Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft
File:                     SHy2MxcaDd84rLtq0e2K5pZVhgo.mft (raw, json)
Hash identifier:          eaDFVinFllOBlR2Z+zYADP3Gg1Xq73E4vgIFFHtT0hM=
Subject key identifier:   59:86:5D:0B:24:0B:88:66:51:2B:FE:4A:85:0C:EB:02:92:D4:1A:18
Authority key identifier: 48:7C:B6:33:17:1A:0D:DF:38:AC:BB:6A:D1:ED:8A:E6:96:55:86:0A
Certificate issuer:       /CN=A916899E/serialNumber=487CB633171A0DDF38ACBB6AD1ED8AE69655860A
Certificate serial:       0242
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft
Manifest number:          023C
Signing time:             Sun 05 Apr 2026 02:06:15 +0000
Manifest this update:     Sun 05 Apr 2026 02:06:14 +0000
Manifest next update:     Sun 12 Apr 2026 02:06:14 +0000
Files and hashes:         1: SHy2MxcaDd84rLtq0e2K5pZVhgo.crl (hash: d3Vb/h1MqYdB631T0xnqpg4PyBgpKXBDNB2pzgR3HCU=)
                          2: 96540A72CD0E11ED9A9CAE58C4F9AE02.roa (hash: VUhX4V+uuAXCvJJx8gbFvjg2DTFUtnIh9VNRCqvzwQY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.crl
                          rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 02:06:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 578 (0x242)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916899E, serialNumber=487CB633171A0DDF38ACBB6AD1ED8AE69655860A
        Validity
            Not Before: Apr  5 02:06:14 2026 GMT
            Not After : Apr 12 02:06:14 2026 GMT
        Subject: CN=69d1c397-1215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:86:a7:48:8d:71:26:dc:ed:0d:25:96:41:43:
                    37:40:4f:56:6d:bd:6c:4e:90:fb:12:29:92:2f:ca:
                    92:85:0e:61:08:90:f1:da:4f:4f:6b:f2:d4:b7:af:
                    91:c3:de:cb:2a:49:fa:2e:73:a4:41:ba:8d:96:f1:
                    d8:99:b8:91:08:10:a2:c8:04:d3:4c:18:08:7b:53:
                    95:f9:fc:7e:23:d3:b4:67:1e:c1:d3:f6:dc:77:f3:
                    c3:6a:84:f8:9f:ab:22:7e:24:43:54:8f:14:91:7b:
                    c3:fb:9c:90:8e:67:a9:88:76:9b:c2:3a:cc:27:8b:
                    d7:55:e7:34:a1:36:9b:4d:b0:f4:29:0a:53:5e:35:
                    ba:fe:f1:01:ca:6c:0a:fb:69:e8:3a:0b:bc:db:9a:
                    db:36:29:18:3c:c8:e9:36:bf:ef:b4:e0:51:65:bd:
                    44:c5:88:e7:ae:ab:17:7b:3d:ac:69:0a:da:ba:9f:
                    4f:9b:9c:78:86:b4:b5:fe:50:7a:b4:88:75:2f:b6:
                    13:18:b0:be:59:35:0c:75:c5:25:17:4f:56:f5:a7:
                    be:74:3b:d4:a1:fb:57:65:3b:c7:1f:47:47:52:f7:
                    7d:95:ab:62:e6:21:6a:1d:f6:a8:aa:82:b0:c2:cb:
                    db:f3:ff:43:2c:bb:0c:e2:cd:69:43:e5:98:40:51:
                    3f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:86:5D:0B:24:0B:88:66:51:2B:FE:4A:85:0C:EB:02:92:D4:1A:18
