Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft
File:                     1mk-41xy689CY8aYRW2C9o5xT1w.mft (raw, json)
Hash identifier:          vDqzgJsS77jBK51lLVpVyfjtnwosZiRwywhcLCE70gA=
Subject key identifier:   F2:DD:07:24:BC:27:4E:62:C8:33:84:47:70:90:CB:81:C8:DD:17:9A
Authority key identifier: D6:69:3E:E3:5C:72:EB:CF:42:63:C6:98:45:6D:82:F6:8E:71:4F:5C
Certificate issuer:       /CN=A916EF5E/serialNumber=D6693EE35C72EBCF4263C698456D82F68E714F5C
Certificate serial:       0A28
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1mk-41xy689CY8aYRW2C9o5xT1w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft
Manifest number:          0A28
Signing time:             Sat 18 Apr 2026 16:33:58 +0000
Manifest this update:     Sat 18 Apr 2026 16:33:57 +0000
Manifest next update:     Sat 25 Apr 2026 16:33:57 +0000
Files and hashes:         1: 1mk-41xy689CY8aYRW2C9o5xT1w.crl (hash: SY4hOFPMu92l5oIge9eBhC2LF6N9z6GeIVV6h7TIAUI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.crl
                          rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1mk-41xy689CY8aYRW2C9o5xT1w.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2600 (0xa28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916EF5E, serialNumber=D6693EE35C72EBCF4263C698456D82F68E714F5C
        Validity
            Not Before: Apr 18 16:33:57 2026 GMT
            Not After : Apr 25 16:33:57 2026 GMT
        Subject: CN=69e3b276-7d9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:98:fc:c5:76:db:37:90:2f:0f:5e:31:04:29:
                    6a:f2:23:9a:90:37:15:17:2f:b1:ba:e7:9d:bc:6d:
                    de:73:a8:d0:26:9d:3a:63:87:07:73:94:ab:be:98:
                    13:4f:53:6a:5a:c2:9a:1f:0f:10:d3:88:70:b7:a3:
                    56:7d:32:cb:03:f5:1a:8d:94:00:7a:59:27:8a:e1:
                    0e:12:7a:51:8e:71:62:23:7f:1d:1d:dc:68:1a:a3:
                    78:70:b8:51:71:d3:3c:22:d6:f9:28:31:5f:1e:57:
                    ed:51:88:65:a9:b2:ff:e1:11:7f:d3:56:df:bb:ce:
                    71:5f:b2:6e:b8:8a:43:b8:27:ed:48:dd:6e:f6:f5:
                    e3:23:46:cb:0d:33:c7:47:5d:a5:88:8c:b9:f9:d2:
                    c8:44:a8:84:cd:68:be:3d:65:81:cc:c8:9e:c8:e7:
                    2c:2e:3a:a4:b0:3f:c4:f1:85:20:ce:87:1d:5b:a6:
                    37:58:42:f7:03:10:f0:71:bc:77:f5:7e:9b:53:67:
                    89:94:ed:82:ba:11:7d:99:42:21:8e:30:d8:a7:11:
                    8c:89:6b:c0:6c:07:2b:a1:91:d6:e6:eb:e9:8c:14:
                    96:89:9a:8b:42:c9:4f:47:fd:a4:78:8e:1a:a7:e2:
                    c8:d1:5d:eb:66:1c:45:ba:44:33:ae:23:83:13:6f:
                    31:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:DD:07:24:BC:27:4E:62:C8:33:84:47:70:90:CB:81:C8:DD:17:9A
