Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
File:                     md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft (raw, json)
Hash identifier:          FkAkba/+Ug2FWeRIMrgdKNxqWOyjRbGyAnw0Rrf2o2A=
Subject key identifier:   C4:32:AE:06:DC:15:7A:66:D4:53:29:31:2E:02:DC:C2:37:CA:85:CF
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       298E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
Manifest number:          26B5
Signing time:             Mon 20 Apr 2026 15:42:31 +0000
Manifest this update:     Mon 20 Apr 2026 15:42:30 +0000
Manifest next update:     Mon 27 Apr 2026 15:42:30 +0000
Files and hashes:         1: md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl (hash: i9o6yTjw4+0J77gNHRnsGpKARM4RBDv/htvW+bOgm1E=)
                          2: E0CC264A41C511E8BEC06D36C4F9AE02.roa (hash: Bucszp07uQWdokjG39lkxngjuQURq7L+Jkp1OeL9G4s=)
                          3: 6BF06690D18111EE9F4F1C6BC4F9AE02.roa (hash: v/TnpqgoV17cBgo+hPE8y0qfBQmgnkTO/JnYxFY9AZg=)
                          4: 3494EF9604AB11EB8AAF5923C4F9AE02.roa (hash: DU88K3gDO0jG+1UtTwSB1SODT15wNRocHIFZKJdf1JM=)
                          5: F378ABC21B9411F1B53238423F3D8C67.roa (hash: habWS7E82YfP8L4q0DGHMnxJV4mFHXUGvtm1V1YFZqE=)
                          6: 5F92D6C0478F11E9A090265DC4F9AE02.roa (hash: Q9Rkk7SRuOnXDKhExXFqAcIY5QS6PdANnkzkmq17+Ms=)
                          7: DD8ACB8041C511E8BEC06D36C4F9AE02.roa (hash: wP0qG8YEfiC2OHz5nmByAfKLo6DtyRgwIpHHExXSsqw=)
                          8: 32D4E44AC47711EB9BD0E327C4F9AE02.roa (hash: XHnhDDBxvoa4pDmsn8KWhKUg1U9IFJOLcR7D6prckpA=)
                          9: 1968CADACCCA11EA86EC0A0DC4F9AE02.roa (hash: 4YwUQhJTDWjalWYZWhvDTmeV5yu0GH7bVHs2sdEB9k0=)
                          10: 4969EFD6A34711EA996BB179C4F9AE02.roa (hash: FGChVIPevE+QTi/LMigUyn//J1r70gz4vpZBdyaqwP8=)
                          11: E2D385AA41C511E8BEC06D36C4F9AE02.roa (hash: Zrm/0q9fVr92/THhDyyakF5MJw0hK4e0BSFAuJerr3Q=)
                          12: 315BBC4AA21C11E8B669A00BC4F9AE02.roa (hash: HrapgkBRMyvWWGTej9X3otFfwQrx1VneKnbaX8pdA6c=)
                          13: F47B2136202611F08C91C683C4F9AE02.roa (hash: u4GuHwAezc6KE0fGQP8BLzDldZ8LKXnseXM3w897bPc=)
                          14: 411624587D2511ECA2A43549C4F9AE02.roa (hash: b6wE8JRKvF6GTOwtpt0xCURwqsw3hGCFV1k+MgbWUSk=)
                          15: 34D73F3E230C11EB825ED82EC4F9AE02.roa (hash: W7ynGCC0J2vnHiG0FU5+w/LkQiN+XmNL3FBfLW+RNOc=)
                          16: E03999C441C511E8BEC06D36C4F9AE02.roa (hash: D/GMXWepMlql9qm039x0szYI6rE05EBoV1z9JN5cjYg=)
                          17: A085C546F64511EAAF5AD93BC4F9AE02.roa (hash: XyB+4Wcu5H0Ls9NxYtT7qhdwP+Q47QbpeuEbNwdeL/8=)
                          18: DCC9968641C511E8BEC06D36C4F9AE02.roa (hash: nEK0r+vT+zlIhwx+euf2NsPHOKJUi6WYlFuBqgKLnDA=)
                          19: 9F711570F64511EAAF5AD93BC4F9AE02.roa (hash: iRhqXuT7P4NRAuj4Mi5ZQkomrHf0Z04fwET2wNEqspI=)
                          20: E681416041C511E8BEC06D36C4F9AE02.roa (hash: dRfj7Nnqr4/jjQ9jEXa+TooCOVKexKzKCY58rp4+gQQ=)
                          21: DC28826E41C511E8BEC06D36C4F9AE02.roa (hash: +DBRmDmnRfAEqmxpp4ZREEdyR9Gr2sCzQnv98zVFFmY=)
                          22: 50527DFCD27811EBB9B4BB66C4F9AE02.roa (hash: obTqIdU8CqBWYcQhFmX82GPkzKN1uHrMLlrdhUuCn5Q=)