            X509v3 Authority Key Identifier:
                keyid:48:7C:B6:33:17:1A:0D:DF:38:AC:BB:6A:D1:ED:8A:E6:96:55:86:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:ac:60:e9:6b:63:49:ac:de:66:b6:a9:a4:0f:e8:28:c7:2e:
         32:75:0b:bc:76:29:98:7f:65:34:4b:aa:d3:01:d6:13:3b:70:
         89:03:49:87:5a:41:3f:f2:31:80:32:c6:40:70:67:03:09:08:
         28:d2:7a:54:b9:d4:e4:29:69:4d:e0:a1:48:1c:28:79:2b:0a:
         1d:d0:0c:c0:3f:3e:23:0e:48:22:ce:e1:a7:32:11:9d:51:0d:
         c5:c7:8f:d1:a8:af:fe:15:6a:fe:e6:64:e3:68:97:b6:fd:3a:
         b6:0d:2c:f1:75:76:23:60:39:ca:84:c2:51:3d:74:88:03:8e:
         0e:95:4d:14:5b:b6:f4:ea:70:e2:e6:4f:eb:fc:bd:08:3f:e1:
         4f:ee:85:45:fb:34:20:6e:bd:11:23:b3:1b:04:62:8d:42:bf:
         aa:3f:a7:84:a8:ac:3f:7b:f2:86:53:01:42:17:cd:4b:e7:77:
         ad:79:ed:14:f8:84:2f:1e:85:f4:16:5f:bc:6b:5b:c6:d5:98:
         dd:f9:ca:63:fa:0a:4b:12:e2:57:56:bd:0e:14:97:41:ff:7c:
         d9:34:3e:c5:0c:6e:5f:9e:5e:10:db:08:21:f5:85:2c:cd:2e:
         55:0f:d7:46:81:f2:0d:0f:75:f5:fe:fe:7d:ab:9f:71:61:97:
         08:77:19:5d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njg5OUUxMTAvBgNVBAUTKDQ4N0NCNjMzMTcxQTBEREYzOEFDQkI2QUQxRUQ4QUU2
OTY1NTg2MEEwHhcNMjYwNDA1MDIwNjE0WhcNMjYwNDEyMDIwNjE0WjAYMRYwFAYD
VQQDEw02OWQxYzM5Ny0xMjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwIanSI1xJtztDSWWQUM3QE9Wbb1sTpD7EimSL8qShQ5hCJDx2k9Pa/LUt6+R
w97LKkn6LnOkQbqNlvHYmbiRCBCiyATTTBgIe1OV+fx+I9O0Zx7B0/bcd/PDaoT4
n6sifiRDVI8UkXvD+5yQjmepiHabwjrMJ4vXVec0oTabTbD0KQpTXjW6/vEBymwK
+2noOgu825rbNikYPMjpNr/vtOBRZb1ExYjnrqsXez2saQraup9Pm5x4hrS1/lB6
tIh1L7YTGLC+WTUMdcUlF09W9ae+dDvUoftXZTvHH0dHUvd9lati5iFqHfaoqoKw
wsvb8/9DLLsM4s1pQ+WYQFE/4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFmGXQsk
C4hmUSv+SoUM6wKS1BoYMB8GA1UdIwQYMBaAFEh8tjMXGg3fOKy7atHtiuaWVYYK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODk5RS82QzEzNTQzNEM5
RjMxMUVEQTU4NDkyNjlDNEY5QUUwMi9TSHkyTXhjYURkODRyTHRxMGUySzVwWlZo
Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NIeTJNeGNhRGQ4NHJMdHEwZTJLNXBaVmhnby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
ODk5RS82QzEzNTQzNEM5RjMxMUVEQTU4NDkyNjlDNEY5QUUwMi9TSHkyTXhjYURk
ODRyTHRxMGUySzVwWlZoZ28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUKxg6WtjSazeZrappA/oKMcuMnULvHYpmH9lNEuq0wHWEztwiQNJh1pBP/Ix
gDLGQHBnAwkIKNJ6VLnU5ClpTeChSBwoeSsKHdAMwD8+Iw5IIs7hpzIRnVENxceP
0aiv/hVq/uZk42iXtv06tg0s8XV2I2A5yoTCUT10iAOODpVNFFu29Opw4uZP6/y9
CD/hT+6FRfs0IG69ESOzGwRijUK/qj+nhKisP3vyhlMBQhfNS+d3rXntFPiELx6F
9BZfvGtbxtWY3fnKY/oKSxLiV1a9DhSXQf982TQ+xQxuX55eENsIIfWFLM0uVQ/X
RoHyDQ919f7+faufcWGXCHcZXQ==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:32:02 2026 by rpki-client