Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919202C/2DC8924E21FB11F18258E26D2F3D8C67/87TgHnx3HLQliWfWZ_92HsnqOtg.mft
File:                     87TgHnx3HLQliWfWZ_92HsnqOtg.mft (raw, json)
Hash identifier:          mPXbDABu3aF7PGWQjHBS9JOt+IM2fTYaHAafsMwyxGg=
Subject key identifier:   BA:D6:59:1B:EB:51:43:A5:73:FA:A7:11:DA:06:4C:B7:24:28:F1:0D
Authority key identifier: F3:B4:E0:1E:7C:77:1C:B4:25:89:67:D6:67:FF:76:1E:C9:EA:3A:D8
Certificate issuer:       /CN=A919202C/serialNumber=F3B4E01E7C771CB4258967D667FF761EC9EA3AD8
Certificate serial:       10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/87TgHnx3HLQliWfWZ_92HsnqOtg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919202C/2DC8924E21FB11F18258E26D2F3D8C67/87TgHnx3HLQliWfWZ_92HsnqOtg.mft
Manifest number:          0E
Signing time:             Sun 05 Apr 2026 08:26:03 +0000
Manifest this update:     Sun 05 Apr 2026 08:26:03 +0000
Manifest next update:     Sun 12 Apr 2026 08:26:03 +0000
Files and hashes:         1: 87TgHnx3HLQliWfWZ_92HsnqOtg.crl (hash: V7eVn4uWXG2NjsjuH4HeNv5p0rnQvEB28V99l1/fPXw=)
                          2: 174BE768220111F196E3A71D323D8C67.roa (hash: DBc9eTzf4xtWxoUymp2lg1GqMjjg2PXot2nvZeab/bw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919202C/2DC8924E21FB11F18258E26D2F3D8C67/87TgHnx3HLQliWfWZ_92HsnqOtg.crl
                          rsync://rpki.apnic.net/member_repository/A919202C/2DC8924E21FB11F18258E26D2F3D8C67/87TgHnx3HLQliWfWZ_92HsnqOtg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/87TgHnx3HLQliWfWZ_92HsnqOtg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 08:26:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919202C, serialNumber=F3B4E01E7C771CB4258967D667FF761EC9EA3AD8
        Validity
            Not Before: Apr  5 08:26:03 2026 GMT
            Not After : Apr 12 08:26:03 2026 GMT
        Subject: CN=69d21c9b-ee05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5a:c1:00:88:8e:f3:cf:5e:94:93:b3:91:a1:
                    19:e2:5a:c3:88:d8:77:b3:70:43:7d:b9:6b:4d:58:
                    aa:c4:a4:c8:dc:36:95:8d:42:f3:a7:db:52:a5:cc:
                    89:e6:15:07:23:ae:cf:41:25:74:c2:ea:56:20:2c:
                    87:0a:58:b3:2c:5c:11:9e:91:9a:f6:1b:52:0c:fe:
                    11:98:05:d8:4a:04:70:01:46:c1:9b:5e:b5:21:c4:
                    f3:8b:8e:20:e8:3a:f7:88:ad:5f:f5:51:1a:94:ed:
                    7f:4f:a0:af:cc:47:18:7a:3c:b6:2c:31:74:f6:e7:
                    a6:96:87:dd:f8:8a:2c:24:56:09:6c:30:48:2b:12:
                    9e:67:ca:a4:1b:36:fd:62:6b:c6:ed:82:44:50:07:
                    8b:5a:b9:25:f9:c9:82:56:0a:21:54:58:1b:f5:77:
                    54:23:36:54:c5:f9:dc:e6:4b:c0:64:db:24:fc:9f:
                    24:a2:ef:e4:dc:7f:f9:37:2f:a6:e3:f1:de:73:5b:
                    6d:cd:5c:15:53:25:a4:6d:6f:2b:1f:44:e2:e7:d3:
                    5a:2f:1f:17:e0:ac:fe:af:fa:e9:b5:15:e6:a8:68:
                    b3:64:39:af:8d:5b:68:79:b2:35:74:84:6b:c8:22:
                    29:e7:47:14:6a:57:c8:c0:18:b7:ad:70:25:7e:51:
                    87:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D6:59:1B:EB:51:43:A5:73:FA:A7:11:DA:06:4C:B7:24:28:F1:0D
            X509v3 Authority Key Identifier:
                keyid:F3:B4:E0:1E:7C:77:1C:B4:25:89:67:D6:67:FF:76:1E:C9:EA:3A:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919202C/2DC8924E21FB11F18258E26D2F3D8C67/87TgHnx3HLQliWfWZ_92HsnqOtg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/87TgHnx3HLQliWfWZ_92HsnqOtg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919202C/2DC8924E21FB11F18258E26D2F3D8C67/87TgHnx3HLQliWfWZ_92HsnqOtg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:8d:ae:61:da:a0:1f:a5:5a:ef:92:15:90:73:ce:ac:64:af:
         25:18:92:ae:be:fb:88:33:e6:ed:4e:c6:7e:c7:22:9a:e8:c0:
         67:11:6e:3b:00:71:e4:4f:38:c3:5a:c8:40:3b:1b:88:89:5e:
         8f:fd:9d:8e:36:19:b9:95:96:21:08:b1:1c:fa:d4:e6:a3:37:
         e1:37:ce:00:f7:51:cc:37:f5:40:bc:45:0a:f9:64:bb:01:7b:
         da:ee:39:4e:7a:e8:00:b8:96:68:82:29:cc:27:7e:39:9a:e1:
         46:04:20:b4:7d:c4:e4:11:70:a3:ef:d5:80:bd:87:b1:8d:71:
         b8:7f:8a:50:cc:8a:fa:f2:bc:86:c5:49:30:9c:cf:5a:21:2f:
         23:db:25:5b:c6:f7:cc:a4:0a:18:3a:f1:da:63:0d:ad:69:cf:
         bd:24:18:b6:75:88:b7:79:51:88:72:40:97:0a:6d:22:7f:1d:
         da:93:07:5f:3d:d9:53:0d:d4:77:97:16:49:dc:b7:55:64:77:
         88:1c:d4:29:bd:d4:fc:9d:52:75:5c:ff:c7:8d:9d:cf:c2:08:
         59:86:f2:34:18:c4:6f:18:4e:5c:81:8c:3a:dd:3f:5a:70:f3:
         b7:73:0a:4d:88:1f:1b:a9:05:cc:4f:fe:5a:60:3a:cb:ca:9c:
         85:4e:90:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:57:31 2026 by rpki-client