Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft
File:                     _Kk1XBq-QE8_PPUZL9NLEloAvxs.mft (raw, json)
Hash identifier:          n4AoyqLF5kG5AlCiER6Fs/vqyGc/CMCzAXkldb2s5qI=
Subject key identifier:   C5:CC:76:EE:95:2C:D3:EB:C7:78:DE:08:3B:18:69:4A:CD:71:92:54
Authority key identifier: FC:A9:35:5C:1A:BE:40:4F:3F:3C:F5:19:2F:D3:4B:12:5A:00:BF:1B
Certificate issuer:       /CN=A91ADD64/serialNumber=FCA9355C1ABE404F3F3CF5192FD34B125A00BF1B
Certificate serial:       0177
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft
Manifest number:          016F
Signing time:             Fri 17 Apr 2026 04:30:42 +0000
Manifest this update:     Fri 17 Apr 2026 04:30:41 +0000
Manifest next update:     Fri 24 Apr 2026 04:30:41 +0000
Files and hashes:         1: _Kk1XBq-QE8_PPUZL9NLEloAvxs.crl (hash: G4fRgOvBAMBWcD19Jt/MZGrClIBV4wIr8uoPZNY94yM=)
                          2: 5740BDF8370111F094BF7862C4F9AE02.roa (hash: TzkPBOuu8iVT94DUClMMw+tXF1MG5WJOQ0I22k+/nfc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.crl
                          rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 375 (0x177)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADD64, serialNumber=FCA9355C1ABE404F3F3CF5192FD34B125A00BF1B
        Validity
            Not Before: Apr 17 04:30:41 2026 GMT
            Not After : Apr 24 04:30:41 2026 GMT
        Subject: CN=69e1b771-8e96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:12:a4:fc:4d:4d:1d:7b:c4:6f:76:f9:ad:82:
                    e5:d5:71:03:4d:41:b4:3c:ba:f8:7f:60:b1:fc:48:
                    42:17:05:ed:25:93:b9:c3:e6:7f:4d:ea:c9:fe:12:
                    46:b4:3b:5e:1d:33:9e:1e:a9:0d:0f:14:71:38:4a:
                    82:c4:6c:9c:44:19:76:6d:10:87:61:7c:fe:2b:1a:
                    85:46:74:1f:7b:63:7b:f5:00:b8:e9:8c:ab:0c:ea:
                    d2:85:8d:5a:97:55:55:29:4b:0d:68:8b:3c:44:79:
                    85:72:1e:c7:77:41:3f:36:f8:91:b5:5f:6c:2f:1c:
                    21:1e:0d:7d:ec:dd:51:5d:29:c3:38:f5:a1:47:98:
                    6a:28:50:bb:7e:82:ac:94:9e:ed:35:48:c9:26:72:
                    0f:18:c2:c9:7b:8c:e7:3b:14:32:f9:3a:b1:e6:c3:
                    82:71:c2:f6:d5:5f:62:f4:c9:5b:79:6a:80:a4:d9:
                    8b:13:3e:3b:04:08:31:47:63:a7:e5:3a:6a:90:ff:
                    e9:b8:d0:99:9a:a6:eb:f8:7d:74:fe:1d:40:b3:22:
                    ab:4d:ef:bf:d8:fb:cb:cd:31:48:4f:73:7e:88:f5:
                    44:77:02:d4:1e:a1:ca:95:f7:29:0a:35:f5:5b:60:
                    32:d9:85:85:4f:5e:5c:77:3f:13:77:9e:72:54:5a:
                    4c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:CC:76:EE:95:2C:D3:EB:C7:78:DE:08:3B:18:69:4A:CD:71:92:54
