Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft
File:                     IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft (raw, json)
Hash identifier:          +8+lJJNjOqgPN7PzpG5PGCzd2QIpEqm2LEyktDAXH/0=
Subject key identifier:   88:59:E1:64:A5:E6:05:2F:86:21:66:B5:71:7A:B6:8F:8B:49:0F:AC
Authority key identifier: 21:4B:2F:CF:42:BB:2B:98:90:58:45:D7:33:D9:45:D9:5C:2D:CA:12
Certificate issuer:       /CN=A914022F/serialNumber=214B2FCF42BB2B98905845D733D945D95C2DCA12
Certificate serial:       0734
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUsvz0K7K5iQWEXXM9lF2VwtyhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft
Manifest number:          0728
Signing time:             Sat 04 Apr 2026 21:38:01 +0000
Manifest this update:     Sat 04 Apr 2026 21:38:00 +0000
Manifest next update:     Sat 11 Apr 2026 21:38:00 +0000
Files and hashes:         1: IUsvz0K7K5iQWEXXM9lF2VwtyhI.crl (hash: Li7t/TAWi3vbVltzSpCWewzPJLoQP8i7j1dgkC1cXqg=)
                          2: 24F33D7877AF11EB8E972C66C4F9AE02.roa (hash: kjgnZeVn+N324KHyf3fGO9g9YrF9YolyFM7PZ06SKLc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.crl
                          rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUsvz0K7K5iQWEXXM9lF2VwtyhI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 21:37:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1844 (0x734)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914022F, serialNumber=214B2FCF42BB2B98905845D733D945D95C2DCA12
        Validity
            Not Before: Apr  4 21:38:00 2026 GMT
            Not After : Apr 11 21:38:00 2026 GMT
        Subject: CN=69d184b8-96e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:74:84:0f:f1:06:9a:ad:c3:d5:09:00:47:0b:
                    a8:2d:f7:59:68:53:cb:2b:8f:c2:ee:e9:d3:5a:3d:
                    dd:7c:1d:47:5c:9a:5b:4b:40:4a:d4:02:23:cd:cd:
                    c0:03:02:c0:7c:c2:77:68:90:50:fa:f7:ee:30:61:
                    11:54:72:99:49:f6:7b:28:4a:d5:cd:7d:88:74:d9:
                    8d:4e:84:ce:38:6b:0d:4e:cf:b9:2a:9b:3e:85:6f:
                    9d:26:39:fa:a4:41:79:ea:ec:20:0a:70:35:4c:ec:
                    98:64:0d:75:5f:2e:8a:27:89:ef:cf:61:f6:74:af:
                    3a:37:95:19:61:fe:dd:34:7c:46:3e:75:85:1b:96:
                    a0:dc:a5:7f:6a:12:5d:d7:42:f2:9a:16:c8:33:02:
                    cc:44:a9:b4:8a:93:8c:82:f8:dd:8d:1d:32:2f:48:
                    28:e3:c7:b7:24:e5:e1:b3:4e:a6:9d:f8:65:ed:5e:
                    7e:9b:ca:e0:48:a5:1e:c0:ce:06:ad:85:e3:1e:ea:
                    20:9f:0b:36:1f:70:72:ff:5f:59:47:2a:ff:bc:1a:
                    65:b2:f4:ac:15:8b:41:3a:62:a0:d7:ef:c5:c9:82:
                    4f:0d:6e:c8:63:f3:ed:3a:b1:22:a2:68:4a:29:8c:
                    d1:26:75:75:9c:de:00:92:b7:5a:e0:72:1e:32:b8:
                    8e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:59:E1:64:A5:E6:05:2F:86:21:66:B5:71:7A:B6:8F:8B:49:0F:AC
            X509v3 Authority Key Identifier:
                keyid:21:4B:2F:CF:42:BB:2B:98:90:58:45:D7:33:D9:45:D9:5C:2D:CA:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUsvz0K7K5iQWEXXM9lF2VwtyhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:79:f6:7e:31:fc:bd:40:69:4d:5d:38:cd:0a:0b:70:0f:de:
         41:fd:19:6c:15:1e:0e:32:1d:05:a7:a4:a0:b8:a4:39:ab:a7:
         15:aa:0d:47:a4:45:05:31:19:7f:19:ce:7b:1a:93:d0:61:b8:
         3d:01:61:ce:72:48:af:be:13:86:e9:77:47:58:38:65:72:7c:
         39:b5:ba:f3:74:65:e7:eb:79:f8:3d:f9:9e:c4:d4:76:af:8d:
         66:55:9b:26:e4:26:0e:46:a6:96:0c:6e:7d:3f:ac:be:e8:15:
         16:5b:de:72:d9:32:0c:34:37:e0:4a:d8:e2:24:d7:ae:c7:1d:
         f5:19:5f:d0:ac:93:8b:62:d0:30:a3:98:ec:f0:c8:26:ca:9d:
         ae:bd:62:6c:65:42:a7:59:25:1a:6a:ed:49:2b:5b:48:35:1d:
         dc:af:46:1f:bd:b5:6b:3b:ce:be:1d:af:ca:19:e8:28:38:26:
         a6:c4:56:e5:ae:a2:36:4c:ad:12:2e:3d:7e:87:29:ed:26:f9:
         cf:83:4a:b1:d8:28:b7:2d:40:f1:2c:77:b8:9d:38:0f:af:68:
         d4:b5:3c:70:7f:f7:3f:47:60:6c:f8:a5:c7:0b:0c:7a:3c:d2:
         f7:f2:6f:eb:15:9c:11:94:9b:bd:ae:6d:39:ca:26:8f:ed:4b:
         ff:58:66:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 22:24:49 2026 by rpki-client