Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft
File:                     40soVCBWzp4GUP78CrEkIWy1-cE.mft (raw, json)
Hash identifier:          EYbxt8+bdjvMeVnQSCKwywJjTuKsvTccvuwAeRw601Y=
Subject key identifier:   D1:E4:03:43:EC:62:78:50:F6:90:B5:C4:CA:61:F9:5A:BB:27:41:89
Authority key identifier: E3:4B:28:54:20:56:CE:9E:06:50:FE:FC:0A:B1:24:21:6C:B5:F9:C1
Certificate issuer:       /CN=A911C6E1/serialNumber=E34B28542056CE9E0650FEFC0AB124216CB5F9C1
Certificate serial:       0396
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft
Manifest number:          0384
Signing time:             Tue 21 Apr 2026 00:43:08 +0000
Manifest this update:     Tue 21 Apr 2026 00:43:08 +0000
Manifest next update:     Tue 28 Apr 2026 00:43:08 +0000
Files and hashes:         1: 40soVCBWzp4GUP78CrEkIWy1-cE.crl (hash: VJrv6tPEl3YwFJtiHLRh4KYuKJ+8qOCLwZIM/d6gguA=)
                          2: FBB9FE90E7E411EC84283679C4F9AE02.roa (hash: EnYUnwhxxmGS1rufxU7RsXLHu/nIHXPSapF4Xv6tzXQ=)
                          3: FB1BF574E7E411EC84283679C4F9AE02.roa (hash: bukBEThLb8LLsXrODRbnH9Gix64A0cuXZRIF6w/C3PQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.crl
                          rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 00:43:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 918 (0x396)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C6E1, serialNumber=E34B28542056CE9E0650FEFC0AB124216CB5F9C1
        Validity
            Not Before: Apr 21 00:43:08 2026 GMT
            Not After : Apr 28 00:43:08 2026 GMT
        Subject: CN=69e6c81c-3f77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6a:2b:95:45:96:c0:a9:47:dc:d8:60:b2:a3:
                    9a:d1:e7:36:fb:f2:ba:88:fc:26:e0:47:80:96:73:
                    87:55:ca:35:16:2a:b7:11:07:f7:cb:8d:b8:a1:8d:
                    6c:cf:41:2f:6a:74:1e:e5:c1:7e:9e:92:50:98:a7:
                    c0:bf:ba:fb:6d:7c:19:fd:c5:06:71:1d:7c:0e:77:
                    1e:38:99:a8:d2:05:10:da:58:c1:90:44:00:92:d9:
                    f3:6b:cf:0f:b2:42:2e:9e:a5:be:df:f1:fd:ed:20:
                    15:d4:7d:82:9b:1e:83:38:1c:57:8d:d9:a9:08:56:
                    78:a8:2e:c5:1b:cb:b3:f1:28:3c:87:80:fc:29:47:
                    a4:b6:37:aa:5c:7c:58:01:df:d5:38:c6:de:1d:be:
                    9d:7f:89:9f:d7:de:29:59:94:1f:37:23:30:20:d2:
                    ba:d6:36:4d:4e:c8:bc:f5:5e:f0:95:b0:7f:c9:aa:
                    39:56:3f:61:72:e3:4d:84:0f:c3:6d:d4:65:42:bd:
                    68:0a:e4:b1:c8:74:28:c8:af:1a:43:48:56:19:a9:
                    20:a3:77:0b:d3:ba:15:03:73:39:27:1e:3c:f8:62:
                    a2:3b:f5:7e:5a:19:6d:24:24:1c:8e:fa:18:b1:6b:
                    a3:74:0a:a7:69:b3:33:5c:80:54:53:77:11:c1:7f:
                    8e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:E4:03:43:EC:62:78:50:F6:90:B5:C4:CA:61:F9:5A:BB:27:41:89
            X509v3 Authority Key Identifier:
                keyid:E3:4B:28:54:20:56:CE:9E:06:50:FE:FC:0A:B1:24:21:6C:B5:F9:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:6f:11:49:f6:76:be:15:f9:69:42:72:ad:21:3e:43:dc:88:
         4f:ce:da:41:e3:e9:79:d3:09:e5:56:d3:d2:e4:21:37:61:2c:
         6e:13:24:9b:69:f8:2c:37:57:06:ae:6a:6e:47:bf:bf:82:b5:
         d6:df:41:f3:b2:81:dd:bb:f8:af:f3:df:d3:f8:ca:d2:01:91:
         18:5e:74:71:f9:2e:d9:e1:4a:57:1e:93:66:81:49:f1:38:db:
         37:82:ba:e8:a7:67:60:56:55:f7:89:59:10:89:56:30:36:a2:
         ee:8b:07:f9:d4:4e:eb:b5:54:2e:dc:56:6a:73:95:2d:03:27:
         cb:8a:e3:35:1e:ff:9e:4a:22:24:8b:d7:b6:ac:6f:ec:c2:4d:
         9a:7c:93:ec:3c:26:69:f2:da:ed:f1:7b:8f:ec:77:a9:a3:ee:
         25:2c:f4:b1:69:6d:c6:b4:50:c3:9b:21:48:fc:ff:d3:0a:c1:
         bf:26:28:53:39:3c:3f:be:ee:15:31:3d:61:fd:47:49:8d:32:
         83:3d:fe:57:ad:74:bb:de:df:87:cf:c3:99:d4:6a:c8:8a:4e:
         d0:aa:43:c5:b5:5e:81:17:fd:19:49:c8:d8:17:46:31:fb:de:
         ff:fb:7c:d8:82:3e:89:a3:64:e2:34:b6:f5:e4:7c:01:c7:09:
         ff:49:a4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 12:15:07 2026 by rpki-client