Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916AC73/77512DC2251711F0B07F861DC4F9AE02/KM0J5lDCaex9K8n-99VmwQEtIEw.mft
File:                     KM0J5lDCaex9K8n-99VmwQEtIEw.mft (raw, json)
Hash identifier:          50R+reKpOeMa5tteHJRm+yHJS+ma1N6VVEYFvsMQRlY=
Subject key identifier:   EE:4C:76:8E:6A:D1:21:36:BF:A4:76:E2:A6:A8:7F:99:54:6E:80:E3
Authority key identifier: 28:CD:09:E6:50:C2:69:EC:7D:2B:C9:FE:F7:D5:66:C1:01:2D:20:4C
Certificate issuer:       /CN=A916AC73/serialNumber=28CD09E650C269EC7D2BC9FEF7D566C1012D204C
Certificate serial:       BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KM0J5lDCaex9K8n-99VmwQEtIEw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916AC73/77512DC2251711F0B07F861DC4F9AE02/KM0J5lDCaex9K8n-99VmwQEtIEw.mft
Manifest number:          B5
Signing time:             Sun 05 Apr 2026 06:30:41 +0000
Manifest this update:     Sun 05 Apr 2026 06:30:40 +0000
Manifest next update:     Sun 12 Apr 2026 06:30:40 +0000
Files and hashes:         1: KM0J5lDCaex9K8n-99VmwQEtIEw.crl (hash: +WQtsBYjJikUyLTsv5lDAfQRnfAibLNklyFqMwYML54=)
                          2: FAA72960259911F0953E0023C4F9AE02.roa (hash: O09UdOIvOj1qcl3/WTrZg9iUeXJv//L0a5ehI9CYUR8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916AC73/77512DC2251711F0B07F861DC4F9AE02/KM0J5lDCaex9K8n-99VmwQEtIEw.crl
                          rsync://rpki.apnic.net/member_repository/A916AC73/77512DC2251711F0B07F861DC4F9AE02/KM0J5lDCaex9K8n-99VmwQEtIEw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KM0J5lDCaex9K8n-99VmwQEtIEw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 06:30:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188 (0xbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916AC73, serialNumber=28CD09E650C269EC7D2BC9FEF7D566C1012D204C
        Validity
            Not Before: Apr  5 06:30:40 2026 GMT
            Not After : Apr 12 06:30:40 2026 GMT
        Subject: CN=69d20190-3f22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ab:da:0c:fa:92:69:8f:ff:4e:5f:71:38:f3:
                    ff:00:35:bb:a1:78:85:86:71:4b:c0:1c:17:88:ae:
                    53:b3:73:62:9d:5a:e0:8b:42:c7:42:f7:90:1f:cb:
                    05:45:45:0a:dd:f2:65:ca:c7:fa:5f:5e:4c:c1:d8:
                    d3:eb:d1:e5:44:23:dd:70:fc:3c:ec:d8:0f:d4:03:
                    62:70:b7:f7:d8:9f:4c:da:05:c7:06:ff:7f:e0:cd:
                    c9:a8:f5:80:50:2c:22:6a:b2:e8:f4:63:66:4d:65:
                    85:62:22:71:17:ec:34:e7:a9:4e:6e:ba:fb:1e:0a:
                    b6:c3:80:74:92:65:f3:ad:6d:dc:37:7b:44:1f:f1:
                    e3:90:c8:b0:09:5c:5b:e6:71:33:4c:76:4b:cd:d2:
                    f2:f6:1b:ce:0a:8f:bd:b2:7e:8d:d4:1b:8b:bd:f3:
                    f6:b1:68:ca:31:fb:67:2c:dc:6f:9b:ae:7e:60:37:
                    8f:c3:44:a7:db:d8:42:d6:9f:95:88:22:63:a4:c7:
                    01:43:28:f8:6d:d4:12:97:89:2a:f6:40:d3:f2:6c:
                    44:0e:9e:17:5f:d9:41:2e:c9:a6:e3:bc:83:f7:ac:
                    38:92:7f:4a:38:c9:16:90:06:5e:04:1f:8d:32:53:
                    7a:12:38:c5:a8:ba:8e:64:88:17:5c:d8:33:9e:4a:
                    f0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:4C:76:8E:6A:D1:21:36:BF:A4:76:E2:A6:A8:7F:99:54:6E:80:E3
            X509v3 Authority Key Identifier:
                keyid:28:CD:09:E6:50:C2:69:EC:7D:2B:C9:FE:F7:D5:66:C1:01:2D:20:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916AC73/77512DC2251711F0B07F861DC4F9AE02/KM0J5lDCaex9K8n-99VmwQEtIEw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KM0J5lDCaex9K8n-99VmwQEtIEw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AC73/77512DC2251711F0B07F861DC4F9AE02/KM0J5lDCaex9K8n-99VmwQEtIEw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:ea:62:e7:b5:d5:12:77:4d:9b:aa:c2:ff:a3:9b:b2:44:cc:
         e3:b5:4c:0b:63:7e:2b:12:24:f8:57:cf:00:df:a7:a8:c0:63:
         61:d6:34:cd:1d:9b:a2:1d:67:c6:02:f0:f9:6e:9a:67:12:3d:
         0a:47:e5:a4:cf:f6:59:ae:d5:7b:24:53:91:d8:9e:90:16:34:
         82:6a:44:59:23:61:3a:e2:7b:74:e3:24:1d:c4:6c:b0:06:1b:
         4d:7a:5c:2f:71:f7:78:8d:b5:21:62:33:65:75:17:bf:2a:cf:
         58:ee:df:32:0a:b0:72:d4:64:60:8b:73:9d:79:f3:f4:d1:84:
         f5:f5:69:a6:ac:06:b3:a7:a0:d1:99:c4:5c:2d:18:b1:f8:50:
         b1:0f:21:fe:a9:97:f8:52:76:12:56:b5:5c:b1:8a:5d:eb:b1:
         15:db:28:80:3e:02:2a:fc:df:7e:ba:d6:1e:40:e9:d8:fe:03:
         aa:b8:51:96:1c:35:1e:42:57:89:31:b6:ec:3b:17:6a:2a:a1:
         25:fb:47:4f:3a:f6:a1:2c:96:a1:c8:33:7f:0d:fb:7d:78:2e:
         97:31:ec:99:c2:5f:4a:61:07:54:eb:87:ed:13:63:16:4b:0e:
         07:76:c5:7a:3e:38:cc:f8:b3:46:1e:1c:47:33:a4:6f:85:e1:
         cb:77:95:7b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkFDNzMxMTAvBgNVBAUTKDI4Q0QwOUU2NTBDMjY5RUM3RDJCQzlGRUY3RDU2NkMx
MDEyRDIwNEMwHhcNMjYwNDA1MDYzMDQwWhcNMjYwNDEyMDYzMDQwWjAYMRYwFAYD
VQQDEw02OWQyMDE5MC0zZjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr6vaDPqSaY//Tl9xOPP/ADW7oXiFhnFLwBwXiK5Ts3NinVrgi0LHQveQH8sF
RUUK3fJlysf6X15MwdjT69HlRCPdcPw87NgP1ANicLf32J9M2gXHBv9/4M3JqPWA
UCwiarLo9GNmTWWFYiJxF+w056lObrr7Hgq2w4B0kmXzrW3cN3tEH/HjkMiwCVxb
5nEzTHZLzdLy9hvOCo+9sn6N1BuLvfP2sWjKMftnLNxvm65+YDePw0Sn29hC1p+V
iCJjpMcBQyj4bdQSl4kq9kDT8mxEDp4XX9lBLsmm47yD96w4kn9KOMkWkAZeBB+N
MlN6EjjFqLqOZIgXXNgznkrwQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO5Mdo5q
0SE2v6R24qaof5lUboDjMB8GA1UdIwQYMBaAFCjNCeZQwmnsfSvJ/vfVZsEBLSBM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QUM3My83NzUxMkRDMjI1
MTcxMUYwQjA3Rjg2MURDNEY5QUUwMi9LTTBKNWxEQ2FleDlLOG4tOTlWbXdRRXRJ
RXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tNMEo1bERDYWV4OUs4bi05OVZtd1FFdElFdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QUM3My83NzUxMkRDMjI1MTcxMUYwQjA3Rjg2MURDNEY5QUUwMi9LTTBKNWxEQ2Fl
eDlLOG4tOTlWbXdRRXRJRXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAU+pi57XVEndNm6rC/6ObskTM47VMC2N+KxIk+FfPAN+nqMBjYdY0zR2boh1n
xgLw+W6aZxI9CkflpM/2Wa7VeyRTkdiekBY0gmpEWSNhOuJ7dOMkHcRssAYbTXpc
L3H3eI21IWIzZXUXvyrPWO7fMgqwctRkYItznXnz9NGE9fVppqwGs6eg0ZnEXC0Y
sfhQsQ8h/qmX+FJ2Ela1XLGKXeuxFdsogD4CKvzffrrWHkDp2P4DqrhRlhw1HkJX
iTG27DsXaiqhJftHTzr2oSyWocgzfw37fXgulzHsmcJfSmEHVOuH7RNjFksOB3bF
ej44zPizRh4cRzOkb4Xhy3eVew==
-----END CERTIFICATE-----
Generated at Mon Apr 6 09:03:07 2026 by rpki-client