Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.mft
File:                     Shbh6zvfjdRgc8JVc1Ok_Ohwh80.mft (raw, json)
Hash identifier:          +D9GSVUDEDq67wHbi9+NVckOMdU7qcIV8ohFXtrImqo=
Subject key identifier:   D9:36:91:9C:5D:DA:62:8C:54:AA:B8:EA:28:D6:BA:72:C3:1A:81:3F
Authority key identifier: 4A:16:E1:EB:3B:DF:8D:D4:60:73:C2:55:73:53:A4:FC:E8:70:87:CD
Certificate issuer:       /CN=A915BDD9/serialNumber=4A16E1EB3BDF8DD46073C2557353A4FCE87087CD
Certificate serial:       0177
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.mft
Manifest number:          0177
Signing time:             Sun 05 Apr 2026 04:06:30 +0000
Manifest this update:     Sun 05 Apr 2026 04:06:30 +0000
Manifest next update:     Sun 12 Apr 2026 04:06:30 +0000
Files and hashes:         1: Shbh6zvfjdRgc8JVc1Ok_Ohwh80.crl (hash: fzbIU19iTPyfhj/H48QtOl/nxWsMizp+V2VxsxTurto=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.crl
                          rsync://rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 04:06:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 375 (0x177)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BDD9, serialNumber=4A16E1EB3BDF8DD46073C2557353A4FCE87087CD
        Validity
            Not Before: Apr  5 04:06:30 2026 GMT
            Not After : Apr 12 04:06:30 2026 GMT
        Subject: CN=69d1dfc6-4f4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:22:87:44:28:0a:90:b5:c3:a0:0c:dd:13:c8:
                    98:e4:48:88:52:8e:c3:2c:48:51:40:a7:dc:77:7a:
                    59:0f:18:cd:75:35:b4:bb:0a:f4:92:03:0b:8f:14:
                    25:05:a2:f2:90:2b:ce:2c:50:41:08:09:eb:9e:f9:
                    96:29:74:ea:45:12:db:2b:0b:bc:b2:4e:f2:ce:be:
                    28:b9:b9:36:96:3e:c7:52:48:ca:98:b6:f0:ca:38:
                    7c:87:72:98:c1:39:fa:da:57:ac:97:c6:df:d6:2e:
                    73:bb:c8:de:86:3a:9a:b1:59:4a:0f:c8:01:ac:d1:
                    fa:ac:c5:b4:37:23:4c:3e:86:46:e1:1d:64:da:ec:
                    d9:d6:09:44:68:8b:77:33:d9:62:eb:44:30:4d:2c:
                    f7:7d:6f:c7:1c:16:d7:58:3a:13:b3:da:38:fb:d9:
                    b9:49:63:f7:41:10:fb:03:7c:44:1a:36:4a:fd:7f:
                    e9:5e:a5:26:44:67:3d:9d:54:d5:3e:ce:fd:d8:9e:
                    39:0c:ad:60:35:42:2f:1f:5c:b9:2b:bf:3d:77:0e:
                    6b:2d:83:eb:da:81:68:5c:c2:96:71:7a:a6:4a:3a:
                    19:cd:fe:5b:56:da:29:e1:37:d9:bd:49:14:aa:47:
                    a4:f2:b8:56:16:1b:cb:8c:3c:a5:1c:ff:32:50:e5:
                    90:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:36:91:9C:5D:DA:62:8C:54:AA:B8:EA:28:D6:BA:72:C3:1A:81:3F
