Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft
File:                     Mgs39ulwReOJhGEP-kfpaEqEZ30.mft (raw, json)
Hash identifier:          tMhwXmPVoPXNour0Qgti68YPJb4Slh4/kFmf+74cDbQ=
Subject key identifier:   2B:7E:AC:1A:A7:9A:78:5C:D6:3E:C7:93:4B:3D:0A:5B:8D:A1:C7:BD
Authority key identifier: 32:0B:37:F6:E9:70:45:E3:89:84:61:0F:FA:47:E9:68:4A:84:67:7D
Certificate issuer:       /CN=A911918E/serialNumber=320B37F6E97045E38984610FFA47E9684A84677D
Certificate serial:       2643
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft
Manifest number:          2628
Signing time:             Sat 04 Apr 2026 15:38:58 +0000
Manifest this update:     Sat 04 Apr 2026 15:38:58 +0000
Manifest next update:     Sat 11 Apr 2026 15:38:58 +0000
Files and hashes:         1: Mgs39ulwReOJhGEP-kfpaEqEZ30.crl (hash: jDlWK4E6oak0zueP18D0/g3BqBny/D7qZveNQ0/zscI=)
                          2: 34FC96E8CFE711EB93714D2FC4F9AE02.roa (hash: tyh4MT4qSJmExqCrFnw0c2r/E9gHBqGfx9yaFDJlbgg=)
                          3: 08B3B40EB14311E58FF2C717C4F9AE02.roa (hash: 1o77dodqmGPYDz/5Mp6mcgiLtsSwLHvDTMCzJi40a1k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.crl
                          rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9795 (0x2643)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911918E, serialNumber=320B37F6E97045E38984610FFA47E9684A84677D
        Validity
            Not Before: Apr  4 15:38:58 2026 GMT
            Not After : Apr 11 15:38:58 2026 GMT
        Subject: CN=69d13092-2386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:10:3f:f7:9e:5d:9f:d0:19:69:8d:e5:e4:47:
                    67:e5:10:49:2b:87:10:e1:1e:2f:aa:a1:af:79:74:
                    ae:95:e7:d7:be:dc:a5:68:fd:5f:fe:bc:d0:89:33:
                    e9:35:ad:97:43:93:e7:b2:d4:65:e7:63:16:45:49:
                    7c:d6:b0:9d:2e:93:04:a4:86:27:bf:eb:6b:a4:d2:
                    1d:72:21:0b:6a:83:fe:4e:3d:01:0c:0b:de:68:b9:
                    20:30:53:b2:0e:11:e9:8c:18:6d:73:14:aa:52:a3:
                    74:fe:60:27:1d:99:f5:ef:bf:61:72:bc:93:50:10:
                    73:3a:bf:7d:6a:6d:59:09:6a:54:37:74:c4:03:5a:
                    3f:7f:3b:41:58:13:26:cf:15:f0:c1:7e:12:0f:fb:
                    20:82:51:ad:fc:83:0c:be:80:12:6d:ec:90:f1:95:
                    8c:3d:41:1d:80:59:17:7c:80:e5:bd:9c:d5:c5:ef:
                    56:89:c2:68:ba:74:7c:23:7e:93:a3:d2:d8:58:2e:
                    18:ea:56:c3:f9:c3:1f:29:30:37:35:3b:b6:42:b1:
                    34:a2:be:c4:a8:61:6c:62:2a:01:38:31:11:b8:33:
                    7d:36:d1:f8:9d:ae:79:e8:a4:2c:d8:4b:7a:b9:8e:
                    ab:dd:b2:6f:55:df:af:42:06:95:52:99:64:b8:0c:
                    90:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:7E:AC:1A:A7:9A:78:5C:D6:3E:C7:93:4B:3D:0A:5B:8D:A1:C7:BD
            X509v3 Authority Key Identifier:
                keyid:32:0B:37:F6:E9:70:45:E3:89:84:61:0F:FA:47:E9:68:4A:84:67:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:a8:e9:3b:7a:4c:5b:dd:b7:e1:df:45:4b:ee:f8:e8:47:f0:
         ba:ef:a9:bb:ec:02:94:7f:12:d0:0d:24:da:62:bf:97:00:35:
         fb:f1:1f:0d:fb:c1:63:3b:ae:2a:15:5a:1d:71:a8:04:ef:25:
         a8:0d:4b:78:6e:4b:c9:59:47:5f:ea:d5:e0:2d:36:3b:ac:03:
         98:9f:69:25:52:71:6e:6f:26:0d:07:bb:5c:ac:0e:2e:16:da:
         d6:63:83:97:b6:f4:77:b6:4b:1b:62:6c:c9:fe:bf:a0:d9:d0:
         fb:47:65:04:36:f9:ef:9f:d9:3a:15:8c:bc:e5:b1:a5:b0:20:
         3c:8d:59:d3:45:f3:3e:a3:7c:87:9b:cc:35:47:fe:cb:f2:79:
         50:0a:93:19:86:27:64:88:88:94:29:08:fc:04:25:50:34:cf:
         da:81:66:10:dc:ed:7d:c8:df:b9:27:3f:7b:e6:39:72:a6:93:
         b8:fd:f7:c9:34:8d:a7:ee:65:3b:78:73:28:2e:7d:57:c9:f9:
         5e:8e:66:d9:10:ef:29:d9:c0:98:a4:7e:a3:73:61:62:47:f8:
         8e:cc:2f:b0:32:42:f9:78:4e:f8:00:e2:2f:c6:cb:ee:77:ca:
         76:f2:44:81:e3:5a:40:13:e3:71:f2:97:f9:ff:97:95:9c:ec:
         ba:25:df:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:05:31 2026 by rpki-client