Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft
File:                     Iek1nelgenjM01kOC0SctSsXtrs.mft (raw, json)
Hash identifier:          ARGSNUloF0+CB0n49nPeaa3IVutPazncgqbXzbXMFJ4=
Subject key identifier:   5F:72:A2:D4:E0:F3:E7:85:25:23:AF:7C:3F:A4:27:68:DD:B7:5C:44
Authority key identifier: 21:E9:35:9D:E9:60:7A:78:CC:D3:59:0E:0B:44:9C:B5:2B:17:B6:BB
Certificate issuer:       /CN=A915C83A/serialNumber=21E9359DE9607A78CCD3590E0B449CB52B17B6BB
Certificate serial:       07CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft
Manifest number:          07B8
Signing time:             Sat 04 Apr 2026 21:14:38 +0000
Manifest this update:     Sat 04 Apr 2026 21:14:38 +0000
Manifest next update:     Sat 11 Apr 2026 21:14:38 +0000
Files and hashes:         1: Iek1nelgenjM01kOC0SctSsXtrs.crl (hash: lrnm9YX6ShHCvZ4J0Bdz9NORhWl6ohGIeZS/o/5euZs=)
                          2: EF5A16E89F3E11EB852AB17AC4F9AE02.roa (hash: yigo59Gar+8S1aiuGB+d0Lm9hAb5K16jebQb9hDYj9o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.crl
                          rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 21:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1998 (0x7ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C83A, serialNumber=21E9359DE9607A78CCD3590E0B449CB52B17B6BB
        Validity
            Not Before: Apr  4 21:14:38 2026 GMT
            Not After : Apr 11 21:14:38 2026 GMT
        Subject: CN=69d17f3e-057b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:88:5a:db:0b:16:91:d7:b6:91:bd:58:9f:22:
                    af:8b:90:5f:45:8d:ed:95:af:30:d9:51:91:ca:33:
                    8e:6e:f1:7a:04:e3:17:f9:86:5d:8d:51:00:3e:69:
                    48:13:75:b6:45:b4:b3:5c:49:76:fb:a2:5f:ae:e4:
                    5a:fb:62:c3:5b:e1:7c:4a:d2:32:56:83:ab:de:60:
                    5f:76:01:c7:ba:29:92:3c:10:52:ea:81:a1:01:d9:
                    5c:e3:a3:ab:e6:37:4c:c1:e6:43:bf:6a:ac:88:34:
                    a7:a1:5f:94:cf:aa:2a:94:64:1d:79:49:03:37:09:
                    e4:a9:71:69:2a:c6:60:68:4c:df:b6:0b:35:a0:1c:
                    82:06:dd:84:b3:d5:c1:e6:4f:b0:52:ee:44:ed:c3:
                    5d:bd:a1:80:34:c2:82:49:4e:a6:ea:ba:c9:ab:58:
                    9b:e7:b3:ab:c6:e3:f6:da:8c:85:ce:8d:26:cb:e9:
                    e3:19:54:d1:94:58:fe:f2:bc:5f:a6:21:4d:df:ef:
                    bf:56:c2:80:8e:b0:23:e6:e3:15:33:05:80:42:1e:
                    1a:15:e6:6d:21:48:e3:68:03:db:d7:65:de:86:ed:
                    7d:c0:2c:ed:a7:c2:ea:59:73:25:b1:01:52:74:e3:
                    bb:9d:43:7f:d2:ba:3a:d0:d9:d5:eb:db:fb:d4:f9:
                    9c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:72:A2:D4:E0:F3:E7:85:25:23:AF:7C:3F:A4:27:68:DD:B7:5C:44
            X509v3 Authority Key Identifier:
                keyid:21:E9:35:9D:E9:60:7A:78:CC:D3:59:0E:0B:44:9C:B5:2B:17:B6:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:ed:10:89:a7:ed:e9:6c:b7:0d:60:18:a0:c2:58:ef:df:f1:
         27:a4:cd:06:e1:72:ea:05:e3:4e:43:3d:78:46:32:3e:c3:a6:
         d5:98:41:65:03:26:5a:6a:cd:4f:b9:d0:b9:82:54:11:24:79:
         d7:d8:e2:68:a3:bc:84:2b:ef:6a:c7:b4:5b:7c:1c:70:82:27:
         74:de:fe:31:b0:62:23:3c:ac:37:cd:34:ac:88:42:ed:ec:19:
         11:9c:b6:ba:d6:ea:15:87:b2:4b:5c:69:4a:8f:fe:4d:cd:91:
         ba:0e:08:60:42:b8:c3:b6:f7:19:6d:39:47:bb:d8:d9:3e:ad:
         29:f2:00:cb:25:25:8e:ff:ac:ea:36:ab:25:11:7b:67:fe:2a:
         fb:66:db:00:ba:76:2b:56:43:8b:5a:c5:ea:d0:ff:ea:81:08:
         3f:8a:bb:3b:6b:bc:90:9b:2b:62:8a:da:93:9e:90:70:33:3d:
         ba:b3:64:62:66:0d:e3:a6:f6:bd:53:07:2c:44:8b:30:b5:65:
         0c:7d:aa:56:dc:d3:03:bb:9f:11:fe:26:17:d7:4e:82:10:e6:
         f5:36:73:92:1d:4f:13:21:1c:bb:6e:65:e6:06:55:54:00:0d:
         98:da:18:aa:6a:62:15:b1:33:cf:0b:27:03:f0:15:ba:24:3f:
         2b:83:4c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:58:10 2026 by rpki-client