Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft
File:                     hkRKM0kVEhS08nEbLF2gy5nlDxM.mft (raw, json)
Hash identifier:          310p3yRN7xs3/uvQ4ni/YEeAhAOiYFC/SWeseOnhpkg=
Subject key identifier:   63:70:58:FC:54:0C:4D:3F:BB:B4:FE:A0:4E:57:A5:08:8C:7B:72:56
Authority key identifier: 86:44:4A:33:49:15:12:14:B4:F2:71:1B:2C:5D:A0:CB:99:E5:0F:13
Certificate issuer:       /CN=A915C48D/serialNumber=86444A3349151214B4F2711B2C5DA0CB99E50F13
Certificate serial:       010E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft
Manifest number:          0102
Signing time:             Sun 05 Apr 2026 05:37:42 +0000
Manifest this update:     Sun 05 Apr 2026 05:37:41 +0000
Manifest next update:     Sun 12 Apr 2026 05:37:41 +0000
Files and hashes:         1: hkRKM0kVEhS08nEbLF2gy5nlDxM.crl (hash: 7Ovk+qR07nKQKesrks1cFjQacOPIS1yeKfne6vErG/M=)
                          2: B2BB920001CE11F182556E3A746F56BC.roa (hash: jrD4pqdoiKJI9NO9x+4SiaHnYuar82tQXf2WpPGDnIU=)
                          3: DE1B9460EDF511EF86CB7315C4F9AE02.roa (hash: E7TlvkUoTphr1MZbzvUv/cwDmCu/Xr2dNOXdFLK7X2o=)
                          4: 55EFA6C0ECF711EF88590A69C4F9AE02.roa (hash: 9kbxY7GStAtFWFHK4CxfmaeBQ9+u1bor9LZiasl/Umo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.crl
                          rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:37:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 270 (0x10e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C48D, serialNumber=86444A3349151214B4F2711B2C5DA0CB99E50F13
        Validity
            Not Before: Apr  5 05:37:41 2026 GMT
            Not After : Apr 12 05:37:41 2026 GMT
        Subject: CN=69d1f525-b177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f7:a5:ba:c8:9d:c0:e0:5f:c5:51:4a:d0:9c:
                    7d:02:58:51:76:69:0a:7f:d5:eb:ef:da:c6:23:29:
                    8a:f8:c9:80:0e:3f:a4:5b:59:df:71:0c:ab:03:1c:
                    db:05:33:02:ad:3b:71:0b:0f:49:76:f1:e1:e6:92:
                    7a:96:a0:6e:41:05:d1:44:3a:60:5d:d8:6b:9a:aa:
                    47:33:f5:6a:1e:49:48:ca:c5:cd:1b:94:f7:28:09:
                    1b:cd:e8:31:9c:90:c9:aa:22:67:c2:c3:fe:d9:77:
                    84:64:f3:88:d3:41:a7:97:10:80:a5:cb:84:49:02:
                    8a:e5:09:93:7a:65:40:5d:79:9b:36:81:a1:ee:14:
                    8d:44:0b:8f:6b:fe:70:33:f2:f0:65:32:a3:91:b7:
                    ec:6b:74:4c:29:12:1f:ee:12:20:56:cf:b5:3e:85:
                    ac:c4:b5:99:6f:2c:5e:32:79:fa:13:a0:c9:ec:c2:
                    9f:47:e3:04:83:91:93:0d:0f:20:67:97:eb:fc:3e:
                    9b:4a:97:d5:f4:8e:25:91:e8:87:df:56:e4:70:96:
                    4e:07:30:f0:14:b5:dc:ba:8c:57:95:82:8d:0b:74:
                    29:a3:53:09:64:2f:83:2c:3d:b4:bf:b7:1a:3c:32:
                    a0:5b:83:5f:61:10:e3:29:4f:72:b9:25:54:86:4e:
                    7b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:70:58:FC:54:0C:4D:3F:BB:B4:FE:A0:4E:57:A5:08:8C:7B:72:56
            X509v3 Authority Key Identifier:
                keyid:86:44:4A:33:49:15:12:14:B4:F2:71:1B:2C:5D:A0:CB:99:E5:0F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:46:1c:16:24:2d:d7:81:42:1f:a5:5a:93:bc:43:81:de:70:
         d5:c1:e1:17:3f:da:78:19:b0:15:5f:9c:71:d3:78:cc:30:97:
         ac:17:4d:fd:a0:ce:27:89:97:4b:a8:69:02:e6:c8:01:3a:0a:
         d7:57:60:78:6f:fe:5c:87:8e:a0:96:b8:9b:7c:04:92:7b:a0:
         2a:25:54:36:71:a4:23:f1:89:9d:63:c3:3e:3d:99:f8:27:6a:
         40:11:3b:f6:8d:81:51:4f:14:17:29:11:35:0f:93:05:17:2a:
         81:62:57:0f:d1:df:b2:8a:6d:ea:44:82:36:b9:1c:ca:96:ed:
         66:01:3a:be:55:90:4f:47:2a:f3:c2:0a:f7:b6:ad:85:c3:7e:
         70:c6:62:ff:fa:da:67:6a:4d:f1:2d:42:ab:07:da:38:7b:cb:
         18:fd:b2:29:61:13:fe:e8:3e:22:21:dd:a2:ec:cc:2b:d4:f9:
         10:be:c0:2b:d0:f2:c3:b4:d9:5c:92:7f:b2:8d:2d:52:a2:cc:
         1a:db:8c:7b:a0:aa:59:67:52:7f:74:7b:40:94:1c:99:56:bd:
         31:01:46:60:78:8a:15:b0:c7:85:1e:68:c0:26:e0:6c:6f:d7:
         11:39:33:19:6f:e6:41:d6:10:a5:f0:38:f3:96:45:10:73:f3:
         ed:5b:55:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 11:20:34 2026 by rpki-client