Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.mft
File:                     lSTqm4I8IPp4kjvmZn4U9sTDtH4.mft (raw, json)
Hash identifier:          e880H8Xue4pw4mg28FClNhUGlPfC6ZFUCKCGfMAEEpk=
Subject key identifier:   A2:04:D4:62:27:EE:54:B7:6B:B0:DF:84:27:E2:EC:8E:76:70:EA:16
Authority key identifier: 95:24:EA:9B:82:3C:20:FA:78:92:3B:E6:66:7E:14:F6:C4:C3:B4:7E
Certificate issuer:       /CN=A9185D6E/serialNumber=9524EA9B823C20FA78923BE6667E14F6C4C3B47E
Certificate serial:       063E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSTqm4I8IPp4kjvmZn4U9sTDtH4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.mft
Manifest number:          0623
Signing time:             Thu 16 Apr 2026 22:45:20 +0000
Manifest this update:     Thu 16 Apr 2026 22:45:20 +0000
Manifest next update:     Thu 23 Apr 2026 22:45:20 +0000
Files and hashes:         1: lSTqm4I8IPp4kjvmZn4U9sTDtH4.crl (hash: 2jYR73pfVRWjS0IIsSUUeXK+VwscOUoZTqo1QuVto7M=)
                          2: 37F43E66A27311EFA8731822C4F9AE02.roa (hash: uvL2gNEthqGV41KwTfLQpnni0nIuRN7IKI+1/XnuE+o=)
                          3: 229CD24AF9FB11EB8CFF5E7DC4F9AE02.roa (hash: 7N+kBhMTPa/IDmaHS5j88uMau/dBXAyZziXt2IYR/Jg=)
                          4: 368F5308A27311EFA8731822C4F9AE02.roa (hash: KBf8JxajMdMMi2+GI03db8VLySuC8cD1rgByqAKzBds=)
                          5: 53BCB840EA4211EB846B8757C4F9AE02.roa (hash: 8A4Wb2KJcDqzfgpVuNBZcnB+OO/NHwZAcOnGRk55RA8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.crl
                          rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSTqm4I8IPp4kjvmZn4U9sTDtH4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:45:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1598 (0x63e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185D6E, serialNumber=9524EA9B823C20FA78923BE6667E14F6C4C3B47E
        Validity
            Not Before: Apr 16 22:45:20 2026 GMT
            Not After : Apr 23 22:45:20 2026 GMT
        Subject: CN=69e16680-26fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4f:75:74:65:92:2f:96:72:e5:65:78:6f:16:
                    c4:4a:11:58:69:62:0d:1c:63:55:7a:7d:1f:c7:04:
                    53:3e:19:1d:1a:2a:24:09:13:2b:c3:f0:91:cc:fb:
                    d3:df:74:6a:51:df:9a:d8:6b:dc:53:0e:02:0d:b8:
                    7a:78:0e:b0:0b:ff:4f:6e:2f:ce:a8:33:83:e7:6c:
                    8b:f3:30:09:21:16:97:18:90:e4:39:d7:1a:9d:19:
                    d8:03:87:c1:31:fb:96:15:7c:d5:7e:34:ae:50:1f:
                    0d:2e:2c:ef:d8:59:79:e6:93:29:9b:4a:c5:a3:33:
                    5f:67:a0:56:28:48:cf:dd:59:18:1d:e5:32:be:51:
                    23:5b:e8:af:55:d1:e5:7d:22:a8:ab:00:52:eb:16:
                    06:24:3b:7e:f9:2f:67:91:5a:1f:94:68:3d:a7:a6:
                    41:c4:cc:66:8e:e7:10:a2:30:70:dd:42:c1:f4:8a:
                    3d:11:fc:f5:c0:6e:60:64:90:b6:99:c3:54:b2:71:
                    2d:66:73:3e:03:32:b6:08:32:61:60:3e:b6:b3:1a:
                    0b:b4:90:78:9c:00:12:6d:70:a3:a8:98:73:bb:01:
