Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176E5A/8037983882FD11F0AE0F876AC4F9AE02/sVJPvkZf5PuZ_mEd_AQPUQwRaP4.mft
File:                     sVJPvkZf5PuZ_mEd_AQPUQwRaP4.mft (raw, json)
Hash identifier:          +SZgXjZWQFStk3LKSOrlDVN3NiIytpkliMEwthmhAuE=
Subject key identifier:   00:D8:1E:9C:2E:CB:17:A2:E3:B1:18:26:D4:11:BF:8E:6C:FA:61:56
Authority key identifier: B1:52:4F:BE:46:5F:E4:FB:99:FE:61:1D:FC:04:0F:51:0C:11:68:FE
Certificate issuer:       /CN=A9176E5A/serialNumber=B1524FBE465FE4FB99FE611DFC040F510C1168FE
Certificate serial:       78
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sVJPvkZf5PuZ_mEd_AQPUQwRaP4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176E5A/8037983882FD11F0AE0F876AC4F9AE02/sVJPvkZf5PuZ_mEd_AQPUQwRaP4.mft
Manifest number:          74
Signing time:             Sun 05 Apr 2026 07:09:57 +0000
Manifest this update:     Sun 05 Apr 2026 07:09:57 +0000
Manifest next update:     Sun 12 Apr 2026 07:09:57 +0000
Files and hashes:         1: sVJPvkZf5PuZ_mEd_AQPUQwRaP4.crl (hash: 4D1zcitn366+ECH5t+eBCpPQZVzuxNgafs9Q0fDmRmE=)
                          2: D9624ED082FD11F088ACD36DC4F9AE02.roa (hash: x04ROYFrMT9oBHbHLSP4ELtb1xdWEg+KH0XVVfaWkMo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176E5A/8037983882FD11F0AE0F876AC4F9AE02/sVJPvkZf5PuZ_mEd_AQPUQwRaP4.crl
                          rsync://rpki.apnic.net/member_repository/A9176E5A/8037983882FD11F0AE0F876AC4F9AE02/sVJPvkZf5PuZ_mEd_AQPUQwRaP4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sVJPvkZf5PuZ_mEd_AQPUQwRaP4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 07:09:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120 (0x78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176E5A, serialNumber=B1524FBE465FE4FB99FE611DFC040F510C1168FE
        Validity
            Not Before: Apr  5 07:09:57 2026 GMT
            Not After : Apr 12 07:09:57 2026 GMT
        Subject: CN=69d20ac5-03b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:84:99:3d:ec:85:15:f6:82:4a:18:f8:92:fe:
                    77:53:6e:59:1e:2e:54:c5:ba:18:15:46:0a:83:44:
                    fb:b5:ec:c6:87:34:17:44:91:3a:ae:03:0f:83:39:
                    17:80:94:ed:87:f1:10:34:c3:c1:0c:45:78:50:ff:
                    7d:06:de:1c:80:e8:33:13:3c:40:97:aa:9a:6c:02:
                    de:8c:3a:33:16:e3:27:59:cf:ef:27:c3:0e:eb:a8:
                    54:ca:e0:c9:d1:86:5a:b9:98:5c:c1:6e:76:d2:ba:
                    4d:3c:21:2f:d7:46:a6:9d:2e:ef:24:48:e7:e1:e9:
                    81:8e:a1:6b:bc:1f:e0:0f:af:0f:a6:99:d2:ff:03:
                    94:f4:a0:cf:6a:be:7e:ef:56:09:91:35:cd:e8:7f:
                    22:15:ac:12:f9:e5:f9:08:c8:f9:62:a3:e6:fd:de:
                    0d:10:25:76:15:3a:27:18:ee:26:f6:77:32:c8:f8:
                    28:74:be:b3:6d:ae:85:e2:d8:34:43:59:76:43:c2:
                    66:88:f8:62:22:a2:fe:7a:dd:54:55:d3:a8:91:2a:
                    7b:89:e0:33:88:f5:d7:e5:21:a9:d6:cb:2f:b8:6a:
                    2c:45:b6:11:2f:88:47:3c:b4:d7:01:13:fe:aa:32:
                    69:25:11:4b:83:da:c7:75:c1:3b:32:74:ef:9d:15:
