Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft
File:                     lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft (raw, json)
Hash identifier:          1XEqkV/iVp/zniq5vVbnn1IpQHI2hl2nIEe20fmYC3c=
Subject key identifier:   5C:9F:F7:DE:8F:1F:C2:97:91:E0:C1:69:96:5C:E1:8E:2C:42:9A:EE
Authority key identifier: 96:4D:08:72:7D:AE:DA:C7:40:37:AB:9C:43:A5:08:BA:DB:CF:DA:FD
Certificate issuer:       /CN=A914E0FE/serialNumber=964D08727DAEDAC74037AB9C43A508BADBCFDAFD
Certificate serial:       0119
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft
Manifest number:          0106
Signing time:             Sun 05 Apr 2026 05:33:41 +0000
Manifest this update:     Sun 05 Apr 2026 05:33:41 +0000
Manifest next update:     Sun 12 Apr 2026 05:33:41 +0000
Files and hashes:         1: lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl (hash: fO4yWZ3Uu+j+oEpYNSiy2w8pOboWS2kTPjBPnZjLXQY=)
                          2: C5D7AFBA502411F0881DEB19C4F9AE02.roa (hash: 0gUF/085wYPoCyvzlJWV9rqJj0B1nA/oZ4c4Dkoi26s=)
                          3: 9C9FACF6502411F093EA9419C4F9AE02.roa (hash: dKN+fQdCYaHSjnPaMzWvmqBEhN/PUwJv3Ea9b1RzV1Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl
                          rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:33:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 281 (0x119)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E0FE, serialNumber=964D08727DAEDAC74037AB9C43A508BADBCFDAFD
        Validity
            Not Before: Apr  5 05:33:41 2026 GMT
            Not After : Apr 12 05:33:41 2026 GMT
        Subject: CN=69d1f435-cd7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:98:9e:d6:4a:74:a9:bb:9b:13:a4:00:0d:b5:
                    5e:47:12:f9:85:64:46:d6:2d:11:10:19:50:89:7f:
                    57:df:a4:10:e5:4c:ca:17:71:f1:1a:5a:38:fc:d5:
                    4d:77:4d:f5:f4:19:7d:ac:a3:0d:11:d1:73:9f:55:
                    3e:4c:49:76:d8:0b:2c:19:bb:e4:66:55:c9:e8:ea:
                    86:df:19:ba:1f:4e:9c:e6:77:06:5b:d4:c7:e4:b7:
                    2b:1e:f2:15:23:a8:8a:80:09:11:cf:31:47:a1:43:
                    5b:71:ab:3d:ff:b9:b9:65:df:c8:f1:22:bc:57:f8:
                    fe:60:ff:b4:a3:d0:71:72:89:31:61:99:02:2a:03:
                    f2:23:04:3e:a7:7f:ae:ec:1c:3f:75:a6:eb:5c:c8:
                    3a:2b:b6:f4:4f:5f:fc:6b:ae:6d:91:2f:65:33:d1:
                    98:22:2a:56:57:62:ec:83:4f:96:19:de:b7:99:ee:
                    a4:ad:ce:0f:d4:b6:08:92:02:6f:6c:5c:c6:5e:d7:
                    6b:6e:f0:64:c2:95:b5:23:a1:6d:57:84:e8:f7:77:
                    37:ad:0f:dd:fe:5b:9a:95:83:4b:c4:6b:8c:58:57:
                    b9:bd:e5:52:59:7d:43:ce:35:0c:79:89:44:96:30:
                    a0:27:7c:d3:15:54:71:72:cb:dd:c3:80:30:45:e6:
                    64:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:9F:F7:DE:8F:1F:C2:97:91:E0:C1:69:96:5C:E1:8E:2C:42:9A:EE
            X509v3 Authority Key Identifier:
                keyid:96:4D:08:72:7D:AE:DA:C7:40:37:AB:9C:43:A5:08:BA:DB:CF:DA:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:e3:06:c9:2f:da:13:1a:9f:6f:d0:bc:1a:a3:22:18:5d:b7:
         24:f9:1d:35:73:88:af:11:76:de:af:2e:29:85:50:1d:30:b0:
         83:1f:69:0a:48:d4:77:11:1f:9d:c9:63:b7:1a:12:cc:50:52:
         d2:9b:12:5f:f4:55:38:dd:eb:b6:1e:5f:64:0b:92:09:4d:78:
         b0:e8:e8:ae:ff:38:af:12:9d:8f:79:3c:8f:5d:0c:5d:8c:8b:
         b6:d9:4c:da:dc:76:a8:2a:05:08:f8:74:a9:63:66:d3:3c:53:
         69:98:95:58:f9:53:bf:99:b3:ac:5b:83:a8:e4:bf:c3:21:8d:
         13:a3:50:a7:f0:59:54:74:a0:aa:ef:4e:fd:c2:82:09:25:b3:
         07:9e:71:e4:3c:48:a5:36:84:db:f6:aa:61:af:7b:a5:71:fd:
         63:73:fd:c8:f8:82:92:81:da:c6:af:15:00:58:25:9d:cb:45:
         2c:54:eb:01:1d:84:d7:db:2f:f8:ac:d4:16:8c:c0:f8:d7:b2:
         50:73:8f:b4:bb:7c:bb:3a:df:07:9d:dd:23:2d:5a:c0:02:52:
         b6:b8:b7:50:bf:53:42:cb:5d:76:e5:63:db:99:0d:4d:4e:cc:
         5b:92:a5:77:9f:23:ee:18:60:01:71:0b:6a:18:ff:4a:1d:49:
         b7:50:ba:da
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEUwRkUxMTAvBgNVBAUTKDk2NEQwODcyN0RBRURBQzc0MDM3QUI5QzQzQTUwOEJB
REJDRkRBRkQwHhcNMjYwNDA1MDUzMzQxWhcNMjYwNDEyMDUzMzQxWjAYMRYwFAYD
VQQDEw02OWQxZjQzNS1jZDdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0pie1kp0qbubE6QADbVeRxL5hWRG1i0REBlQiX9X36QQ5UzKF3HxGlo4/NVN
d0319Bl9rKMNEdFzn1U+TEl22AssGbvkZlXJ6OqG3xm6H06c5ncGW9TH5LcrHvIV
I6iKgAkRzzFHoUNbcas9/7m5Zd/I8SK8V/j+YP+0o9BxcokxYZkCKgPyIwQ+p3+u
7Bw/dabrXMg6K7b0T1/8a65tkS9lM9GYIipWV2Lsg0+WGd63me6krc4P1LYIkgJv
bFzGXtdrbvBkwpW1I6FtV4To93c3rQ/d/lualYNLxGuMWFe5veVSWX1DzjUMeYlE
ljCgJ3zTFVRxcsvdw4AwReZkeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFyf996P
H8KXkeDBaZZc4Y4sQpruMB8GA1UdIwQYMBaAFJZNCHJ9rtrHQDernEOlCLrbz9r9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTBGRS8yRjJCNkZFMkFC
Q0ExMUVGQTk5NEQxMjlDNEY5QUUwMi9sazBJY24ydTJzZEFONnVjUTZVSXV0dlAy
djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2xrMEljbjJ1MnNkQU42dWNRNlVJdXR2UDJ2MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RTBGRS8yRjJCNkZFMkFCQ0ExMUVGQTk5NEQxMjlDNEY5QUUwMi9sazBJY24ydTJz
ZEFONnVjUTZVSXV0dlAydjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeeMGyS/aExqfb9C8GqMiGF23JPkdNXOIrxF23q8uKYVQHTCwgx9pCkjUdxEf
ncljtxoSzFBS0psSX/RVON3rth5fZAuSCU14sOjorv84rxKdj3k8j10MXYyLttlM
2tx2qCoFCPh0qWNm0zxTaZiVWPlTv5mzrFuDqOS/wyGNE6NQp/BZVHSgqu9O/cKC
CSWzB55x5DxIpTaE2/aqYa97pXH9Y3P9yPiCkoHaxq8VAFglnctFLFTrAR2E19sv
+KzUFozA+NeyUHOPtLt8uzrfB53dIy1awAJStri3UL9TQstdduVj25kNTU7MW5Kl
d58j7hhgAXELahj/Sh1Jt1C62g==
-----END CERTIFICATE-----
Generated at Mon Apr 6 14:16:32 2026 by rpki-client