Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.mft
File:                     k0_yOzjsbVimyqtwe3lVUcicMf0.mft (raw, json)
Hash identifier:          ZcHqqhl/0mx5/dohPQRGvTdO3XDKgEk3d+gUq+Yldsw=
Subject key identifier:   74:8B:D4:38:2C:73:65:B8:67:E7:94:14:85:0E:20:38:34:EB:F0:CD
Authority key identifier: 93:4F:F2:3B:38:EC:6D:58:A6:CA:AB:70:7B:79:55:51:C8:9C:31:FD
Certificate issuer:       /CN=A917392B/serialNumber=934FF23B38EC6D58A6CAAB707B795551C89C31FD
Certificate serial:       0518
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0_yOzjsbVimyqtwe3lVUcicMf0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.mft
Manifest number:          0511
Signing time:             Sat 04 Apr 2026 23:24:25 +0000
Manifest this update:     Sat 04 Apr 2026 23:24:25 +0000
Manifest next update:     Sat 11 Apr 2026 23:24:25 +0000
Files and hashes:         1: k0_yOzjsbVimyqtwe3lVUcicMf0.crl (hash: b2nYviiXy3eDb46fwHmHnLcALfLYBlcJbKQZPkFxseg=)
                          2: B7BE1DAC482511ECA1A68F13C4F9AE02.roa (hash: SOuuEngzMzJn6tRotSYMuHwkZUu/qid4gvYTernifnc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.crl
                          rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0_yOzjsbVimyqtwe3lVUcicMf0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 23:24:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1304 (0x518)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917392B, serialNumber=934FF23B38EC6D58A6CAAB707B795551C89C31FD
        Validity
            Not Before: Apr  4 23:24:25 2026 GMT
            Not After : Apr 11 23:24:25 2026 GMT
        Subject: CN=69d19da9-cfa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f1:aa:1a:b3:30:43:e4:18:3e:8d:cb:8f:dd:
                    04:8d:ca:32:72:6e:f2:bf:90:79:ed:d6:31:6d:66:
                    f5:58:52:4a:27:d6:c4:eb:e2:bd:41:bf:df:e2:48:
                    e7:b0:0a:23:06:62:bb:18:9e:c6:6f:47:e2:d7:d8:
                    11:b2:3b:a1:56:26:8e:c4:53:b0:56:49:bf:f0:d8:
                    22:e8:ca:33:99:1e:83:58:7a:c6:a2:e3:a6:60:5d:
                    f7:c5:98:85:10:24:a6:d7:cc:8b:72:75:81:c0:33:
                    6e:46:e0:00:4b:ef:e3:6c:6e:67:f6:37:43:f3:2e:
                    71:23:ce:ba:20:77:4a:0b:2f:be:b2:68:7b:cb:f9:
                    e0:14:d6:78:13:3a:8b:45:8c:d7:bd:51:be:42:00:
                    59:c4:19:0e:53:75:90:a2:46:00:62:09:a0:30:31:
                    d2:58:b9:b1:30:ae:7a:de:66:27:82:74:e2:bb:20:
                    44:23:49:ff:36:c4:ac:e3:53:7d:12:05:6d:f0:9c:
                    d8:d7:87:f9:8a:5a:dd:fc:64:8c:2f:01:58:4f:6f:
                    46:aa:55:ba:2b:21:47:b9:28:c2:52:b3:6c:88:3a:
                    8e:f0:e7:e0:c5:ee:00:9f:8b:b4:2a:fe:6c:ea:18:
                    06:10:bb:c5:81:75:70:42:4b:b7:17:c7:86:cc:bf:
                    46:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:8B:D4:38:2C:73:65:B8:67:E7:94:14:85:0E:20:38:34:EB:F0:CD
