Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft
File:                     hkRKM0kVEhS08nEbLF2gy5nlDxM.mft (raw, json)
Hash identifier:          Z9MfwMbN2H56CeTu4RTZvxbZxmIg/GcZ/3xtGOwTC70=
Subject key identifier:   5C:7D:71:C2:67:F1:F8:B3:1F:88:3A:E2:1C:FD:95:70:71:13:41:FE
Authority key identifier: 86:44:4A:33:49:15:12:14:B4:F2:71:1B:2C:5D:A0:CB:99:E5:0F:13
Certificate issuer:       /CN=A915C48D/serialNumber=86444A3349151214B4F2711B2C5DA0CB99E50F13
Certificate serial:       0108
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft
Manifest number:          FC
Signing time:             Wed 25 Mar 2026 05:30:21 +0000
Manifest this update:     Wed 25 Mar 2026 05:30:21 +0000
Manifest next update:     Wed 01 Apr 2026 05:30:21 +0000
Files and hashes:         1: hkRKM0kVEhS08nEbLF2gy5nlDxM.crl (hash: ca0oUxPAh2RRp+YWd3E2JLJpSQfQDrM4avCdSLOcNYI=)
                          2: 55EFA6C0ECF711EF88590A69C4F9AE02.roa (hash: 9kbxY7GStAtFWFHK4CxfmaeBQ9+u1bor9LZiasl/Umo=)
                          3: B2BB920001CE11F182556E3A746F56BC.roa (hash: jrD4pqdoiKJI9NO9x+4SiaHnYuar82tQXf2WpPGDnIU=)
                          4: DE1B9460EDF511EF86CB7315C4F9AE02.roa (hash: E7TlvkUoTphr1MZbzvUv/cwDmCu/Xr2dNOXdFLK7X2o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.crl
                          rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:30:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 264 (0x108)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C48D, serialNumber=86444A3349151214B4F2711B2C5DA0CB99E50F13
        Validity
            Not Before: Mar 25 05:30:21 2026 GMT
            Not After : Apr  1 05:30:21 2026 GMT
        Subject: CN=69c372ed-276b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:36:52:ad:b3:66:8f:56:f5:7c:03:be:8c:64:
                    32:99:32:81:42:73:b0:f8:e8:57:1c:e7:50:60:1e:
                    96:df:74:ba:53:ab:69:34:f2:ea:ad:a3:c5:6d:e0:
                    b2:90:52:fa:bd:25:52:9e:26:f3:58:a3:a3:dd:e6:
                    9e:29:30:dd:81:3a:56:54:57:e3:9d:70:f4:44:27:
                    ff:10:4c:d8:03:36:7b:70:fc:80:4c:6c:af:23:e3:
                    aa:82:47:4f:4f:31:3c:43:9c:39:24:cb:27:56:30:
                    8d:c3:69:03:b6:52:d1:77:f7:39:fd:5e:46:0b:b2:
                    53:3a:4c:ce:8e:6e:d1:e1:3b:9c:3c:aa:47:bc:0f:
                    78:31:4c:a5:41:62:3f:d8:b0:b4:fd:99:d0:26:62:
                    71:a5:d3:7c:bf:72:60:f1:6f:5c:5b:90:8f:f0:42:
                    73:4e:85:c1:cc:63:db:ef:b1:b7:76:20:81:ce:5c:
                    05:47:1f:d1:b4:85:9e:db:2d:ef:df:e0:77:74:d7:
                    52:b1:cd:fa:4a:f8:c2:4a:64:39:79:7c:2c:3c:1a:
                    0c:0e:c1:15:ff:05:a6:33:a1:8a:70:72:be:c9:de:
                    ca:18:1e:98:32:e1:19:bf:4c:36:c3:26:10:10:4e:
                    18:ff:23:ba:68:4c:ec:41:5a:ee:ad:34:a8:58:d4:
