Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.mft
File:                     DqjhgHgwQyFWBjSjtPJuxux2ISY.mft (raw, json)
Hash identifier:          7QfK8jACwRaA6Yt83+hQ8L1THieAZZBoUpYaZfxFB4c=
Subject key identifier:   E2:E7:34:80:B8:FB:52:5E:A3:0A:09:6E:5B:94:FA:1F:45:73:AE:9D
Authority key identifier: 0E:A8:E1:80:78:30:43:21:56:06:34:A3:B4:F2:6E:C6:EC:76:21:26
Certificate issuer:       /CN=A918FA35/serialNumber=0EA8E18078304321560634A3B4F26EC6EC762126
Certificate serial:       6E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DqjhgHgwQyFWBjSjtPJuxux2ISY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.mft
Manifest number:          6C
Signing time:             Fri 17 Apr 2026 07:35:39 +0000
Manifest this update:     Fri 17 Apr 2026 07:35:38 +0000
Manifest next update:     Fri 24 Apr 2026 07:35:38 +0000
Files and hashes:         1: DqjhgHgwQyFWBjSjtPJuxux2ISY.crl (hash: KCbXMhD7U891lXPnj5g+mm/trLRYVnywdmjE74rc08g=)
                          2: E0C97CB098BB11F0B5530B6CC4F9AE02.roa (hash: tzLz5H3WHIRmkrmCQ6z99a4YcvXFYzKj7iQvz5s9xtw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.crl
                          rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DqjhgHgwQyFWBjSjtPJuxux2ISY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:35:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110 (0x6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FA35, serialNumber=0EA8E18078304321560634A3B4F26EC6EC762126
        Validity
            Not Before: Apr 17 07:35:38 2026 GMT
            Not After : Apr 24 07:35:38 2026 GMT
        Subject: CN=69e1e2cb-bca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:fa:b8:b3:3b:33:98:ba:d8:7f:e5:b0:e5:5e:
                    99:d5:64:4e:1e:6a:8d:89:6f:d7:b3:cd:29:39:64:
                    9f:4e:0f:40:d9:ab:a6:e1:20:09:f6:0e:5f:d3:08:
                    04:b9:f9:f0:1d:22:50:df:e2:1c:9e:a9:45:48:12:
                    d6:30:9a:aa:fa:c5:f4:77:5e:b7:13:42:da:4c:bd:
                    ce:a6:b9:be:e7:fb:d8:ce:a4:d4:6f:3d:5c:16:81:
                    03:d0:9e:46:45:ff:f8:5d:96:eb:ab:85:c2:f2:48:
                    fc:53:a3:d3:d9:eb:e5:84:a1:75:1d:18:fa:ef:90:
                    c7:4d:14:8a:0c:9c:01:c4:bd:4e:45:0a:35:83:20:
                    ad:9f:c2:66:b9:0b:b1:2e:52:51:93:e9:a4:bf:95:
                    a8:13:79:61:f8:5b:6e:41:b5:f5:ec:43:71:4c:27:
                    72:26:24:2d:5c:19:ac:cf:9e:70:0f:45:45:17:15:
                    30:d8:c3:db:93:54:45:7f:59:a9:39:63:cb:ac:4e:
                    bb:79:50:1e:98:f7:83:dc:02:36:12:ce:99:55:9f:
                    7a:38:8d:e2:c7:99:fe:80:2f:98:0a:48:53:99:1b:
                    19:b0:ab:ab:29:32:62:ef:ec:bf:5f:82:fc:80:e4:
                    96:21:e5:1e:40:bb:37:bd:1a:4b:52:4b:50:9b:58:
                    ac:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:E7:34:80:B8:FB:52:5E:A3:0A:09:6E:5B:94:FA:1F:45:73:AE:9D
