Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft
File:                     7CxkBsqh85689Fh1MVANVrlTYsA.mft (raw, json)
Hash identifier:          K0nocyYKIsZMUcCix+qD5vXicD6oV5Yd5qT1V8PcUqw=
Subject key identifier:   84:C5:47:CE:E0:60:D9:AB:11:24:CF:11:94:55:7C:BB:67:C9:27:D2
Authority key identifier: EC:2C:64:06:CA:A1:F3:9E:BC:F4:58:75:31:50:0D:56:B9:53:62:C0
Certificate issuer:       /CN=A9174880/serialNumber=EC2C6406CAA1F39EBCF4587531500D56B95362C0
Certificate serial:       3579
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft
Manifest number:          354D
Signing time:             Sat 18 Apr 2026 14:16:48 +0000
Manifest this update:     Sat 18 Apr 2026 14:16:47 +0000
Manifest next update:     Sat 25 Apr 2026 14:16:47 +0000
Files and hashes:         1: 7CxkBsqh85689Fh1MVANVrlTYsA.crl (hash: YSAZyHzXfvI9qrDzR9AXPgvDF/4VzCk+IlBb0uPicRM=)
                          2: 316EEFD4AAE511E68EBE4D52C4F9AE02.roa (hash: cXxlTlh2e8x7rwEZccluqoXbQOcppLc/t/OKxLCL9Es=)
                          3: 3768DFB41C6011EEAF58FB61C4F9AE02.roa (hash: iodpqPzJXCkEMjXNizFOPmkITOS3ty8iD6q0/vbWTBk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.crl
                          rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 14:16:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13689 (0x3579)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174880, serialNumber=EC2C6406CAA1F39EBCF4587531500D56B95362C0
        Validity
            Not Before: Apr 18 14:16:47 2026 GMT
            Not After : Apr 25 14:16:47 2026 GMT
        Subject: CN=69e39250-d5fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:52:6c:c9:c2:4d:b7:33:44:09:65:17:0d:73:
                    8a:51:ac:47:c2:42:bb:4d:1e:cb:d5:b0:70:90:ae:
                    45:9b:70:64:25:0f:01:50:59:91:ce:37:1e:6f:1c:
                    62:7e:35:cc:bb:da:04:40:72:a8:a4:a4:c5:99:31:
                    7f:7d:6b:58:5b:44:be:eb:04:58:b6:54:b1:8a:5f:
                    15:3f:ec:19:58:e4:c1:e9:df:30:fc:76:fa:49:4a:
                    d3:a5:89:9f:92:78:21:be:ff:42:35:3a:88:15:87:
                    63:4a:1a:53:20:61:9e:77:8d:c0:4d:f0:6a:ea:fb:
                    26:b4:6e:5a:23:c8:ac:f7:5b:a5:51:90:94:84:df:
                    e0:78:5c:4a:dd:22:99:88:73:9d:c3:43:8e:5e:73:
                    1e:df:05:b5:d6:94:e6:cd:fe:e8:3a:2a:6e:89:be:
                    c2:12:48:6c:62:71:50:ae:17:15:74:69:e5:f9:26:
                    0d:34:6e:a7:eb:5f:df:c1:e2:18:a7:9f:15:6a:42:
                    a2:df:b1:dc:53:27:96:04:4f:94:c9:59:cb:c4:2a:
                    32:1b:3f:75:9e:ad:79:51:71:68:24:be:3f:ed:9a:
                    91:fb:96:bd:8e:b1:8a:a5:bb:fb:43:94:7c:6b:7d:
                    36:c1:c3:bb:9c:22:9f:45:f0:9a:c6:e2:81:13:e8:
