qxm
eeuiWDlK1Yri+Xas+xMwHXPUkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO4CYGoX
DaLLkmovcaT8Dwu8uVsTMB8GA1UdIwQYMBaAFI4CtcTetT8rcS/wd94EkIN16BPb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUI2RC8yMTUyMjE4MkU3
OEUxMUVFOTgzMUVCN0VDNEY5QUUwMi9qZ0sxeE42MVB5dHhMX0IzM2dTUWczWG9F
OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pnSzF4TjYxUHl0eExfQjMzZ1NRZzNYb0U5cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NUI2RC8yMTUyMjE4MkU3OEUxMUVFOTgzMUVCN0VDNEY5QUUwMi9qZ0sxeE42MVB5
dHhMX0IzM2dTUWczWG9FOXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAV9FwT/1e3XWOzv3+V8DtIHbHfXGvfw87lKMkQdrYMz8vSSQaVst0iR/qwdlp
39VhdpJu4XBbnSEqD5q6F0+ZScZX36Jrc7Q6c18VtedsCeieHvnSG6z0Z8JPAq2K
q/QCoDV/ROWvr/E21//7tPKxZ27CTSZIpg80KqfNrWXIuYdUL8ziYSbmB+3F4nDv
iiBxgM9mV1omxbF23ndDzv+G2NdwBP3STL4cWdZsZ2/OMwPJERJperryFElJvB/4
PbEaiWy0F5OHdewwwC/kn7piPjrF4WPyW+Ji0GkpjNa2Qjq+ilDhNWVRtbbI4j5h
UMaa7h8Fh5MhFiO/HIv7vnUYuw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:17:25 2026 by rpki-client