Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft
File:                     mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft (raw, json)
Hash identifier:          WeigbqbTuDXxe1oxowgRltdSAYWQQf3m22sFX7x6z0g=
Subject key identifier:   6F:27:79:27:7B:0C:A3:6E:8D:55:3E:7C:44:E2:ED:AC:84:69:5D:BF
Authority key identifier: 9A:16:24:F4:60:82:F5:4A:C5:77:88:59:E2:26:BD:3B:A6:90:23:F4
Certificate issuer:       /CN=A9147CBE/serialNumber=9A1624F46082F54AC5778859E226BD3BA69023F4
Certificate serial:       E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft
Manifest number:          E4
Signing time:             Sun 29 Mar 2026 06:13:16 +0000
Manifest this update:     Sun 29 Mar 2026 06:13:16 +0000
Manifest next update:     Sun 05 Apr 2026 06:13:16 +0000
Files and hashes:         1: mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.crl (hash: UaRZVc7dszETX391NkwqdtdeGkSeVR7L+1EkBWL31Fc=)
                          2: 6D66CE8017BA11F094861F7DC4F9AE02.roa (hash: fhMnOOcqslyy9NxnX7zgTe3J3WzePSNlL2bH73cXkGs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.crl
                          rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 06:13:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 232 (0xe8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147CBE, serialNumber=9A1624F46082F54AC5778859E226BD3BA69023F4
        Validity
            Not Before: Mar 29 06:13:16 2026 GMT
            Not After : Apr  5 06:13:16 2026 GMT
        Subject: CN=69c8c2fc-20bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:03:e5:f4:10:f4:ac:f4:f9:67:db:87:f6:67:
                    b7:24:92:5a:43:9b:b5:ea:f8:5b:90:3f:7f:d8:48:
                    5d:07:23:91:97:81:3b:46:60:07:49:d9:30:14:51:
                    df:84:6d:79:47:3a:14:98:8f:89:2d:de:49:45:85:
                    49:01:4d:c5:36:44:cd:47:41:6f:45:09:40:4c:85:
                    f0:0f:a9:7d:55:c8:7f:28:f4:ce:83:7b:dc:74:4e:
                    2e:f1:1b:d0:a3:6f:00:1e:a5:b4:a1:03:13:93:91:
                    b1:7f:6e:1e:df:27:50:02:e5:b5:da:d2:22:25:ab:
                    31:42:4f:28:b8:db:24:84:d2:47:4e:22:97:b3:5a:
                    1b:8d:bf:2f:3f:5b:8d:d1:8b:c9:51:1e:c5:b2:00:
                    8e:d2:a5:62:e2:e7:a5:ac:a6:29:02:ce:fd:c6:c6:
                    17:2d:23:1c:2c:57:9f:fd:61:72:10:17:0d:f6:89:
                    9b:90:37:73:c6:8b:49:05:d6:4e:5a:d0:bc:c5:9b:
                    1d:a0:20:9d:dd:98:57:e6:74:03:e8:34:c9:90:80:
                    19:09:57:de:b3:de:bf:e6:7b:ff:78:43:fe:26:2c:
                    39:d8:13:a2:7c:cc:28:66:cf:38:0f:dd:dd:e6:d1:
                    37:96:be:9f:70:17:34:9d:02:c7:a6:a7:97:82:b3:
                    9e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:27:79:27:7B:0C:A3:6E:8D:55:3E:7C:44:E2:ED:AC:84:69:5D:BF
