Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C2EB/91F8312EE53411F0912CFD566E6F56BC/d6JUOZAm2TKAXn4gvhI7PUNZ2kw.mft
File:                     d6JUOZAm2TKAXn4gvhI7PUNZ2kw.mft (raw, json)
Hash identifier:          TM7gKLIOVSzZb00q0eA4kpI1oJKYRD8Pjq3Ho7oOkg4=
Subject key identifier:   F8:76:FF:DF:A6:18:D9:FF:8D:D7:F5:12:CE:27:11:B4:D7:C8:D0:8C
Authority key identifier: 77:A2:54:39:90:26:D9:32:80:5E:7E:20:BE:12:3B:3D:43:59:DA:4C
Certificate issuer:       /CN=A918C2EB/serialNumber=77A254399026D932805E7E20BE123B3D4359DA4C
Certificate serial:       41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6JUOZAm2TKAXn4gvhI7PUNZ2kw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C2EB/91F8312EE53411F0912CFD566E6F56BC/d6JUOZAm2TKAXn4gvhI7PUNZ2kw.mft
Manifest number:          3F
Signing time:             Fri 17 Apr 2026 08:13:48 +0000
Manifest this update:     Fri 17 Apr 2026 08:13:47 +0000
Manifest next update:     Fri 24 Apr 2026 08:13:47 +0000
Files and hashes:         1: d6JUOZAm2TKAXn4gvhI7PUNZ2kw.crl (hash: dgOzvRU1hsvFTYlQCLevo6MYoMujBlOYt64tiKFI5nA=)
                          2: 9C9F9D6AE61511F0BA7CC46D6A6F56BC.roa (hash: p8eavba2zmjT8rN7Dr/GDzyItyV8Fg/l0iky6Jo7qLk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C2EB/91F8312EE53411F0912CFD566E6F56BC/d6JUOZAm2TKAXn4gvhI7PUNZ2kw.crl
                          rsync://rpki.apnic.net/member_repository/A918C2EB/91F8312EE53411F0912CFD566E6F56BC/d6JUOZAm2TKAXn4gvhI7PUNZ2kw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6JUOZAm2TKAXn4gvhI7PUNZ2kw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:13:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C2EB, serialNumber=77A254399026D932805E7E20BE123B3D4359DA4C
        Validity
            Not Before: Apr 17 08:13:47 2026 GMT
            Not After : Apr 24 08:13:47 2026 GMT
        Subject: CN=69e1ebbc-8999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:98:d2:6e:4f:b3:b9:bb:79:60:49:98:e7:f4:
                    e2:6a:ec:25:bf:6d:7d:d0:96:5b:55:4b:45:de:5b:
                    a4:c3:29:76:59:24:76:f5:89:b7:f6:cb:96:30:0e:
                    74:b6:d8:af:9d:5d:44:36:59:83:d6:22:66:ca:93:
                    4c:a0:82:4c:16:7e:8f:ae:79:04:ef:7b:33:25:e9:
                    da:2f:3f:8e:37:47:db:e8:f0:40:0b:71:5b:a4:64:
                    6f:ef:fd:69:bd:58:77:6d:87:61:20:6d:77:48:df:
                    e8:a1:ae:9e:9f:d1:5c:0c:74:6d:30:bb:e4:41:5d:
                    c1:36:c0:7b:da:17:00:90:94:b5:79:47:20:af:a6:
                    60:f4:60:b6:f9:48:02:bf:5f:cd:b9:2c:36:21:13:
                    b6:d2:13:65:ab:53:8e:0b:fc:2d:cf:f0:d0:33:31:
                    27:d0:34:b5:47:3b:77:e8:7b:e0:18:2d:5f:e3:f6:
                    32:5c:e4:06:da:13:7c:88:69:54:a8:6e:bc:39:5c:
                    1d:35:01:3f:c8:1d:12:ac:30:3e:2a:c5:52:a8:fe:
                    1c:43:da:ad:a5:46:19:16:eb:6a:2f:15:58:ef:78:
                    3c:c5:af:99:af:92:e5:aa:24:9e:ec:02:fc:06:af:
                    cb:f5:d9:7d:b6:e2:af:77:ef:6e:47:9b:6f:31:4a:
                    da:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:76:FF:DF:A6:18:D9:FF:8D:D7:F5:12:CE:27:11:B4:D7:C8:D0:8C
            X509v3 Authority Key Identifier:
                keyid:77:A2:54:39:90:26:D9:32:80:5E:7E:20:BE:12:3B:3D:43:59:DA:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C2EB/91F8312EE53411F0912CFD566E6F56BC/d6JUOZAm2TKAXn4gvhI7PUNZ2kw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6JUOZAm2TKAXn4gvhI7PUNZ2kw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C2EB/91F8312EE53411F0912CFD566E6F56BC/d6JUOZAm2TKAXn4gvhI7PUNZ2kw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:f9:7b:1f:23:66:c8:2f:ec:7d:f2:cc:76:fa:51:02:57:af:
         c5:c5:d8:91:5d:bc:c8:95:4c:21:d3:75:61:a1:63:5f:7c:24:
         fe:16:b8:d2:df:27:4f:e4:b4:20:e8:de:a7:c7:b1:f2:42:47:
         74:4d:65:7b:30:00:ba:cb:1c:61:81:af:4f:bf:5e:80:c3:0a:
         d8:84:b1:c4:25:e7:7e:67:ec:86:81:70:41:de:05:60:2b:0e:
         2e:a9:04:54:34:0b:6c:fa:b6:be:5c:04:68:5d:09:c9:6c:74:
         01:d6:56:ee:7e:51:b0:8a:33:3f:97:17:de:0b:82:10:e9:50:
         57:8f:1f:5d:7e:5c:3b:57:3a:79:3a:fd:fa:3e:ea:bb:6f:2c:
         f7:73:9b:c4:a5:ab:ac:02:9e:98:52:d1:7d:00:c9:bf:39:b2:
         ea:b0:c2:92:9a:d5:85:78:47:51:64:88:34:42:d8:db:f3:66:
         fe:40:e5:03:fb:af:07:05:d0:f4:91:d6:8e:51:02:50:ca:7c:
         f7:c9:60:4e:b2:e3:6f:14:9b:74:b2:81:9b:fb:9e:3e:56:df:
         0a:e8:1d:df:94:eb:e0:28:93:fa:f0:50:7d:d0:fc:89:87:48:
         5c:41:2d:30:ff:cd:3c:b1:75:2e:d0:cd:a6:89:44:17:17:44:
         d7:87:a5:a7
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
QzJFQjExMC8GA1UEBRMoNzdBMjU0Mzk5MDI2RDkzMjgwNUU3RTIwQkUxMjNCM0Q0
MzU5REE0QzAeFw0yNjA0MTcwODEzNDdaFw0yNjA0MjQwODEzNDdaMBgxFjAUBgNV
BAMTDTY5ZTFlYmJjLTg5OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDUmNJuT7O5u3lgSZjn9OJq7CW/bX3QlltVS0XeW6TDKXZZJHb1ibf2y5YwDnS2
2K+dXUQ2WYPWImbKk0yggkwWfo+ueQTvezMl6dovP443R9vo8EALcVukZG/v/Wm9
WHdth2EgbXdI3+ihrp6f0VwMdG0wu+RBXcE2wHvaFwCQlLV5RyCvpmD0YLb5SAK/
X825LDYhE7bSE2WrU44L/C3P8NAzMSfQNLVHO3foe+AYLV/j9jJc5AbaE3yIaVSo
brw5XB01AT/IHRKsMD4qxVKo/hxD2q2lRhkW62ovFVjveDzFr5mvkuWqJJ7sAvwG
r8v12X224q93725Hm28xStphAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU+Hb/36YY
2f+N1/USzicRtNfI0IwwHwYDVR0jBBgwFoAUd6JUOZAm2TKAXn4gvhI7PUNZ2kww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThDMkVCLzkxRjgzMTJFRTUz
NDExRjA5MTJDRkQ1NjZFNkY1NkJDL2Q2SlVPWkFtMlRLQVhuNGd2aEk3UFVOWjJr
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZDZKVU9aQW0yVEtBWG40Z3ZoSTdQVU5aMmt3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThD
MkVCLzkxRjgzMTJFRTUzNDExRjA5MTJDRkQ1NjZFNkY1NkJDL2Q2SlVPWkFtMlRL
QVhuNGd2aEk3UFVOWjJrdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAe+XsfI2bIL+x98sx2+lECV6/FxdiRXbzIlUwh03VhoWNffCT+FrjS3ydP5LQg
6N6nx7HyQkd0TWV7MAC6yxxhga9Pv16AwwrYhLHEJed+Z+yGgXBB3gVgKw4uqQRU
NAts+ra+XARoXQnJbHQB1lbuflGwijM/lxfeC4IQ6VBXjx9dflw7Vzp5Ov36Puq7
byz3c5vEpausAp6YUtF9AMm/ObLqsMKSmtWFeEdRZIg0Qtjb82b+QOUD+68HBdD0
kdaOUQJQynz3yWBOsuNvFJt0soGb+54+Vt8K6B3flOvgKJP68FB90PyJh0hcQS0w
/808sXUu0M2miUQXF0TXh6Wn
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:58:56 2026 by rpki-client