Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft
File:                     lRKEJmSsUb9nhVvG5PRr41UaTaM.mft (raw, json)
Hash identifier:          xd8nTfuRyOwUMcZkytqdiGrz4KL9fCfScYtjGoUOjLI=
Subject key identifier:   DF:4D:0D:1F:C1:84:A7:FC:6B:58:03:28:75:B2:69:26:1C:D2:59:AA
Authority key identifier: 95:12:84:26:64:AC:51:BF:67:85:5B:C6:E4:F4:6B:E3:55:1A:4D:A3
Certificate issuer:       /CN=A916B7B2/serialNumber=9512842664AC51BF67855BC6E4F46BE3551A4DA3
Certificate serial:       0365
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKEJmSsUb9nhVvG5PRr41UaTaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft
Manifest number:          035A
Signing time:             Sun 19 Apr 2026 00:51:24 +0000
Manifest this update:     Sun 19 Apr 2026 00:51:24 +0000
Manifest next update:     Sun 26 Apr 2026 00:51:24 +0000
Files and hashes:         1: lRKEJmSsUb9nhVvG5PRr41UaTaM.crl (hash: qKlXFL7xqn9OBzfKWqjMdofghfeFLY9kSmtAJTu5Ppk=)
                          2: 2A4EA10EFB7F11EC8FB58E4AC4F9AE02.roa (hash: AJG9VwcXmykzSVjo120jxYPET3IdPC1gKF7m4iLbpbQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.crl
                          rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKEJmSsUb9nhVvG5PRr41UaTaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 23:52:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 869 (0x365)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B7B2, serialNumber=9512842664AC51BF67855BC6E4F46BE3551A4DA3
        Validity
            Not Before: Apr 19 00:51:24 2026 GMT
            Not After : Apr 26 00:51:24 2026 GMT
        Subject: CN=69e4270c-20a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:15:1d:a3:30:3b:76:0f:a0:cd:75:38:3d:5e:
                    d9:57:c8:d2:5b:a2:ac:53:78:a6:db:be:a9:1a:73:
                    e1:c0:f0:66:0b:64:08:5a:cc:0d:59:48:1a:d0:bb:
                    e3:cc:45:26:7f:bd:04:2f:80:c8:1f:28:e8:a7:df:
                    06:1b:e2:eb:31:33:de:7c:e4:e1:51:cd:45:1d:d3:
                    d7:40:b6:86:f6:69:13:1a:cc:c4:1b:06:62:4f:72:
                    24:bd:bf:d9:68:dc:f8:40:11:59:a5:8b:c1:7f:5d:
                    98:14:fa:46:df:43:5f:07:cc:75:66:1e:c7:40:01:
                    54:1d:04:7b:1e:0a:02:31:b9:e7:48:20:e0:79:7c:
                    2a:6d:a4:38:e8:f1:a1:18:dc:eb:79:07:d7:29:c9:
                    b0:64:e6:82:e5:df:a9:75:c0:03:9d:39:73:f4:66:
                    be:0b:70:b8:0c:f9:d7:6d:e5:50:35:c0:2f:ae:a6:
                    3d:45:0a:70:89:4c:fb:9b:18:0a:d8:73:42:6f:7e:
                    00:ae:da:a4:3b:00:57:eb:ca:56:49:e3:98:3b:27:
                    3a:12:c7:a8:36:62:c0:69:b9:1f:75:22:6e:10:8a:
                    f1:61:b0:49:b8:f4:95:7f:bf:f6:af:f9:ed:36:27:
                    0a:e4:2b:1c:e0:fc:b7:9e:bf:3c:4b:ce:c6:9b:b3:
                    92:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:4D:0D:1F:C1:84:A7:FC:6B:58:03:28:75:B2:69:26:1C:D2:59:AA
