Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft
File:                     J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft (raw, json)
Hash identifier:          lZwq6ubqQKyvZnC+kwFvnHu635b9YGM+/YMzpGzCfao=
Subject key identifier:   28:80:32:65:6F:B2:36:17:BC:67:AE:13:00:AA:E2:A2:28:CB:F3:AC
Authority key identifier: 27:E6:CB:18:89:C0:A3:F3:6F:91:F5:8E:05:9B:88:9A:26:79:7C:94
Certificate issuer:       /CN=A914E4E3/serialNumber=27E6CB1889C0A3F36F91F58E059B889A26797C94
Certificate serial:       16B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-bLGInAo_NvkfWOBZuImiZ5fJQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft
Manifest number:          16A5
Signing time:             Sat 04 Apr 2026 16:36:26 +0000
Manifest this update:     Sat 04 Apr 2026 16:36:25 +0000
Manifest next update:     Sat 11 Apr 2026 16:36:25 +0000
Files and hashes:         1: J-bLGInAo_NvkfWOBZuImiZ5fJQ.crl (hash: P1vxgETjucX7TZNAKFcHOB3nGbOCab9C5Qp5NgpeRP0=)
                          2: 7A1AC3F44B6111EBAE5C8E77C4F9AE02.roa (hash: v/SZ7H/SLnlGFkwwxhkg6bW6tjnET9pIm6y1CUX4oos=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.crl
                          rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-bLGInAo_NvkfWOBZuImiZ5fJQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 16:36:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5815 (0x16b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E4E3, serialNumber=27E6CB1889C0A3F36F91F58E059B889A26797C94
        Validity
            Not Before: Apr  4 16:36:25 2026 GMT
            Not After : Apr 11 16:36:25 2026 GMT
        Subject: CN=69d13e0a-9ef8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:43:98:26:04:7f:f0:9a:66:9b:36:c5:fa:fd:
                    8d:48:e2:00:d4:bd:54:19:98:65:87:11:ba:f5:cd:
                    0e:7a:0a:ee:b7:97:33:a2:df:9e:91:9e:94:6a:53:
                    9c:4b:48:7b:6e:f4:38:71:b8:05:fc:6c:b6:25:6b:
                    79:5b:a2:8a:6f:44:6c:18:03:0c:7d:fe:21:3a:e1:
                    2a:ef:b1:8f:36:95:a8:9d:4e:9d:72:7c:d6:31:9b:
                    58:ca:bc:bc:b1:97:a7:24:18:d4:e0:05:eb:06:06:
                    e9:8b:80:24:18:a9:d7:d9:55:1a:5a:72:fc:77:09:
                    fa:b1:4d:e6:24:0c:28:56:89:97:97:00:51:14:4c:
                    49:b7:09:27:3d:ea:5b:59:f7:01:0b:b7:13:79:7e:
                    74:4f:97:0b:84:c0:5f:9b:3f:d2:58:ff:cb:df:52:
                    29:08:d8:26:ac:a2:92:f7:6c:94:5c:ca:65:4d:77:
                    37:bb:8b:6b:ba:fa:91:91:cc:a2:63:5d:c0:dc:cd:
                    7b:66:70:f4:55:d6:89:03:35:25:fe:5a:c9:72:f8:
                    7e:ff:48:08:84:6d:41:fb:f2:b6:d3:3d:e2:ee:72:
                    36:8c:a4:ad:1e:84:c4:e1:c5:93:07:e4:33:bd:1a:
                    79:2f:b5:40:d3:1c:89:10:7f:36:8f:3b:73:62:67:
                    96:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:80:32:65:6F:B2:36:17:BC:67:AE:13:00:AA:E2:A2:28:CB:F3:AC
