Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.mft
File:                     1cNfp3myIZlgnD6gpTHFoNMyrQE.mft (raw, json)
Hash identifier:          dUAY8UYu7uCSQUd5xNOOJOKN6CGUye0R50BTq5nXnj0=
Subject key identifier:   A7:7A:B1:B3:63:9D:9D:A0:99:10:DD:0A:B2:61:D2:3D:80:FF:D8:A5
Authority key identifier: D5:C3:5F:A7:79:B2:21:99:60:9C:3E:A0:A5:31:C5:A0:D3:32:AD:01
Certificate issuer:       /CN=A912A8BC/serialNumber=D5C35FA779B22199609C3EA0A531C5A0D332AD01
Certificate serial:       0230
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cNfp3myIZlgnD6gpTHFoNMyrQE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.mft
Manifest number:          022A
Signing time:             Sun 05 Apr 2026 02:15:31 +0000
Manifest this update:     Sun 05 Apr 2026 02:15:31 +0000
Manifest next update:     Sun 12 Apr 2026 02:15:31 +0000
Files and hashes:         1: 1cNfp3myIZlgnD6gpTHFoNMyrQE.crl (hash: 9BVMQGQmn2Cmk3Y/NI5RMUVu8HbHzZf88hXI5Jpmg+E=)
                          2: 4D962E8AE65111ED90E5833EC4F9AE02.roa (hash: ozB4qSn60KTh14UkkZIERrYPZDHp9uoJD36BdQCwa/0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.crl
                          rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cNfp3myIZlgnD6gpTHFoNMyrQE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 02:15:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 560 (0x230)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A8BC, serialNumber=D5C35FA779B22199609C3EA0A531C5A0D332AD01
        Validity
            Not Before: Apr  5 02:15:31 2026 GMT
            Not After : Apr 12 02:15:31 2026 GMT
        Subject: CN=69d1c5c3-7898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:aa:70:93:8d:32:cb:9c:5b:38:6c:fa:e9:77:
                    b4:87:51:1b:a0:07:a8:ab:1b:7d:3a:cc:2a:f5:e7:
                    a3:09:48:c8:45:0c:a5:7b:6c:9a:4b:ed:9f:8e:58:
                    68:55:d8:9c:0c:27:98:21:11:9b:56:de:6c:60:57:
                    a0:10:cd:9e:01:72:9a:b7:c5:6f:23:26:05:56:c4:
                    a5:d0:dd:4e:9a:b6:94:92:f3:a9:39:5a:b1:ac:eb:
                    62:ec:bc:ce:88:2d:95:aa:2e:4c:f2:d8:cc:8d:14:
                    a8:74:18:c7:1d:72:56:d6:a4:eb:12:b9:0c:ab:d4:
                    23:37:93:cb:47:dc:02:37:63:a2:02:81:7a:dc:37:
                    6e:0e:ad:27:2a:93:3e:ed:7c:81:c2:07:bf:a5:5e:
                    9f:b8:4b:2c:f7:d5:12:a7:60:c1:d5:53:86:45:90:
                    d8:4b:06:b3:1b:00:5b:b1:1b:d4:96:58:29:f7:d2:
                    bb:2d:95:8a:17:cf:bd:85:20:b5:82:53:14:ea:1e:
                    66:f7:ab:f9:f8:c1:32:a5:c5:32:14:0e:82:de:4e:
                    f8:39:32:7a:91:ef:29:2c:12:54:c6:15:f1:cd:48:
                    eb:b0:31:06:a7:7d:5e:e8:9a:b7:e3:cd:f6:ae:9a:
                    3f:31:c9:10:90:c7:0b:67:79:56:81:26:02:2f:bf:
                    cb:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:7A:B1:B3:63:9D:9D:A0:99:10:DD:0A:B2:61:D2:3D:80:FF:D8:A5
            X509v3 Authority Key Identifier:
                keyid:D5:C3:5F:A7:79:B2:21:99:60:9C:3E:A0:A5:31:C5:A0:D3:32:AD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cNfp3myIZlgnD6gpTHFoNMyrQE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:f9:b9:ae:d0:2b:c3:8e:a2:7b:91:e8:2a:bd:a5:36:0c:97:
         c9:88:2f:67:27:56:4a:47:e8:dd:d1:3b:6b:54:eb:4a:73:0b:
         91:e7:82:a9:55:c0:8a:a6:5d:3e:d6:68:3f:d5:70:3e:66:9c:
         d5:d8:9c:15:e1:96:0f:e0:70:9b:41:b9:29:b3:99:6c:e1:6f:
         45:bb:ff:4e:71:53:a5:32:55:28:15:84:86:98:30:d5:9b:dd:
         ae:ff:69:dd:a1:55:5d:d2:5d:7e:2e:a3:9b:47:71:60:73:d2:
         a3:b2:b8:e7:f0:72:80:98:76:6c:6e:3a:ef:90:65:7a:e7:df:
         d4:a2:7c:86:65:37:b1:ff:ea:52:c0:b7:2a:22:f4:61:76:ed:
         dc:64:6d:ed:e8:4c:77:75:c7:e5:78:98:5a:47:57:4b:c4:b3:
         bc:55:4d:32:5c:f7:ca:12:52:1e:8b:77:a0:22:49:8d:21:5c:
         6a:aa:8d:2e:60:40:cd:72:df:be:f9:58:bb:82:b3:79:67:13:
         aa:f0:7c:6d:8c:85:cb:ee:1d:63:fd:63:60:87:39:6f:d9:88:
         7a:b8:71:1e:5b:41:17:d1:f2:43:c8:30:1d:86:a2:63:82:94:
         9c:5b:aa:a7:c5:e1:c9:60:a2:67:4d:e0:13:9d:55:cd:2e:75:
         fb:87:27:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:54 2026 by rpki-client