Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
File:                     ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft (raw, json)
Hash identifier:          oyV5H/tLqurIA9N4Myr/NZp11Wj/XXANaUuH7W7EhxE=
Subject key identifier:   75:5E:49:64:A1:D5:01:05:1B:9F:79:56:2D:E0:C6:7D:51:A6:55:71
Authority key identifier: 92:D4:56:E9:9B:60:DC:ED:14:8C:93:D5:94:B6:F4:31:27:0A:24:C4
Certificate issuer:       /CN=A91A1818/serialNumber=92D456E99B60DCED148C93D594B6F431270A24C4
Certificate serial:       0242
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
Manifest number:          0227
Signing time:             Fri 17 Apr 2026 02:35:58 +0000
Manifest this update:     Fri 17 Apr 2026 02:35:57 +0000
Manifest next update:     Fri 24 Apr 2026 02:35:57 +0000
Files and hashes:         1: ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl (hash: pyKO//14Sjv8kDASrdJ5v8gKCxGT63KJQqBfePK2moE=)
                          2: 9EE8F55206E911EE88450147C4F9AE02.roa (hash: Mz2axKz0cOaA7k7YNeejdSe53HW1Qw2U0ROhNzZhy8k=)
                          3: E5925096093911EEABCFA170C4F9AE02.roa (hash: ucyrKnTlK2iDm4DuHOeL+U4zeBMeJNSh02G8/fv5S2s=)
                          4: 9F79846406E911EE88450147C4F9AE02.roa (hash: W6M6q3YZzfwNDproFxfiAx2KAQGrtoWb8gbJ72DA1Xs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:35:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 578 (0x242)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1818, serialNumber=92D456E99B60DCED148C93D594B6F431270A24C4
        Validity
            Not Before: Apr 17 02:35:57 2026 GMT
            Not After : Apr 24 02:35:57 2026 GMT
        Subject: CN=69e19c8d-bd0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:78:53:4e:68:3d:c3:10:51:a0:f6:66:cf:c3:
                    ff:a8:31:31:0d:64:aa:57:cd:8d:8c:7f:97:4a:50:
                    22:d3:1a:6f:45:c2:32:72:a4:52:ba:4d:ad:26:23:
                    67:34:56:73:96:7b:8e:08:68:70:01:e8:f2:09:ab:
                    dc:5d:89:76:d9:53:d1:87:22:b2:a1:09:b5:ea:80:
                    ad:9c:79:fa:a6:b2:bc:4c:bc:62:34:14:cf:68:83:
                    4c:d3:21:db:c3:8a:0f:8a:56:86:2d:d9:54:44:27:
                    7a:74:67:5e:f3:09:dd:55:9b:e3:ae:0b:5e:bb:5f:
                    36:3d:02:0b:7c:b2:de:c6:86:f4:f8:ff:43:13:93:
                    9b:23:71:df:91:ea:39:33:91:08:20:f1:7d:a6:36:
                    71:80:24:c4:a5:7a:be:5d:76:ea:d2:5b:65:a2:83:
                    ce:ac:66:82:13:25:98:d4:8c:01:6f:0f:df:7f:31:
                    60:b0:0e:be:e7:e0:a5:38:2c:d5:ab:96:bf:50:28:
                    a9:96:ca:41:f9:4f:73:37:2b:d8:43:2c:9d:37:2d:
                    0e:08:68:9b:16:0f:44:43:6f:86:e7:9f:be:5f:5d:
                    c1:0a:48:f2:dc:88:68:11:2e:99:d0:86:a4:56:7a:
                    ab:71:3d:7a:3b:73:e5:a6:9d:e6:50:be:06:83:67:
                    29:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:5E:49:64:A1:D5:01:05:1B:9F:79:56:2D:E0:C6:7D:51:A6:55:71
            X509v3 Authority Key Identifier:
                keyid:92:D4:56:E9:9B:60:DC:ED:14:8C:93:D5:94:B6:F4:31:27:0A:24:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:a3:5d:78:24:6e:03:48:dc:bc:53:f5:a9:b2:dd:62:a6:a2:
         73:8a:29:83:a1:23:5b:b1:1b:f5:a1:83:75:ed:d6:26:27:1a:
         33:52:f4:fe:71:9a:8d:8f:90:62:52:0e:69:d2:10:db:21:c3:
         71:23:81:f9:1c:1d:94:35:ac:8c:a1:a4:05:87:b8:84:94:1a:
         61:4e:7c:cc:bf:b1:68:b0:0c:d4:58:83:5c:c3:99:2e:c0:65:
         a6:d7:2e:18:47:dc:3f:05:5f:51:6d:d4:85:3b:d4:ba:74:ba:
         22:e7:e0:d7:c1:37:72:f7:ef:e6:79:17:d0:d6:c6:f2:cc:91:
         38:c3:44:fa:05:ce:d6:5f:e6:9d:29:c5:ec:33:2c:2d:23:fa:
         ff:d1:be:78:05:4e:05:05:53:5d:bc:66:49:78:c7:0b:b2:35:
         7a:41:02:82:c5:38:84:9c:9d:df:b1:b1:9b:93:83:b5:e7:fd:
         9c:f5:04:c1:b4:a5:72:31:7b:46:d6:25:74:20:e9:62:6e:4a:
         28:7d:8b:81:dd:cc:df:80:39:67:dc:73:7e:1f:b0:79:de:75:
         11:e5:e4:52:a0:2b:60:fc:e4:2e:c9:f4:8f:dc:f4:de:90:a0:
         f4:2e:ee:aa:7f:5d:29:ff:39:d1:55:a7:85:b3:15:b1:20:ad:
         64:b3:c6:6a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTE4MTgxMTAvBgNVBAUTKDkyRDQ1NkU5OUI2MERDRUQxNDhDOTNENTk0QjZGNDMx
MjcwQTI0QzQwHhcNMjYwNDE3MDIzNTU3WhcNMjYwNDI0MDIzNTU3WjAYMRYwFAYD
VQQDEw02OWUxOWM4ZC1iZDBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArnhTTmg9wxBRoPZmz8P/qDExDWSqV82NjH+XSlAi0xpvRcIycqRSuk2tJiNn
NFZzlnuOCGhwAejyCavcXYl22VPRhyKyoQm16oCtnHn6prK8TLxiNBTPaINM0yHb
w4oPilaGLdlURCd6dGde8wndVZvjrgteu182PQILfLLexob0+P9DE5ObI3Hfkeo5
M5EIIPF9pjZxgCTEpXq+XXbq0ltlooPOrGaCEyWY1IwBbw/ffzFgsA6+5+ClOCzV
q5a/UCiplspB+U9zNyvYQyydNy0OCGibFg9EQ2+G55++X13BCkjy3IhoES6Z0Iak
VnqrcT16O3Plpp3mUL4Gg2cpAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHVeSWSh
1QEFG595Vi3gxn1RplVxMB8GA1UdIwQYMBaAFJLUVumbYNztFIyT1ZS29DEnCiTE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTgxOC82OEVBNzNFQzA2
OUMxMUVFOEM2Njc4MTJDNEY5QUUwMi9rdFJXNlp0ZzNPMFVqSlBWbExiME1TY0tK
TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2t0Ulc2WnRnM08wVWpKUFZsTGIwTVNjS0pNUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MTgxOC82OEVBNzNFQzA2OUMxMUVFOEM2Njc4MTJDNEY5QUUwMi9rdFJXNlp0ZzNP
MFVqSlBWbExiME1TY0tKTVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAA6NdeCRuA0jcvFP1qbLdYqaic4opg6EjW7Eb9aGDde3WJicaM1L0/nGajY+Q
YlIOadIQ2yHDcSOB+RwdlDWsjKGkBYe4hJQaYU58zL+xaLAM1FiDXMOZLsBlptcu
GEfcPwVfUW3UhTvUunS6Iufg18E3cvfv5nkX0NbG8syROMNE+gXO1l/mnSnF7DMs
LSP6/9G+eAVOBQVTXbxmSXjHC7I1ekECgsU4hJyd37Gxm5ODtef9nPUEwbSlcjF7
RtYldCDpYm5KKH2Lgd3M34A5Z9xzfh+wed51EeXkUqArYPzkLsn0j9z03pCg9C7u
qn9dKf850VWnhbMVsSCtZLPGag==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:20:26 2026 by rpki-client