                    63:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:C5:47:CE:E0:60:D9:AB:11:24:CF:11:94:55:7C:BB:67:C9:27:D2
            X509v3 Authority Key Identifier:
                keyid:EC:2C:64:06:CA:A1:F3:9E:BC:F4:58:75:31:50:0D:56:B9:53:62:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:59:eb:59:e6:94:20:bd:5f:6a:c8:38:03:d1:7d:2b:08:0f:
         23:85:75:98:71:e7:84:19:a8:95:7d:5c:12:59:86:2c:69:24:
         b5:61:61:7c:d6:d8:04:da:dd:21:4d:ca:80:b8:7a:f7:9b:36:
         85:ff:c9:b6:f4:7b:8a:ca:d7:2b:6a:09:52:69:2b:d2:f7:1a:
         8f:4d:ff:eb:6b:50:58:5f:5e:4a:3e:cd:2e:c7:3a:05:3d:1e:
         4f:f2:3e:22:0a:ae:f7:75:2d:8b:c2:d1:83:18:21:9f:06:46:
         4e:ca:ec:57:c8:15:5c:72:36:f2:3b:da:34:27:88:f2:7f:b8:
         09:ef:d0:e2:c9:44:64:c1:79:23:aa:aa:8b:25:48:73:32:1e:
         39:73:a9:cd:a5:cb:c6:90:d0:7b:4f:5b:bb:43:b5:dc:41:1f:
         fb:1e:74:b0:fe:78:c2:51:4e:75:94:6e:ba:6d:d4:02:82:93:
         6f:32:65:3f:b4:2f:13:13:fe:82:a4:ea:3c:57:24:5c:13:d8:
         15:d2:53:24:3b:5a:65:79:e7:45:c0:2f:1a:44:dc:7c:8e:d0:
         b6:31:ca:fa:e0:d6:67:54:39:09:3c:08:ad:d4:4e:68:89:84:
         cd:99:7d:6f:95:c7:2b:3a:ba:e3:3d:7e:a9:11:db:62:af:09:
         56:4a:3c:e8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzQ4ODAxMTAvBgNVBAUTKEVDMkM2NDA2Q0FBMUYzOUVCQ0Y0NTg3NTMxNTAwRDU2
Qjk1MzYyQzAwHhcNMjYwNDE4MTQxNjQ3WhcNMjYwNDI1MTQxNjQ3WjAYMRYwFAYD
VQQDEw02OWUzOTI1MC1kNWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAiVJsycJNtzNECWUXDXOKUaxHwkK7TR7L1bBwkK5Fm3BkJQ8BUFmRzjcebxxi
fjXMu9oEQHKopKTFmTF/fWtYW0S+6wRYtlSxil8VP+wZWOTB6d8w/Hb6SUrTpYmf
knghvv9CNTqIFYdjShpTIGGed43ATfBq6vsmtG5aI8is91ulUZCUhN/geFxK3SKZ
iHOdw0OOXnMe3wW11pTmzf7oOipuib7CEkhsYnFQrhcVdGnl+SYNNG6n61/fweIY
p58VakKi37HcUyeWBE+UyVnLxCoyGz91nq15UXFoJL4/7ZqR+5a9jrGKpbv7Q5R8
a302wcO7nCKfRfCaxuKBE+hjLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFITFR87g
YNmrESTPEZRVfLtnySfSMB8GA1UdIwQYMBaAFOwsZAbKofOevPRYdTFQDVa5U2LA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDg4MC80RTg2NDUwQzFE
NkExMUUyQkI3MDE0QTgwOEIwMkNEMi83Q3hrQnNxaDg1Njg5RmgxTVZBTlZybFRZ
c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzdDeGtCc3FoODU2ODlGaDFNVkFOVnJsVFlzQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NDg4MC80RTg2NDUwQzFENkExMUUyQkI3MDE0QTgwOEIwMkNEMi83Q3hrQnNxaDg1
Njg5RmgxTVZBTlZybFRZc0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANFnrWeaUIL1fasg4A9F9KwgPI4V1mHHnhBmolX1cElmGLGkktWFhfNbYBNrd
IU3KgLh695s2hf/JtvR7isrXK2oJUmkr0vcaj03/62tQWF9eSj7NLsc6BT0eT/I+
Igqu93Uti8LRgxghnwZGTsrsV8gVXHI28jvaNCeI8n+4Ce/Q4slEZMF5I6qqiyVI
czIeOXOpzaXLxpDQe09bu0O13EEf+x50sP54wlFOdZRuum3UAoKTbzJlP7QvExP+
gqTqPFckXBPYFdJTJDtaZXnnRcAvGkTcfI7QtjHK+uDWZ1Q5CTwIrdROaImEzZl9
b5XHKzq64z1+qRHbYq8JVko86A==
-----END CERTIFICATE-----
Generated at Sat Apr 18 21:07:42 2026 by rpki-client