Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142127/C48FA8FAD74811F0BA1B0D9E6BD3641D/7KeHdUGmkz3VBhpsggg9O4ORXIU.mft
File:                     7KeHdUGmkz3VBhpsggg9O4ORXIU.mft (raw, json)
Hash identifier:          9XmyE6Dczts2yUPO1e67aZ7QkHRGNFeECDvO49bBLBw=
Subject key identifier:   A3:55:F8:95:C5:70:B4:0E:F9:F4:17:3C:0C:BC:5C:57:EE:69:C3:D4
Authority key identifier: EC:A7:87:75:41:A6:93:3D:D5:06:1A:6C:82:08:3D:3B:83:91:5C:85
Certificate issuer:       /CN=A9142127/serialNumber=ECA7877541A6933DD5061A6C82083D3B83915C85
Certificate serial:       4E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7KeHdUGmkz3VBhpsggg9O4ORXIU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142127/C48FA8FAD74811F0BA1B0D9E6BD3641D/7KeHdUGmkz3VBhpsggg9O4ORXIU.mft
Manifest number:          4B
Signing time:             Sat 18 Apr 2026 19:06:23 +0000
Manifest this update:     Sat 18 Apr 2026 19:06:22 +0000
Manifest next update:     Sat 25 Apr 2026 19:06:22 +0000
Files and hashes:         1: 7KeHdUGmkz3VBhpsggg9O4ORXIU.crl (hash: IhGjJ8PJeHXOmrtIQqQNZR6TtG84782rt6EiHoMdAms=)
                          2: 0A6F23BCD89011F0809DF24792D3641D.roa (hash: LF3tnAF+s60btudK/C+MWOKUVDskcOU/sbbTIojV6RQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142127/C48FA8FAD74811F0BA1B0D9E6BD3641D/7KeHdUGmkz3VBhpsggg9O4ORXIU.crl
                          rsync://rpki.apnic.net/member_repository/A9142127/C48FA8FAD74811F0BA1B0D9E6BD3641D/7KeHdUGmkz3VBhpsggg9O4ORXIU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7KeHdUGmkz3VBhpsggg9O4ORXIU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142127, serialNumber=ECA7877541A6933DD5061A6C82083D3B83915C85
        Validity
            Not Before: Apr 18 19:06:22 2026 GMT
            Not After : Apr 25 19:06:22 2026 GMT
        Subject: CN=69e3d62f-3d16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fd:74:ee:32:29:01:16:6f:99:6c:62:c6:f5:
                    b5:52:ad:23:ab:35:3c:50:6f:4f:fa:01:2b:4f:14:
                    19:64:e2:41:e4:8b:7e:d9:b4:1c:0e:c3:0c:87:8d:
                    0f:fd:a9:79:e2:d6:bf:a7:6e:b5:5b:0b:a1:de:27:
                    d2:12:73:28:75:9d:2b:04:23:49:f2:92:b7:23:a1:
                    8e:70:7e:ac:3d:1f:3e:93:bc:ce:68:0b:c0:32:7d:
                    8a:98:84:2b:bc:94:0f:a5:5a:c0:04:20:db:ec:68:
                    e0:50:57:8c:13:dc:a8:c6:ed:04:f4:2e:54:39:40:
                    fc:e8:88:80:8b:e2:90:a8:77:3c:8b:6c:a5:d4:fd:
                    2e:d1:69:b5:94:88:fe:3b:46:19:61:26:c5:52:5a:
                    0f:fa:d9:bc:bd:89:cb:9f:b4:c6:cb:b2:76:1e:b1:
                    e7:5a:18:db:48:f5:74:7d:21:31:79:eb:a7:e0:a5:
                    42:8c:0f:01:54:50:2d:d4:e6:64:ff:79:2b:28:3f:
                    84:d6:f4:0c:f8:cb:99:84:b3:e0:10:d3:30:80:61:
                    d6:b0:47:47:ed:4a:65:71:ca:ca:47:6b:da:03:70:
                    99:4b:7f:04:c9:fc:07:39:8f:9a:8f:cf:a4:b3:da:
                    70:de:26:c8:e0:f1:bd:d5:28:f6:b0:08:27:ca:8e:
                    2d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:55:F8:95:C5:70:B4:0E:F9:F4:17:3C:0C:BC:5C:57:EE:69:C3:D4
