Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
File:                     kMIvc5OFDo7Pa18eMg0HstGs2P0.mft (raw, json)
Hash identifier:          ZHTuXFmQyAzEtVjkc9w1g5Ib+sNeVXQpZUPjEackBFs=
Subject key identifier:   D3:A5:9E:C5:9C:91:30:DD:AF:79:82:72:5C:CD:65:63:1F:EB:53:F7
Authority key identifier: 90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD
Certificate issuer:       /CN=A918495F/serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD
Certificate serial:       18A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
Manifest number:          1825
Signing time:             Sun 26 Apr 2026 16:27:43 +0000
Manifest this update:     Sun 26 Apr 2026 16:27:42 +0000
Manifest next update:     Sun 03 May 2026 16:27:42 +0000
Files and hashes:         1: kMIvc5OFDo7Pa18eMg0HstGs2P0.crl (hash: C1Xvt0vcjzgdpHUDBJlweUpYkF1PbjN5FSQwFnED+H0=)
                          2: 4C0C96C6022E11EBA920EA37C4F9AE02.roa (hash: OEgEDUAjf9BTlI+eiF5A69LmOCeN7jWjg18CXPzKJG4=)
                          3: 696975861A3611EEA597E872C4F9AE02.roa (hash: g5hRhUjRB9v/my+gZgSF2vbEiEILSavEGnsxaVKF6Gc=)
                          4: 7E2725DAAC7611EAB766A74CC4F9AE02.roa (hash: 4QNrndXiZuD30u6eautmZHQMpuP/Z26DQJUBDiWiMvc=)
                          5: A2C8B57074B711EB8491BC63C4F9AE02.roa (hash: lvExdvN+lyTanXvVTvJV8T9/V8jM577ymUYa0b51pmw=)
                          6: B04675FC959711EA9F290A33C4F9AE02.roa (hash: wWZc4DPL/CIi2uHPFRZ5kI0NT8FM5d7k/tcwO50MfhM=)
                          7: 07EE827ADFEE11E7B0E71D1CC4F9AE02.roa (hash: yYFIGBneEQXcRJvNNN1W9kEQ69UHSaUHBezF58BxRJY=)
                          8: 694CCE66E53911EF9DD1B90DC4F9AE02.roa (hash: HZBfZMAFJxlkSmjIQOZstgSCx4ashGb51vkWovEUYbs=)
                          9: DD145D6E023A11EBBDF8B35FC4F9AE02.roa (hash: /8pZ9hmnX1KrX5+xHUTJd205PrwYJNS6PnS3wtcG9wI=)
                          10: E8118BFA022C11EBAC47A831C4F9AE02.roa (hash: LlVbkIBf55WD9ol7tZ+8YsYWKIE8b97eX9bCwSF3NSs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl
                          rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 03 May 2026 16:27:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6305 (0x18a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918495F, serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD
        Validity
            Not Before: Apr 26 16:27:42 2026 GMT
            Not After : May  3 16:27:42 2026 GMT
        Subject: CN=69ee3cff-34fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:93:95:d1:13:d3:e3:1f:99:ca:3e:f1:dd:f3:
                    ea:e8:1d:7a:d6:7f:6b:a1:34:88:99:31:7f:a5:1b:
                    0a:f6:b5:5c:7e:c9:f6:3b:20:4e:98:f0:3d:a1:b9:
                    c0:6c:19:44:72:63:12:d2:d4:ec:60:33:56:ef:4e:
                    e3:04:4b:dd:76:fd:25:d0:c0:58:3e:a2:ae:8e:d5:
                    21:30:91:e4:79:b3:f2:a0:64:94:31:c9:44:d4:62:
                    a2:bf:03:a6:08:10:c0:be:2f:bf:a9:d0:54:15:5b:
                    69:c2:03:3f:f8:22:00:f8:60:af:2b:9e:74:a9:66:
                    be:9a:8a:e2:e5:1f:bb:47:ee:c0:02:fe:ea:6e:29:
                    8f:10:95:8b:27:e0:5f:ae:ac:5d:fc:16:4d:79:eb:
                    bc:f6:95:10:2e:46:ec:98:fc:cb:d2:30:13:83:e6:
                    c7:84:2a:40:4e:58:e2:48:3c:af:3c:a2:11:eb:d9:
                    86:fc:5c:07:92:d5:39:0c:0a:55:83:b4:44:86:48:
                    9f:39:0b:c8:df:21:0f:08:ab:10:d6:7d:73:31:3d:
                    75:fb:fa:e7:72:95:74:93:b7:54:34:86:08:2f:24:
                    d2:16:1e:02:e4:f8:dc:34:21:82:fd:d0:9b:60:6c:
                    1a:9d:ac:20:78:65:22:c1:93:89:9d:50:56:8b:c7:
                    c8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:A5:9E:C5:9C:91:30:DD:AF:79:82:72:5C:CD:65:63:1F:EB:53:F7
            X509v3 Authority Key Identifier:
                keyid:90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:52:9d:8f:0b:71:94:ba:e5:12:af:7f:f4:65:33:31:6a:95:
         12:b6:95:da:45:78:81:36:a5:0e:16:20:90:03:b4:56:99:d3:
         b5:47:99:e0:00:60:40:ed:41:f2:c2:d7:41:fa:fd:2a:75:28:
         14:af:0b:d0:dd:e3:2e:1c:1c:46:79:a8:7a:f1:ba:46:bc:82:
         01:4e:14:a2:92:8a:3a:67:78:41:b3:57:cf:dd:06:15:ef:4c:
         8e:8b:08:47:31:21:7f:5d:7b:9e:28:21:5e:47:af:35:95:b3:
         80:0e:1f:69:9c:ff:41:39:c9:c9:42:a7:cd:48:66:0b:d6:68:
         08:3f:b9:0d:ff:20:4b:28:dc:77:d9:d2:5c:ff:d7:0f:95:fd:
         6d:ac:9c:05:bf:fd:de:68:48:4f:a9:9f:67:bd:d6:44:3d:eb:
         a0:67:c4:ed:3f:b5:af:08:16:21:1c:fb:a9:c9:0d:d4:26:90:
         7a:2d:ff:67:83:a6:4b:d6:8e:0e:2f:33:1f:bd:3d:61:30:af:
         b8:96:0a:e6:62:15:71:11:21:a0:ce:1f:79:d7:ae:d2:fe:78:
         c3:9a:87:6c:a9:2e:60:89:66:5b:d9:8a:23:0d:df:18:84:89:
         fb:66:72:d2:1d:29:10:23:4c:98:9e:e5:40:51:6d:09:14:aa:
         72:f4:a0:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:15:57 2026 by rpki-client