Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.mft
File:                     bZYGiLbecUGnIYmOngc-FneP7zU.mft (raw, json)
Hash identifier:          IcMs3yXqCZYPZd7z457PXUzeN4VZgAa8vqnRDue+mqE=
Subject key identifier:   5D:18:FD:BB:03:79:F0:8B:A4:B9:3D:40:43:1A:F9:40:85:23:3D:78
Authority key identifier: 6D:96:06:88:B6:DE:71:41:A7:21:89:8E:9E:07:3E:16:77:8F:EF:35
Certificate issuer:       /CN=A9197A8F/serialNumber=6D960688B6DE7141A721898E9E073E16778FEF35
Certificate serial:       01EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZYGiLbecUGnIYmOngc-FneP7zU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.mft
Manifest number:          01E7
Signing time:             Fri 17 Apr 2026 03:09:31 +0000
Manifest this update:     Fri 17 Apr 2026 03:09:30 +0000
Manifest next update:     Fri 24 Apr 2026 03:09:30 +0000
Files and hashes:         1: bZYGiLbecUGnIYmOngc-FneP7zU.crl (hash: jFdC3YPdcAZNhGpl2GdQ5qCwtTATZnKbLaxE+AZ0n9A=)
                          2: A663285A59DE11EE85CFCB12C4F9AE02.roa (hash: XXVUjsyhZNJjR2zCirDCP6YTvzsx5dU96ixceZ4TvBU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.crl
                          rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZYGiLbecUGnIYmOngc-FneP7zU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:09:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 494 (0x1ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197A8F, serialNumber=6D960688B6DE7141A721898E9E073E16778FEF35
        Validity
            Not Before: Apr 17 03:09:30 2026 GMT
            Not After : Apr 24 03:09:30 2026 GMT
        Subject: CN=69e1a46b-f008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:11:5e:cc:92:08:96:08:18:d4:ac:b2:7f:d9:
                    22:d0:9e:3c:77:88:28:3e:57:14:96:d2:20:86:2d:
                    94:da:5b:a0:ed:20:48:0e:5b:ce:1b:cd:82:94:ca:
                    72:4e:e8:47:a8:ef:32:1f:08:b0:41:36:01:73:35:
                    00:66:8b:b0:9f:c0:f5:a0:32:ae:a9:7f:6c:ed:bf:
                    f0:de:0b:08:2e:a0:c1:b4:f5:3a:1d:0d:42:86:40:
                    ca:9d:c8:97:9a:28:c0:13:d9:36:77:6d:68:43:50:
                    21:50:60:a2:3e:14:c8:3f:e1:c4:83:97:87:ba:52:
                    45:f0:ab:a8:48:aa:c0:54:18:05:cb:c0:7a:3f:a2:
                    c6:bb:ad:0e:20:ff:c0:a1:60:5d:01:39:df:2f:42:
                    43:5b:70:c0:e8:7d:a9:5a:b6:28:70:3c:5e:4f:b8:
                    34:ac:a7:ae:19:f8:31:d0:2c:5c:b2:db:2b:7c:21:
                    77:d6:9d:7f:1d:43:45:3d:ec:1d:3d:b2:52:8d:b2:
                    64:4e:44:18:c4:e0:06:a6:0c:3a:67:74:bb:d4:89:
                    b3:45:d2:e0:55:68:f2:22:a1:01:9c:26:f4:ba:7b:
                    a9:46:65:1b:e9:2b:c3:22:b1:57:c2:99:c8:82:6b:
                    27:5c:78:33:96:b5:35:a6:59:78:08:c1:71:81:95:
                    13:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:18:FD:BB:03:79:F0:8B:A4:B9:3D:40:43:1A:F9:40:85:23:3D:78
            X509v3 Authority Key Identifier:
                keyid:6D:96:06:88:B6:DE:71:41:A7:21:89:8E:9E:07:3E:16:77:8F:EF:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZYGiLbecUGnIYmOngc-FneP7zU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:df:07:43:bb:d3:44:ae:53:b2:e3:85:00:ea:07:ef:aa:47:
         d2:e0:32:e6:f1:53:39:41:e8:dd:80:a0:e4:8c:b4:93:df:fc:
         a7:0b:39:b1:87:79:af:fc:02:ad:4a:80:77:11:72:f8:7a:6a:
         d0:dd:19:c4:22:bf:e1:94:a1:ba:81:2d:f2:62:c7:f4:a0:af:
         76:7c:21:16:3c:24:1c:3e:18:fe:07:90:f9:95:e2:fe:88:aa:
         1d:03:b3:75:9e:61:08:99:a4:42:18:d7:7d:b5:14:76:ed:ac:
         65:bc:df:87:8e:80:d6:2f:b2:86:22:56:80:d4:e9:4c:69:bb:
         eb:12:ff:2d:43:7e:c1:bf:45:79:bc:4a:47:f6:1d:d7:a5:72:
         5d:3d:16:dd:70:c4:ec:d9:f9:f1:48:18:b0:9a:ea:48:45:f7:
         f4:ae:65:76:79:0c:fc:aa:8c:ce:fc:6a:61:87:37:53:ae:f9:
         5a:e9:4b:77:d3:3e:9d:52:3b:4a:ea:d2:a4:21:bd:fd:a7:77:
         db:8c:83:ea:05:96:c3:5e:48:e3:d3:c1:d6:da:00:b8:52:c1:
         9d:fb:5e:9e:16:84:e1:1b:e5:e3:80:c1:5a:96:3c:56:99:56:
         89:4e:67:70:63:6d:dc:04:46:72:eb:a0:1c:2f:bb:3e:36:de:
         ba:a7:54:aa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTdBOEYxMTAvBgNVBAUTKDZEOTYwNjg4QjZERTcxNDFBNzIxODk4RTlFMDczRTE2
Nzc4RkVGMzUwHhcNMjYwNDE3MDMwOTMwWhcNMjYwNDI0MDMwOTMwWjAYMRYwFAYD
VQQDEw02OWUxYTQ2Yi1mMDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxBFezJIIlggY1Kyyf9ki0J48d4goPlcUltIghi2U2lug7SBIDlvOG82ClMpy
TuhHqO8yHwiwQTYBczUAZouwn8D1oDKuqX9s7b/w3gsILqDBtPU6HQ1ChkDKnciX
mijAE9k2d21oQ1AhUGCiPhTIP+HEg5eHulJF8KuoSKrAVBgFy8B6P6LGu60OIP/A
oWBdATnfL0JDW3DA6H2pWrYocDxeT7g0rKeuGfgx0CxcstsrfCF31p1/HUNFPewd
PbJSjbJkTkQYxOAGpgw6Z3S71ImzRdLgVWjyIqEBnCb0unupRmUb6SvDIrFXwpnI
gmsnXHgzlrU1pll4CMFxgZUTmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF0Y/bsD
efCLpLk9QEMa+UCFIz14MB8GA1UdIwQYMBaAFG2WBoi23nFBpyGJjp4HPhZ3j+81
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0E4Ri82M0FDRDVGNDU5
REIxMUVFQTczN0ZFMEFDNEY5QUUwMi9iWllHaUxiZWNVR25JWW1PbmdjLUZuZVA3
elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JaWUdpTGJlY1VHbklZbU9uZ2MtRm5lUDd6VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
N0E4Ri82M0FDRDVGNDU5REIxMUVFQTczN0ZFMEFDNEY5QUUwMi9iWllHaUxiZWNV
R25JWW1PbmdjLUZuZVA3elUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJ98HQ7vTRK5TsuOFAOoH76pH0uAy5vFTOUHo3YCg5Iy0k9/8pws5sYd5r/wC
rUqAdxFy+Hpq0N0ZxCK/4ZShuoEt8mLH9KCvdnwhFjwkHD4Y/geQ+ZXi/oiqHQOz
dZ5hCJmkQhjXfbUUdu2sZbzfh46A1i+yhiJWgNTpTGm76xL/LUN+wb9FebxKR/Yd
16VyXT0W3XDE7Nn58UgYsJrqSEX39K5ldnkM/KqMzvxqYYc3U675WulLd9M+nVI7
SurSpCG9/ad324yD6gWWw15I49PB1toAuFLBnftenhaE4Rvl44DBWpY8VplWiU5n
cGNt3ARGcuugHC+7PjbeuqdUqg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:57:07 2026 by rpki-client