Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.mft
File:                     0KRmavNbS2VNgYHEzRyRGu-ZRbs.mft (raw, json)
Hash identifier:          1Lm3+qDnh5dFgKUA33VI03W88nDu/e5WKXORGYYtqLM=
Subject key identifier:   4D:37:B3:D0:48:E2:10:0F:C0:74:BB:BC:C6:B3:D9:0A:CA:20:B3:A6
Authority key identifier: D0:A4:66:6A:F3:5B:4B:65:4D:81:81:C4:CD:1C:91:1A:EF:99:45:BB
Certificate issuer:       /CN=A918FE4B/serialNumber=D0A4666AF35B4B654D8181C4CD1C911AEF9945BB
Certificate serial:       AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KRmavNbS2VNgYHEzRyRGu-ZRbs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.mft
Manifest number:          030C
Signing time:             Sun 05 Apr 2026 01:43:39 +0000
Manifest this update:     Sun 05 Apr 2026 01:43:39 +0000
Manifest next update:     Sun 12 Apr 2026 01:43:39 +0000
Files and hashes:         1: 0KRmavNbS2VNgYHEzRyRGu-ZRbs.crl (hash: Q/qXlqBsfn1t2PzA0lIom77ay2ap3t8gD8AB0uWur/0=)
                          2: F22AC4E253FA11F0ACEFB91BC4F9AE02.roa (hash: SMyrmxtQV4hV/cATS/CS4tud6wAe7MdwhtLWVFj4Hls=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.crl
                          rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KRmavNbS2VNgYHEzRyRGu-ZRbs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 01:43:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174 (0xae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FE4B, serialNumber=D0A4666AF35B4B654D8181C4CD1C911AEF9945BB
        Validity
            Not Before: Apr  5 01:43:39 2026 GMT
            Not After : Apr 12 01:43:39 2026 GMT
        Subject: CN=69d1be4b-fd74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:17:98:1e:b0:ce:2e:3b:42:15:7b:7e:91:25:
                    a9:0b:05:28:0c:6d:8c:d9:a6:20:57:57:47:d0:43:
                    fd:7a:d7:5f:67:a2:ed:e2:b0:1d:20:dc:0a:cc:62:
                    b2:b9:d0:bb:9a:5b:0e:df:79:8d:d4:e3:2d:40:78:
                    22:2e:cf:b7:5f:e0:f4:a2:50:cf:ff:45:09:23:66:
                    bb:5d:38:a4:cb:3e:01:ba:91:92:b7:1b:16:59:f0:
                    7f:67:8e:82:f7:58:39:a9:18:99:13:44:13:85:e5:
                    6d:ed:7e:04:7d:10:d8:a0:f4:5c:aa:bb:96:b4:e5:
                    ce:7b:45:f2:fd:66:b7:84:08:ab:f1:9b:c0:f1:80:
                    a3:2d:1e:45:60:31:8f:be:6c:ab:26:8e:1d:70:77:
                    96:f6:11:37:58:2f:60:f4:f5:1e:80:01:70:83:cd:
                    c9:cd:ec:84:ea:89:44:d4:a5:0c:75:94:9d:4c:cd:
                    fd:81:09:f3:44:05:89:f4:fd:01:b2:24:88:89:6c:
                    87:e0:10:96:fa:3a:5c:05:c7:a3:1d:fe:0a:06:b9:
                    ad:45:ed:89:06:25:14:6a:56:58:51:ca:a4:cd:62:
                    e1:0e:d3:2f:6d:ca:ce:a5:e3:fb:ee:af:f7:6f:49:
                    ea:95:0c:48:8b:a9:8e:e7:fc:9c:72:06:d7:cc:6f:
                    23:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:37:B3:D0:48:E2:10:0F:C0:74:BB:BC:C6:B3:D9:0A:CA:20:B3:A6
            X509v3 Authority Key Identifier:
                keyid:D0:A4:66:6A:F3:5B:4B:65:4D:81:81:C4:CD:1C:91:1A:EF:99:45:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KRmavNbS2VNgYHEzRyRGu-ZRbs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:eb:a1:b8:03:20:7d:4f:b7:ed:34:09:7a:8a:fe:4b:f0:e6:
         8d:bc:25:95:9d:09:4c:b5:47:e8:5c:8f:27:9c:70:06:24:83:
         c2:8e:3b:eb:79:65:f6:ec:d1:94:a0:7c:50:f4:19:3b:b4:56:
         b1:57:a6:14:53:fe:90:9b:be:3a:8b:cc:02:29:77:6e:e6:88:
         e3:19:0e:17:6b:ec:5c:65:5a:62:8d:e3:8b:bc:8e:f7:7d:87:
         e0:7b:4d:c8:24:f7:47:6a:5b:73:9b:28:90:b1:64:84:c5:52:
         55:68:68:27:7e:a0:94:c3:e2:dd:69:65:d3:fc:8a:43:e6:7c:
         82:23:3b:7b:48:1c:c6:1b:3d:45:ba:55:52:26:83:74:06:89:
         fe:84:bb:09:f8:4f:13:14:34:c5:f1:f6:84:9e:59:10:9f:96:
         7c:7a:0b:2f:43:72:93:00:60:07:4c:2b:07:5d:19:42:75:da:
         87:61:b4:27:50:9d:e6:69:21:21:6b:19:1e:7e:da:75:47:6a:
         9c:87:a9:79:38:08:95:c0:13:74:57:8d:aa:0a:49:79:51:c9:
         35:f8:81:b7:98:d1:f4:14:da:0f:24:65:31:e5:f4:e5:64:89:
         8f:4e:f2:80:be:7b:e8:2c:b5:78:40:88:01:8a:62:01:37:ab:
         87:ea:20:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:41:10 2026 by rpki-client