Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.mft
File:                     2MZzCV6Cqbfn381GWA94MajRiso.mft (raw, json)
Hash identifier:          hfR4yaHxw9b4DLwNkYsMyFzA5elym50pPlv7TehTgEA=
Subject key identifier:   99:C5:D0:3B:DC:0B:C3:5A:33:30:5C:5B:3A:6C:F4:A4:DD:66:E3:9E
Authority key identifier: D8:C6:73:09:5E:82:A9:B7:E7:DF:CD:46:58:0F:78:31:A8:D1:8A:CA
Certificate issuer:       /CN=A911862D/serialNumber=D8C673095E82A9B7E7DFCD46580F7831A8D18ACA
Certificate serial:       17EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2MZzCV6Cqbfn381GWA94MajRiso.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.mft
Manifest number:          17C8
Signing time:             Sat 04 Apr 2026 16:28:55 +0000
Manifest this update:     Sat 04 Apr 2026 16:28:55 +0000
Manifest next update:     Sat 11 Apr 2026 16:28:55 +0000
Files and hashes:         1: 2MZzCV6Cqbfn381GWA94MajRiso.crl (hash: LYRi6DWt9OaIlBI4fpNluujAPTGoiEMAR7KlRsLw8eg=)
                          2: 07FF86DACF3F11F0AF94352AC4F9AE02.roa (hash: axL4DxRLdN4w1oidCM91AwY0+Ml6Zzq4wlYIpZ72Alw=)
                          3: EE9AC4A2CF3E11F0BD67F029C4F9AE02.roa (hash: 1ifr0yn5rYOREwHuBa/9PEbXr1t4wQIXYEhnH3YZcdI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.crl
                          rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2MZzCV6Cqbfn381GWA94MajRiso.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 16:28:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6126 (0x17ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911862D, serialNumber=D8C673095E82A9B7E7DFCD46580F7831A8D18ACA
        Validity
            Not Before: Apr  4 16:28:55 2026 GMT
            Not After : Apr 11 16:28:55 2026 GMT
        Subject: CN=69d13c47-b368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2b:ef:cf:c4:87:77:a9:10:5b:5d:c4:e0:5e:
                    47:09:27:c0:70:a6:19:31:16:f0:ca:44:75:ae:2c:
                    8d:08:bd:e3:f1:d6:0b:33:45:46:97:9a:00:fa:aa:
                    8f:7e:62:22:85:46:51:51:3c:0b:80:4f:b7:c9:e5:
                    c3:ad:66:b5:2e:e5:15:14:3d:be:c8:1d:8f:90:b4:
                    8b:19:d2:08:fe:10:a4:d4:0c:3d:45:9b:08:e7:ae:
                    82:d4:f8:90:d9:41:e1:31:07:cf:59:9a:3c:15:5f:
                    05:82:ee:39:ac:f5:39:e2:85:7d:11:2f:92:da:af:
                    e8:a0:09:a8:4d:47:e7:c9:9c:a5:2d:c7:c9:8f:41:
                    97:53:d6:0b:31:43:17:71:a3:d7:1c:97:63:1e:cf:
                    92:c0:8f:db:be:ec:bc:f7:8a:e2:4f:82:6e:63:d7:
                    2c:fa:a9:48:3d:72:ac:39:31:3b:f8:82:83:0a:39:
                    9b:24:d3:03:74:e7:c2:04:dd:cd:31:19:46:8a:85:
                    ed:35:b8:16:23:56:52:bb:08:6f:56:91:0d:ee:6c:
                    32:de:3a:8a:d9:59:9b:15:97:9f:b3:7b:6e:43:0e:
                    79:33:51:c7:c2:7b:b0:e5:54:48:c4:cd:0f:4f:13:
                    04:1f:61:b7:51:92:8b:36:0c:24:ae:97:24:db:f9:
                    a4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C5:D0:3B:DC:0B:C3:5A:33:30:5C:5B:3A:6C:F4:A4:DD:66:E3:9E
            X509v3 Authority Key Identifier:
                keyid:D8:C6:73:09:5E:82:A9:B7:E7:DF:CD:46:58:0F:78:31:A8:D1:8A:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2MZzCV6Cqbfn381GWA94MajRiso.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:1b:91:98:e2:c9:94:ce:46:51:8f:53:19:f7:00:4e:20:e8:
         4a:12:ad:d4:92:39:2b:87:b6:df:9f:74:ca:e3:6d:54:51:33:
         3c:36:4b:cc:4a:2a:f2:eb:6f:bb:d4:30:39:7d:f2:e0:ef:2d:
         9f:cf:f4:0c:7e:09:8f:4b:40:ee:0f:3e:1b:93:ba:c5:c4:25:
         6b:b0:7c:da:05:ad:3d:e7:46:e2:87:be:a8:0c:22:aa:54:8e:
         1a:e5:64:c2:4d:7b:67:f0:d1:5f:33:5e:6f:e1:22:4f:05:db:
         65:83:6c:c6:32:de:23:3d:9d:6b:44:ef:7a:f3:fd:1b:05:59:
         8e:d4:98:b9:e4:62:73:b6:b3:a3:56:e9:33:b4:02:9b:54:cf:
         5d:a9:a4:6c:54:20:63:5f:1c:ae:98:27:60:04:60:40:5e:45:
         41:47:53:3a:eb:40:59:91:e4:74:68:fe:c8:1e:42:04:73:94:
         67:e5:a8:60:55:aa:d0:9a:20:46:35:82:21:9d:c3:b3:65:ed:
         47:c7:5f:46:6e:b4:3e:7b:74:c6:3b:4d:9b:46:dd:a0:68:f1:
         0f:14:16:2c:37:cd:f7:0d:75:77:0c:f0:19:2d:b9:0a:11:9c:
         c1:31:99:89:d8:61:46:4e:31:59:d6:29:92:3a:9e:23:27:91:
         27:5c:fa:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:55:05 2026 by rpki-client