Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft
File:                     U78N14DbA47OFNQEWbq5xo9phTs.mft (raw, json)
Hash identifier:          ahp0xAqIesEZzEyuctv3pFH57DT1oYsQqFrZb1IZgH4=
Subject key identifier:   36:BF:CA:B0:A5:55:CC:FF:F1:E0:D7:70:D4:8C:F0:CF:12:4E:F4:1A
Authority key identifier: 53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B
Certificate issuer:       /CN=A912FCD6/serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B
Certificate serial:       234B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft
Manifest number:          22D8
Signing time:             Sat 04 Apr 2026 15:47:41 +0000
Manifest this update:     Sat 04 Apr 2026 15:47:41 +0000
Manifest next update:     Sat 11 Apr 2026 15:47:41 +0000
Files and hashes:         1: U78N14DbA47OFNQEWbq5xo9phTs.crl (hash: SWVchCCRcFAPIoOlnHtiGGl55SMRD0BS4YLU8QDkjCo=)
                          2: 213F506AEF8A11F08E686F05616F56BC.roa (hash: +0TIbXgSWfY4Rfh4n/KWV5MfMbBrpgMrwoEbGLQfWss=)
                          3: A44814E8EF8411F087F172675F6F56BC.roa (hash: wvN10FQ8zvYAowPbb2JVqT+LitRhCvH0XZWoM78inD0=)
                          4: E23C1886EF8811F0B6CFCA01616F56BC.roa (hash: hyVjQ/ybV11665cH/1oRipAj/sBN9cWklhwxNFtgIuo=)
                          5: BB252FD40EF111F195D6D4120A3D8C67.roa (hash: /hTiZWSYK2Vv4i6AxRoBfgNn6QuWyN3II6fBK7L3F/8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl
                          rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 15:47:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9035 (0x234b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FCD6, serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B
        Validity
            Not Before: Apr  4 15:47:41 2026 GMT
            Not After : Apr 11 15:47:41 2026 GMT
        Subject: CN=69d1329d-4e36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:16:bc:02:b4:b6:8b:a0:2e:77:02:0a:4f:9a:
                    4b:a0:76:24:89:db:c4:10:d0:92:a2:77:c3:e5:4b:
                    4a:b2:1c:35:bf:b1:96:81:d7:48:c2:a3:b3:97:fa:
                    04:f9:59:c0:ed:46:01:c3:61:a5:29:18:7a:a6:bd:
                    42:cd:50:85:bf:c6:88:c4:7d:e9:97:33:c6:25:e6:
                    26:04:71:92:a3:00:61:50:e1:f9:3e:eb:08:f7:04:
                    d2:5f:4d:33:a3:ee:72:41:75:18:d2:56:e1:35:e0:
                    09:a9:db:47:df:d0:95:66:4e:da:6f:d5:0a:1f:4e:
                    0c:3d:0c:ee:3e:b5:72:68:20:d5:e5:fb:ed:d2:cd:
                    98:7c:40:15:88:9a:27:dc:49:4d:74:8c:89:29:45:
                    ef:85:90:ba:ab:b8:2d:c3:89:ed:c0:a1:a9:4e:e2:
                    17:ee:9c:38:89:30:0e:25:7c:49:59:dd:84:86:74:
                    44:bc:69:b1:0c:22:6b:fa:89:b8:12:25:73:93:7b:
                    1c:3b:83:a7:a8:c1:f4:e5:bb:5d:c7:2e:64:b9:89:
                    1e:c2:fb:b1:94:99:35:3f:e1:c5:34:e4:ab:f4:d5:
                    49:ec:f9:8c:d5:c3:9b:7c:f3:9a:ff:4f:39:4b:c6:
                    a1:fb:ff:90:1d:30:84:f3:68:cc:c9:ab:2c:d1:5b:
                    f6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:BF:CA:B0:A5:55:CC:FF:F1:E0:D7:70:D4:8C:F0:CF:12:4E:F4:1A
            X509v3 Authority Key Identifier:
                keyid:53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:90:c3:a1:7d:15:8a:fb:c2:b7:12:96:ef:45:2c:ce:d1:d8:
         6d:02:34:73:a0:e3:ff:05:20:07:aa:be:d3:ae:7c:e3:ed:a4:
         b7:68:d3:21:23:93:8c:7f:b5:75:d2:6d:71:9f:4c:d0:7c:c5:
         0e:6c:ff:9d:b3:f6:00:cc:82:b0:e7:61:66:25:79:74:54:1c:
         66:9f:a4:b6:ec:16:bc:44:09:90:4b:86:2d:a4:a4:38:49:a1:
         df:26:59:ae:65:91:a4:34:52:20:3a:d4:80:02:d8:a7:26:fd:
         8e:66:fd:86:da:51:2b:ef:61:c2:ba:f6:23:c4:a7:c2:71:d9:
         f1:ed:03:d9:ca:c2:73:56:0a:9a:60:15:bd:7a:c8:dc:ad:8f:
         4f:27:7a:9a:12:1e:1c:10:b9:67:27:70:de:84:4f:53:b5:b9:
         38:76:da:76:69:72:f6:a0:e4:fc:02:66:5f:a5:7b:40:7a:05:
         11:39:12:60:2c:99:c2:32:15:01:14:5e:eb:56:71:fe:c9:6a:
         93:e5:82:a2:84:88:13:86:aa:aa:b4:eb:6c:af:5e:0d:24:0b:
         19:ff:00:29:d0:38:71:e1:ed:f2:25:4e:61:db:be:76:ed:be:
         b0:8f:c1:96:0f:8f:8f:68:a5:c8:9f:0e:f4:3b:c5:89:77:35:
         8e:60:f2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:58:44 2026 by rpki-client