            X509v3 Authority Key Identifier:
                keyid:95:12:84:26:64:AC:51:BF:67:85:5B:C6:E4:F4:6B:E3:55:1A:4D:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKEJmSsUb9nhVvG5PRr41UaTaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:14:cd:fd:69:76:2a:14:9b:c2:9e:7e:8e:1d:56:fb:8f:86:
         8a:45:ce:77:aa:bf:a7:54:7b:10:33:f3:90:72:92:fa:ed:15:
         5b:b4:7a:5a:d0:db:35:dd:7c:6f:3e:bf:49:f7:9c:62:4e:92:
         ed:7b:1f:ec:39:c7:c2:e1:46:30:12:4d:65:05:21:ff:97:e6:
         52:39:cf:d5:fa:f3:19:7d:2a:e7:4b:da:f9:4e:4f:d0:7c:12:
         0d:4e:18:57:3c:75:b4:1a:bf:86:d8:51:06:a9:b0:48:57:24:
         5d:5d:c6:76:a9:9e:9f:36:93:a6:63:e3:68:97:d6:49:4a:8e:
         48:92:b2:56:00:47:2f:5d:d9:87:b4:b6:61:98:31:bf:2d:55:
         fe:29:71:56:40:e5:48:00:58:b0:0c:f4:30:9c:78:e3:8d:41:
         40:1c:5a:88:03:49:ff:a0:a9:9d:70:f2:a0:7b:91:72:60:64:
         b6:05:e7:95:ae:b8:32:e6:2a:f0:67:8f:28:a2:0a:6a:86:8b:
         c0:00:3f:32:ea:db:d8:e9:cf:3f:39:a5:51:3e:73:6c:02:3e:
         eb:ad:4d:09:bb:63:9b:38:bf:a8:7e:56:f4:7a:cd:b8:af:a6:
         0a:5a:c4:e2:b1:76:fe:9c:7a:95:8e:04:07:75:41:e2:65:af:
         98:ea:f3:01
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA2UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkI3QjIxMTAvBgNVBAUTKDk1MTI4NDI2NjRBQzUxQkY2Nzg1NUJDNkU0RjQ2QkUz
NTUxQTREQTMwHhcNMjYwNDE5MDA1MTI0WhcNMjYwNDI2MDA1MTI0WjAYMRYwFAYD
VQQDEw02OWU0MjcwYy0yMGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuxUdozA7dg+gzXU4PV7ZV8jSW6KsU3im276pGnPhwPBmC2QIWswNWUga0Lvj
zEUmf70EL4DIHyjop98GG+LrMTPefOThUc1FHdPXQLaG9mkTGszEGwZiT3Ikvb/Z
aNz4QBFZpYvBf12YFPpG30NfB8x1Zh7HQAFUHQR7HgoCMbnnSCDgeXwqbaQ46PGh
GNzreQfXKcmwZOaC5d+pdcADnTlz9Ga+C3C4DPnXbeVQNcAvrqY9RQpwiUz7mxgK
2HNCb34ArtqkOwBX68pWSeOYOyc6EseoNmLAabkfdSJuEIrxYbBJuPSVf7/2r/nt
NicK5Csc4Py3nr88S87Gm7OSMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN9NDR/B
hKf8a1gDKHWyaSYc0lmqMB8GA1UdIwQYMBaAFJUShCZkrFG/Z4VbxuT0a+NVGk2j
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjdCMi8wRTYzMjE5NEZC
N0IxMUVDQTg3QTg3MkVDNEY5QUUwMi9sUktFSm1Tc1ViOW5oVnZHNVBScjQxVWFU
YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xSS0VKbVNzVWI5bmhWdkc1UFJyNDFVYVRhTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QjdCMi8wRTYzMjE5NEZCN0IxMUVDQTg3QTg3MkVDNEY5QUUwMi9sUktFSm1Tc1Vi
OW5oVnZHNVBScjQxVWFUYU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqxTN/Wl2KhSbwp5+jh1W+4+GikXOd6q/p1R7EDPzkHKS+u0VW7R6WtDbNd18
bz6/SfecYk6S7Xsf7DnHwuFGMBJNZQUh/5fmUjnP1frzGX0q50va+U5P0HwSDU4Y
Vzx1tBq/hthRBqmwSFckXV3GdqmenzaTpmPjaJfWSUqOSJKyVgBHL13Zh7S2YZgx
vy1V/ilxVkDlSABYsAz0MJx4441BQBxaiANJ/6CpnXDyoHuRcmBktgXnla64MuYq
8GePKKIKaoaLwAA/Murb2OnPPzmlUT5zbAI+661NCbtjmzi/qH5W9HrNuK+mClrE
4rF2/px6lY4EB3VB4mWvmOrzAQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 03:46:05 2026 by rpki-client