Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft
File:                     f95kLEQhft58x2dxm6Z9A20X0Es.mft (raw, json)
Hash identifier:          ToAqacZJNUvx4CISpHnGY69sugnAqSMP9FneVPayVlw=
Subject key identifier:   6E:06:53:C8:D2:54:E4:DB:0A:CB:29:4B:C6:00:D7:6B:44:F0:AE:D9
Authority key identifier: 7F:DE:64:2C:44:21:7E:DE:7C:C7:67:71:9B:A6:7D:03:6D:17:D0:4B
Certificate issuer:       /CN=A9189883/serialNumber=7FDE642C44217EDE7CC767719BA67D036D17D04B
Certificate serial:       01D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft
Manifest number:          01D2
Signing time:             Fri 17 Apr 2026 03:21:11 +0000
Manifest this update:     Fri 17 Apr 2026 03:21:10 +0000
Manifest next update:     Fri 24 Apr 2026 03:21:10 +0000
Files and hashes:         1: f95kLEQhft58x2dxm6Z9A20X0Es.crl (hash: JrR6EMSCa3Irm5/0S0fslq6hPySTWvwxHBBwmJJ6rQs=)
                          2: 166B5FEA727711EEA4209110C4F9AE02.roa (hash: m9fdpbDTR93o1zzYBL+SbEGylXvjw7lehcZZpxx/N4w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.crl
                          rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:21:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 471 (0x1d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189883, serialNumber=7FDE642C44217EDE7CC767719BA67D036D17D04B
        Validity
            Not Before: Apr 17 03:21:10 2026 GMT
            Not After : Apr 24 03:21:10 2026 GMT
        Subject: CN=69e1a726-38ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4c:50:d4:b1:97:ad:3e:91:ee:69:fd:ae:d3:
                    00:2c:4d:84:5a:fb:67:60:97:66:98:e8:de:6c:03:
                    71:47:bc:94:4d:54:17:8c:94:f9:63:1c:95:6b:a8:
                    84:1e:26:ce:94:a1:83:e4:fb:9f:02:d7:65:e1:c2:
                    78:50:95:34:41:e5:ba:7b:fe:7c:ee:40:1c:1b:63:
                    4b:93:ab:1b:78:5c:8d:b8:c4:7b:58:8c:28:bd:ca:
                    09:e9:f6:8c:97:52:e5:df:1b:87:29:5d:98:4c:b2:
                    04:08:6b:98:f3:88:fd:c5:90:b9:1c:32:83:64:3d:
                    b7:b4:27:12:56:d9:33:06:90:a2:3f:7a:82:7c:69:
                    6c:32:70:7b:0e:42:a0:cc:3e:25:b9:41:83:68:a2:
                    5c:b4:91:49:f8:16:7f:8d:99:9e:3a:55:77:0c:08:
                    b5:0d:cc:a7:76:00:05:df:c5:60:9b:94:b7:1d:b2:
                    cc:b1:2a:c6:e9:a3:5d:73:64:49:74:f9:29:cb:be:
                    93:29:63:cf:1f:95:74:4a:57:6f:53:6c:47:ca:d5:
                    e7:4f:60:c4:5e:6d:25:ca:5a:60:ef:84:fa:5a:be:
                    c8:85:03:67:e7:d7:c2:21:23:71:3c:cd:16:c1:62:
                    0d:7f:28:0f:c2:2c:e2:c2:ad:7f:d2:5c:83:22:41:
                    43:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:06:53:C8:D2:54:E4:DB:0A:CB:29:4B:C6:00:D7:6B:44:F0:AE:D9