            X509v3 Authority Key Identifier:
                keyid:FC:A9:35:5C:1A:BE:40:4F:3F:3C:F5:19:2F:D3:4B:12:5A:00:BF:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:e5:f6:de:df:c7:dc:2f:d7:87:b3:e9:43:41:72:06:9b:b4:
         9d:84:16:10:d8:14:1e:28:bf:d9:fd:03:4d:b0:29:5b:51:66:
         20:9c:0f:78:b6:12:06:8c:3f:fa:f1:25:15:48:83:4d:6a:6c:
         58:31:8d:13:d5:48:1a:cd:9b:e7:aa:56:c0:4f:e6:3c:f6:04:
         1b:79:73:8e:30:50:6a:98:4e:06:b4:99:69:62:e8:fe:10:0f:
         9b:7b:00:86:5c:d2:9a:3e:83:a4:a4:b7:b3:f5:81:44:d7:43:
         9c:4e:ed:92:59:ac:58:e7:c4:5d:cf:72:4c:4b:81:51:d4:d8:
         08:d3:2d:8b:54:e2:ad:b6:4b:76:a7:2c:f6:11:93:9a:6c:6d:
         27:14:9b:10:ad:e5:7d:59:af:6f:a2:a9:fb:82:91:0e:6c:53:
         2c:5e:92:80:42:74:db:19:93:c2:9a:90:3d:5c:e3:e3:5e:db:
         bf:10:2d:73:37:6a:69:33:0e:f9:7d:dd:ee:93:fa:90:ab:ba:
         a0:be:33:da:f8:fd:7b:9b:91:9c:70:f2:85:e1:16:50:3d:c5:
         b2:20:73:e5:b4:ab:f2:35:76:3a:09:4e:d5:7b:ff:f6:31:5f:
         6e:08:a9:8f:c4:a0:00:e0:c6:27:2c:70:d1:8b:22:14:16:ae:
         ab:74:6a:60
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QURENjQxMTAvBgNVBAUTKEZDQTkzNTVDMUFCRTQwNEYzRjNDRjUxOTJGRDM0QjEy
NUEwMEJGMUIwHhcNMjYwNDE3MDQzMDQxWhcNMjYwNDI0MDQzMDQxWjAYMRYwFAYD
VQQDEw02OWUxYjc3MS04ZTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvBKk/E1NHXvEb3b5rYLl1XEDTUG0PLr4f2Cx/EhCFwXtJZO5w+Z/TerJ/hJG
tDteHTOeHqkNDxRxOEqCxGycRBl2bRCHYXz+KxqFRnQfe2N79QC46YyrDOrShY1a
l1VVKUsNaIs8RHmFch7Hd0E/NviRtV9sLxwhHg197N1RXSnDOPWhR5hqKFC7foKs
lJ7tNUjJJnIPGMLJe4znOxQy+Tqx5sOCccL21V9i9MlbeWqApNmLEz47BAgxR2On
5TpqkP/puNCZmqbr+H10/h1AsyKrTe+/2PvLzTFIT3N+iPVEdwLUHqHKlfcpCjX1
W2Ay2YWFT15cdz8Td55yVFpMWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMXMdu6V
LNPrx3jeCDsYaUrNcZJUMB8GA1UdIwQYMBaAFPypNVwavkBPPzz1GS/TSxJaAL8b
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREQ2NC80RUIyQjQyODEz
NEIxMUVGOTQ0MjREM0RDNEY5QUUwMi9fS2sxWEJxLVFFOF9QUFVaTDlOTEVsb0F2
eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL19LazFYQnEtUUU4X1BQVVpMOU5MRWxvQXZ4cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
REQ2NC80RUIyQjQyODEzNEIxMUVGOTQ0MjREM0RDNEY5QUUwMi9fS2sxWEJxLVFF
OF9QUFVaTDlOTEVsb0F2eHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANOX23t/H3C/Xh7PpQ0FyBpu0nYQWENgUHii/2f0DTbApW1FmIJwPeLYSBow/
+vElFUiDTWpsWDGNE9VIGs2b56pWwE/mPPYEG3lzjjBQaphOBrSZaWLo/hAPm3sA
hlzSmj6DpKS3s/WBRNdDnE7tklmsWOfEXc9yTEuBUdTYCNMti1TirbZLdqcs9hGT
mmxtJxSbEK3lfVmvb6Kp+4KRDmxTLF6SgEJ02xmTwpqQPVzj417bvxAtczdqaTMO
+X3d7pP6kKu6oL4z2vj9e5uRnHDyheEWUD3FsiBz5bSr8jV2OglO1Xv/9jFfbgip
j8SgAODGJyxw0YsiFBauq3RqYA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:16:36 2026 by rpki-client