Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
File:                     YBi5hcOZywcxwWNM_ktHkS8q9dE.mft (raw, json)
Hash identifier:          15hXDABBxE2CSP+iQlMRNQQMiJVoMScHNI8P3/I7beo=
Subject key identifier:   A0:B1:9E:6D:C1:5A:36:57:FE:7A:98:63:51:E9:4C:D5:05:6B:6A:18
Authority key identifier: 60:18:B9:85:C3:99:CB:07:31:C1:63:4C:FE:4B:47:91:2F:2A:F5:D1
Certificate issuer:       /CN=A9183BA5/serialNumber=6018B985C399CB0731C1634CFE4B47912F2AF5D1
Certificate serial:       027C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
Manifest number:          0275
Signing time:             Sun 05 Apr 2026 01:32:33 +0000
Manifest this update:     Sun 05 Apr 2026 01:32:33 +0000
Manifest next update:     Sun 12 Apr 2026 01:32:33 +0000
Files and hashes:         1: YBi5hcOZywcxwWNM_ktHkS8q9dE.crl (hash: i+NdOmWmcKOcj/KNFMk2Y695jQfe0dJ59ur1kw80Dz8=)
                          2: C386C06A706211EDA9CCDB76C4F9AE02.roa (hash: /uGLQIrlBTxMwkdtG3jyxMXG6mL7PGCkVKPH/j33iG8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.crl
                          rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 01:32:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 636 (0x27c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183BA5, serialNumber=6018B985C399CB0731C1634CFE4B47912F2AF5D1
        Validity
            Not Before: Apr  5 01:32:33 2026 GMT
            Not After : Apr 12 01:32:33 2026 GMT
        Subject: CN=69d1bbb1-90df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9f:7f:c1:c3:f1:6b:90:fe:0c:fc:6c:14:87:
                    cc:30:b1:d5:d7:41:25:24:ed:1d:de:f8:f0:81:5d:
                    12:67:42:f5:11:97:2b:8d:cb:83:8e:3a:59:c1:1e:
                    57:3f:a6:16:7b:94:e4:ca:96:a1:6d:46:c5:25:3d:
                    a5:79:38:12:88:f6:cc:52:b6:d2:5b:59:f6:f0:6c:
                    24:64:65:a5:26:52:70:04:8a:58:54:e8:d1:9a:69:
                    01:fc:65:75:04:9e:bb:8e:41:6d:70:2e:7e:f0:98:
                    6f:63:d0:95:c2:44:6f:61:f8:d5:64:da:e2:16:a8:
                    55:dc:6b:36:d0:75:ed:d1:0d:56:e1:e9:cf:10:52:
                    85:bb:9c:d7:06:b9:0a:64:2a:d3:cb:31:cb:23:ec:
                    56:f6:5e:e8:dc:f8:12:a0:b6:e4:c1:40:77:63:d7:
                    36:de:5c:a3:93:bb:85:ae:19:dd:f2:0f:1e:f0:9a:
                    cb:f9:0e:66:43:da:9b:2e:26:58:82:30:ac:61:8d:
                    bd:c7:c7:96:4b:fa:3c:10:fc:fb:29:0d:67:3e:70:
                    ac:5b:d3:fd:f3:39:24:aa:7e:de:52:87:4b:a1:69:
                    bc:92:0c:af:08:95:26:00:97:2f:db:19:4c:f0:f3:
                    ce:7b:b6:e3:22:19:c6:45:a4:a4:86:35:f0:16:9c:
                    3d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:B1:9E:6D:C1:5A:36:57:FE:7A:98:63:51:E9:4C:D5:05:6B:6A:18