                    08:d2:48:91:23:da:04:e3:83:49:c9:02:cc:13:92:
                    73:97:42:23:87:5c:eb:80:c7:81:eb:aa:6e:96:11:
                    ce:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:04:D4:62:27:EE:54:B7:6B:B0:DF:84:27:E2:EC:8E:76:70:EA:16
            X509v3 Authority Key Identifier:
                keyid:95:24:EA:9B:82:3C:20:FA:78:92:3B:E6:66:7E:14:F6:C4:C3:B4:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSTqm4I8IPp4kjvmZn4U9sTDtH4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:b5:98:36:bb:48:a2:94:00:4d:05:cc:55:48:a2:20:56:ad:
         48:b0:c2:b2:22:1c:51:0a:1e:e3:fb:80:ac:17:64:5b:db:db:
         88:8a:ff:0f:ad:7f:5f:c2:d2:5c:94:0e:a1:45:55:5b:e9:8f:
         d0:7a:a1:2c:e9:4b:20:52:13:56:56:00:ef:c6:9b:42:f4:ed:
         16:52:5f:17:76:e2:09:34:f2:4c:21:2a:d4:3d:ef:bf:3a:20:
         5d:e8:8d:c8:57:b7:51:09:9d:d0:13:9d:a5:60:d4:ce:08:b3:
         55:9b:df:26:96:40:ec:c5:df:b7:79:78:a9:3f:8f:2c:ae:f0:
         51:46:12:41:c8:ed:b2:48:d5:60:d8:e2:99:08:fc:2e:f9:8b:
         a5:fa:2c:d5:cd:cd:5e:e2:a5:03:f5:1f:52:12:65:62:b9:c4:
         76:d4:9c:73:90:4e:ef:09:9b:d3:08:f7:d6:5c:46:67:95:3e:
         48:af:f1:4f:30:de:61:fd:52:b3:57:46:a8:bd:d0:8f:30:42:
         f7:8b:5e:4d:79:00:44:30:64:24:77:12:fc:61:5a:9a:d6:3f:
         c7:d8:0c:ef:9f:5d:99:f5:09:da:44:5f:8f:d4:8c:39:12:0b:
         56:00:94:e0:46:52:18:9c:98:66:cb:21:72:52:0c:bb:b9:e5:
         5c:54:9b:16
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODVENkUxMTAvBgNVBAUTKDk1MjRFQTlCODIzQzIwRkE3ODkyM0JFNjY2N0UxNEY2
QzRDM0I0N0UwHhcNMjYwNDE2MjI0NTIwWhcNMjYwNDIzMjI0NTIwWjAYMRYwFAYD
VQQDEw02OWUxNjY4MC0yNmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqU91dGWSL5Zy5WV4bxbEShFYaWINHGNVen0fxwRTPhkdGiokCRMrw/CRzPvT
33RqUd+a2GvcUw4CDbh6eA6wC/9Pbi/OqDOD52yL8zAJIRaXGJDkOdcanRnYA4fB
MfuWFXzVfjSuUB8NLizv2Fl55pMpm0rFozNfZ6BWKEjP3VkYHeUyvlEjW+ivVdHl
fSKoqwBS6xYGJDt++S9nkVoflGg9p6ZBxMxmjucQojBw3ULB9Io9Efz1wG5gZJC2
mcNUsnEtZnM+AzK2CDJhYD62sxoLtJB4nAASbXCjqJhzuwEI0kiRI9oE44NJyQLM
E5Jzl0Ijh1zrgMeB66pulhHOKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKIE1GIn
7lS3a7DfhCfi7I52cOoWMB8GA1UdIwQYMBaAFJUk6puCPCD6eJI75mZ+FPbEw7R+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQ2RS80Q0JGRjRBRURG
RjExMUVCODk0RjMwNjdDNEY5QUUwMi9sU1RxbTRJOElQcDRranZtWm40VTlzVER0
SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2xTVHFtNEk4SVBwNGtqdm1abjRVOXNURHRINC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NUQ2RS80Q0JGRjRBRURGRjExMUVCODk0RjMwNjdDNEY5QUUwMi9sU1RxbTRJOElQ
cDRranZtWm40VTlzVER0SDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAh7WYNrtIopQATQXMVUiiIFatSLDCsiIcUQoe4/uArBdkW9vbiIr/D61/X8LS
XJQOoUVVW+mP0HqhLOlLIFITVlYA78abQvTtFlJfF3biCTTyTCEq1D3vvzogXeiN
yFe3UQmd0BOdpWDUzgizVZvfJpZA7MXft3l4qT+PLK7wUUYSQcjtskjVYNjimQj8
LvmLpfos1c3NXuKlA/UfUhJlYrnEdtScc5BO7wmb0wj31lxGZ5U+SK/xTzDeYf1S
s1dGqL3QjzBC94teTXkARDBkJHcS/GFamtY/x9gM759dmfUJ2kRfj9SMORILVgCU
4EZSGJyYZsshclIMu7nlXFSbFg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:45:51 2026 by rpki-client