            X509v3 Authority Key Identifier:
                keyid:9A:16:24:F4:60:82:F5:4A:C5:77:88:59:E2:26:BD:3B:A6:90:23:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:33:7f:1e:a5:98:95:37:fd:a3:b9:b2:e6:5e:02:67:17:82:
         90:0e:3b:7e:2b:31:ff:dd:c9:94:ec:20:32:cb:bd:da:68:eb:
         d9:fc:03:58:99:4d:31:20:b1:8b:90:1a:c6:2b:c9:c9:0c:c3:
         c2:aa:5c:d8:a7:90:3d:8b:7a:d4:46:ec:31:1e:75:83:8b:40:
         ae:8c:b9:67:27:ce:a6:d2:e8:57:84:64:44:7c:47:84:93:de:
         a8:6c:ff:97:eb:b6:fd:04:e7:92:97:53:6a:09:95:1f:6d:14:
         59:aa:39:9e:3f:a3:c3:03:ee:31:0e:65:1c:a3:77:78:9e:40:
         d1:e0:34:80:22:76:67:54:cd:b6:c7:5d:9a:70:f3:30:5e:19:
         ed:07:da:1b:66:77:71:78:9b:7c:42:5b:5b:44:ef:b4:c1:7a:
         ee:40:32:ed:b2:16:8f:19:fe:8d:e8:7d:09:94:88:26:4c:4d:
         94:08:fb:da:2d:26:5c:c6:f4:3d:bd:11:98:5b:6c:54:e6:fc:
         8a:f7:a5:be:bb:5b:0d:a2:c9:ad:72:c1:a8:93:9a:e2:0b:d5:
         50:5c:57:78:53:39:2e:34:57:2b:79:a7:a4:fb:13:1c:5d:32:
         a5:59:8b:25:f0:59:29:43:ce:39:ce:2c:c7:d5:4b:1a:6c:f7:
         1b:8a:41:a6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDdDQkUxMTAvBgNVBAUTKDlBMTYyNEY0NjA4MkY1NEFDNTc3ODg1OUUyMjZCRDNC
QTY5MDIzRjQwHhcNMjYwMzI5MDYxMzE2WhcNMjYwNDA1MDYxMzE2WjAYMRYwFAYD
VQQDEw02OWM4YzJmYy0yMGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxQPl9BD0rPT5Z9uH9me3JJJaQ5u16vhbkD9/2EhdByORl4E7RmAHSdkwFFHf
hG15RzoUmI+JLd5JRYVJAU3FNkTNR0FvRQlATIXwD6l9Vch/KPTOg3vcdE4u8RvQ
o28AHqW0oQMTk5Gxf24e3ydQAuW12tIiJasxQk8ouNskhNJHTiKXs1objb8vP1uN
0YvJUR7FsgCO0qVi4uelrKYpAs79xsYXLSMcLFef/WFyEBcN9ombkDdzxotJBdZO
WtC8xZsdoCCd3ZhX5nQD6DTJkIAZCVfes96/5nv/eEP+Jiw52BOifMwoZs84D93d
5tE3lr6fcBc0nQLHpqeXgrOeKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG8neSd7
DKNujVU+fETi7ayEaV2/MB8GA1UdIwQYMBaAFJoWJPRggvVKxXeIWeImvTumkCP0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0NCRS84M0JBODdBRUQ3
QzIxMUVGODE5MERBNUNDNEY5QUUwMi9taFlrOUdDQzlVckZkNGhaNGlhOU82YVFJ
X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21oWWs5R0NDOVVyRmQ0aFo0aWE5TzZhUUlfUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
N0NCRS84M0JBODdBRUQ3QzIxMUVGODE5MERBNUNDNEY5QUUwMi9taFlrOUdDQzlV
ckZkNGhaNGlhOU82YVFJX1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJDN/HqWYlTf9o7my5l4CZxeCkA47fisx/93JlOwgMsu92mjr2fwDWJlNMSCx
i5AaxivJyQzDwqpc2KeQPYt61EbsMR51g4tAroy5ZyfOptLoV4RkRHxHhJPeqGz/
l+u2/QTnkpdTagmVH20UWao5nj+jwwPuMQ5lHKN3eJ5A0eA0gCJ2Z1TNtsddmnDz
MF4Z7QfaG2Z3cXibfEJbW0TvtMF67kAy7bIWjxn+jeh9CZSIJkxNlAj72i0mXMb0
Pb0RmFtsVOb8ivelvrtbDaLJrXLBqJOa4gvVUFxXeFM5LjRXK3mnpPsTHF0ypVmL
JfBZKUPOOc4sx9VLGmz3G4pBpg==
-----END CERTIFICATE-----
Generated at Tue Mar 31 04:13:24 2026 by rpki-client