Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.mft
File:                     YV7YTETmV_cJXgISr-oFLFQqDZE.mft (raw, json)
Hash identifier:          JpCIyoPcrw4WnjjHAvXDdlNAOmLnU9JYLCQPCC4fRrM=
Subject key identifier:   8B:BA:F9:94:06:DB:92:33:2C:61:02:D0:89:FA:A8:9E:97:A9:CD:AD
Authority key identifier: 61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91
Certificate issuer:       /CN=A915D03A/serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91
Certificate serial:       1A97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.mft
Manifest number:          19D7
Signing time:             Mon 20 Apr 2026 16:21:50 +0000
Manifest this update:     Mon 20 Apr 2026 16:21:49 +0000
Manifest next update:     Mon 27 Apr 2026 16:21:49 +0000
Files and hashes:         1: YV7YTETmV_cJXgISr-oFLFQqDZE.crl (hash: TEQcxPq1pkJJN4cuaD/nLLuMxm8wzdL6ESFJmiybm+w=)
                          2: DE11F1B4F74011EE9C9F952CC4F9AE02.roa (hash: okUwX6lv4rj6a/PEwUlYFCt3tg92HTun7bF/sYnRa58=)
                          3: 4A749E58172211F189FDCC9B0A3D8C67.roa (hash: RzcmoRDXH4lUW30+jkbpA1M2gdPby4cOnD/HlxW7YUo=)
                          4: A41A01F2812311ED9367FC43C4F9AE02.roa (hash: Vrq9FGhzoiIWfc7ihIhJLVXO9ydP/lyM17l84uTIdWw=)
                          5: 897785E099AA11EE9E218060C4F9AE02.roa (hash: FJz55cs86sARz1fNhydUSwjATGGxbZ6Dm+NpUv9tjIg=)
                          6: DF4A9778E56111EBB6ADAC1FC4F9AE02.roa (hash: 5JbfjmQAdiDF+GCUG6f8XFUd66i1OEDkHsAU9939sOs=)
                          7: CF2F506C8A0F11EA9DFF7F19C4F9AE02.roa (hash: Uev6dESbR9jrBR21kOty0yon3IBMPTdsDiYNuwEZ5F0=)
                          8: DEB0EB98F74011EE9C9F952CC4F9AE02.roa (hash: 8GE5D1VVfYYmKb2E5p4GEmVYlon+zqds8OqnCRSQFzE=)
                          9: 596C54DCE83F11EE81772A87C4F9AE02.roa (hash: lqLW/3F13QI9kdxsDx9jr2d/mE+vvyfFH4FKs/rBDIU=)
                          10: AD1655A2DFEF11EB8486545FC4F9AE02.roa (hash: 4/EukxBvxwNpCMS7ooyYFFEFLFiWKS+tZEGfjyT7PEc=)
                          11: FBC5FF822EE711EF96610B4EC4F9AE02.roa (hash: S48kU8CxEt2lqHTLC9S8NrgXijXkmXA37DtqgyeV7oE=)
                          12: 64F859DA812611EDA597255EC4F9AE02.roa (hash: fn9COoreHDD+zdHLkrrnHjWHJo4W49aJWkK49HG6KBA=)
                          13: EC0E245CF74211EEA182A952C4F9AE02.roa (hash: nAUyfqjMuPkPLszX314RyVVhnb0kyzw6IgC7LxzKX/4=)
                          14: 4524F69EF73211EE8BA96C65C4F9AE02.roa (hash: K98fdNP3JonvWQFL1z0tA1IGnqJhwEWay1v708+of9s=)
                          15: BCA3B016F72811EE8C4CBB51C4F9AE02.roa (hash: bDTPxLseOvL61ps32tmaYLLWWwIIjlAMR+0T2fGKkJ0=)
                          16: 1B97493E7FFF11EF85F9E340C4F9AE02.roa (hash: PL8uHSqtG/dPR3qkHOmJWXxTaJWMJ9JBct5vxpIjSMw=)
                          17: 1071470CF41311EA9FD4EE0FC4F9AE02.roa (hash: 1vdmt5syl+1wS6hiP5UtJcWq0wH3yVRkEp1VhNBiO/Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.crl