                          23: 9470344AA21D11E8A514700EC4F9AE02.roa (hash: RjXfH7zda6MDBG7Nt6SGsPG0IOJp63Y3HSDsfUfYuL0=)
                          24: AAF07158AFEB11EEBCAD8169C4F9AE02.roa (hash: GhkeJdDB3s6krzBACiFXBD746D8xZZw8DtZXOoU3xkE=)
                          25: AFC59224604711E9BB8C0349C4F9AE02.roa (hash: NDaRjX3hYbtPISnXQ3Z/JakeiAdtOK9WnvrEeYk4sq8=)
                          26: 8672C378CCCB11EAAAE49011C4F9AE02.roa (hash: VNj1ACsE660psUuZ44GMxhVMC364tmPlcutBsgVEgNs=)
                          27: 2FF0D93AFEC911E88E78993AC4F9AE02.roa (hash: CpPSVe1G7TWnnBmd0SWnF/WeA6SRoTGdpFKHAzuDGDI=)
                          28: 9DE98A76D9B511EBA4FC5B1AC4F9AE02.roa (hash: xKsH9gSwF7sZT+ZPXjEc1UEWzCTliKI2+RHmCgXSAzQ=)
                          29: 2B535080E79B11EFB484D12EC4F9AE02.roa (hash: +Eoq4+89wRh0v+HdfB6B0APK4N9lNIjSZM3PypGxmXk=)
                          30: 3404E194C47711EB9BD0E327C4F9AE02.roa (hash: PxFVviosW3UG3IGtw+SpLYiS9VZVb2yiv+rm8evHIGI=)
                          31: EB263BE4DBF011EBA6E54586C4F9AE02.roa (hash: aolUGBMBuOiTQrabFR5p4Usnc+cD2G421hLPnzbONMM=)
                          32: 41C6F41AB84A11E98246736CC4F9AE02.roa (hash: LLehUcFhfa4SPyjVj95yDZpP4SAhUPMkxQbrMpPDidI=)
                          33: 350965D2992511EC94DB646EC4F9AE02.roa (hash: EY1N7InDIyqnetkTStaRXwDvT46EKQk+OUcdv2JKkq0=)
                          34: 2F36F25EFEC911E88E78993AC4F9AE02.roa (hash: N2n7O7lYsffKJwnYVJA9z3QDAVAgYmQzuDh7h3gOwG8=)
                          35: 360880DAACC311EAB7256C55C4F9AE02.roa (hash: WQcNzJNSk5eXwx4c09FhVkWAEbRDq4Ja0vvQ2Q3qd2Q=)
                          36: 77C98D46C8E011EA9FF8027AC4F9AE02.roa (hash: DuuzI7oTybdnth7THgkssn/oIPtLqhSKWiBDhN3KD6w=)
                          37: 37B8851C654F11EFACFE1271C4F9AE02.roa (hash: vLy3TaKLP7LLA6i+HP9632XV9tszUWOfXY6uMznRKRE=)
                          38: 99E3B47E230D11EBACAFB634C4F9AE02.roa (hash: l6WCM7GbTZkhUL2tJPrW40wGJ7zziNzehMuZahI1ZiQ=)
                          39: 52360F6491CD11E99EE03151C4F9AE02.roa (hash: 9qUwbG1RWEUGFy9aV0QN+oD5f1QKZsj6B6y93y/oxvU=)
                          40: E21558BE41C511E8BEC06D36C4F9AE02.roa (hash: r4x9AFhojnh/vBEh+d6d2dRuQx2UfWsU7MIBY5YtwfQ=)
                          41: 406928720A2411F0A2D02B4AC4F9AE02.roa (hash: WrfWrqSe34vKbxbu0CiEsKNesK9ErExa5RURIcivZmU=)
                          42: D9CB701ACBF311EBB9D2A784C4F9AE02.roa (hash: mFrAzTRPV3WslTnkqKUh6O339a07mEVqEj4HKXYQYeU=)
                          43: 77F51DD83E0911EF9DC1A672C4F9AE02.roa (hash: Mme++2siIQOf6RMHlyF+QCV+6mtziQHSGJFseaAPhwo=)
                          44: 4FB7C576376811E9847C6223C4F9AE02.roa (hash: /eAhCc47NbOFR/4B/74ZHS91lrjnoQ8NGiYN09h0+zM=)
                          45: B1A34CDCD53A11EDB199211BC4F9AE02.roa (hash: gZo5uHlhwSqZSZirKF6J1Dh0dtjuLbXu1qCz5DVGtyM=)
                          46: 2FD48F5AA21C11E8B669A00BC4F9AE02.roa (hash: dah2Cea2tuQk/wAC5Faewwhbx/+g3WCkUUqQeC2jTUM=)
                          47: 379554D48E1211EFA0811E85C4F9AE02.roa (hash: m9V1ZIbegiW7rjQeET3q+vOe4RclSmC0ZhvmKOJ2Z0c=)
                          48: 7F0F0E7AC92311EBB709B444C4F9AE02.roa (hash: 2lN9TZyMZQ2nA/0ZjWsmAb0k5NO201OchSvoC733B7I=)
                          49: 5EBAE6BA379F11EFA59DAE0AC4F9AE02.roa (hash: wXd3+UFVG6dfJhttvmjqh9aSOf5/nA220bazjyDh+78=)
