Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.mft
File:                     bP1Wp36tnhWbyxjrbehic1CRtUo.mft (raw, json)
Hash identifier:          40+HUC0J47P6AV2GdOOIqZSxw3WhHW/fqkFn1rmHvqI=
Subject key identifier:   3F:EB:28:5E:F4:9F:E8:5D:0E:37:9D:E9:95:C9:40:5C:8C:DD:71:DA
Authority key identifier: 6C:FD:56:A7:7E:AD:9E:15:9B:CB:18:EB:6D:E8:62:73:50:91:B5:4A
Certificate issuer:       /CN=A918E319/serialNumber=6CFD56A77EAD9E159BCB18EB6DE862735091B54A
Certificate serial:       1A72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.mft
Manifest number:          19C7
Signing time:             Thu 16 Apr 2026 16:21:37 +0000
Manifest this update:     Thu 16 Apr 2026 16:21:37 +0000
Manifest next update:     Thu 23 Apr 2026 16:21:37 +0000
Files and hashes:         1: bP1Wp36tnhWbyxjrbehic1CRtUo.crl (hash: 2ywsM1kgrUsNo25zL9fqf6KL4mQ+oy6aqUjAMSN1NzE=)
                          2: 682214D6505711F08AA6EA60C4F9AE02.roa (hash: krsHowhXbVd9snwNWqUNA4Shj/rwFOOE59dSKRa4fAk=)
                          3: 4DFB5FE4B79211EFA70E7C4CC4F9AE02.roa (hash: Ap6oRfEzkjO35cGS8csTlKBBeSJXfY4G3zYl5UbaU18=)
                          4: 7AF2C29C50C811F09EF54B31C4F9AE02.roa (hash: xBW1Hd4XtulscqVukJ2NlnLPZ26ogpSkPuWYPnJDye8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.crl
                          rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 16:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6770 (0x1a72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E319, serialNumber=6CFD56A77EAD9E159BCB18EB6DE862735091B54A
        Validity
            Not Before: Apr 16 16:21:37 2026 GMT
            Not After : Apr 23 16:21:37 2026 GMT
        Subject: CN=69e10c91-2c6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:85:65:d8:d4:ef:17:77:15:ca:54:de:ca:68:
                    a6:8c:00:dc:4e:9b:90:96:be:31:53:f2:a8:3e:78:
                    19:a3:91:eb:88:e9:3f:4a:e7:d7:86:4c:37:af:cd:
                    fc:38:f2:77:57:0a:8a:7a:cd:b3:76:bc:9b:30:77:
                    a2:af:a1:96:53:87:b6:ae:d3:de:d9:f7:7b:a6:09:
                    c4:ac:14:45:4d:6e:5d:61:e5:67:81:df:83:e9:4f:
                    eb:15:50:34:04:e3:ad:0f:04:01:4d:bd:01:b3:5c:
                    c4:dd:0b:0c:e5:98:b5:96:ba:81:2e:3f:12:5f:58:
                    8c:b0:7f:36:27:e3:44:06:37:4a:62:ba:e4:47:ab:
                    26:40:df:01:9e:32:cf:cf:e2:7a:b9:a2:ea:43:4b:
                    1d:72:c1:2a:01:93:e8:54:07:5b:05:d3:c4:53:02:
                    49:21:8c:da:ea:89:66:0e:17:93:f1:8b:2b:63:a5:
                    b6:7b:d0:19:ce:69:f5:a9:56:a8:e4:21:11:3c:f3:
                    21:ad:d4:0b:c1:0d:c6:5e:2c:b8:bc:f1:91:fe:11:
                    d9:93:fa:ba:50:c0:a6:2c:91:b3:79:29:eb:17:18:
                    0a:71:40:b9:f0:3c:73:e8:e9:7e:3c:9b:b6:92:41:
                    28:f1:12:e2:6f:18:27:77:44:69:20:2d:c0:8d:22:
                    2d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:EB:28:5E:F4:9F:E8:5D:0E:37:9D:E9:95:C9:40:5C:8C:DD:71:DA
            X509v3 Authority Key Identifier:
                keyid:6C:FD:56:A7:7E:AD:9E:15:9B:CB:18:EB:6D:E8:62:73:50:91:B5:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:d9:d0:f3:4e:03:6a:b4:74:1f:e7:dd:a7:63:ff:99:85:4f:
         d1:44:95:91:b3:b1:b3:ce:15:67:18:89:40:0a:65:2e:d3:0f:
         f5:09:b1:c3:44:99:49:2e:6d:45:41:e6:54:96:bf:a3:80:c2:
         06:1c:14:16:39:fc:30:9d:6a:5f:7f:18:aa:f6:4e:97:f0:9c:
         23:8c:a8:54:79:ff:b3:cf:a4:dd:94:6e:4b:e1:94:db:c1:76:
         0c:9e:d7:10:a5:ad:da:07:d4:7b:37:d3:8c:5e:79:63:5c:7a:
         7f:0b:6e:f7:19:ed:09:7c:d8:c9:b2:ea:95:9e:80:c6:58:17:
         d3:c3:97:24:7e:8f:f5:47:74:fb:ea:61:ae:8b:1d:d7:03:75:
         43:a3:d1:0c:86:b4:f4:c8:a7:40:b7:cd:1d:59:af:99:05:f7:
         c9:29:58:20:a6:2a:a0:ce:4e:fc:23:38:cb:11:c8:a2:df:61:
         1a:f5:de:92:f5:c2:2e:7e:06:a5:03:8f:7f:3b:df:00:52:77:
         40:41:6d:ca:55:15:24:a5:75:f9:f1:5b:f9:20:95:cf:f8:ec:
         78:01:5e:96:7b:8e:60:22:25:1d:8a:89:89:85:7b:48:53:e4:
         df:52:c5:6d:e1:e0:93:79:26:02:2f:94:82:46:44:45:ac:60:
         b5:7b:b2:2b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEUzMTkxMTAvBgNVBAUTKDZDRkQ1NkE3N0VBRDlFMTU5QkNCMThFQjZERTg2Mjcz
NTA5MUI1NEEwHhcNMjYwNDE2MTYyMTM3WhcNMjYwNDIzMTYyMTM3WjAYMRYwFAYD
VQQDEw02OWUxMGM5MS0yYzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyYVl2NTvF3cVylTeymimjADcTpuQlr4xU/KoPngZo5HriOk/SufXhkw3r838
OPJ3VwqKes2zdrybMHeir6GWU4e2rtPe2fd7pgnErBRFTW5dYeVngd+D6U/rFVA0
BOOtDwQBTb0Bs1zE3QsM5Zi1lrqBLj8SX1iMsH82J+NEBjdKYrrkR6smQN8BnjLP
z+J6uaLqQ0sdcsEqAZPoVAdbBdPEUwJJIYza6olmDheT8YsrY6W2e9AZzmn1qVao
5CERPPMhrdQLwQ3GXiy4vPGR/hHZk/q6UMCmLJGzeSnrFxgKcUC58Dxz6Ol+PJu2
kkEo8RLibxgnd0RpIC3AjSItuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD/rKF70
n+hdDjed6ZXJQFyM3XHaMB8GA1UdIwQYMBaAFGz9Vqd+rZ4Vm8sY623oYnNQkbVK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTMxOS84NjhERDY1NjhD
MjYxMUU3QkMwNkM0NEVDNEY5QUUwMi9iUDFXcDM2dG5oV2J5eGpyYmVoaWMxQ1J0
VW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JQMVdwMzZ0bmhXYnl4anJiZWhpYzFDUnRVby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RTMxOS84NjhERDY1NjhDMjYxMUU3QkMwNkM0NEVDNEY5QUUwMi9iUDFXcDM2dG5o
V2J5eGpyYmVoaWMxQ1J0VW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAI9nQ804DarR0H+fdp2P/mYVP0USVkbOxs84VZxiJQAplLtMP9Qmxw0SZSS5t
RUHmVJa/o4DCBhwUFjn8MJ1qX38YqvZOl/CcI4yoVHn/s8+k3ZRuS+GU28F2DJ7X
EKWt2gfUezfTjF55Y1x6fwtu9xntCXzYybLqlZ6AxlgX08OXJH6P9Ud0++phrosd
1wN1Q6PRDIa09MinQLfNHVmvmQX3ySlYIKYqoM5O/CM4yxHIot9hGvXekvXCLn4G
pQOPfzvfAFJ3QEFtylUVJKV1+fFb+SCVz/jseAFelnuOYCIlHYqJiYV7SFPk31LF
beHgk3kmAi+UgkZERaxgtXuyKw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:24:17 2026 by rpki-client