            X509v3 Authority Key Identifier:
                keyid:60:18:B9:85:C3:99:CB:07:31:C1:63:4C:FE:4B:47:91:2F:2A:F5:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:68:9d:7f:17:d3:cb:9b:5c:18:f9:38:3a:cb:6b:f5:84:94:
         4c:2c:32:72:4a:3a:8d:be:bc:f5:f8:66:26:81:5e:cf:4f:0a:
         09:bd:e6:00:d4:cb:ce:8e:21:85:30:8e:4a:3d:11:e7:7d:d1:
         9b:f0:4c:2d:3e:13:40:3b:e7:75:5c:0d:04:7c:eb:70:44:bd:
         77:87:8a:2f:4c:a8:87:0a:e4:75:4e:3f:2e:87:e0:dd:73:c2:
         ad:b3:ce:53:38:34:cd:cd:5b:b6:c8:0d:6e:44:7b:fe:f5:a4:
         79:34:9c:82:2b:02:05:88:72:32:65:d9:5c:ef:95:e8:4d:f1:
         3a:01:a7:3d:26:d5:e9:fd:5d:c5:a6:ed:9d:78:2b:10:a9:93:
         8d:4e:18:5b:41:c0:0f:6f:e4:ca:16:a8:15:e3:1d:1d:b6:b7:
         e1:4f:10:28:70:70:17:d7:d8:ff:51:93:42:01:9d:3a:3f:63:
         6d:98:64:3b:72:cf:ee:0e:35:1a:52:0a:1e:b7:0c:2c:93:fd:
         0e:37:a7:10:ed:e8:45:03:7a:08:7d:02:56:bf:b9:e5:06:52:
         4a:7c:7f:42:b4:78:cf:90:a4:43:74:75:64:24:40:29:d3:3f:
         49:fd:f0:84:38:ab:d0:52:d3:21:e0:1d:44:8f:f4:0d:a7:d4:
         59:42:db:24
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODNCQTUxMTAvBgNVBAUTKDYwMThCOTg1QzM5OUNCMDczMUMxNjM0Q0ZFNEI0Nzkx
MkYyQUY1RDEwHhcNMjYwNDA1MDEzMjMzWhcNMjYwNDEyMDEzMjMzWjAYMRYwFAYD
VQQDEw02OWQxYmJiMS05MGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlp9/wcPxa5D+DPxsFIfMMLHV10ElJO0d3vjwgV0SZ0L1EZcrjcuDjjpZwR5X
P6YWe5TkypahbUbFJT2leTgSiPbMUrbSW1n28GwkZGWlJlJwBIpYVOjRmmkB/GV1
BJ67jkFtcC5+8JhvY9CVwkRvYfjVZNriFqhV3Gs20HXt0Q1W4enPEFKFu5zXBrkK
ZCrTyzHLI+xW9l7o3PgSoLbkwUB3Y9c23lyjk7uFrhnd8g8e8JrL+Q5mQ9qbLiZY
gjCsYY29x8eWS/o8EPz7KQ1nPnCsW9P98zkkqn7eUodLoWm8kgyvCJUmAJcv2xlM
8PPOe7bjIhnGRaSkhjXwFpw9+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKCxnm3B
WjZX/nqYY1HpTNUFa2oYMB8GA1UdIwQYMBaAFGAYuYXDmcsHMcFjTP5LR5EvKvXR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0JBNS8yODYyMENDNDcw
NUUxMUVEQkMwN0YxNThDNEY5QUUwMi9ZQmk1aGNPWnl3Y3h3V05NX2t0SGtTOHE5
ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lCaTVoY09aeXdjeHdXTk1fa3RIa1M4cTlkRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
M0JBNS8yODYyMENDNDcwNUUxMUVEQkMwN0YxNThDNEY5QUUwMi9ZQmk1aGNPWnl3
Y3h3V05NX2t0SGtTOHE5ZEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHGidfxfTy5tcGPk4Ostr9YSUTCwycko6jb689fhmJoFez08KCb3mANTLzo4h
hTCOSj0R533Rm/BMLT4TQDvndVwNBHzrcES9d4eKL0yohwrkdU4/Lofg3XPCrbPO
Uzg0zc1btsgNbkR7/vWkeTScgisCBYhyMmXZXO+V6E3xOgGnPSbV6f1dxabtnXgr
EKmTjU4YW0HAD2/kyhaoFeMdHba34U8QKHBwF9fY/1GTQgGdOj9jbZhkO3LP7g41
GlIKHrcMLJP9DjenEO3oRQN6CH0CVr+55QZSSnx/QrR4z5CkQ3R1ZCRAKdM/Sf3w
hDir0FLTIeAdRI/0DafUWULbJA==
-----END CERTIFICATE-----
Generated at Mon Apr 6 10:08:33 2026 by rpki-client