Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft
File:                     4jfSzTuh8bknVF8kSZKHKtCvwwU.mft (raw, json)
Hash identifier:          BCsb4GdJIpXyQgdnsxPAFG4JSgEYGJAAPFbBR/AHfgw=
Subject key identifier:   08:35:FC:1D:1E:3D:78:39:54:73:8B:FB:34:A1:31:4A:CC:98:50:86
Authority key identifier: E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05
Certificate issuer:       /CN=A912512F/serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305
Certificate serial:       0998
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft
Manifest number:          0976
Signing time:             Sat 04 Apr 2026 19:54:10 +0000
Manifest this update:     Sat 04 Apr 2026 19:54:09 +0000
Manifest next update:     Sat 11 Apr 2026 19:54:09 +0000
Files and hashes:         1: 4jfSzTuh8bknVF8kSZKHKtCvwwU.crl (hash: 0UJMbTh+nrq1zhI0z3KEbtUocRq9FN99pwQBLdILB3g=)
                          2: 4C5CCE6EB46A11EAB5A01176C4F9AE02.roa (hash: bij0GPc4q/HmqyQVEL/k0toCpN5+LlxlDW2eG5CFpnk=)
                          3: 9FCAD654781E11EB808A544BC4F9AE02.roa (hash: gVcn2SvZaK2nbxle9CZzKz71vAlE+GFSMyND+4DCZiA=)
                          4: 4B3A4250B46A11EAB5A01176C4F9AE02.roa (hash: 2QiWBnPaUCTJvdNP0zBmyWdyn7oHyts1Ul70IjP2j6Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl
                          rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 19:54:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2456 (0x998)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912512F, serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305
        Validity
            Not Before: Apr  4 19:54:09 2026 GMT
            Not After : Apr 11 19:54:09 2026 GMT
        Subject: CN=69d16c62-ac90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:24:21:d2:2c:ab:c0:ba:ea:b4:55:e6:70:74:
                    d0:0e:2b:1d:4c:f5:74:54:52:20:07:94:c1:33:bd:
                    17:07:35:0c:68:de:36:fb:c7:06:31:31:ce:8b:89:
                    da:cd:5b:f7:4e:73:82:e0:68:7e:3b:a6:d8:5c:40:
                    37:a5:88:02:e5:68:7c:62:a7:2e:c6:08:e0:be:fd:
                    b3:da:08:5a:30:24:22:ca:c8:8e:74:0e:58:3f:f8:
                    20:78:26:98:31:61:e1:55:c5:79:c9:bb:9a:01:85:
                    0b:5b:48:f7:45:68:e7:dd:b3:fc:1b:21:c6:b5:2d:
                    66:fb:c5:59:a6:0b:64:b9:14:ed:41:cf:5c:55:5d:
                    ce:db:3a:c4:66:b1:76:4d:2f:0a:6c:db:87:b8:11:
                    77:3f:54:5c:ac:8b:f5:6b:b8:f4:c5:84:e0:ff:1a:
                    89:58:cd:69:aa:a3:f5:03:96:e8:ca:78:94:fe:67:
                    a3:36:bb:ef:4f:94:f6:69:24:03:e9:44:5a:fc:03:
                    bd:f5:28:0d:aa:00:1b:0d:15:40:d7:6f:64:d8:66:
                    bf:2c:47:f6:b1:b5:1e:1b:08:d4:8b:90:f3:04:8b:
                    70:82:54:b3:43:25:15:d9:b7:f1:49:a6:86:98:a2:
                    83:d9:27:62:8d:75:f6:72:09:32:92:43:9b:88:dc:
                    62:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:35:FC:1D:1E:3D:78:39:54:73:8B:FB:34:A1:31:4A:CC:98:50:86
            X509v3 Authority Key Identifier:
                keyid:E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:b8:03:9c:fb:cf:88:a4:cd:e2:51:ca:fa:3a:76:81:0a:54:
         4b:bb:6e:39:8c:05:ef:09:91:77:16:c1:bb:29:9c:6e:c4:fa:
         14:6a:4f:01:90:b5:00:20:ae:c7:46:33:c5:0b:aa:2d:fc:e9:
         83:85:28:f2:00:2d:f0:b9:c9:23:80:73:ba:91:21:c2:c7:7f:
         eb:d7:e9:48:1a:d7:25:25:b4:5e:d4:39:0f:ae:31:3d:4a:2f:
         d7:40:c5:6a:3a:dd:0d:4d:37:4f:26:4e:64:04:6a:78:49:97:
         fd:79:af:3f:d0:0b:46:9a:bc:08:56:58:6b:91:de:20:0a:3e:
         93:1d:55:b0:81:cb:89:ab:5a:db:99:f6:12:ec:d6:50:69:9b:
         e6:fc:59:2f:38:29:0e:2f:75:d4:88:2c:13:14:6f:3b:ce:e1:
         56:c5:f5:2a:17:ed:e4:19:74:65:bf:c1:b1:c7:0a:17:85:4c:
         2f:de:0c:b8:71:b4:aa:c3:b7:e5:12:0d:17:6e:15:0d:85:d5:
         8f:f6:90:61:5b:c0:9c:f8:e8:26:89:5c:62:25:20:25:f3:ee:
         83:0f:47:fc:b6:fa:90:b9:54:ab:27:c0:37:10:8d:81:57:24:
         9c:0e:13:23:91:71:0c:cd:34:f7:1d:6e:1a:69:16:49:68:d8:
         8c:8e:8d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:53:38 2026 by rpki-client