Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft
File:                     _hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft (raw, json)
Hash identifier:          Y1OWFq3k7Ec54rLhIRA2rUIMCpZpMgLjyS93cg6fr3M=
Subject key identifier:   98:5E:0A:49:CF:52:38:D7:9B:2A:08:62:BC:C8:F5:A8:E6:EE:12:2B
Authority key identifier: FE:19:77:8A:0D:07:BD:DB:5F:F6:B9:F0:5B:E2:D5:45:52:0E:C4:94
Certificate issuer:       /CN=A9186C2F/serialNumber=FE19778A0D07BDDB5FF6B9F05BE2D545520EC494
Certificate serial:       0418
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft
Manifest number:          0406
Signing time:             Fri 17 Apr 2026 00:20:38 +0000
Manifest this update:     Fri 17 Apr 2026 00:20:37 +0000
Manifest next update:     Fri 24 Apr 2026 00:20:37 +0000
Files and hashes:         1: _hl3ig0Hvdtf9rnwW-LVRVIOxJQ.crl (hash: nnlaA5OShqeflS1MpzddGfglLQ06equkH11pY5HRsVI=)
                          2: AB3742F4B34411ECB016765EC4F9AE02.roa (hash: SWcdkZCR9aXBAKCHLOpDQ/w4c30vCytihBZ+pt87TXA=)
                          3: 9837349AB41E11ECAFDA1F1AC4F9AE02.roa (hash: coFqgEy/GfsHGfK/VEtTVnI0ZqJ2SsX074vbNTT8fEE=)
                          4: E0722F2EB41B11ECB8529210C4F9AE02.roa (hash: LLqzzzWvO8ImDPnE9xtHvAoTCd4N7lReci7XNB8QRDc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.crl
                          rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:20:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1048 (0x418)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186C2F, serialNumber=FE19778A0D07BDDB5FF6B9F05BE2D545520EC494
        Validity
            Not Before: Apr 17 00:20:37 2026 GMT
            Not After : Apr 24 00:20:37 2026 GMT
        Subject: CN=69e17cd5-5b93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c3:6b:f4:c4:a5:7f:17:bc:55:45:2c:02:67:
                    27:c3:8c:48:41:97:83:ab:89:32:56:77:e9:a8:a7:
                    a8:36:13:e3:51:81:ec:8a:8c:eb:fc:d7:de:28:6e:
                    2b:31:b8:44:9a:75:fb:2b:ec:f5:cf:09:0c:55:57:
                    04:67:b2:1f:70:ee:ea:ab:af:84:55:b2:00:15:50:
                    85:d1:a8:56:c9:c8:b3:63:64:f0:79:80:c3:1a:d4:
                    01:23:97:da:8f:4e:99:26:6c:c5:b1:64:d9:08:13:
                    8b:51:a1:83:d4:d1:64:a9:8e:e0:8c:f7:5a:f4:cd:
                    f2:07:04:60:2d:c7:e9:cb:e0:e9:1c:94:09:cc:01:
                    65:80:0a:58:b7:d7:07:25:5b:5d:c0:9c:01:1a:f8:
                    4b:74:11:83:27:d4:14:42:90:f8:77:01:ef:ec:79:
                    41:41:3f:c1:f8:03:a6:49:f3:13:c0:e9:20:fb:a4:
                    93:01:2a:ae:8b:a0:7d:0d:e1:1f:ab:79:aa:64:c6:
                    68:c2:40:7b:fa:4b:fc:bd:dd:e1:40:ed:f5:dd:42:
                    f5:ba:c4:d3:54:20:68:7a:b2:b5:e4:1d:9c:a5:11:
                    09:e5:74:0b:72:04:d8:37:3f:af:66:0a:47:28:ba:
                    e4:72:7f:65:53:a9:cd:66:ec:fd:cd:60:c1:56:30:
                    26:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:5E:0A:49:CF:52:38:D7:9B:2A:08:62:BC:C8:F5:A8:E6:EE:12:2B
            X509v3 Authority Key Identifier:
                keyid:FE:19:77:8A:0D:07:BD:DB:5F:F6:B9:F0:5B:E2:D5:45:52:0E:C4:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:81:62:38:76:95:a2:64:b8:9d:d8:b4:bb:fb:00:c2:1f:56:
         a6:a9:e0:ee:96:14:eb:8a:07:73:25:52:ae:a3:7b:f3:ed:4b:
         60:8b:3d:9a:ed:8b:2c:1f:bd:0a:b1:28:8e:77:c9:ff:f9:18:
         e9:d2:3b:07:e4:b4:b6:d2:45:55:74:c1:69:f5:94:ce:b0:1b:
         ea:cd:e6:34:f5:f1:3a:ce:2c:fc:e7:c1:bd:86:ff:45:12:c1:
         9a:0a:86:c1:d6:1d:5c:71:e0:ed:17:84:5f:f7:44:1f:58:0b:
         77:42:c8:8a:5e:b9:be:1e:2c:2e:3b:a9:62:6b:eb:a5:c8:5b:
         e0:7b:70:54:1b:da:6c:39:0e:3a:db:d0:d4:49:81:66:4d:d6:
         79:7e:c5:ed:81:e2:f6:e2:6a:e3:b4:a7:e1:90:e9:ba:5d:67:
         16:7a:3d:80:1b:bb:98:c8:95:66:c1:d5:89:ed:64:9b:2d:4e:
         44:a5:b0:62:15:5a:7e:bc:e6:ce:35:f2:f9:74:82:d2:d4:a6:
         0f:47:ee:c3:6e:80:f8:14:31:e5:c8:a1:7d:87:f4:fa:c3:b6:
         2b:f5:1c:7f:4f:53:69:8c:1f:d0:e3:37:c9:ca:93:a0:9b:1f:
         c0:2b:87:4a:32:ee:88:e5:2d:c7:a0:bd:39:46:f1:9e:e7:02:
         e4:8d:8c:0d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBBgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODZDMkYxMTAvBgNVBAUTKEZFMTk3NzhBMEQwN0JEREI1RkY2QjlGMDVCRTJENTQ1
NTIwRUM0OTQwHhcNMjYwNDE3MDAyMDM3WhcNMjYwNDI0MDAyMDM3WjAYMRYwFAYD
VQQDEw02OWUxN2NkNS01YjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAscNr9MSlfxe8VUUsAmcnw4xIQZeDq4kyVnfpqKeoNhPjUYHsiozr/NfeKG4r
MbhEmnX7K+z1zwkMVVcEZ7IfcO7qq6+EVbIAFVCF0ahWycizY2TweYDDGtQBI5fa
j06ZJmzFsWTZCBOLUaGD1NFkqY7gjPda9M3yBwRgLcfpy+DpHJQJzAFlgApYt9cH
JVtdwJwBGvhLdBGDJ9QUQpD4dwHv7HlBQT/B+AOmSfMTwOkg+6STASqui6B9DeEf
q3mqZMZowkB7+kv8vd3hQO313UL1usTTVCBoerK15B2cpREJ5XQLcgTYNz+vZgpH
KLrkcn9lU6nNZuz9zWDBVjAmCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJheCknP
UjjXmyoIYrzI9ajm7hIrMB8GA1UdIwQYMBaAFP4Zd4oNB73bX/a58Fvi1UVSDsSU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkMyRi83NzNEMzlCNkIz
NDExMUVDODIwMzE5NUJDNEY5QUUwMi9faGwzaWcwSHZkdGY5cm53Vy1MVlJWSU94
SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19obDNpZzBIdmR0ZjlybndXLUxWUlZJT3hKUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NkMyRi83NzNEMzlCNkIzNDExMUVDODIwMzE5NUJDNEY5QUUwMi9faGwzaWcwSHZk
dGY5cm53Vy1MVlJWSU94SlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArYFiOHaVomS4ndi0u/sAwh9Wpqng7pYU64oHcyVSrqN78+1LYIs9mu2LLB+9
CrEojnfJ//kY6dI7B+S0ttJFVXTBafWUzrAb6s3mNPXxOs4s/OfBvYb/RRLBmgqG
wdYdXHHg7ReEX/dEH1gLd0LIil65vh4sLjupYmvrpchb4HtwVBvabDkOOtvQ1EmB
Zk3WeX7F7YHi9uJq47Sn4ZDpul1nFno9gBu7mMiVZsHVie1kmy1ORKWwYhVafrzm
zjXy+XSC0tSmD0fuw26A+BQx5cihfYf0+sO2K/Ucf09TaYwf0OM3ycqToJsfwCuH
SjLuiOUtx6C9OUbxnucC5I2MDQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:07 2026 by rpki-client