            X509v3 Authority Key Identifier:
                keyid:7F:DE:64:2C:44:21:7E:DE:7C:C7:67:71:9B:A6:7D:03:6D:17:D0:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:b6:c2:53:7f:89:3d:4d:a1:2e:f9:f4:fd:e8:54:6f:90:f1:
         f9:a7:f4:27:38:d7:fd:9f:37:9d:d6:48:a1:51:df:da:1e:ef:
         44:28:93:ef:9c:ae:7e:6e:6a:81:0f:a2:46:27:0d:ac:9f:c4:
         30:75:42:4b:32:28:3d:b3:0a:5c:9a:40:30:5d:1c:63:bf:25:
         07:6a:2a:44:c8:37:8f:29:85:6f:e9:10:4e:a2:e3:03:8a:0a:
         ae:1e:00:70:ab:65:58:2d:84:d0:c7:7a:a4:3d:29:3a:66:82:
         1e:c7:37:60:0c:da:34:3d:d5:56:6f:1d:d8:88:73:76:35:3b:
         95:60:44:28:37:45:a1:f1:cc:bd:3e:33:34:fa:1e:d0:c6:4e:
         b7:e8:03:5d:9a:0f:fa:43:45:5c:6d:16:23:a5:33:70:c2:e6:
         f5:33:fc:fa:dd:0c:c8:00:1d:5d:9d:fb:a7:00:4c:39:d8:a6:
         a6:6d:2e:1b:0e:fe:d6:f5:e8:b6:76:d7:b0:61:53:4f:89:ed:
         1f:32:04:74:57:a5:cb:44:24:18:60:2f:f9:65:ce:25:32:42:
         4d:9b:a4:4c:d3:81:2d:23:59:2c:36:0e:ff:a4:7b:08:3f:dd:
         58:95:5c:19:a2:11:fd:42:dd:48:ca:b0:72:fd:8b:79:ad:e5:
         73:56:12:21
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODk4ODMxMTAvBgNVBAUTKDdGREU2NDJDNDQyMTdFREU3Q0M3Njc3MTlCQTY3RDAz
NkQxN0QwNEIwHhcNMjYwNDE3MDMyMTEwWhcNMjYwNDI0MDMyMTEwWjAYMRYwFAYD
VQQDEw02OWUxYTcyNi0zOGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArUxQ1LGXrT6R7mn9rtMALE2EWvtnYJdmmOjebANxR7yUTVQXjJT5YxyVa6iE
HibOlKGD5PufAtdl4cJ4UJU0QeW6e/587kAcG2NLk6sbeFyNuMR7WIwovcoJ6faM
l1Ll3xuHKV2YTLIECGuY84j9xZC5HDKDZD23tCcSVtkzBpCiP3qCfGlsMnB7DkKg
zD4luUGDaKJctJFJ+BZ/jZmeOlV3DAi1DcyndgAF38Vgm5S3HbLMsSrG6aNdc2RJ
dPkpy76TKWPPH5V0SldvU2xHytXnT2DEXm0lylpg74T6Wr7IhQNn59fCISNxPM0W
wWINfygPwiziwq1/0lyDIkFD8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG4GU8jS
VOTbCsspS8YA12tE8K7ZMB8GA1UdIwQYMBaAFH/eZCxEIX7efMdncZumfQNtF9BL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTg4My9DMzdFQzhCMjcy
NzYxMUVFODQ2MDI5MERDNEY5QUUwMi9mOTVrTEVRaGZ0NTh4MmR4bTZaOUEyMFgw
RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Y5NWtMRVFoZnQ1OHgyZHhtNlo5QTIwWDBFcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OTg4My9DMzdFQzhCMjcyNzYxMUVFODQ2MDI5MERDNEY5QUUwMi9mOTVrTEVRaGZ0
NTh4MmR4bTZaOUEyMFgwRXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKLbCU3+JPU2hLvn0/ehUb5Dx+af0JzjX/Z83ndZIoVHf2h7vRCiT75yufm5q
gQ+iRicNrJ/EMHVCSzIoPbMKXJpAMF0cY78lB2oqRMg3jymFb+kQTqLjA4oKrh4A
cKtlWC2E0Md6pD0pOmaCHsc3YAzaND3VVm8d2IhzdjU7lWBEKDdFofHMvT4zNPoe
0MZOt+gDXZoP+kNFXG0WI6UzcMLm9TP8+t0MyAAdXZ37pwBMOdimpm0uGw7+1vXo
tnbXsGFTT4ntHzIEdFely0QkGGAv+WXOJTJCTZukTNOBLSNZLDYO/6R7CD/dWJVc
GaIR/ULdSMqwcv2Lea3lc1YSIQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:36:50 2026 by rpki-client