                          rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Apr 2026 16:21:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6807 (0x1a97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D03A, serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91
        Validity
            Not Before: Apr 20 16:21:49 2026 GMT
            Not After : Apr 27 16:21:49 2026 GMT
        Subject: CN=69e6529e-6c37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f7:4a:42:b1:5a:6d:a9:db:4c:e8:45:f1:12:
                    5b:18:91:a8:ff:40:20:a6:c7:b3:0e:40:a5:10:e7:
                    6c:cd:4d:1d:1c:f1:a3:d7:88:a1:af:c8:e6:7b:10:
                    d9:17:be:cb:4d:bb:3a:a9:ed:17:f0:1c:5f:62:19:
                    25:1c:97:d8:76:3d:83:42:f9:d5:4a:a0:8a:cf:6f:
                    ec:be:02:15:d7:43:67:b7:c8:e3:4f:da:d3:33:59:
                    d5:1e:4e:1c:ea:89:42:16:55:cd:d5:c7:94:d5:25:
                    57:af:03:43:ef:06:64:09:32:20:1e:a9:4f:b4:73:
                    11:40:36:5b:38:c1:b0:17:56:0c:d5:51:5a:93:b9:
                    5a:90:80:04:c9:60:66:43:e9:27:2b:a4:ea:ce:30:
                    b5:02:40:b1:46:df:bd:eb:c7:82:75:41:60:76:5d:
                    1e:10:2b:98:82:60:15:f7:22:76:21:c4:82:95:c9:
                    4a:53:dd:a4:7e:5a:6e:a0:e3:eb:7f:58:a6:01:1c:
                    ac:4c:17:0d:07:e9:ab:4c:1b:00:5a:71:34:d5:2b:
                    97:a9:3b:b0:99:bc:cb:6f:08:02:1a:03:4c:78:6e:
                    44:94:b4:44:72:19:7a:91:23:be:fe:5b:87:0e:5f:
                    e0:b4:8e:a6:e6:3a:60:95:ec:5a:18:79:6c:a1:3a:
                    3f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:BA:F9:94:06:DB:92:33:2C:61:02:D0:89:FA:A8:9E:97:A9:CD:AD
            X509v3 Authority Key Identifier:
                keyid:61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:ed:b3:e6:b0:b9:66:8b:0f:9a:16:79:83:d8:8d:db:50:86:
         13:77:72:3f:3d:68:06:ad:c1:04:6f:2c:2b:4f:9c:7a:0f:21:
         3a:c2:b6:71:14:cf:bf:97:99:8e:9a:08:74:6f:9b:31:48:04:
         7a:af:70:cd:60:0d:23:ee:78:60:ec:61:71:9a:ce:5a:a2:85:
         4b:b8:b0:6b:cb:f6:e2:08:09:b6:f9:17:36:1c:30:69:b9:d8:
         02:ee:42:66:fb:19:0c:ef:ac:26:68:4f:97:01:44:00:86:6c:
         d4:10:bb:fe:ac:6e:4e:93:6e:d9:df:b9:82:7b:93:04:08:eb:
         80:8b:74:cf:84:e8:b9:11:ae:59:a9:72:d9:31:6e:d6:6a:6e:
         ef:75:e8:c9:cf:e2:4e:56:cc:f7:05:12:6f:e4:0e:14:c0:00:
         c7:9d:8e:c3:65:33:af:a1:2f:ee:35:67:52:b8:05:55:15:32:
         f2:3a:a5:76:e2:e7:68:b5:8f:d2:48:0f:bf:3a:7a:82:94:99:
         bb:b6:e4:21:11:03:bb:25:a1:23:9a:a2:d2:55:bc:51:0f:58:
         2c:55:ca:1c:a0:55:57:ba:a2:8c:b5:ad:ca:a4:e3:08:71:be:
         72:ee:60:6a:20:81:68:92:68:a8:76:b0:ff:59:b2:1d:37:8c:
         71:30:5c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 00:32:50 2026 by rpki-client