Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft
File:                     PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft (raw, json)
Hash identifier:          Y9xeZhAcmAQnZ2PSDUvDDIoU46zum/K8WcZYGsKZ+KA=
Subject key identifier:   1F:14:E0:B7:32:EA:1E:A1:4D:22:9E:36:FE:1E:34:B6:02:B9:00:BD
Authority key identifier: 3C:AA:EA:F1:B0:D4:BF:63:17:AE:4F:1E:54:63:79:BF:F3:46:CF:D3
Certificate issuer:       /CN=A918D663/serialNumber=3CAAEAF1B0D4BF6317AE4F1E546379BFF346CFD3
Certificate serial:       C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft
Manifest number:          C0
Signing time:             Fri 17 Apr 2026 06:40:28 +0000
Manifest this update:     Fri 17 Apr 2026 06:40:27 +0000
Manifest next update:     Fri 24 Apr 2026 06:40:27 +0000
Files and hashes:         1: PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl (hash: nKpCpGXGAvI/fpG7z+XJo5IKuPnSjkQEHeBSakEkgBI=)
                          2: 8C215ED6172811F0B074151EC4F9AE02.roa (hash: BzJbMll/2nErUDx3X8m0xfulq0DUGLZUVlVIKOuCCgI=)
                          3: 8BACF000172811F0B074151EC4F9AE02.roa (hash: FPDvvLJ/gQTo+9W5C7JTL7cnqUEeaAN36mc784gFf6w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl
                          rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:40:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 200 (0xc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D663, serialNumber=3CAAEAF1B0D4BF6317AE4F1E546379BFF346CFD3
        Validity
            Not Before: Apr 17 06:40:27 2026 GMT
            Not After : Apr 24 06:40:27 2026 GMT
        Subject: CN=69e1d5db-68ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:17:8d:f3:18:3d:8d:88:7a:a1:72:1a:98:7a:
                    8a:61:1e:eb:65:7c:5d:e8:7a:89:57:c8:20:e2:79:
                    52:69:3e:db:b0:0c:92:e5:04:f1:9b:b6:cd:19:16:
                    8f:c7:ef:69:5f:54:91:4c:4f:7d:2f:50:bc:b1:9e:
                    4f:3d:1b:db:27:f0:78:c6:0d:5a:b7:d0:aa:6c:be:
                    0b:9d:b4:fb:6c:0b:f6:ae:5c:65:9f:f4:1a:9f:a9:
                    d1:3d:74:0a:b2:a8:33:35:15:01:12:43:2b:ad:a2:
                    4f:6a:f9:3d:0a:39:98:05:d6:2f:3b:d5:bb:dd:db:
                    3c:ae:02:ab:6a:b2:d2:f8:5f:ef:02:e2:bc:25:62:
                    d6:d3:0e:74:ac:cb:81:14:c7:bc:ea:16:9c:66:6d:
                    59:16:f2:5b:14:81:d2:7c:ab:ba:7d:08:a1:c9:03:
                    5c:8f:d7:d7:f1:ca:73:aa:90:7e:72:96:a4:b9:1a:
                    80:5e:0d:6e:94:41:64:3c:ef:83:8d:b4:56:7d:af:
                    61:c0:a0:61:e7:68:4c:db:52:8d:bf:37:51:79:ba:
                    3a:dc:94:38:4c:e1:66:d4:e9:4b:e7:40:a5:78:90:
                    7b:d5:91:13:6c:ae:e5:ee:87:50:02:65:10:0d:c2:
                    5f:0a:1a:fa:a8:8f:89:7b:a7:d2:c9:f7:fd:6f:4b:
                    f4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:14:E0:B7:32:EA:1E:A1:4D:22:9E:36:FE:1E:34:B6:02:B9:00:BD
            X509v3 Authority Key Identifier:
                keyid:3C:AA:EA:F1:B0:D4:BF:63:17:AE:4F:1E:54:63:79:BF:F3:46:CF:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:11:1a:d0:88:0b:d0:cb:36:99:a1:01:95:9a:1d:7e:9e:e1:
         70:1c:5b:84:1b:40:c5:12:ed:1c:99:b9:38:65:cc:f0:2a:0d:
         f3:b0:ee:02:c4:5c:7c:5e:e8:7a:9f:7b:12:16:0e:6e:aa:d0:
         c0:26:c0:31:43:b6:da:a9:4f:14:e0:81:76:60:2e:af:13:29:
         ad:45:0e:78:ec:a3:65:95:9b:fa:58:cf:f4:41:21:91:f9:96:
         3d:48:73:fc:ae:39:06:e4:62:f7:25:bb:00:a8:22:ba:b8:6c:
         54:3d:fb:f0:a3:6d:3f:bd:cb:79:72:de:fe:62:83:46:51:35:
         65:5a:25:bd:d6:03:6b:0d:85:c4:2c:a7:4a:0d:50:75:54:73:
         09:24:2e:6c:28:8d:7f:26:9c:8b:a6:5b:25:d5:c1:08:33:a4:
         46:67:98:4b:d1:5c:b0:f6:50:5c:94:42:6e:d0:b2:aa:a2:8e:
         43:36:4f:85:5e:06:ec:ab:df:de:e6:64:8f:aa:01:3d:7c:95:
         bd:bd:f4:c5:d9:72:11:74:b5:ea:26:7a:b1:ef:d2:e8:bc:14:
         57:fd:32:90:2f:a0:8f:20:d3:3d:57:1c:c5:b1:83:58:a0:37:
         09:b3:6b:78:71:bc:1f:b5:3d:4f:4b:68:ad:5e:ef:2d:30:87:
         7b:d5:f8:07
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEQ2NjMxMTAvBgNVBAUTKDNDQUFFQUYxQjBENEJGNjMxN0FFNEYxRTU0NjM3OUJG
RjM0NkNGRDMwHhcNMjYwNDE3MDY0MDI3WhcNMjYwNDI0MDY0MDI3WjAYMRYwFAYD
VQQDEw02OWUxZDVkYi02OGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoheN8xg9jYh6oXIamHqKYR7rZXxd6HqJV8gg4nlSaT7bsAyS5QTxm7bNGRaP
x+9pX1SRTE99L1C8sZ5PPRvbJ/B4xg1at9CqbL4LnbT7bAv2rlxln/Qan6nRPXQK
sqgzNRUBEkMrraJPavk9CjmYBdYvO9W73ds8rgKrarLS+F/vAuK8JWLW0w50rMuB
FMe86hacZm1ZFvJbFIHSfKu6fQihyQNcj9fX8cpzqpB+cpakuRqAXg1ulEFkPO+D
jbRWfa9hwKBh52hM21KNvzdRebo63JQ4TOFm1OlL50CleJB71ZETbK7l7odQAmUQ
DcJfChr6qI+Je6fSyff9b0v0cQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB8U4Lcy
6h6hTSKeNv4eNLYCuQC9MB8GA1UdIwQYMBaAFDyq6vGw1L9jF65PHlRjeb/zRs/T
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDY2My83QUM5Njc5RTE3
MjAxMUYwQjc0MjIzNEVDNEY5QUUwMi9QS3JxOGJEVXYyTVhyazhlVkdONXZfTkd6
OU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BLcnE4YkRVdjJNWHJrOGVWR041dl9OR3o5TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RDY2My83QUM5Njc5RTE3MjAxMUYwQjc0MjIzNEVDNEY5QUUwMi9QS3JxOGJEVXYy
TVhyazhlVkdONXZfTkd6OU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARBEa0IgL0Ms2maEBlZodfp7hcBxbhBtAxRLtHJm5OGXM8CoN87DuAsRcfF7o
ep97EhYObqrQwCbAMUO22qlPFOCBdmAurxMprUUOeOyjZZWb+ljP9EEhkfmWPUhz
/K45BuRi9yW7AKgiurhsVD378KNtP73LeXLe/mKDRlE1ZVolvdYDaw2FxCynSg1Q
dVRzCSQubCiNfyaci6ZbJdXBCDOkRmeYS9FcsPZQXJRCbtCyqqKOQzZPhV4G7Kvf
3uZkj6oBPXyVvb30xdlyEXS16iZ6se/S6LwUV/0ykC+gjyDTPVccxbGDWKA3CbNr
eHG8H7U9T0torV7vLTCHe9X4Bw==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:05:08 2026 by rpki-client