Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft
File:                     08ZsJqn9G558RVvds1FZaI0BQP4.mft (raw, json)
Hash identifier:          +jCpHWoALiaF2JsFBGc4SAq6DRPvG5WTMhTz2Q+4im8=
Subject key identifier:   BB:7F:86:15:BC:74:A4:E5:EA:E7:41:3D:74:C5:80:04:FE:1F:F3:A0
Authority key identifier: D3:C6:6C:26:A9:FD:1B:9E:7C:45:5B:DD:B3:51:59:68:8D:01:40:FE
Certificate issuer:       /CN=A914DD78/serialNumber=D3C66C26A9FD1B9E7C455BDDB35159688D0140FE
Certificate serial:       0BDE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft
Manifest number:          0BB6
Signing time:             Sat 04 Apr 2026 18:51:41 +0000
Manifest this update:     Sat 04 Apr 2026 18:51:41 +0000
Manifest next update:     Sat 11 Apr 2026 18:51:41 +0000
Files and hashes:         1: 08ZsJqn9G558RVvds1FZaI0BQP4.crl (hash: 7jZ8yHBq1sLkN/JQvUJ6MbAxbfDLgZpYhymOpgqMIfA=)
                          2: 9F0D6574BFF011EAA38D3B64C4F9AE02.roa (hash: guSkTmy7FKfWkl3HEYDSdBxGCgfTJVTz0fMgkLGtNzk=)
                          3: DE437646F8A911EB98242219C4F9AE02.roa (hash: MmgfA3qYqHflBFSU79GcWhbhyjAjfee+uU1hKepl8Bg=)
                          4: 2CAD3A66595911EA80344709C4F9AE02.roa (hash: SjDMXf0lNYFwt4BBzRLFS/hu859BDfy4g/4gUtj/7is=)
                          5: A04B3184595A11EA8C79B30FC4F9AE02.roa (hash: lFd0f/s6tWl8ssWZElmWFK2IFMinINueCRCwnr4LqZQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.crl
                          rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 18:51:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3038 (0xbde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DD78, serialNumber=D3C66C26A9FD1B9E7C455BDDB35159688D0140FE
        Validity
            Not Before: Apr  4 18:51:41 2026 GMT
            Not After : Apr 11 18:51:41 2026 GMT
        Subject: CN=69d15dbd-9ac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c5:33:53:e6:a6:5a:94:d0:cc:c5:18:44:e2:
                    d0:68:3b:e5:28:97:b0:4f:2d:0b:fd:67:cd:d5:4b:
                    2a:f5:7b:c3:01:c5:61:62:f4:04:5b:81:2d:61:5c:
                    36:32:4a:8b:3e:a8:af:22:45:58:94:13:51:90:d9:
                    86:e8:3b:16:39:b1:37:3f:7d:c9:f1:e5:de:63:af:
                    01:88:e3:74:6f:e3:81:15:27:4b:f8:03:03:67:a7:
                    17:be:8b:bf:f4:aa:87:8b:34:e8:e8:15:41:10:df:
                    81:78:5e:4e:e6:7c:cd:57:8d:79:d0:12:55:01:91:
                    1e:62:07:6d:cc:ef:4e:36:0b:5b:a7:19:bf:ec:f4:
                    82:da:4f:1b:74:89:33:e2:59:99:10:55:d8:fe:7f:
                    9f:11:fd:c6:d5:d0:f2:cf:88:23:12:1e:5f:ec:ca:
                    45:e4:f6:3f:30:15:ad:12:55:22:2b:ac:5c:66:a0:
                    19:3d:f7:2b:47:70:82:cf:2c:f8:2f:a3:d4:91:6e:
                    21:be:c6:d4:02:7d:3e:a9:2e:2e:81:ea:f6:a8:ab:
                    ad:47:7a:e2:9c:43:86:fa:18:f2:b2:db:68:a7:c8:
                    71:84:8a:2c:cc:cd:be:f9:a6:6a:b4:da:fe:e5:65:
                    a1:0b:e8:2e:79:db:9b:94:bd:42:ff:91:cd:eb:c8:
                    f3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:7F:86:15:BC:74:A4:E5:EA:E7:41:3D:74:C5:80:04:FE:1F:F3:A0
            X509v3 Authority Key Identifier:
                keyid:D3:C6:6C:26:A9:FD:1B:9E:7C:45:5B:DD:B3:51:59:68:8D:01:40:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:78:b6:7f:2c:cb:41:b4:51:14:74:bf:35:25:28:6c:c5:f6:
         b5:23:98:fd:33:7c:fa:66:3d:fc:67:6e:e3:33:17:50:05:8e:
         92:0a:d1:77:d5:61:f1:99:6d:17:ac:61:50:f5:e6:ce:e5:4d:
         b2:ef:00:2c:9c:da:c3:44:2c:9e:51:0b:16:90:0c:92:99:e6:
         ea:52:1e:91:ec:8f:33:c1:b2:d1:22:79:9a:9a:f6:bd:0a:82:
         bc:eb:14:76:e2:16:ec:aa:34:a4:c1:13:02:b9:a1:1a:16:36:
         14:ef:82:91:97:62:63:17:a9:30:3e:ad:93:d7:71:ab:b7:85:
         41:48:88:c8:ac:b0:ed:43:f1:ed:da:90:26:6f:ab:06:7b:25:
         f9:0d:2e:a1:98:11:dd:18:a1:f3:20:8c:55:af:d6:14:eb:96:
         1c:44:2f:f7:0a:4f:70:a6:6f:25:05:3e:db:fc:b4:aa:ba:43:
         69:6b:eb:9d:09:95:cc:4b:ff:28:dd:12:b0:05:3b:fe:9f:a2:
         36:f4:90:dc:17:36:f7:8d:37:ef:97:da:24:65:fc:3f:e8:bb:
         6a:cf:b6:75:a6:40:82:55:de:45:05:cb:ad:06:c8:ea:95:b4:
         2f:ec:cd:b3:50:ee:2f:4b:a8:3f:42:9d:55:ee:e2:30:a5:31:
         f2:37:ff:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 23:51:02 2026 by rpki-client