            X509v3 Authority Key Identifier:
                keyid:4A:16:E1:EB:3B:DF:8D:D4:60:73:C2:55:73:53:A4:FC:E8:70:87:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:77:f6:c9:a4:fe:e3:d5:fd:30:d8:81:8a:83:92:91:a9:06:
         d7:74:56:40:77:55:79:cb:16:a7:56:43:e8:8d:56:48:db:98:
         f5:3f:b7:37:41:0e:b8:e7:24:63:a2:64:48:37:ae:95:85:54:
         2e:42:e6:9e:60:50:31:e5:d6:b3:ed:51:8b:0f:57:27:9a:bb:
         9c:b8:7c:6c:ba:da:7c:e7:63:89:7e:f6:eb:23:78:67:76:8f:
         67:e1:85:b3:91:2b:b1:6a:1f:f6:b4:f8:22:32:48:f6:20:57:
         f1:8d:1c:10:3d:fa:2a:3e:a4:08:78:f3:a5:22:05:a7:76:1a:
         a1:23:68:54:f5:70:74:76:10:5e:8a:a3:f2:9f:8a:49:87:89:
         30:79:a4:40:bb:b8:8b:3e:ef:ef:00:88:06:47:34:40:6b:e7:
         71:15:1d:cf:c1:ce:d0:94:4c:15:05:cb:76:ac:51:43:35:bf:
         49:b2:48:b7:df:07:27:7a:f0:d4:16:30:e6:86:30:6b:94:2a:
         46:e7:5c:44:87:a8:63:53:df:8a:9d:47:dd:91:bc:45:7d:16:
         45:3d:24:ce:0c:ab:15:79:d1:22:ae:90:3b:77:ce:e2:04:71:
         df:ab:ca:82:e6:db:aa:6e:29:d1:15:44:83:cf:b7:b8:c3:18:
         d7:b3:6d:c4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUJERDkxMTAvBgNVBAUTKDRBMTZFMUVCM0JERjhERDQ2MDczQzI1NTczNTNBNEZD
RTg3MDg3Q0QwHhcNMjYwNDA1MDQwNjMwWhcNMjYwNDEyMDQwNjMwWjAYMRYwFAYD
VQQDEw02OWQxZGZjNi00ZjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxiKHRCgKkLXDoAzdE8iY5EiIUo7DLEhRQKfcd3pZDxjNdTW0uwr0kgMLjxQl
BaLykCvOLFBBCAnrnvmWKXTqRRLbKwu8sk7yzr4oubk2lj7HUkjKmLbwyjh8h3KY
wTn62lesl8bf1i5zu8jehjqasVlKD8gBrNH6rMW0NyNMPoZG4R1k2uzZ1glEaIt3
M9li60QwTSz3fW/HHBbXWDoTs9o4+9m5SWP3QRD7A3xEGjZK/X/pXqUmRGc9nVTV
Ps792J45DK1gNUIvH1y5K789dw5rLYPr2oFoXMKWcXqmSjoZzf5bVtop4TfZvUkU
qkek8rhWFhvLjDylHP8yUOWQJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNk2kZxd
2mKMVKq46ijWunLDGoE/MB8GA1UdIwQYMBaAFEoW4es7343UYHPCVXNTpPzocIfN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkREOS8yMjcyQzVGMEYx
QjQxMUVFOUZERkI4NjdDNEY5QUUwMi9TaGJoNnp2ZmpkUmdjOEpWYzFPa19PaHdo
ODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NoYmg2enZmamRSZ2M4SlZjMU9rX09od2g4MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QkREOS8yMjcyQzVGMEYxQjQxMUVFOUZERkI4NjdDNEY5QUUwMi9TaGJoNnp2Zmpk
UmdjOEpWYzFPa19PaHdoODAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcXf2yaT+49X9MNiBioOSkakG13RWQHdVecsWp1ZD6I1WSNuY9T+3N0EOuOck
Y6JkSDeulYVULkLmnmBQMeXWs+1Riw9XJ5q7nLh8bLrafOdjiX726yN4Z3aPZ+GF
s5ErsWof9rT4IjJI9iBX8Y0cED36Kj6kCHjzpSIFp3YaoSNoVPVwdHYQXoqj8p+K
SYeJMHmkQLu4iz7v7wCIBkc0QGvncRUdz8HO0JRMFQXLdqxRQzW/SbJIt98HJ3rw
1BYw5oYwa5QqRudcRIeoY1Pfip1H3ZG8RX0WRT0kzgyrFXnRIq6QO3fO4gRx36vK
gubbqm4p0RVEg8+3uMMY17NtxA==
-----END CERTIFICATE-----
Generated at Mon Apr 6 09:03:06 2026 by rpki-client