Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft
File:                     tRdNgmVknN0nQmySfRaHddeD1Tg.mft (raw, json)
Hash identifier:          B6OGCBl/oGIk1K0Od4Y/PS7WjoD6IEbfNTZbJPLtfxw=
Subject key identifier:   72:7F:32:43:C3:13:46:9A:99:35:FD:53:BD:89:7E:C8:92:77:8D:0C
Authority key identifier: B5:17:4D:82:65:64:9C:DD:27:42:6C:92:7D:16:87:75:D7:83:D5:38
Certificate issuer:       /CN=A916D459/serialNumber=B5174D8265649CDD27426C927D168775D783D538
Certificate serial:       0BB9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRdNgmVknN0nQmySfRaHddeD1Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft
Manifest number:          0BAF
Signing time:             Sat 04 Apr 2026 18:50:45 +0000
Manifest this update:     Sat 04 Apr 2026 18:50:45 +0000
Manifest next update:     Sat 11 Apr 2026 18:50:45 +0000
Files and hashes:         1: tRdNgmVknN0nQmySfRaHddeD1Tg.crl (hash: qaGOS5+GhsKkP9s4ETiSa2vtV57SBeAVjNZsxfIyDaE=)
                          2: 61E12BD0CA0611EEB05EB92CC4F9AE02.roa (hash: IuciT/jDYsEHuZMLoxbp4gzhohFWomxgcVWfQKh8vS8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.crl
                          rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRdNgmVknN0nQmySfRaHddeD1Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 18:50:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3001 (0xbb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D459, serialNumber=B5174D8265649CDD27426C927D168775D783D538
        Validity
            Not Before: Apr  4 18:50:45 2026 GMT
            Not After : Apr 11 18:50:45 2026 GMT
        Subject: CN=69d15d85-ca8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:aa:0a:92:e3:b8:3c:cd:0f:bc:22:1e:49:55:
                    7a:c2:3f:d6:2a:2f:a5:90:a3:8b:5c:05:16:43:1b:
                    98:37:b0:f7:32:b0:65:44:a8:b6:d4:bb:19:aa:a6:
                    79:6a:d4:ad:c8:73:85:81:a6:8a:de:b0:2b:1d:56:
                    1a:32:7b:0d:e6:a1:66:bd:f0:36:7f:25:67:53:ee:
                    0c:44:cb:f3:ac:61:73:5d:89:d2:4a:71:bf:45:16:
                    fb:23:15:2d:61:2e:08:c3:c2:8a:f3:bc:af:b3:de:
                    c3:a3:12:3d:2a:fb:9b:89:a4:49:10:a3:ed:31:7b:
                    24:6e:40:39:53:ad:e0:8b:b0:4e:e9:22:14:a9:2c:
                    31:3e:a7:99:20:7a:04:38:a0:21:90:13:e5:de:de:
                    1a:61:c9:cd:7e:79:85:b5:1a:65:5d:23:92:4d:cd:
                    ef:98:fc:1e:b3:5b:3d:50:b5:78:1d:fd:6a:65:53:
                    95:8f:f7:d1:f5:79:16:b2:4b:af:b6:fb:cb:a4:50:
                    b8:7d:17:9e:99:26:ec:e3:1c:c8:ff:4b:0d:e0:91:
                    f9:01:cb:0c:83:2a:6a:8f:4d:7b:5b:b5:15:bd:7e:
                    a7:0a:b0:86:be:f1:e9:bf:7b:85:16:7c:cd:f4:0d:
                    69:42:e1:3b:32:5c:64:15:be:44:c1:89:c0:14:b7:
                    83:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:7F:32:43:C3:13:46:9A:99:35:FD:53:BD:89:7E:C8:92:77:8D:0C
            X509v3 Authority Key Identifier:
                keyid:B5:17:4D:82:65:64:9C:DD:27:42:6C:92:7D:16:87:75:D7:83:D5:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRdNgmVknN0nQmySfRaHddeD1Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:84:d5:b6:27:b7:11:b3:28:09:51:87:04:1f:46:82:a4:f9:
         24:57:19:fd:d8:5c:c3:78:23:7a:2a:dd:de:54:cc:7e:7b:14:
         61:6b:35:53:78:6a:fd:6b:6b:dc:8c:35:cb:19:86:82:2c:c5:
         7c:31:43:d3:a6:42:f9:33:d7:ee:75:9e:c9:cf:58:12:89:d4:
         97:79:05:1a:cb:44:08:fd:b5:ab:f0:ad:55:58:b3:2e:9a:52:
         61:f5:f7:61:61:28:d5:9a:1b:b3:d9:04:b3:e8:3d:0c:15:1b:
         b6:20:c8:f8:22:f6:ef:12:b8:e7:72:10:3f:21:eb:95:45:ca:
         3e:bd:7e:2b:22:c4:6f:e4:34:de:7b:44:25:66:b8:bc:a1:55:
         0d:46:78:27:f0:66:c0:a9:9a:0d:40:d9:15:61:75:6d:82:2f:
         ce:85:a3:32:d1:b6:fd:84:29:00:cc:2c:f6:c4:bd:83:c8:3d:
         eb:77:14:e7:71:cb:47:0b:39:d5:0d:ef:3b:79:15:10:21:ed:
         2b:61:0f:a9:74:a0:6d:51:45:89:d9:27:9d:7d:61:b1:17:d5:
         8f:91:57:44:9c:85:62:69:e4:06:1b:e5:48:56:31:a0:e9:bf:
         cd:3e:07:ca:34:de:eb:e3:04:78:76:6b:dd:e2:e8:f7:70:91:
         cb:74:18:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:51:16 2026 by rpki-client