                    b8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:7D:71:C2:67:F1:F8:B3:1F:88:3A:E2:1C:FD:95:70:71:13:41:FE
            X509v3 Authority Key Identifier:
                keyid:86:44:4A:33:49:15:12:14:B4:F2:71:1B:2C:5D:A0:CB:99:E5:0F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:27:65:07:c9:ad:70:14:4d:89:20:d0:35:cf:3d:50:80:d2:
         f8:e9:d1:95:a4:b6:4a:fc:a7:07:3b:80:ee:4c:54:ec:09:45:
         b1:88:44:5d:ae:cf:e1:04:29:1c:9a:f8:8e:ca:93:50:ab:b8:
         f8:ce:80:57:a7:35:5e:8e:2f:09:23:74:52:76:4e:e3:fc:a7:
         3f:d1:bc:40:2b:03:e3:0c:dc:cb:dd:c0:52:ec:73:43:b9:b2:
         f1:9f:d8:11:46:8f:b0:09:59:be:0d:31:5d:9e:b3:90:b0:1a:
         ac:56:c7:25:f0:cf:84:01:6f:84:7c:a1:b2:d8:93:1e:b7:bd:
         e8:dc:9e:35:ad:6e:55:67:69:49:0a:3b:2a:ad:7b:99:81:e4:
         b1:09:0f:75:b6:ae:d5:30:41:13:66:f7:14:7a:59:9f:80:33:
         6a:01:5d:17:5f:30:13:2e:ff:1d:c5:f7:2a:ef:92:71:99:4e:
         a7:60:30:67:ea:23:1a:71:9d:df:11:a8:df:c9:f5:10:66:f7:
         f4:99:12:55:80:9c:08:dd:75:ff:e2:86:33:99:49:8d:06:5c:
         06:ad:bd:14:04:79:01:35:dc:10:4c:fb:52:ca:0b:24:1f:5b:
         8c:c5:ae:97:6f:3a:2d:6e:c5:6d:95:28:96:9c:df:a3:57:d1:
         45:4f:fb:92
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUM0OEQxMTAvBgNVBAUTKDg2NDQ0QTMzNDkxNTEyMTRCNEYyNzExQjJDNURBMENC
OTlFNTBGMTMwHhcNMjYwMzI1MDUzMDIxWhcNMjYwNDAxMDUzMDIxWjAYMRYwFAYD
VQQDEw02OWMzNzJlZC0yNzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArzZSrbNmj1b1fAO+jGQymTKBQnOw+OhXHOdQYB6W33S6U6tpNPLqraPFbeCy
kFL6vSVSnibzWKOj3eaeKTDdgTpWVFfjnXD0RCf/EEzYAzZ7cPyATGyvI+OqgkdP
TzE8Q5w5JMsnVjCNw2kDtlLRd/c5/V5GC7JTOkzOjm7R4TucPKpHvA94MUylQWI/
2LC0/ZnQJmJxpdN8v3Jg8W9cW5CP8EJzToXBzGPb77G3diCBzlwFRx/RtIWe2y3v
3+B3dNdSsc36SvjCSmQ5eXwsPBoMDsEV/wWmM6GKcHK+yd7KGB6YMuEZv0w2wyYQ
EE4Y/yO6aEzsQVrurTSoWNS4tQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFx9ccJn
8fizH4g64hz9lXBxE0H+MB8GA1UdIwQYMBaAFIZESjNJFRIUtPJxGyxdoMuZ5Q8T
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzQ4RC8wQzIxNThCMkIy
QzkxMUVGOTAzRjc4ODNDNEY5QUUwMi9oa1JLTTBrVkVoUzA4bkViTEYyZ3k1bmxE
eE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hrUktNMGtWRWhTMDhuRWJMRjJneTVubER4TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QzQ4RC8wQzIxNThCMkIyQzkxMUVGOTAzRjc4ODNDNEY5QUUwMi9oa1JLTTBrVkVo
UzA4bkViTEYyZ3k1bmxEeE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArydlB8mtcBRNiSDQNc89UIDS+OnRlaS2SvynBzuA7kxU7AlFsYhEXa7P4QQp
HJr4jsqTUKu4+M6AV6c1Xo4vCSN0UnZO4/ynP9G8QCsD4wzcy93AUuxzQ7my8Z/Y
EUaPsAlZvg0xXZ6zkLAarFbHJfDPhAFvhHyhstiTHre96NyeNa1uVWdpSQo7Kq17
mYHksQkPdbau1TBBE2b3FHpZn4AzagFdF18wEy7/HcX3Ku+ScZlOp2AwZ+ojGnGd
3xGo38n1EGb39JkSVYCcCN11/+KGM5lJjQZcBq29FAR5ATXcEEz7UsoLJB9bjMWu
l286LW7FbZUolpzfo1fRRU/7kg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:27:53 2026 by rpki-client