            X509v3 Authority Key Identifier:
                keyid:EC:A7:87:75:41:A6:93:3D:D5:06:1A:6C:82:08:3D:3B:83:91:5C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142127/C48FA8FAD74811F0BA1B0D9E6BD3641D/7KeHdUGmkz3VBhpsggg9O4ORXIU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7KeHdUGmkz3VBhpsggg9O4ORXIU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142127/C48FA8FAD74811F0BA1B0D9E6BD3641D/7KeHdUGmkz3VBhpsggg9O4ORXIU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:fc:ab:89:07:9c:93:75:07:2c:25:1c:e5:75:56:65:0f:85:
         e4:36:02:76:5d:4c:86:59:87:40:6e:68:c8:30:c7:07:64:ec:
         6e:f7:26:ac:6d:eb:9c:47:cf:eb:68:02:a3:33:31:e1:97:76:
         95:b5:d9:ee:fd:02:3e:06:05:99:43:05:0e:b4:6a:f2:57:4c:
         30:29:cc:04:86:57:1a:97:99:f5:f4:a3:85:fe:e8:d5:6f:43:
         7e:aa:b8:dc:2a:48:74:98:10:f4:49:17:4c:d9:61:02:c8:d4:
         e0:de:ef:f0:1d:1a:43:96:94:78:76:e4:77:cd:c2:54:33:4a:
         4d:62:f6:d9:a0:03:d8:d3:05:05:3e:9e:09:01:2a:eb:fb:71:
         50:3b:60:12:28:5f:75:a4:30:8e:f4:a3:ba:a4:2c:c4:2a:0c:
         97:a7:00:5e:f0:7f:b3:24:d8:03:7b:0a:e2:24:3d:12:40:d1:
         3e:ae:a9:3b:51:88:0a:9e:57:a3:43:a7:25:83:91:ab:18:80:
         6c:b8:b5:1e:c8:fb:25:fa:67:53:98:85:83:f6:43:79:cb:71:
         1a:9b:bc:b0:4a:59:ed:c3:08:7c:b8:82:8e:d7:c0:90:32:1d:
         ab:cb:92:87:c7:6d:03:38:70:c1:c7:67:01:92:63:57:fa:cb:
         e9:6f:8a:e9
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
MjEyNzExMC8GA1UEBRMoRUNBNzg3NzU0MUE2OTMzREQ1MDYxQTZDODIwODNEM0I4
MzkxNUM4NTAeFw0yNjA0MTgxOTA2MjJaFw0yNjA0MjUxOTA2MjJaMBgxFjAUBgNV
BAMTDTY5ZTNkNjJmLTNkMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC6/XTuMikBFm+ZbGLG9bVSrSOrNTxQb0/6AStPFBlk4kHki37ZtBwOwwyHjQ/9
qXni1r+nbrVbC6HeJ9IScyh1nSsEI0nykrcjoY5wfqw9Hz6TvM5oC8AyfYqYhCu8
lA+lWsAEINvsaOBQV4wT3KjG7QT0LlQ5QPzoiICL4pCodzyLbKXU/S7RabWUiP47
RhlhJsVSWg/62by9icuftMbLsnYesedaGNtI9XR9ITF566fgpUKMDwFUUC3U5mT/
eSsoP4TW9Az4y5mEs+AQ0zCAYdawR0ftSmVxyspHa9oDcJlLfwTJ/Ac5j5qPz6Sz
2nDeJsjg8b3VKPawCCfKji2DAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUo1X4lcVw
tA759Bc8DLxcV+5pw9QwHwYDVR0jBBgwFoAU7KeHdUGmkz3VBhpsggg9O4ORXIUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyMTI3L0M0OEZBOEZBRDc0
ODExRjBCQTFCMEQ5RTZCRDM2NDFELzdLZUhkVUdta3ozVkJocHNnZ2c5TzRPUlhJ
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvN0tlSGRVR21rejNWQmhwc2dnZzlPNE9SWElVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy
MTI3L0M0OEZBOEZBRDc0ODExRjBCQTFCMEQ5RTZCRDM2NDFELzdLZUhkVUdta3oz
VkJocHNnZ2c5TzRPUlhJVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAd/KuJB5yTdQcsJRzldVZlD4XkNgJ2XUyGWYdAbmjIMMcHZOxu9yasbeucR8/r
aAKjMzHhl3aVtdnu/QI+BgWZQwUOtGryV0wwKcwEhlcal5n19KOF/ujVb0N+qrjc
Kkh0mBD0SRdM2WECyNTg3u/wHRpDlpR4duR3zcJUM0pNYvbZoAPY0wUFPp4JASrr
+3FQO2ASKF91pDCO9KO6pCzEKgyXpwBe8H+zJNgDewriJD0SQNE+rqk7UYgKnlej
Q6clg5GrGIBsuLUeyPsl+mdTmIWD9kN5y3Eam7ywSlntwwh8uIKO18CQMh2ry5KH
x20DOHDBx2cBkmNX+svpb4rp
-----END CERTIFICATE-----
Generated at Sat Apr 18 21:05:36 2026 by rpki-client