Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft
File:                     4BlKpTtYIbm9DFx7g1K7E4GFP50.mft (raw, json)
Hash identifier:          jW3+Ia2zh+8ioTvvVGgTuuiwZoz/N6D02GPmtGQCJuI=
Subject key identifier:   D0:38:06:13:F3:A2:33:66:5E:06:21:F2:44:43:C2:4B:C3:F2:09:E2
Authority key identifier: E0:19:4A:A5:3B:58:21:B9:BD:0C:5C:7B:83:52:BB:13:81:85:3F:9D
Certificate issuer:       /CN=A914E0B6/serialNumber=E0194AA53B5821B9BD0C5C7B8352BB1381853F9D
Certificate serial:       019B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BlKpTtYIbm9DFx7g1K7E4GFP50.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft
Manifest number:          019B
Signing time:             Sun 05 Apr 2026 03:44:47 +0000
Manifest this update:     Sun 05 Apr 2026 03:44:46 +0000
Manifest next update:     Sun 12 Apr 2026 03:44:46 +0000
Files and hashes:         1: 4BlKpTtYIbm9DFx7g1K7E4GFP50.crl (hash: H7aQPWAYxRN1krY1A4nW7bJBfLLA1emJxL2/T0hJnKk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.crl
                          rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BlKpTtYIbm9DFx7g1K7E4GFP50.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 03:44:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 411 (0x19b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E0B6, serialNumber=E0194AA53B5821B9BD0C5C7B8352BB1381853F9D
        Validity
            Not Before: Apr  5 03:44:46 2026 GMT
            Not After : Apr 12 03:44:46 2026 GMT
        Subject: CN=69d1daaf-aaaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ac:06:d0:62:7a:51:6e:5c:b4:b0:be:48:4d:
                    08:58:6d:03:0e:5e:62:06:0f:b6:f8:7d:af:48:92:
                    20:e6:95:2f:fc:a8:87:98:51:48:49:d5:7b:54:58:
                    d2:e4:87:e5:8e:c4:11:b2:29:a7:65:e2:60:d6:8b:
                    b4:c8:69:31:56:45:72:f5:df:02:04:5a:b4:a5:dd:
                    6a:14:02:75:9f:6c:0b:32:d3:96:d1:56:45:59:74:
                    92:08:a1:c0:09:c0:b1:12:6f:31:f3:33:de:a3:9a:
                    cb:52:1d:ec:a3:e5:01:46:1d:21:55:50:2d:b5:4e:
                    7d:2f:07:7d:21:3c:f8:90:41:6c:cb:d7:81:08:21:
                    29:b1:cb:7c:1d:6a:74:b6:2b:03:be:71:54:10:17:
                    2e:4b:08:be:af:2f:e2:9a:e9:8d:fe:5b:93:31:ae:
                    5b:ea:36:c6:61:b1:70:e2:f9:67:b8:52:9b:e2:27:
                    6c:df:8d:2e:33:e6:33:f9:af:0b:51:ed:8f:2f:b3:
                    77:2f:97:57:ba:33:97:69:da:44:06:60:94:67:cc:
                    d7:1a:ec:42:ce:89:de:ad:c1:c0:12:ab:5a:62:12:
                    41:02:f6:1d:82:08:58:a0:1a:8d:17:95:3b:fb:37:
                    cf:ff:a3:93:e0:bf:f6:89:bb:ca:72:15:d0:4e:e1:
                    7d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:38:06:13:F3:A2:33:66:5E:06:21:F2:44:43:C2:4B:C3:F2:09:E2