            X509v3 Authority Key Identifier:
                keyid:0E:A8:E1:80:78:30:43:21:56:06:34:A3:B4:F2:6E:C6:EC:76:21:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DqjhgHgwQyFWBjSjtPJuxux2ISY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:f0:dd:ce:2f:a6:a9:2e:d4:50:56:4a:b1:7a:9d:b2:37:4d:
         03:93:20:8d:66:64:16:3a:15:46:18:a3:5e:16:43:67:b4:50:
         a8:ee:08:a0:86:91:fe:90:94:e2:01:a9:bd:53:2f:9f:fb:49:
         07:79:8f:ca:1b:a8:f5:58:d3:36:6c:34:ce:64:11:f0:b8:1e:
         e5:55:58:b2:b1:96:4d:01:6c:38:73:5d:be:8e:f4:5d:f6:bb:
         5e:6c:bd:0e:72:4f:72:89:1f:9a:9c:0b:3c:00:35:13:c0:32:
         0c:35:e3:15:76:be:66:fc:aa:17:0f:fb:bb:c0:4c:28:e3:0b:
         0e:c3:99:f2:86:04:f9:b4:83:6f:fb:16:e2:c5:16:aa:b2:bb:
         f1:ea:dc:11:bb:9d:3f:ec:81:db:53:8f:0f:a3:87:c6:9f:bd:
         34:ef:48:cf:bf:0c:0d:f3:b9:2d:9d:b0:ce:0e:19:a7:7e:74:
         9a:6d:9d:73:56:d4:13:80:e5:d0:4e:31:1f:d0:56:23:b8:04:
         9c:13:d9:74:7f:94:7a:87:33:51:f7:1f:3d:45:81:a4:d6:15:
         5d:40:55:01:b6:cb:55:9b:a0:66:20:09:94:05:d0:d5:99:5a:
         93:58:16:a2:cf:9d:82:19:c5:aa:7d:3d:9f:b1:e9:2c:cc:74:
         44:c7:ea:cb
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBbjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
RkEzNTExMC8GA1UEBRMoMEVBOEUxODA3ODMwNDMyMTU2MDYzNEEzQjRGMjZFQzZF
Qzc2MjEyNjAeFw0yNjA0MTcwNzM1MzhaFw0yNjA0MjQwNzM1MzhaMBgxFjAUBgNV
BAMTDTY5ZTFlMmNiLWJjYTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCU+rizOzOYuth/5bDlXpnVZE4eao2Jb9ezzSk5ZJ9OD0DZq6bhIAn2Dl/TCAS5
+fAdIlDf4hyeqUVIEtYwmqr6xfR3XrcTQtpMvc6mub7n+9jOpNRvPVwWgQPQnkZF
//hdluurhcLySPxTo9PZ6+WEoXUdGPrvkMdNFIoMnAHEvU5FCjWDIK2fwma5C7Eu
UlGT6aS/lagTeWH4W25BtfXsQ3FMJ3ImJC1cGazPnnAPRUUXFTDYw9uTVEV/Wak5
Y8usTrt5UB6Y94PcAjYSzplVn3o4jeLHmf6AL5gKSFOZGxmwq6spMmLv7L9fgvyA
5JYh5R5Auze9GktSS1CbWKxVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU4uc0gLj7
Ul6jCgluW5T6H0Vzrp0wHwYDVR0jBBgwFoAUDqjhgHgwQyFWBjSjtPJuxux2ISYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThGQTM1LzU0NjU3RERFOThC
OTExRjBCOTk2MEIyMEM0RjlBRTAyL0RxamhnSGd3UXlGV0JqU2p0UEp1eHV4MklT
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvRHFqaGdIZ3dReUZXQmpTanRQSnV4dXgySVNZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThG
QTM1LzU0NjU3RERFOThCOTExRjBCOTk2MEIyMEM0RjlBRTAyL0RxamhnSGd3UXlG
V0JqU2p0UEp1eHV4MklTWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAl8N3OL6apLtRQVkqxep2yN00DkyCNZmQWOhVGGKNeFkNntFCo7gighpH+kJTi
Aam9Uy+f+0kHeY/KG6j1WNM2bDTOZBHwuB7lVViysZZNAWw4c12+jvRd9rtebL0O
ck9yiR+anAs8ADUTwDIMNeMVdr5m/KoXD/u7wEwo4wsOw5nyhgT5tINv+xbixRaq
srvx6twRu50/7IHbU48Po4fGn70070jPvwwN87ktnbDODhmnfnSabZ1zVtQTgOXQ
TjEf0FYjuAScE9l0f5R6hzNR9x89RYGk1hVdQFUBtstVm6BmIAmUBdDVmVqTWBai
z52CGcWqfT2fsekszHREx+rL
-----END CERTIFICATE-----
Generated at Sat Apr 18 21:08:20 2026 by rpki-client