Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft
File:                     pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft (raw, json)
Hash identifier:          Yf5B2ULhotdTkGwapPz6w1o2mctMKjJRHzXUrM/zQQ0=
Subject key identifier:   CC:39:D3:13:F5:E0:60:1D:4C:8A:87:06:3B:41:79:A8:CB:3F:17:F9
Authority key identifier: A5:17:41:DC:19:CB:93:90:40:26:76:A0:3A:1F:DA:EB:E0:E7:F2:BC
Certificate issuer:       /CN=A911DCFB/serialNumber=A51741DC19CB9390402676A03A1FDAEBE0E7F2BC
Certificate serial:       05DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pRdB3BnLk5BAJnagOh_a6-Dn8rw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft
Manifest number:          05D4
Signing time:             Sat 04 Apr 2026 22:47:50 +0000
Manifest this update:     Sat 04 Apr 2026 22:47:49 +0000
Manifest next update:     Sat 11 Apr 2026 22:47:49 +0000
Files and hashes:         1: pRdB3BnLk5BAJnagOh_a6-Dn8rw.crl (hash: JfO2oLdAmazzsPRhZVgSI2dOVQ8tK92VnQHs8wGj7IY=)
                          2: 4CBECA5CF9C311EBBA064C70C4F9AE02.roa (hash: F6f3sqC/VrCexYL7KiqhHMWOLZTVDuTXvmAuEtkPuPk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.crl
                          rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pRdB3BnLk5BAJnagOh_a6-Dn8rw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 22:47:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1500 (0x5dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DCFB, serialNumber=A51741DC19CB9390402676A03A1FDAEBE0E7F2BC
        Validity
            Not Before: Apr  4 22:47:49 2026 GMT
            Not After : Apr 11 22:47:49 2026 GMT
        Subject: CN=69d19516-e1a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0e:37:7e:ec:61:dd:d3:04:46:2c:80:e1:b2:
                    0c:12:8f:7a:9f:7a:0d:95:dc:42:d9:e3:9a:8d:15:
                    37:9a:0c:17:be:88:8f:6a:4e:5c:66:9e:c3:1f:b8:
                    94:77:b8:a7:9e:14:d6:3a:53:54:04:b9:c5:f4:c2:
                    78:7e:fb:46:04:f1:cf:b8:e4:fe:2b:94:b1:c2:d2:
                    fe:5d:05:f8:f8:d3:b6:5e:e2:01:1a:c8:10:f6:40:
                    d4:1c:f3:dc:60:8a:fc:e8:bb:06:5b:28:27:3a:57:
                    eb:0a:5d:60:cf:1b:98:c2:a0:a1:5f:c4:08:57:5d:
                    bc:07:19:3a:b6:5e:50:96:d6:65:3e:b0:48:a9:65:
                    ab:f5:25:fd:6c:32:cb:8b:74:8f:92:12:57:06:bd:
                    1f:bd:b6:a5:ff:59:12:98:25:40:2d:cd:24:0d:12:
                    9c:bb:8e:b3:42:24:25:52:e7:94:41:de:34:21:81:
                    7f:72:c1:11:db:5d:4b:ef:ae:9e:e9:e9:74:70:04:
                    f1:5d:2e:72:0e:48:7b:5e:8f:74:07:f0:8a:dc:b2:
                    4a:00:9d:a5:b3:97:d3:22:d0:cd:56:68:1a:00:8d:
                    23:62:86:37:53:42:c2:d2:a4:46:ec:3b:80:1d:1d:
                    a7:d6:04:d9:7a:f6:29:de:6f:3b:f5:f0:d9:13:f9:
                    00:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:39:D3:13:F5:E0:60:1D:4C:8A:87:06:3B:41:79:A8:CB:3F:17:F9
            X509v3 Authority Key Identifier:
                keyid:A5:17:41:DC:19:CB:93:90:40:26:76:A0:3A:1F:DA:EB:E0:E7:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pRdB3BnLk5BAJnagOh_a6-Dn8rw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:bc:04:ad:66:18:68:7f:47:cd:c0:3b:17:1b:8a:14:e6:d2:
         53:89:32:53:ed:cb:0f:5a:53:52:38:ac:9e:82:a4:08:87:93:
         39:82:43:bb:8c:34:4f:9f:c3:85:4e:a9:24:ba:ed:a0:36:d1:
         69:45:c6:bb:3f:0e:a4:b9:5f:98:89:ff:15:e1:dc:04:28:4e:
         c5:66:df:a8:cd:7e:d5:dd:86:f7:57:ab:4d:cd:ea:a3:de:2e:
         33:7a:bb:47:e5:c4:60:5d:a5:7d:bd:4d:de:32:cc:c0:9d:18:
         13:6e:67:99:04:bd:7a:4c:18:f9:72:74:03:d6:93:12:67:c7:
         a2:78:ed:65:44:f5:71:5c:83:47:c4:8e:04:01:c8:4d:68:4c:
         63:ac:fe:4d:70:9c:06:ad:d8:fd:f7:1b:01:88:9b:0b:f1:b2:
         52:11:72:4c:d9:81:f2:81:ab:85:8f:0a:9a:ad:3b:83:bb:a4:
         84:90:8a:90:0f:a9:8a:d9:6f:51:29:7a:2e:f4:c2:01:cf:00:
         49:a3:cb:7c:b1:c9:d4:4f:75:83:b2:ed:02:e5:b6:8c:03:f2:
         8b:21:b2:8d:60:4c:f8:cc:71:bb:b6:0a:9e:7a:5f:01:81:b2:
         d4:a3:b6:95:94:c5:c3:bd:10:53:e0:5e:c4:78:85:08:b8:98:
         36:37:19:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:28:58 2026 by rpki-client