                    44:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:D8:1E:9C:2E:CB:17:A2:E3:B1:18:26:D4:11:BF:8E:6C:FA:61:56
            X509v3 Authority Key Identifier:
                keyid:B1:52:4F:BE:46:5F:E4:FB:99:FE:61:1D:FC:04:0F:51:0C:11:68:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176E5A/8037983882FD11F0AE0F876AC4F9AE02/sVJPvkZf5PuZ_mEd_AQPUQwRaP4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sVJPvkZf5PuZ_mEd_AQPUQwRaP4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176E5A/8037983882FD11F0AE0F876AC4F9AE02/sVJPvkZf5PuZ_mEd_AQPUQwRaP4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:4e:3d:55:63:87:f7:c3:16:26:0e:6d:8f:85:45:86:7d:c1:
         d4:10:c3:bf:b4:a3:81:26:80:6b:c5:37:37:74:4d:f6:18:b3:
         3f:c5:f3:f9:5e:2f:56:4f:7e:9f:43:a1:5b:2e:72:73:bd:50:
         8d:8f:10:5c:a9:86:ef:d0:92:8d:66:d3:0a:e4:47:f2:fa:6a:
         f0:4f:88:3f:9f:c6:21:7f:4c:f3:b3:02:ed:8c:2f:a1:57:9f:
         20:99:21:f4:0b:6d:97:ad:29:4b:ff:70:a2:f7:29:dd:a4:00:
         1a:a2:e7:86:31:1c:5d:b9:e2:c5:38:e7:4d:ff:20:16:ae:2b:
         f3:8c:ad:60:a3:95:c5:fa:1a:6f:59:5d:33:ab:c9:a6:c4:eb:
         8b:a8:c2:29:80:22:f0:0e:23:da:93:69:43:02:fa:b2:ab:7c:
         ab:ca:cb:01:24:30:8d:3b:62:4a:31:17:73:81:5d:85:ea:77:
         ff:99:29:54:cf:74:c2:e1:90:38:ae:4f:46:50:43:0a:dc:10:
         23:08:dc:ed:8b:84:10:30:0e:3c:62:9d:57:7b:b9:8f:69:6d:
         9f:bc:69:a0:da:9f:f3:9e:a6:49:73:d9:ef:28:72:93:3d:b6:
         e6:a9:81:d9:64:b0:81:ef:2e:2a:02:9e:3c:87:37:53:3f:99:
         05:52:55:71
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
NkU1QTExMC8GA1UEBRMoQjE1MjRGQkU0NjVGRTRGQjk5RkU2MTFERkMwNDBGNTEw
QzExNjhGRTAeFw0yNjA0MDUwNzA5NTdaFw0yNjA0MTIwNzA5NTdaMBgxFjAUBgNV
BAMTDTY5ZDIwYWM1LTAzYjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCUhJk97IUV9oJKGPiS/ndTblkeLlTFuhgVRgqDRPu17MaHNBdEkTquAw+DOReA
lO2H8RA0w8EMRXhQ/30G3hyA6DMTPECXqppsAt6MOjMW4ydZz+8nww7rqFTK4MnR
hlq5mFzBbnbSuk08IS/XRqadLu8kSOfh6YGOoWu8H+APrw+mmdL/A5T0oM9qvn7v
VgmRNc3ofyIVrBL55fkIyPlio+b93g0QJXYVOicY7ib2dzLI+Ch0vrNtroXi2DRD
WXZDwmaI+GIiov563VRV06iRKnuJ4DOI9dflIanWyy+4aixFthEviEc8tNcBE/6q
MmklEUuD2sd1wTsydO+dFUR3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUANgenC7L
F6LjsRgm1BG/jmz6YVYwHwYDVR0jBBgwFoAUsVJPvkZf5PuZ/mEd/AQPUQwRaP4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2RTVBLzgwMzc5ODM4ODJG
RDExRjBBRTBGODc2QUM0RjlBRTAyL3NWSlB2a1pmNVB1Wl9tRWRfQVFQVVF3UmFQ
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvc1ZKUHZrWmY1UHVaX21FZF9BUVBVUXdSYVA0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2
RTVBLzgwMzc5ODM4ODJGRDExRjBBRTBGODc2QUM0RjlBRTAyL3NWSlB2a1pmNVB1
Wl9tRWRfQVFQVVF3UmFQNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAgTj1VY4f3wxYmDm2PhUWGfcHUEMO/tKOBJoBrxTc3dE32GLM/xfP5Xi9WT36f
Q6FbLnJzvVCNjxBcqYbv0JKNZtMK5Efy+mrwT4g/n8Yhf0zzswLtjC+hV58gmSH0
C22XrSlL/3Ci9yndpAAaoueGMRxdueLFOOdN/yAWrivzjK1go5XF+hpvWV0zq8mm
xOuLqMIpgCLwDiPak2lDAvqyq3yryssBJDCNO2JKMRdzgV2F6nf/mSlUz3TC4ZA4
rk9GUEMK3BAjCNzti4QQMA48Yp1Xe7mPaW2fvGmg2p/znqZJc9nvKHKTPbbmqYHZ
ZLCB7y4qAp48hzdTP5kFUlVx
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:29:04 2026 by rpki-client