Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.mft
File:                     EdjY3F2WeN4DMJZ6LzgdT2e7VbY.mft (raw, json)
Hash identifier:          jspK99A3rDQRNhpzxyU/GEq9jFA8tRv1Pamy1sr4YC0=
Subject key identifier:   0B:58:F6:E8:C9:8F:8D:ED:46:A5:35:B4:9B:2F:81:7A:0F:AF:24:28
Authority key identifier: 11:D8:D8:DC:5D:96:78:DE:03:30:96:7A:2F:38:1D:4F:67:BB:55:B6
Certificate issuer:       /CN=A919D6D8/serialNumber=11D8D8DC5D9678DE0330967A2F381D4F67BB55B6
Certificate serial:       090A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.mft
Manifest number:          145C
Signing time:             Sat 04 Apr 2026 19:00:44 +0000
Manifest this update:     Sat 04 Apr 2026 19:00:43 +0000
Manifest next update:     Sat 11 Apr 2026 19:00:43 +0000
Files and hashes:         1: EdjY3F2WeN4DMJZ6LzgdT2e7VbY.crl (hash: d9mSZbBZsgLHblG6Hx2FymxghnfJ6i9e5KIeRGS/Vws=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.crl
                          rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 19:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2314 (0x90a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D6D8, serialNumber=11D8D8DC5D9678DE0330967A2F381D4F67BB55B6
        Validity
            Not Before: Apr  4 19:00:43 2026 GMT
            Not After : Apr 11 19:00:43 2026 GMT
        Subject: CN=69d15fdc-b533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:41:a3:3c:d5:3f:f0:47:51:ae:f6:15:e3:47:
                    6f:c4:9f:65:15:a5:6d:ba:b7:da:d3:0f:0a:27:be:
                    60:97:42:53:01:f8:55:5e:cd:bc:41:f5:d9:99:6e:
                    26:b7:ac:a8:10:7b:ad:fd:82:d6:4a:ac:bc:4c:6f:
                    a2:ca:19:44:45:9c:f8:46:74:d0:bc:d2:4e:51:d3:
                    df:8a:25:d8:d7:3c:87:7e:08:c1:0a:e5:76:51:34:
                    5d:04:f1:8d:65:38:ce:76:ca:46:a8:3c:d4:ce:b9:
                    13:fa:35:32:33:e9:2c:70:6a:c0:0a:52:5f:23:0a:
                    bf:f8:80:f1:85:30:ed:b6:bf:c5:4a:3a:c9:b3:66:
                    36:50:07:e6:0e:43:e2:4d:9f:ed:fc:05:c0:a1:a8:
                    e6:bc:44:5a:b9:0a:b9:c5:f5:7e:3e:dd:cb:60:8a:
                    4b:bc:37:59:0a:54:71:57:2c:1d:cb:71:2e:dd:a2:
                    f4:38:40:4f:0f:86:81:b8:43:0d:04:d5:df:61:08:
                    1f:b4:d9:89:77:aa:1c:6b:08:f1:ee:3f:74:d9:d0:
                    dc:26:51:c0:2d:76:d6:d7:40:2e:cb:9d:b8:9b:41:
                    7a:67:05:73:77:36:29:f1:b7:3a:58:9f:bd:4f:33:
                    f0:4e:8b:44:be:74:08:07:8f:16:ae:c7:1a:57:59:
                    37:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:58:F6:E8:C9:8F:8D:ED:46:A5:35:B4:9B:2F:81:7A:0F:AF:24:28
            X509v3 Authority Key Identifier:
                keyid:11:D8:D8:DC:5D:96:78:DE:03:30:96:7A:2F:38:1D:4F:67:BB:55:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:cb:49:0d:3e:36:0e:b2:2d:eb:2e:14:2d:55:6e:3b:a9:3a:
         72:3f:b8:16:36:92:f8:a8:51:da:c8:b9:d6:c9:58:f0:ae:ea:
         f9:b6:08:2a:9f:b6:fb:49:f2:0a:58:19:52:10:a0:45:16:98:
         ca:6d:1a:5d:ab:b4:ba:ab:24:21:8b:82:3e:62:7b:7a:ed:10:
         f5:94:dd:6c:20:f0:98:2b:d5:df:80:2e:65:8b:c6:d8:6a:af:
         f7:56:14:bc:48:1a:b1:f1:87:01:a9:5f:38:19:1f:b6:80:7a:
         06:9e:08:fd:94:8b:ea:be:7e:a4:81:59:19:af:d5:09:3f:24:
         7a:ff:aa:a4:10:5d:fd:e4:34:08:63:8d:74:8f:e5:57:6a:f1:
         dd:3d:11:61:fd:3b:d7:7a:49:d0:23:fc:c9:4a:20:16:37:a6:
         f8:9f:cc:52:4b:7f:9a:c2:24:0c:ad:a3:4e:1b:c0:69:b6:8a:
         c2:83:aa:e6:3a:fc:8c:63:65:e0:81:a3:9e:d0:5e:88:bb:86:
         73:eb:9a:e5:29:a9:b7:49:d5:4f:bb:17:a0:96:4a:5c:0e:20:
         75:bc:c9:5a:3a:0d:94:4f:fd:e2:8d:21:1e:7f:6f:ca:0d:8a:
         5d:8d:70:c6:74:30:14:b7:28:d5:54:80:84:e4:94:00:8b:a6:
         bd:2d:7c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:57:55 2026 by rpki-client