Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft
File:                     M3ujEf33twUntX7AOA8fu_o1iu8.mft (raw, json)
Hash identifier:          ldCkBBzTOHXQqRgRhU8WZBg7l19wP12j1YpMB8mC6Wk=
Subject key identifier:   8A:87:30:17:B3:F9:B2:2C:E5:4A:BF:CF:DF:C2:B9:E9:E1:83:43:FB
Authority key identifier: 33:7B:A3:11:FD:F7:B7:05:27:B5:7E:C0:38:0F:1F:BB:FA:35:8A:EF
Certificate issuer:       /CN=A918497E/serialNumber=337BA311FDF7B70527B57EC0380F1FBBFA358AEF
Certificate serial:       01B2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft
Manifest number:          01AC
Signing time:             Fri 17 Apr 2026 03:50:37 +0000
Manifest this update:     Fri 17 Apr 2026 03:50:36 +0000
Manifest next update:     Fri 24 Apr 2026 03:50:36 +0000
Files and hashes:         1: M3ujEf33twUntX7AOA8fu_o1iu8.crl (hash: Blhm45wYZzXPtRJK//q/v2pQS5cuD9j7uyR7OEVG5u0=)
                          2: F0674762B6B611EE8EF4443AC4F9AE02.roa (hash: 3zNJLZO/qJtdGff2Nu7tPbkZZVj2p+PBpjescn5bpo8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.crl
                          rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:50:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 434 (0x1b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918497E, serialNumber=337BA311FDF7B70527B57EC0380F1FBBFA358AEF
        Validity
            Not Before: Apr 17 03:50:36 2026 GMT
            Not After : Apr 24 03:50:36 2026 GMT
        Subject: CN=69e1ae0d-7af6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:6c:b7:3e:47:ad:03:23:15:19:57:11:41:03:
                    57:ab:38:14:35:5d:c2:aa:ee:fb:7f:a7:dd:a5:a5:
                    60:4d:be:15:6b:d0:a7:24:4c:b0:12:cf:eb:85:d6:
                    f7:34:bc:01:9b:3f:82:8d:d3:2d:9a:8c:18:fe:10:
                    f6:0f:28:65:39:d2:17:93:0d:09:5b:9e:3b:34:0f:
                    63:9c:a2:35:6f:91:82:46:29:7f:c9:df:3d:d4:af:
                    a2:33:2d:41:45:df:79:4f:92:cc:2a:53:f6:d4:4d:
                    85:43:68:88:24:77:e2:6a:43:b7:ca:c4:25:c7:a9:
                    46:a8:c7:c6:77:aa:a5:94:c4:0c:ed:35:2c:54:3c:
                    0b:cc:b2:70:0c:58:dd:f3:cd:a5:12:0e:40:d5:06:
                    2c:ee:d5:c5:5a:8f:2c:98:9c:02:ed:bf:5b:1d:25:
                    67:e6:38:04:4e:50:1e:92:95:0c:28:16:33:b7:7d:
                    42:b2:32:ce:0b:e1:0c:51:27:be:d7:50:bd:1c:38:
                    d9:b5:1c:e1:b9:65:07:7b:a9:70:2e:e1:0e:89:e6:
                    58:d0:0c:cb:54:c2:22:dd:ce:64:2f:47:52:9c:f8:
                    0a:c0:1c:19:b0:b8:09:5f:a7:dd:c2:15:c8:82:b4:
                    e3:ee:83:5e:cc:a7:8b:0d:55:a0:29:90:7e:10:10:
                    90:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:87:30:17:B3:F9:B2:2C:E5:4A:BF:CF:DF:C2:B9:E9:E1:83:43:FB
