Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.mft
File:                     hETqrJKViOiWt8WR9g40MEKw37w.mft (raw, json)
Hash identifier:          EE1JkPJ5N5FYeTk6Kcxhlvwx/L09ylthbVNwQJJKGM8=
Subject key identifier:   23:AB:D7:D3:D8:3F:B0:F4:54:4D:7A:D8:77:B3:AB:00:75:1A:7F:14
Authority key identifier: 84:44:EA:AC:92:95:88:E8:96:B7:C5:91:F6:0E:34:30:42:B0:DF:BC
Certificate issuer:       /CN=A9114431/serialNumber=8444EAAC929588E896B7C591F60E343042B0DFBC
Certificate serial:       044D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hETqrJKViOiWt8WR9g40MEKw37w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.mft
Manifest number:          0445
Signing time:             Sun 05 Apr 2026 00:01:59 +0000
Manifest this update:     Sun 05 Apr 2026 00:01:58 +0000
Manifest next update:     Sun 12 Apr 2026 00:01:58 +0000
Files and hashes:         1: hETqrJKViOiWt8WR9g40MEKw37w.crl (hash: FxDiDEtCOS6VWff3/q/4yX2ApEfdYaEEluJ4WwlDsF0=)
                          2: C8899170FB7211F08F8762E74F6F56BC.roa (hash: ctiS/J2TVY8JJKVzXFhRdcRDN1f1H0n8TDJvzQMZJ5w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.crl
                          rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hETqrJKViOiWt8WR9g40MEKw37w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 00:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1101 (0x44d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114431, serialNumber=8444EAAC929588E896B7C591F60E343042B0DFBC
        Validity
            Not Before: Apr  5 00:01:58 2026 GMT
            Not After : Apr 12 00:01:58 2026 GMT
        Subject: CN=69d1a677-083a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:15:a5:81:c4:ec:65:d3:e2:ee:2e:8c:fc:23:
                    af:80:2e:18:a7:66:79:77:30:3c:be:c0:23:04:26:
                    c8:74:3c:8b:f8:d4:62:96:a2:a9:34:29:b8:21:00:
                    e2:86:aa:78:f3:da:1f:b0:07:f5:a7:b9:73:36:73:
                    54:91:76:23:bc:56:b4:4a:cc:ac:0c:24:99:cc:68:
                    69:94:9f:cf:68:aa:42:72:0c:54:7b:4f:af:d9:0c:
                    3c:38:99:33:05:48:bd:be:99:fb:cc:f9:84:48:a0:
                    54:c2:00:7a:d6:01:7f:d7:40:9f:6f:da:6f:f7:c5:
                    80:c7:13:b8:6d:fe:26:f4:ef:e7:01:c9:e7:31:6e:
                    f2:e2:fc:e2:24:14:74:e8:9f:5c:7e:fb:0b:ee:10:
                    d0:89:4e:b4:85:85:a5:c9:45:74:59:84:8f:3d:13:
                    44:da:6f:6b:ed:1f:fb:cf:54:55:a3:19:62:05:43:
                    d6:a5:87:31:70:41:bf:3e:cf:a6:9f:ae:64:b9:c4:
                    03:4f:da:37:12:5f:4a:17:08:25:2f:57:84:8c:42:
                    63:ec:c7:75:c8:e5:0b:4a:5f:9a:bc:4e:b0:96:58:
                    5b:5f:47:45:db:28:a0:6d:7d:d0:88:c4:b2:b2:5e:
                    08:8a:8d:18:e1:73:cc:43:61:19:a6:45:93:a2:f1:
                    de:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:AB:D7:D3:D8:3F:B0:F4:54:4D:7A:D8:77:B3:AB:00:75:1A:7F:14