            X509v3 Authority Key Identifier:
                keyid:D6:69:3E:E3:5C:72:EB:CF:42:63:C6:98:45:6D:82:F6:8E:71:4F:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1mk-41xy689CY8aYRW2C9o5xT1w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:9c:2a:29:a0:b9:a6:d4:24:37:66:8c:9e:2f:16:8f:79:52:
         12:7d:d9:e9:a4:e2:6f:34:19:fe:e2:db:2c:34:de:59:8a:97:
         70:4f:35:ec:1c:aa:74:4c:36:5d:d4:5b:a7:0d:01:4c:d1:4e:
         9a:50:67:57:7d:d6:29:b2:d3:22:7a:4a:f7:5a:12:98:e9:1e:
         64:93:22:c7:26:f1:54:fc:e2:6e:fb:5e:7b:30:e7:dc:a5:be:
         fd:2f:9c:66:f0:9b:4f:f8:d6:85:64:0d:67:bc:27:cf:dc:8a:
         90:30:0d:e4:9d:3a:d8:28:14:ee:39:cf:51:37:f2:b2:70:14:
         c0:ae:b7:36:13:9d:70:cc:15:cf:10:d4:a3:f6:87:cb:f7:07:
         29:e9:74:a9:ba:b8:b6:5a:14:4b:7d:68:8f:20:b2:45:75:3f:
         e4:47:3f:39:2b:67:d3:fc:ec:91:81:76:c2:54:bd:8f:1f:ed:
         07:63:45:76:e1:a3:0a:aa:38:29:44:df:61:5d:df:50:18:09:
         1a:a8:ff:3a:16:95:49:93:bf:9b:4e:57:8a:15:f2:76:5c:c0:
         54:eb:ed:d0:67:1a:32:c7:01:18:4d:1f:45:44:56:6d:51:fa:
         2d:d4:e6:39:4b:c8:83:c0:08:07:0a:f5:59:5e:b7:39:7e:49:
         96:04:c0:2d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkVGNUUxMTAvBgNVBAUTKEQ2NjkzRUUzNUM3MkVCQ0Y0MjYzQzY5ODQ1NkQ4MkY2
OEU3MTRGNUMwHhcNMjYwNDE4MTYzMzU3WhcNMjYwNDI1MTYzMzU3WjAYMRYwFAYD
VQQDEw02OWUzYjI3Ni03ZDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA35j8xXbbN5AvD14xBClq8iOakDcVFy+xuuedvG3ec6jQJp06Y4cHc5SrvpgT
T1NqWsKaHw8Q04hwt6NWfTLLA/UajZQAelkniuEOEnpRjnFiI38dHdxoGqN4cLhR
cdM8Itb5KDFfHlftUYhlqbL/4RF/01bfu85xX7JuuIpDuCftSN1u9vXjI0bLDTPH
R12liIy5+dLIRKiEzWi+PWWBzMieyOcsLjqksD/E8YUgzocdW6Y3WEL3AxDwcbx3
9X6bU2eJlO2CuhF9mUIhjjDYpxGMiWvAbAcroZHW5uvpjBSWiZqLQslPR/2keI4a
p+LI0V3rZhxFukQzriODE28xFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPLdByS8
J05iyDOER3CQy4HI3ReaMB8GA1UdIwQYMBaAFNZpPuNccuvPQmPGmEVtgvaOcU9c
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUY1RS8yQ0U0OTRDMDhG
OTYxMUVBOUFDQjdFN0ZDNEY5QUUwMi8xbWstNDF4eTY4OUNZOGFZUlcyQzlvNXhU
MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzFtay00MXh5Njg5Q1k4YVlSVzJDOW81eFQxdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RUY1RS8yQ0U0OTRDMDhGOTYxMUVBOUFDQjdFN0ZDNEY5QUUwMi8xbWstNDF4eTY4
OUNZOGFZUlcyQzlvNXhUMXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqpwqKaC5ptQkN2aMni8Wj3lSEn3Z6aTibzQZ/uLbLDTeWYqXcE817ByqdEw2
XdRbpw0BTNFOmlBnV33WKbLTInpK91oSmOkeZJMixybxVPzibvteezDn3KW+/S+c
ZvCbT/jWhWQNZ7wnz9yKkDAN5J062CgU7jnPUTfysnAUwK63NhOdcMwVzxDUo/aH
y/cHKel0qbq4tloUS31ojyCyRXU/5Ec/OStn0/zskYF2wlS9jx/tB2NFduGjCqo4
KUTfYV3fUBgJGqj/OhaVSZO/m05XihXydlzAVOvt0GcaMscBGE0fRURWbVH6LdTm
OUvIg8AIBwr1WV63OX5JlgTALQ==
-----END CERTIFICATE-----
Generated at Sat Apr 18 21:06:09 2026 by rpki-client