            X509v3 Authority Key Identifier:
                keyid:33:7B:A3:11:FD:F7:B7:05:27:B5:7E:C0:38:0F:1F:BB:FA:35:8A:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:3b:af:d0:60:6c:5e:0b:e8:31:9e:0b:61:d6:f9:6f:a7:8e:
         e4:db:a7:21:09:7d:78:53:a2:0d:0c:7a:f1:b9:68:86:4e:c8:
         1b:bd:c2:98:87:ec:da:24:d9:28:0f:38:7c:57:aa:7c:44:df:
         f9:d5:70:63:d7:54:62:37:48:32:49:cc:7a:8d:8c:e2:8d:fb:
         a1:0d:8b:6d:cb:3d:e9:77:5a:9a:07:90:c9:fb:d0:ea:16:cb:
         74:2e:21:78:c4:1e:ab:1e:ca:09:79:50:c7:8d:b6:2b:0e:e4:
         a5:2e:89:9a:da:1b:f4:ee:9a:eb:b2:c6:ba:74:77:4f:dd:f9:
         e8:bb:8c:b0:40:9a:95:d4:c9:5d:27:de:ff:06:43:19:82:25:
         45:0e:cd:72:35:01:76:b4:60:1e:f7:37:fe:28:12:c1:32:bc:
         de:52:aa:91:3e:a0:93:f1:74:8a:74:e8:34:31:80:95:d2:c6:
         5d:b5:73:3d:27:27:e4:a0:b4:6c:82:81:dd:11:5e:12:62:b8:
         39:52:f9:82:da:3e:c0:7f:f0:36:87:c3:68:a3:08:22:fb:41:
         62:79:7b:07:7f:a0:e1:61:e2:ae:ce:61:ae:52:31:59:fb:6b:
         fd:4e:64:c2:c3:a8:7b:b6:d8:be:d1:a5:41:56:d2:b6:16:6a:
         95:01:c2:ec
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQ5N0UxMTAvBgNVBAUTKDMzN0JBMzExRkRGN0I3MDUyN0I1N0VDMDM4MEYxRkJC
RkEzNThBRUYwHhcNMjYwNDE3MDM1MDM2WhcNMjYwNDI0MDM1MDM2WjAYMRYwFAYD
VQQDEw02OWUxYWUwZC03YWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkGy3PketAyMVGVcRQQNXqzgUNV3Cqu77f6fdpaVgTb4Va9CnJEywEs/rhdb3
NLwBmz+CjdMtmowY/hD2DyhlOdIXkw0JW547NA9jnKI1b5GCRil/yd891K+iMy1B
Rd95T5LMKlP21E2FQ2iIJHfiakO3ysQlx6lGqMfGd6qllMQM7TUsVDwLzLJwDFjd
882lEg5A1QYs7tXFWo8smJwC7b9bHSVn5jgETlAekpUMKBYzt31CsjLOC+EMUSe+
11C9HDjZtRzhuWUHe6lwLuEOieZY0AzLVMIi3c5kL0dSnPgKwBwZsLgJX6fdwhXI
grTj7oNezKeLDVWgKZB+EBCQCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIqHMBez
+bIs5Uq/z9/Cuenhg0P7MB8GA1UdIwQYMBaAFDN7oxH997cFJ7V+wDgPH7v6NYrv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDk3RS9GMjEyMTJGQ0I2
OUExMUVFOEQ4REY2MEVDNEY5QUUwMi9NM3VqRWYzM3R3VW50WDdBT0E4ZnVfbzFp
dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL00zdWpFZjMzdHdVbnRYN0FPQThmdV9vMWl1OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NDk3RS9GMjEyMTJGQ0I2OUExMUVFOEQ4REY2MEVDNEY5QUUwMi9NM3VqRWYzM3R3
VW50WDdBT0E4ZnVfbzFpdTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAszuv0GBsXgvoMZ4LYdb5b6eO5NunIQl9eFOiDQx68blohk7IG73CmIfs2iTZ
KA84fFeqfETf+dVwY9dUYjdIMknMeo2M4o37oQ2Lbcs96XdamgeQyfvQ6hbLdC4h
eMQeqx7KCXlQx422Kw7kpS6Jmtob9O6a67LGunR3T9356LuMsECaldTJXSfe/wZD
GYIlRQ7NcjUBdrRgHvc3/igSwTK83lKqkT6gk/F0inToNDGAldLGXbVzPScn5KC0
bIKB3RFeEmK4OVL5gto+wH/wNofDaKMIIvtBYnl7B3+g4WHirs5hrlIxWftr/U5k
wsOoe7bYvtGlQVbSthZqlQHC7A==
-----END CERTIFICATE-----
Generated at Sat Apr 18 21:05:34 2026 by rpki-client