Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193F42/800ED9CCA2B311F09466E235C4F9AE02/tB02AK8mCZMOgvCWAMevmPLdbJ8.mft
File:                     tB02AK8mCZMOgvCWAMevmPLdbJ8.mft (raw, json)
Hash identifier:          HSWWjCYTc+2IOx7ELv1lLMo8dx7wGSAqSb1WBG/wbPo=
Subject key identifier:   F6:E1:52:E8:75:EA:2C:EF:0E:09:B3:21:5B:66:12:57:06:ED:FE:A8
Authority key identifier: B4:1D:36:00:AF:26:09:93:0E:82:F0:96:00:C7:AF:98:F2:DD:6C:9F
Certificate issuer:       /CN=A9193F42/serialNumber=B41D3600AF2609930E82F09600C7AF98F2DD6C9F
Certificate serial:       64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tB02AK8mCZMOgvCWAMevmPLdbJ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193F42/800ED9CCA2B311F09466E235C4F9AE02/tB02AK8mCZMOgvCWAMevmPLdbJ8.mft
Manifest number:          61
Signing time:             Sun 05 Apr 2026 07:22:43 +0000
Manifest this update:     Sun 05 Apr 2026 07:22:42 +0000
Manifest next update:     Sun 12 Apr 2026 07:22:42 +0000
Files and hashes:         1: tB02AK8mCZMOgvCWAMevmPLdbJ8.crl (hash: 6f+lTJkRBukuF1lTmPAV8U9AbwjCmtqk6NKi0LPVtVU=)
                          2: E8D991EAA2B311F09C429E36C4F9AE02.roa (hash: rX5/7gKSXJTLeHn8vFsBC/ibmFcKVc04ia3nrFa3Qck=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193F42/800ED9CCA2B311F09466E235C4F9AE02/tB02AK8mCZMOgvCWAMevmPLdbJ8.crl
                          rsync://rpki.apnic.net/member_repository/A9193F42/800ED9CCA2B311F09466E235C4F9AE02/tB02AK8mCZMOgvCWAMevmPLdbJ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tB02AK8mCZMOgvCWAMevmPLdbJ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 07:22:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193F42, serialNumber=B41D3600AF2609930E82F09600C7AF98F2DD6C9F
        Validity
            Not Before: Apr  5 07:22:42 2026 GMT
            Not After : Apr 12 07:22:42 2026 GMT
        Subject: CN=69d20dc2-e822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c1:51:cf:dd:a7:b7:5e:59:c6:ff:e3:52:54:
                    cb:2f:1b:36:5a:6b:7c:18:dc:7b:0a:ae:75:61:94:
                    a3:0e:ba:bc:75:87:38:02:bf:e7:23:62:43:66:75:
                    4c:2e:c7:16:73:fd:45:67:01:2f:9b:3e:c1:f5:56:
                    71:36:d2:cd:07:76:46:e6:4e:20:71:3d:4b:ce:57:
                    04:8c:22:0c:5f:dc:52:37:4a:62:66:a0:ec:06:6a:
                    c7:8f:64:e4:61:48:c6:62:9a:cb:82:cc:b3:cd:cc:
                    d7:59:24:3a:25:1c:a6:0a:ca:f1:24:fa:c1:65:ca:
                    19:6d:c3:15:de:4f:6c:1c:f0:86:ca:5d:03:88:d5:
                    95:74:0e:c3:82:f5:fa:63:50:e9:23:f0:a3:c5:d8:
                    27:8b:8a:6f:24:fa:90:94:42:0b:5d:ac:db:9a:02:
                    78:ba:1c:9b:e2:2d:15:fb:92:90:10:a6:07:75:41:
                    72:74:4f:04:d4:0e:52:02:83:47:aa:87:fa:b9:93:
                    e0:68:1b:db:c8:66:8f:65:9d:b2:91:49:80:da:16:
                    d1:7e:93:34:91:23:a4:2d:bc:38:a5:47:95:7f:2e:
                    32:20:61:83:d6:b1:62:72:d0:88:11:6e:71:e0:a1:
                    8f:12:e6:df:73:eb:20:21:5c:d2:98:10:f4:18:e8:
                    7a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E1:52:E8:75:EA:2C:EF:0E:09:B3:21:5B:66:12:57:06:ED:FE:A8
            X509v3 Authority Key Identifier:
                keyid:B4:1D:36:00:AF:26:09:93:0E:82:F0:96:00:C7:AF:98:F2:DD:6C:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193F42/800ED9CCA2B311F09466E235C4F9AE02/tB02AK8mCZMOgvCWAMevmPLdbJ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tB02AK8mCZMOgvCWAMevmPLdbJ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193F42/800ED9CCA2B311F09466E235C4F9AE02/tB02AK8mCZMOgvCWAMevmPLdbJ8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:4b:ca:d0:c9:ea:df:d5:3d:44:3b:8a:00:15:f5:f6:73:f9:
         f9:fd:69:98:ec:cb:92:95:2b:29:37:15:fc:da:c0:fc:62:5c:
         0c:86:b1:99:25:a9:03:80:bc:95:00:a8:22:41:fb:d1:1a:69:
         2d:ef:c0:61:f6:f8:3c:99:be:92:e4:b6:4f:9d:b6:42:5a:fb:
         2e:27:c7:44:41:42:5b:6d:09:e3:c5:6e:9c:71:68:73:6b:03:
         40:7e:c2:09:68:fd:09:30:f3:02:87:86:bd:75:a3:62:b1:d7:
         e6:b2:51:2a:24:36:5e:81:e3:b9:d4:22:18:8e:27:22:08:89:
         d2:d4:71:5d:2d:40:72:5b:e5:47:71:00:7c:ba:a1:ee:7a:15:
         f2:48:42:26:5e:b7:60:3d:e0:dd:bf:42:0b:ba:20:8f:79:e0:
         98:69:8d:9c:23:f1:66:72:2c:8b:b2:ec:24:d7:05:ed:45:c1:
         91:cd:8a:ea:6b:04:2d:7e:d5:83:68:c7:09:60:d2:81:f3:fd:
         b0:f5:ea:ad:1d:5b:16:eb:00:74:31:68:c5:58:94:74:95:46:
         24:8f:8e:a7:48:04:ab:42:46:8c:9f:6f:24:3b:10:28:06:55:
         e3:09:0f:05:6d:d1:77:30:5f:f6:e1:25:a2:56:af:2b:b2:fa:
         61:fb:71:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:58:56 2026 by rpki-client