Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.mft
File:                     L927RfNPJhkzrCt9Z6xz05Op0WQ.mft (raw, json)
Hash identifier:          UaIYkfQfGKsbCccYwrEsO6FjI8DyUcCf8QkZJbhwBC8=
Subject key identifier:   5A:84:A3:C3:15:F3:E9:62:A3:3B:62:EB:EA:EB:36:92:AF:68:EE:62
Authority key identifier: 2F:DD:BB:45:F3:4F:26:19:33:AC:2B:7D:67:AC:73:D3:93:A9:D1:64
Certificate issuer:       /CN=A917ECB0/serialNumber=2FDDBB45F34F261933AC2B7D67AC73D393A9D164
Certificate serial:       03F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L927RfNPJhkzrCt9Z6xz05Op0WQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.mft
Manifest number:          03EF
Signing time:             Sun 05 Apr 2026 00:16:04 +0000
Manifest this update:     Sun 05 Apr 2026 00:16:03 +0000
Manifest next update:     Sun 12 Apr 2026 00:16:03 +0000
Files and hashes:         1: L927RfNPJhkzrCt9Z6xz05Op0WQ.crl (hash: 9Sz3b4O/6W8ie4HPlCDCvSEsqQNp078Z16eOH2CrKD4=)
                          2: 2C7BB8BAB92411EC8E787A55C4F9AE02.roa (hash: NbtGj9VX66Z/q14wLFr80IvVPTzt6u9+KSXlI9rhNls=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.crl
                          rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L927RfNPJhkzrCt9Z6xz05Op0WQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 00:16:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1014 (0x3f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ECB0, serialNumber=2FDDBB45F34F261933AC2B7D67AC73D393A9D164
        Validity
            Not Before: Apr  5 00:16:03 2026 GMT
            Not After : Apr 12 00:16:03 2026 GMT
        Subject: CN=69d1a9c4-9964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:68:d3:96:b5:09:72:0c:b6:de:ec:06:65:a7:
                    fd:d2:52:c0:de:1b:c2:d9:33:a7:14:2c:cd:7e:45:
                    90:a6:67:e4:67:5e:f6:86:a2:41:19:93:92:3a:65:
                    9d:61:2d:7b:27:52:2e:20:85:c6:bc:5e:ab:7f:4a:
                    71:df:42:bc:dd:85:45:8b:ad:01:d3:22:b6:67:55:
                    24:90:82:f8:b4:03:14:f9:e3:5c:12:b0:08:a9:58:
                    0f:69:57:21:f9:7c:24:5e:92:4d:82:84:16:98:1d:
                    81:2f:3a:a1:39:da:09:e3:86:b0:fe:d6:6a:2a:35:
                    50:96:d4:47:0a:f3:ad:8b:2d:8c:44:89:56:8a:61:
                    e4:4a:6f:ae:6a:85:a5:af:40:a4:96:a6:72:b5:04:
                    6c:48:ca:45:68:7a:82:59:40:cf:9e:e4:d6:70:62:
                    9b:f9:da:aa:17:fc:0e:85:6e:9c:a7:41:80:26:b0:
                    66:ac:8f:5c:07:29:ea:61:00:6b:f2:2f:a7:73:de:
                    24:7d:2b:7e:72:ca:8d:cd:b7:57:89:36:e1:82:fc:
                    94:7a:85:67:b4:97:36:28:f7:1e:ec:66:e2:ff:ff:
                    b3:93:02:1d:c5:4c:1c:00:5a:71:ac:76:3d:31:a9:
                    50:dc:b0:8c:7e:35:95:62:b3:d4:11:16:f9:46:59:
                    ec:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:84:A3:C3:15:F3:E9:62:A3:3B:62:EB:EA:EB:36:92:AF:68:EE:62
            X509v3 Authority Key Identifier:
                keyid:2F:DD:BB:45:F3:4F:26:19:33:AC:2B:7D:67:AC:73:D3:93:A9:D1:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L927RfNPJhkzrCt9Z6xz05Op0WQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:3b:bd:cc:6c:4b:a6:f8:16:a6:49:f0:14:2e:0a:7c:34:24:
         2d:77:fa:96:ef:c5:36:88:a8:f8:a8:90:7a:bb:8f:65:a0:d6:
         d1:32:87:7b:31:92:41:f7:cf:84:8f:56:41:2c:92:90:84:a2:
         f1:88:a4:7e:bd:92:a7:f6:bf:81:ce:b8:30:3a:85:cb:13:d0:
         7d:95:25:a7:e7:ec:6b:db:a1:b3:58:3b:3b:ab:87:2d:d4:c4:
         90:0c:ab:6c:72:56:f3:e3:92:3f:a7:1d:68:a3:40:f4:22:94:
         2d:0a:3a:68:bc:cb:0a:13:20:90:04:de:96:64:8f:14:d3:df:
         b9:d4:f7:24:8f:0d:32:e0:05:ba:3a:92:18:60:86:3a:40:e4:
         52:bc:fe:db:98:36:6f:83:1f:a8:d4:75:57:c8:00:04:7a:bf:
         f1:87:72:7e:e2:76:dc:fc:b9:6a:c1:e6:ce:3e:9d:be:45:ca:
         f7:97:33:4a:9f:4c:88:1f:3b:37:b4:e8:8f:73:03:76:7b:96:
         56:cc:03:29:a1:c2:d3:de:76:f4:b6:0b:55:89:5d:2c:0c:9a:
         a6:de:6f:bb:d4:aa:04:a9:af:e7:53:7b:84:bd:54:d7:4b:e3:
         f3:92:9b:5c:0e:3d:a8:e8:4d:03:96:11:84:1b:ef:ca:71:20:
         73:1d:98:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:47:30 2026 by rpki-client