            X509v3 Authority Key Identifier:
                keyid:E0:19:4A:A5:3B:58:21:B9:BD:0C:5C:7B:83:52:BB:13:81:85:3F:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BlKpTtYIbm9DFx7g1K7E4GFP50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:51:d0:92:e4:59:22:8b:f8:69:5b:06:16:a1:35:37:47:7a:
         72:8f:6d:49:58:a8:e8:3f:34:67:b6:c4:5d:90:fc:e8:0d:12:
         5b:20:00:30:92:21:3b:a1:87:19:57:8b:e2:ce:48:2a:77:8f:
         2f:92:09:59:d6:73:80:a8:ae:be:d2:2d:3c:cc:3e:79:a4:13:
         c4:68:f6:23:42:1d:79:ec:c5:c5:9a:ce:1f:55:84:35:05:b4:
         4e:83:5e:45:1c:c5:9c:98:71:70:7a:98:68:26:5c:41:a8:24:
         60:66:67:e5:6b:c4:37:25:7c:96:c8:50:a8:f2:f3:48:0d:13:
         8e:aa:32:76:cc:fe:69:34:dd:78:f2:03:d4:0e:2e:16:7b:32:
         8f:3f:0a:81:a6:97:53:cd:c5:f3:2e:4b:12:43:96:2e:ac:8f:
         c9:1d:6a:45:14:0c:27:a4:df:0a:57:3a:43:b7:b6:32:f0:e5:
         f2:9b:9d:5a:d9:b5:26:f5:e5:45:d9:44:77:90:51:47:1c:ab:
         d5:cb:ca:23:fd:3f:64:a1:6c:f5:11:6a:af:44:fa:e0:cd:b9:
         e5:20:76:b5:b5:24:e9:c1:ff:09:51:89:b9:65:78:f0:2a:c7:
         23:b3:67:2a:a5:2f:da:f2:54:cb:ee:4d:d7:68:95:f9:d5:b8:
         a6:54:cb:1d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEUwQjYxMTAvBgNVBAUTKEUwMTk0QUE1M0I1ODIxQjlCRDBDNUM3QjgzNTJCQjEz
ODE4NTNGOUQwHhcNMjYwNDA1MDM0NDQ2WhcNMjYwNDEyMDM0NDQ2WjAYMRYwFAYD
VQQDEw02OWQxZGFhZi1hYWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtqwG0GJ6UW5ctLC+SE0IWG0DDl5iBg+2+H2vSJIg5pUv/KiHmFFISdV7VFjS
5IfljsQRsimnZeJg1ou0yGkxVkVy9d8CBFq0pd1qFAJ1n2wLMtOW0VZFWXSSCKHA
CcCxEm8x8zPeo5rLUh3so+UBRh0hVVAttU59Lwd9ITz4kEFsy9eBCCEpsct8HWp0
tisDvnFUEBcuSwi+ry/imumN/luTMa5b6jbGYbFw4vlnuFKb4ids340uM+Yz+a8L
Ue2PL7N3L5dXujOXadpEBmCUZ8zXGuxCzonercHAEqtaYhJBAvYdgghYoBqNF5U7
+zfP/6OT4L/2ibvKchXQTuF9VwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNA4BhPz
ojNmXgYh8kRDwkvD8gniMB8GA1UdIwQYMBaAFOAZSqU7WCG5vQxce4NSuxOBhT+d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTBCNi82OTU2QUUzRUJG
MzAxMUVFQkU0RjNDMUVDNEY5QUUwMi80QmxLcFR0WUlibTlERng3ZzFLN0U0R0ZQ
NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRCbEtwVHRZSWJtOURGeDdnMUs3RTRHRlA1MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RTBCNi82OTU2QUUzRUJGMzAxMUVFQkU0RjNDMUVDNEY5QUUwMi80QmxLcFR0WUli
bTlERng3ZzFLN0U0R0ZQNTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAR1HQkuRZIov4aVsGFqE1N0d6co9tSVio6D80Z7bEXZD86A0SWyAAMJIhO6GH
GVeL4s5IKnePL5IJWdZzgKiuvtItPMw+eaQTxGj2I0IdeezFxZrOH1WENQW0ToNe
RRzFnJhxcHqYaCZcQagkYGZn5WvENyV8lshQqPLzSA0Tjqoydsz+aTTdePID1A4u
Fnsyjz8KgaaXU83F8y5LEkOWLqyPyR1qRRQMJ6TfClc6Q7e2MvDl8pudWtm1JvXl
RdlEd5BRRxyr1cvKI/0/ZKFs9RFqr0T64M255SB2tbUk6cH/CVGJuWV48CrHI7Nn
KqUv2vJUy+5N12iV+dW4plTLHQ==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:40 2026 by rpki-client