Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.mft
File:                     1FgFH22pUil0dbSEvd0Pu-NJDnA.mft (raw, json)
Hash identifier:          NF2nD8mLsMvR5AczYsRp0L7vextNyTNX/RWsiN8DAao=
Subject key identifier:   7D:D1:03:A0:6D:88:8A:4B:5E:9F:FD:21:0A:5F:87:E2:B9:BD:39:54
Authority key identifier: D4:58:05:1F:6D:A9:52:29:74:75:B4:84:BD:DD:0F:BB:E3:49:0E:70
Certificate issuer:       /CN=A915D85E/serialNumber=D458051F6DA952297475B484BDDD0FBBE3490E70
Certificate serial:       07E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FgFH22pUil0dbSEvd0Pu-NJDnA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.mft
Manifest number:          07CC
Signing time:             Sat 04 Apr 2026 21:13:51 +0000
Manifest this update:     Sat 04 Apr 2026 21:13:51 +0000
Manifest next update:     Sat 11 Apr 2026 21:13:51 +0000
Files and hashes:         1: 1FgFH22pUil0dbSEvd0Pu-NJDnA.crl (hash: UBAqmAs/uloGtAdM+Zgzvy2CjfMs9nJ2SqPyUIHYy0U=)
                          2: 9B5A7020522911ED9136DF2AC4F9AE02.roa (hash: wL5klU0gTHBSEvYuVpYefW4LX2bmQfObj9oZvz3lNYo=)
                          3: A156AB48195E11F0A64EF837C4F9AE02.roa (hash: 4itdgnokjreqGm34fiN0BjbU5Y5cTecgH1DKcBRHiBU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.crl
                          rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FgFH22pUil0dbSEvd0Pu-NJDnA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 21:13:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2022 (0x7e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D85E, serialNumber=D458051F6DA952297475B484BDDD0FBBE3490E70
        Validity
            Not Before: Apr  4 21:13:51 2026 GMT
            Not After : Apr 11 21:13:51 2026 GMT
        Subject: CN=69d17f0f-951a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:fa:92:f9:37:ce:1e:79:85:20:d0:fc:ff:9e:
                    da:9d:1a:25:f2:e7:c6:8b:a4:f8:0c:6c:cc:d8:a5:
                    35:6a:f6:f6:db:51:df:2d:5c:8a:64:ae:7f:b5:5f:
                    52:72:42:25:a3:72:92:15:24:fa:d7:fc:e8:5a:26:
                    2a:48:48:48:3c:fb:e0:70:2e:93:68:97:33:cb:0e:
                    68:69:13:4e:0b:a2:a3:30:0c:6f:aa:a9:3d:5a:fc:
                    05:0c:71:01:38:27:d5:f4:29:3e:87:30:1f:dd:4c:
                    95:5a:18:8f:b2:39:ca:33:c2:d9:ee:2a:a1:e0:3a:
                    2e:3f:9e:dd:af:46:a3:8a:b7:0b:c3:4b:d1:47:f9:
                    94:78:16:ef:11:15:e7:9d:87:aa:b2:fb:f7:20:0b:
                    fd:5b:9a:ba:2b:45:a4:5b:aa:73:ea:4c:e7:83:cf:
                    63:2b:04:1e:51:26:90:64:e6:c6:d9:4e:aa:ed:31:
                    6a:1d:f7:18:75:2c:37:69:a0:04:32:2e:49:2d:50:
                    1a:f0:2f:39:46:07:5d:ce:5e:82:4b:c5:3d:70:13:
                    68:a1:c5:a0:16:fb:b6:71:f7:0e:2c:96:18:99:53:
                    a1:39:6c:6c:12:e1:24:9a:aa:42:a0:4e:43:04:e5:
                    68:b4:d5:98:54:fc:65:9c:0b:e1:05:1f:9f:a5:f0:
                    2b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D1:03:A0:6D:88:8A:4B:5E:9F:FD:21:0A:5F:87:E2:B9:BD:39:54
            X509v3 Authority Key Identifier:
                keyid:D4:58:05:1F:6D:A9:52:29:74:75:B4:84:BD:DD:0F:BB:E3:49:0E:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FgFH22pUil0dbSEvd0Pu-NJDnA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:c2:c7:a9:b3:37:72:9d:91:b6:3c:e2:8e:c5:2f:d7:01:16:
         25:19:2f:22:75:d9:a8:27:ae:18:f1:b8:57:00:37:8f:ad:a0:
         a4:45:14:26:15:f8:d6:f3:22:12:a2:f3:2c:61:11:d0:d5:86:
         ce:9a:06:c7:d1:cd:8d:38:ce:05:6c:0a:b7:b7:d5:03:d8:de:
         fc:51:7b:18:4b:fc:ac:e8:8a:60:86:08:46:66:b9:a4:f1:dd:
         9a:26:63:6e:5c:6b:fb:6a:82:6e:29:65:8a:75:74:be:ef:44:
         3d:95:18:65:ef:81:92:ea:80:4a:f9:81:f5:f6:82:c6:99:06:
         17:5e:27:02:76:c6:79:01:06:bd:45:55:99:a1:40:49:ea:94:
         9f:b6:de:4d:c1:d0:86:c5:dd:27:f4:02:69:54:48:98:83:2f:
         bd:9e:b5:a3:e1:c8:67:78:1b:56:ce:5e:49:82:5a:e6:93:d7:
         89:25:6f:00:af:d4:cf:b3:79:25:7e:cb:e3:0e:b7:89:ed:ca:
         a9:29:dd:ee:38:ec:f3:21:90:00:ed:b2:c8:98:9b:6c:06:fc:
         34:05:18:64:6c:b4:27:51:d1:5e:f6:23:fb:e2:4f:ee:55:6c:
         1d:af:71:2f:52:25:18:89:9f:5f:c9:12:54:25:80:0d:a0:8b:
         ee:91:73:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:43:52 2026 by rpki-client