                          50: 4239C32A61C211E9B8967426C4F9AE02.roa (hash: 1NhjYLrKh3Dj10+lLK05LstYyLgTQc+NG5kyigCtyMg=)
                          51: E1944C7441C511E8BEC06D36C4F9AE02.roa (hash: CZ32Q8No023uizSujAVT5gEdxeIVS3ket6kb1kcRzIY=)
                          52: 2E6B58ECFEC911E88E78993AC4F9AE02.roa (hash: NUtNgiC4rMEw4ib//0uPvqnLnrgXMVVZWZRhDLc0s7s=)
                          53: 1DB9AEFAE5EE11EABA8AEC34C4F9AE02.roa (hash: 5M/0HJQYIOEvw6la+AfY8Oth9pL1l6mkCRfiwNe0Fcc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
                          rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Apr 2026 15:42:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10638 (0x298e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Apr 20 15:42:30 2026 GMT
            Not After : Apr 27 15:42:30 2026 GMT
        Subject: CN=69e64966-25b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e8:00:79:ff:52:a9:9e:61:17:c5:2f:8a:dc:
                    cb:82:6e:c1:6f:e8:84:11:f2:c3:fe:26:ef:10:68:
                    b7:4e:ed:e4:3b:ea:03:68:db:18:c7:aa:f7:bf:23:
                    35:af:3e:7f:69:40:19:b8:a1:d3:42:38:74:e7:95:
                    98:bd:cd:71:bb:c1:05:28:0a:2b:a5:cb:d6:2d:4a:
                    e2:86:41:8d:3d:7c:13:49:90:e6:67:cb:cf:7e:83:
                    c0:e0:db:16:01:d4:d7:ea:84:40:e4:2e:46:fa:e3:
                    d4:39:1f:2a:16:bd:09:70:11:3c:c8:f3:e7:65:ad:
                    fa:05:a7:6a:47:b7:73:ee:7c:af:5a:93:14:a0:0f:
                    ca:f7:4d:2e:0b:d6:15:a5:4e:a3:76:5c:f7:13:67:
                    70:60:2a:3a:1d:64:f4:60:e0:03:19:94:2f:a0:85:
                    c6:65:73:3e:4e:ac:a1:8a:4f:7b:0e:52:8d:99:6c:
                    6a:d0:7f:e8:8a:3b:1d:36:c4:10:52:50:75:5f:65:
                    8c:ff:7c:14:12:b9:8e:e8:e4:ac:a2:e8:0e:63:3b:
                    8d:9e:d7:ab:b7:0a:65:fb:06:2b:e3:33:b1:3a:36:
                    ed:b3:a5:a7:09:a3:6e:19:47:84:d7:e3:47:9a:07:
                    0e:e2:ec:8a:86:5b:72:7e:cb:54:11:fb:93:32:b8:
                    28:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:32:AE:06:DC:15:7A:66:D4:53:29:31:2E:02:DC:C2:37:CA:85:CF
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:67:e8:96:f8:df:bc:4f:8f:fe:f6:dc:5c:c7:b8:7a:90:7d:
         03:28:46:45:55:12:3b:18:4a:97:9f:08:b9:4b:41:e0:49:20:
         fa:16:77:c6:eb:0e:a2:0f:33:8b:ae:0b:16:6b:5b:38:82:f3:
         65:0b:07:85:5a:9e:c4:76:fd:47:e3:48:7d:4a:d4:96:c5:1d:
         47:6b:b7:c7:ae:ec:4b:19:9d:02:f3:57:95:9d:bc:cf:ba:fb:
         b3:7d:08:d4:9e:cf:24:c2:97:97:d6:a7:92:30:02:c0:b8:92:
         ac:f0:42:44:a8:52:81:bf:bb:28:d2:17:d6:52:97:82:09:47:
         d5:c4:de:c4:9d:e5:3f:4d:6b:13:6d:b9:9f:2a:a1:f7:ec:26:
         0e:05:1b:9b:65:9a:85:00:3c:df:0d:61:7d:c6:74:c5:3f:24:
         f6:83:d9:4a:72:6b:fd:73:de:6c:3c:26:71:7e:90:6d:01:47:
         05:51:c2:d4:3a:dd:e4:4c:70:9e:b4:ff:2e:4c:e4:bc:77:11:
         24:51:14:a1:7c:08:21:fa:25:b2:18:fa:04:0a:59:57:e2:1f:
         90:7b:e1:ee:2c:ac:eb:75:1b:5a:dc:81:99:66:a1:6c:65:13:
         93:db:e6:d5:fa:09:5a:7f:df:0d:e3:16:bb:19:ab:53:4c:42:
         0d:17:70:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 08:27:59 2026 by rpki-client