            X509v3 Authority Key Identifier:
                keyid:93:4F:F2:3B:38:EC:6D:58:A6:CA:AB:70:7B:79:55:51:C8:9C:31:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0_yOzjsbVimyqtwe3lVUcicMf0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:1c:7c:cc:e9:a0:8a:fc:26:97:7e:29:77:4c:9a:f8:ad:b8:
         33:d8:5c:8b:53:e5:36:1b:fe:27:ce:1e:7b:ad:a7:77:a8:21:
         c3:1a:2d:08:55:29:7b:9c:1a:c3:6a:87:8b:64:2f:7c:d5:08:
         c8:41:0e:1e:5c:10:1e:7b:46:79:c3:a0:08:44:22:78:2d:94:
         ea:1b:d8:e0:34:e2:7e:66:b3:38:3b:d1:7b:51:36:73:70:e2:
         90:a8:f1:47:19:7c:41:d9:08:7a:de:bc:7a:46:f7:dd:84:ec:
         c8:b6:bb:37:e3:11:44:00:75:73:4e:bd:8f:93:5c:d8:50:d1:
         d3:a1:3d:8b:85:ac:7b:18:b6:40:c0:64:77:2b:44:c1:6b:f9:
         d6:c9:52:8d:31:30:0c:59:1a:93:e7:91:0a:81:a3:2b:ec:4a:
         79:ec:c8:58:2e:59:bb:59:ab:48:c4:1a:c9:6a:f3:34:32:33:
         64:c9:0c:ac:c6:13:fb:1a:58:c2:fd:bf:4c:4c:be:ab:9b:15:
         41:6e:b3:61:56:3b:46:26:a6:4b:f8:08:12:6f:4c:29:0e:74:
         d3:b5:db:12:20:7b:13:aa:23:a1:00:da:0b:8a:84:bf:04:a7:
         7e:ca:ed:92:b7:8e:af:a2:32:18:0c:ca:9c:ba:16:e2:79:ea:
         13:2f:b2:77
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBRgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzM5MkIxMTAvBgNVBAUTKDkzNEZGMjNCMzhFQzZENThBNkNBQUI3MDdCNzk1NTUx
Qzg5QzMxRkQwHhcNMjYwNDA0MjMyNDI1WhcNMjYwNDExMjMyNDI1WjAYMRYwFAYD
VQQDEw02OWQxOWRhOS1jZmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0fGqGrMwQ+QYPo3Lj90Ejcoycm7yv5B57dYxbWb1WFJKJ9bE6+K9Qb/f4kjn
sAojBmK7GJ7Gb0fi19gRsjuhViaOxFOwVkm/8Ngi6MozmR6DWHrGouOmYF33xZiF
ECSm18yLcnWBwDNuRuAAS+/jbG5n9jdD8y5xI866IHdKCy++smh7y/ngFNZ4EzqL
RYzXvVG+QgBZxBkOU3WQokYAYgmgMDHSWLmxMK563mYngnTiuyBEI0n/NsSs41N9
EgVt8JzY14f5ilrd/GSMLwFYT29GqlW6KyFHuSjCUrNsiDqO8Ofgxe4An4u0Kv5s
6hgGELvFgXVwQku3F8eGzL9G6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHSL1Dgs
c2W4Z+eUFIUOIDg06/DNMB8GA1UdIwQYMBaAFJNP8js47G1YpsqrcHt5VVHInDH9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzkyQi9CMjBEQUQ2NjQ4
MjMxMUVDOTM3NjgzMTJDNEY5QUUwMi9rMF95T3pqc2JWaW15cXR3ZTNsVlVjaWNN
ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2swX3lPempzYlZpbXlxdHdlM2xWVWNpY01mMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MzkyQi9CMjBEQUQ2NjQ4MjMxMUVDOTM3NjgzMTJDNEY5QUUwMi9rMF95T3pqc2JW
aW15cXR3ZTNsVlVjaWNNZjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADBx8zOmgivwml34pd0ya+K24M9hci1PlNhv+J84ee62nd6ghwxotCFUpe5wa
w2qHi2QvfNUIyEEOHlwQHntGecOgCEQieC2U6hvY4DTifmazODvRe1E2c3DikKjx
Rxl8QdkIet68ekb33YTsyLa7N+MRRAB1c069j5Nc2FDR06E9i4Wsexi2QMBkdytE
wWv51slSjTEwDFkak+eRCoGjK+xKeezIWC5Zu1mrSMQayWrzNDIzZMkMrMYT+xpY
wv2/TEy+q5sVQW6zYVY7RiamS/gIEm9MKQ5007XbEiB7E6ojoQDaC4qEvwSnfsrt
kreOr6IyGAzKnLoW4nnqEy+ydw==
-----END CERTIFICATE-----
Generated at Sun Apr 5 19:43:45 2026 by rpki-client