            X509v3 Authority Key Identifier:
                keyid:84:44:EA:AC:92:95:88:E8:96:B7:C5:91:F6:0E:34:30:42:B0:DF:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hETqrJKViOiWt8WR9g40MEKw37w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:21:fc:9f:5f:44:bd:99:f5:77:07:64:c0:cf:38:0a:4c:6d:
         88:ed:62:5c:9c:f1:35:e9:d4:56:e2:18:3e:0e:8f:e8:a0:ca:
         b5:16:af:7b:8e:d1:1d:f3:b5:b8:a5:9b:c6:b6:7a:5c:49:eb:
         a0:3d:d6:68:3b:db:7c:97:ac:65:de:ea:07:ab:2a:80:42:69:
         f5:73:d8:b3:97:3b:97:5d:8b:3d:c6:ae:73:08:ef:b8:f1:62:
         63:14:b0:1e:19:68:7d:33:92:fa:3a:38:4f:40:4d:75:17:d6:
         a7:ac:be:99:b3:56:b8:c3:47:3c:91:d6:70:b6:bc:99:09:4a:
         7d:21:e8:f2:63:d9:20:34:db:bd:6d:ec:f8:08:2f:67:a9:77:
         4e:1d:a8:90:45:1a:93:05:aa:35:b1:ea:10:d7:95:23:1f:e9:
         70:9f:73:24:0b:e2:d4:ce:2d:f6:9e:7b:f8:1f:12:75:56:ee:
         5b:19:9d:47:ba:c5:56:13:83:60:0e:48:08:2c:da:6d:07:c2:
         71:89:a9:c8:8a:92:ef:47:f7:db:d4:5b:c2:db:50:3d:fb:31:
         37:5f:44:55:e7:d8:6b:27:0a:c7:a0:4a:ab:53:32:ad:be:03:
         bb:19:f3:bb:9c:4b:8e:b7:98:ef:03:8c:31:a7:b3:aa:0b:8d:
         76:3c:44:c1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBE0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTQ0MzExMTAvBgNVBAUTKDg0NDRFQUFDOTI5NTg4RTg5NkI3QzU5MUY2MEUzNDMw
NDJCMERGQkMwHhcNMjYwNDA1MDAwMTU4WhcNMjYwNDEyMDAwMTU4WjAYMRYwFAYD
VQQDEw02OWQxYTY3Ny0wODNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAshWlgcTsZdPi7i6M/COvgC4Yp2Z5dzA8vsAjBCbIdDyL+NRilqKpNCm4IQDi
hqp489ofsAf1p7lzNnNUkXYjvFa0SsysDCSZzGhplJ/PaKpCcgxUe0+v2Qw8OJkz
BUi9vpn7zPmESKBUwgB61gF/10Cfb9pv98WAxxO4bf4m9O/nAcnnMW7y4vziJBR0
6J9cfvsL7hDQiU60hYWlyUV0WYSPPRNE2m9r7R/7z1RVoxliBUPWpYcxcEG/Ps+m
n65kucQDT9o3El9KFwglL1eEjEJj7Md1yOULSl+avE6wllhbX0dF2yigbX3QiMSy
sl4Iio0Y4XPMQ2EZpkWTovHeIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCOr19PY
P7D0VE162HezqwB1Gn8UMB8GA1UdIwQYMBaAFIRE6qySlYjolrfFkfYONDBCsN+8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDQzMS8xMjI0N0UyNDlB
NTgxMUVDODU4MkYzMUFDNEY5QUUwMi9oRVRxckpLVmlPaVd0OFdSOWc0ME1FS3cz
N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hFVHFySktWaU9pV3Q4V1I5ZzQwTUVLdzM3dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NDQzMS8xMjI0N0UyNDlBNTgxMUVDODU4MkYzMUFDNEY5QUUwMi9oRVRxckpLVmlP
aVd0OFdSOWc0ME1FS3czN3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANSH8n19EvZn1dwdkwM84CkxtiO1iXJzxNenUVuIYPg6P6KDKtRave47RHfO1
uKWbxrZ6XEnroD3WaDvbfJesZd7qB6sqgEJp9XPYs5c7l12LPcaucwjvuPFiYxSw
HhlofTOS+jo4T0BNdRfWp6y+mbNWuMNHPJHWcLa8mQlKfSHo8mPZIDTbvW3s+Agv
Z6l3Th2okEUakwWqNbHqENeVIx/pcJ9zJAvi1M4t9p57+B8SdVbuWxmdR7rFVhOD
YA5ICCzabQfCcYmpyIqS70f329RbwttQPfsxN19EVefYaycKx6BKq1Myrb4Duxnz
u5xLjreY7wOMMaezqguNdjxEwQ==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:45 2026 by rpki-client