            X509v3 Authority Key Identifier:
                keyid:27:E6:CB:18:89:C0:A3:F3:6F:91:F5:8E:05:9B:88:9A:26:79:7C:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-bLGInAo_NvkfWOBZuImiZ5fJQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:89:90:87:b2:2a:98:94:e5:f2:c8:98:1d:07:8b:fe:85:40:
         7f:9a:24:44:6c:12:8f:ab:99:c1:b6:a1:0c:1f:c5:35:b0:bd:
         5e:65:e3:51:ce:a0:a8:6f:a3:d1:37:0f:4e:34:83:a6:62:02:
         cb:ed:8e:bd:98:7c:14:8f:82:c9:64:80:cd:d2:ac:e1:f0:4d:
         c6:1e:83:eb:88:a8:13:99:8f:9b:e8:4f:1f:89:3f:d1:c0:b3:
         2c:d1:a6:11:ea:da:1a:79:5f:ee:0d:04:61:e1:b8:6e:94:00:
         36:04:eb:92:b5:92:45:a9:62:29:42:2b:6f:f8:8e:82:9c:a7:
         64:ab:09:69:a1:6d:59:db:ab:d0:36:2a:e1:56:2e:12:99:57:
         35:10:0d:b7:50:29:69:36:fe:60:3f:5f:3a:b2:22:4f:27:93:
         69:46:70:e2:37:eb:00:0c:eb:7c:24:3c:c5:43:91:4a:d0:f7:
         de:29:b0:c3:8f:9d:56:d8:4e:35:aa:01:27:6b:ab:25:29:a2:
         8a:22:96:44:e7:09:d8:77:37:17:98:32:dc:e8:f1:cc:44:47:
         d1:66:c9:55:fa:0b:ab:3a:2a:21:1d:5e:33:ae:a7:c8:68:9b:
         d7:e9:42:98:c7:93:a4:6a:ab:b2:5a:dc:10:ad:4c:f4:6e:7f:
         e0:3d:f9:98
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFrcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEU0RTMxMTAvBgNVBAUTKDI3RTZDQjE4ODlDMEEzRjM2RjkxRjU4RTA1OUI4ODlB
MjY3OTdDOTQwHhcNMjYwNDA0MTYzNjI1WhcNMjYwNDExMTYzNjI1WjAYMRYwFAYD
VQQDEw02OWQxM2UwYS05ZWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4UOYJgR/8JpmmzbF+v2NSOIA1L1UGZhlhxG69c0Oegrut5czot+ekZ6UalOc
S0h7bvQ4cbgF/Gy2JWt5W6KKb0RsGAMMff4hOuEq77GPNpWonU6dcnzWMZtYyry8
sZenJBjU4AXrBgbpi4AkGKnX2VUaWnL8dwn6sU3mJAwoVomXlwBRFExJtwknPepb
WfcBC7cTeX50T5cLhMBfmz/SWP/L31IpCNgmrKKS92yUXMplTXc3u4truvqRkcyi
Y13A3M17ZnD0VdaJAzUl/lrJcvh+/0gIhG1B+/K20z3i7nI2jKStHoTE4cWTB+Qz
vRp5L7VA0xyJEH82jztzYmeWHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCiAMmVv
sjYXvGeuEwCq4qIoy/OsMB8GA1UdIwQYMBaAFCfmyxiJwKPzb5H1jgWbiJomeXyU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTRFMy80MjNCNkZEQzFE
MkYxMUU4QTJGRDM3MTJDNEY5QUUwMi9KLWJMR0luQW9fTnZrZldPQlp1SW1pWjVm
SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0otYkxHSW5Bb19OdmtmV09CWnVJbWlaNWZKUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RTRFMy80MjNCNkZEQzFEMkYxMUU4QTJGRDM3MTJDNEY5QUUwMi9KLWJMR0luQW9f
TnZrZldPQlp1SW1pWjVmSlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGYmQh7IqmJTl8siYHQeL/oVAf5okRGwSj6uZwbahDB/FNbC9XmXjUc6gqG+j
0TcPTjSDpmICy+2OvZh8FI+CyWSAzdKs4fBNxh6D64ioE5mPm+hPH4k/0cCzLNGm
EeraGnlf7g0EYeG4bpQANgTrkrWSRaliKUIrb/iOgpynZKsJaaFtWdur0DYq4VYu
EplXNRANt1ApaTb+YD9fOrIiTyeTaUZw4jfrAAzrfCQ8xUORStD33imww4+dVthO
NaoBJ2urJSmiiiKWROcJ2Hc3F5gy3OjxzERH0WbJVfoLqzoqIR1eM66nyGib1+lC
mMeTpGqrslrcEK1M9G5/4D35mA==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:27:54 2026 by rpki-client