Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft
File:                     vLFqiHOxvhMm61zbkLGGEV2nTWc.mft (raw, json)
Hash identifier:          JT3OUJHkRrdIihtgrieqHPSAVYvDLamHD9feBYTapIc=
Subject key identifier:   A6:29:08:19:0E:A1:35:24:1B:C4:FD:96:8E:24:B6:95:7E:E0:4B:E6
Authority key identifier: BC:B1:6A:88:73:B1:BE:13:26:EB:5C:DB:90:B1:86:11:5D:A7:4D:67
Certificate issuer:       /CN=A9194715/serialNumber=BCB16A8873B1BE1326EB5CDB90B186115DA74D67
Certificate serial:       029D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLFqiHOxvhMm61zbkLGGEV2nTWc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft
Manifest number:          0297
Signing time:             Fri 17 Apr 2026 01:24:26 +0000
Manifest this update:     Fri 17 Apr 2026 01:24:25 +0000
Manifest next update:     Fri 24 Apr 2026 01:24:25 +0000
Files and hashes:         1: vLFqiHOxvhMm61zbkLGGEV2nTWc.crl (hash: iaV9x6tkkCB/c/i/oc5clQv4iFo/JYukFMDGDkTWpQk=)
                          2: A8A940C6429811EDBB392C35C4F9AE02.roa (hash: gD3cKaCeij6TV/lz5LfYhJg/3abihcMPlSP3fLdyyRc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.crl
                          rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLFqiHOxvhMm61zbkLGGEV2nTWc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:24:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 669 (0x29d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194715, serialNumber=BCB16A8873B1BE1326EB5CDB90B186115DA74D67
        Validity
            Not Before: Apr 17 01:24:25 2026 GMT
            Not After : Apr 24 01:24:25 2026 GMT
        Subject: CN=69e18bca-3d8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a7:8c:2f:19:69:88:76:da:f3:3a:5d:c0:e3:
                    92:ec:23:9b:7e:12:1d:86:00:cd:7e:ce:27:de:ce:
                    ed:43:ab:c0:17:3b:40:67:65:f1:0b:54:3f:f1:52:
                    d2:d9:3f:50:02:a4:b3:c6:2a:98:ae:3c:82:d4:a3:
                    89:f3:78:7f:18:ff:99:e0:6f:2f:5e:93:41:ae:06:
                    0d:4c:40:96:80:9c:66:df:5d:ed:9a:7b:61:03:98:
                    2a:f3:e0:2a:18:0a:50:8e:35:b6:5f:7c:b6:89:8f:
                    4f:c5:e4:30:3c:b6:9f:4c:27:53:79:78:c7:6b:a9:
                    af:07:78:b9:f8:6c:ca:f0:cd:de:27:e8:d2:99:5c:
                    c7:86:83:eb:49:92:18:af:65:cd:cf:01:f0:44:cd:
                    f8:b0:92:d4:70:dc:07:f5:cf:0d:ff:32:c9:fe:ea:
                    9d:ee:25:a8:17:7c:62:cc:e3:cb:ff:12:56:16:02:
                    ff:5a:3e:b7:93:3f:f8:df:9f:65:c9:f6:15:cf:1c:
                    d7:72:31:9a:1f:19:a1:8d:e4:1c:52:7c:50:0c:20:
                    cf:df:cd:44:8c:3a:e5:66:77:51:0e:4a:8b:94:8b:
                    f0:5c:1f:92:ee:8d:a8:6f:1d:34:55:05:87:7b:46:
                    bb:48:1d:95:25:23:a6:b8:ca:ef:84:50:10:9d:80:
                    35:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:29:08:19:0E:A1:35:24:1B:C4:FD:96:8E:24:B6:95:7E:E0:4B:E6
            X509v3 Authority Key Identifier:
                keyid:BC:B1:6A:88:73:B1:BE:13:26:EB:5C:DB:90:B1:86:11:5D:A7:4D:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLFqiHOxvhMm61zbkLGGEV2nTWc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:c5:83:bd:96:a5:34:fe:ca:68:92:87:80:6c:34:4a:4e:97:
         17:1a:ac:c9:8f:59:f7:d0:62:f7:c6:b8:6e:c8:a8:b0:46:18:
         20:48:f1:8c:d8:2c:c0:1d:a4:0b:30:b4:9c:a2:eb:01:c3:4f:
         8d:26:7f:64:17:4a:ae:12:50:40:a1:8c:30:e2:44:49:8d:70:
         dd:16:1b:bf:34:44:15:da:d4:42:d2:cd:ce:ae:20:0d:30:5b:
         d2:b3:f1:08:ea:f3:57:78:e7:8f:b5:a2:60:7a:81:b4:58:31:
         3d:4c:d2:23:64:3a:9f:8b:09:3f:a3:a0:0e:b8:3a:3b:32:cb:
         09:a8:f8:89:0c:30:2b:63:38:11:b9:70:1f:34:0d:72:b3:8e:
         b0:2a:23:8f:75:4c:e3:9a:97:18:ec:3c:bb:50:c4:20:66:e4:
         b9:fc:d3:44:0c:88:02:f1:9a:78:af:2c:45:27:76:5d:4b:c4:
         92:97:c4:c6:89:22:70:67:c5:e8:0a:32:a6:a2:ae:63:53:67:
         39:27:c3:f0:1f:f6:2b:d6:ab:1f:f6:24:fc:5f:d2:7b:72:c8:
         96:47:fa:c1:83:c9:fd:5b:a9:3f:d7:62:3c:d7:8f:15:7d:d7:
         5f:dd:63:5d:24:c2:72:30:bf:d7:68:78:07:a9:01:6c:4f:db:
         cb:9b:3e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:32:59 2026 by rpki-client