Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft
File:                     b3fBnxHTKqqkLiaRb3SC77j5ehw.mft (raw, json)
Hash identifier:          +7pQisvfe5S0sFqc3fwaY9UIxhFxw+IS2S1t09WM+q4=
Subject key identifier:   C1:89:66:90:39:2D:A0:F0:7B:79:6C:DB:8C:AC:4F:A0:BC:B8:AE:73
Authority key identifier: 6F:77:C1:9F:11:D3:2A:AA:A4:2E:26:91:6F:74:82:EF:B8:F9:7A:1C
Certificate issuer:       /CN=A913D125/serialNumber=6F77C19F11D32AAAA42E26916F7482EFB8F97A1C
Certificate serial:       FA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b3fBnxHTKqqkLiaRb3SC77j5ehw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft
Manifest number:          F5
Signing time:             Fri 17 Apr 2026 06:02:00 +0000
Manifest this update:     Fri 17 Apr 2026 06:01:59 +0000
Manifest next update:     Fri 24 Apr 2026 06:01:59 +0000
Files and hashes:         1: b3fBnxHTKqqkLiaRb3SC77j5ehw.crl (hash: zGBbphmqZ7qHcQrai1uRPN8hQLLQA4B4nc4dCT2nPcY=)
                          2: 62743016CC1111EFA5744A6FC4F9AE02.roa (hash: hlc/zBoAtbTj6NsgQPISupfKKjQQ309kzeQx+JZUlfI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.crl
                          rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b3fBnxHTKqqkLiaRb3SC77j5ehw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 250 (0xfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D125, serialNumber=6F77C19F11D32AAAA42E26916F7482EFB8F97A1C
        Validity
            Not Before: Apr 17 06:01:59 2026 GMT
            Not After : Apr 24 06:01:59 2026 GMT
        Subject: CN=69e1ccd8-0bee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:3d:ab:46:98:f0:e2:18:01:5c:10:b8:3e:c6:
                    bb:72:56:01:68:6e:df:3e:9c:2c:d5:a0:ff:46:d8:
                    ee:c2:a5:c0:14:17:6a:38:5c:2a:86:60:03:18:94:
                    5e:ed:ed:a5:6c:20:04:5a:59:22:13:8e:18:f3:bc:
                    22:d5:a1:7d:c8:b8:ab:6f:88:a1:bf:82:39:1f:9a:
                    1c:e9:1b:4a:2c:25:fe:5d:b5:93:68:c0:32:ef:f1:
                    c5:de:46:1b:39:91:cc:fe:a9:bd:47:79:07:e9:24:
                    f3:5d:4f:4b:c5:75:90:28:dc:46:1c:16:06:95:1c:
                    fc:d3:cd:14:20:43:da:41:5e:3d:07:d9:ce:c3:13:
                    10:89:28:67:be:d1:97:41:e0:d2:33:ae:5c:d8:9d:
                    ca:ce:4b:4e:33:d8:2d:33:64:a2:10:92:cd:22:38:
                    07:1c:3f:68:c6:7e:28:bc:04:1a:e3:08:69:c0:17:
                    c3:a6:6c:dc:93:16:87:a6:46:10:13:f5:e3:09:a0:
                    d7:0f:96:de:ad:25:aa:48:9a:8d:c2:1a:8a:7c:4d:
                    c9:72:0f:b9:18:ff:41:0f:80:2d:f4:2d:cb:0c:7a:
                    d0:99:b6:ab:36:d6:1d:3c:6b:da:72:2f:e2:8e:a0:
                    25:d4:89:5b:1c:38:3d:d6:aa:e2:f1:ec:2c:fd:4f:
                    53:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:89:66:90:39:2D:A0:F0:7B:79:6C:DB:8C:AC:4F:A0:BC:B8:AE:73
            X509v3 Authority Key Identifier:
                keyid:6F:77:C1:9F:11:D3:2A:AA:A4:2E:26:91:6F:74:82:EF:B8:F9:7A:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b3fBnxHTKqqkLiaRb3SC77j5ehw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:6c:70:6f:da:f5:7d:a5:78:60:e1:ac:0e:f1:d8:0f:72:78:
         af:fd:15:38:7a:e9:a9:9f:b9:67:72:a1:03:b9:b5:a3:f8:4b:
         21:8a:b3:c5:de:02:72:30:54:d2:8c:59:36:bc:c2:9c:be:93:
         87:a9:be:44:5d:7b:0b:c6:76:f4:a4:d4:4f:ae:fa:78:7d:64:
         a6:c1:1e:f2:4e:ab:83:28:54:df:d2:30:b8:94:da:0b:14:83:
         68:a4:7b:b8:ce:bd:5a:19:27:a3:d4:44:e6:fa:69:ab:57:41:
         98:2b:7f:7c:9c:60:2c:9a:3e:5c:b5:af:93:ed:09:82:e2:f5:
         c6:97:04:cf:ff:e4:a4:fe:f8:32:bb:42:e0:1a:c9:78:0d:57:
         ec:c8:5b:bd:9e:99:4f:5b:8e:1f:25:7b:be:4a:1a:80:fd:6d:
         eb:28:f4:f5:a2:22:df:9f:15:7f:e7:39:f7:1b:fb:c1:58:90:
         6f:91:fe:69:8c:6e:e9:84:da:10:ad:30:2c:1c:01:7c:ac:5c:
         d4:c4:74:01:5e:40:f6:b5:00:42:15:35:0f:b3:a8:03:df:9a:
         95:da:18:b9:b4:ac:c7:5e:d5:f8:ea:38:6b:54:92:f5:eb:c2:
         2f:19:de:54:04:b1:9c:43:98:d2:5e:e5:aa:27:ec:66:ad:8f:
         44:36:be:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 22:24:07 2026 by rpki-client