Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E42C/0F8B6ACE001111F1892C277E406F56BC/ClvdO0-5-Mviogt7R_zLS4UwJTc.mft
File:                     ClvdO0-5-Mviogt7R_zLS4UwJTc.mft (raw, json)
Hash identifier:          S1HwMAGWjseOUd0ArrNtQF/AtQIcWl/l0K/7VBBRquM=
Subject key identifier:   66:43:6D:9A:0D:D1:1B:A4:45:BE:E8:DF:A8:90:D0:3C:46:6F:0A:5B
Authority key identifier: 0A:5B:DD:3B:4F:B9:F8:CB:E2:A2:0B:7B:47:FC:CB:4B:85:30:25:37
Certificate issuer:       /CN=A913E42C/serialNumber=0A5BDD3B4FB9F8CBE2A20B7B47FCCB4B85302537
Certificate serial:       37
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ClvdO0-5-Mviogt7R_zLS4UwJTc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E42C/0F8B6ACE001111F1892C277E406F56BC/ClvdO0-5-Mviogt7R_zLS4UwJTc.mft
Manifest number:          2D
Signing time:             Sun 05 Apr 2026 08:09:40 +0000
Manifest this update:     Sun 05 Apr 2026 08:09:40 +0000
Manifest next update:     Sun 12 Apr 2026 08:09:40 +0000
Files and hashes:         1: ClvdO0-5-Mviogt7R_zLS4UwJTc.crl (hash: 6j5tHB7SqAd6K7y485pq1eLiMlhWwKCtzcmqoulNm3M=)
                          2: 4C4BE7FE00F711F194E0B0C53C6F56BC.roa (hash: svd60AEEHpNpfVRn7OrH+VBGP9pdW4hSFbTkUKQrx6A=)
                          3: 4CC7C93C00F711F194E0B0C53C6F56BC.roa (hash: 7vAVjvl3vUeCtEH/2NqH9j2x3y9M77GMQ2JCNqdOMHA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E42C/0F8B6ACE001111F1892C277E406F56BC/ClvdO0-5-Mviogt7R_zLS4UwJTc.crl
                          rsync://rpki.apnic.net/member_repository/A913E42C/0F8B6ACE001111F1892C277E406F56BC/ClvdO0-5-Mviogt7R_zLS4UwJTc.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ClvdO0-5-Mviogt7R_zLS4UwJTc.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 08:09:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E42C, serialNumber=0A5BDD3B4FB9F8CBE2A20B7B47FCCB4B85302537
        Validity
            Not Before: Apr  5 08:09:40 2026 GMT
            Not After : Apr 12 08:09:40 2026 GMT
        Subject: CN=69d218c4-5b83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:51:d8:68:e3:3e:2a:59:eb:95:7b:f7:2c:4f:
                    e7:48:c9:e1:1a:fa:ff:a6:b9:78:48:b2:15:bf:40:
                    a9:00:88:69:aa:5d:0e:28:61:3c:ea:9d:75:41:96:
                    20:75:95:88:f8:1a:cc:87:f6:52:09:ce:3a:4c:91:
                    2f:e8:09:a6:fa:48:2d:8d:37:25:1b:5b:78:a5:74:
                    c4:a7:eb:69:aa:ae:ac:4a:d0:e3:d1:01:94:0b:9a:
                    ef:5a:c9:e2:3e:21:a8:e8:fc:fd:49:d0:4f:fa:a3:
                    2b:1d:a2:50:97:8c:94:58:5f:95:3f:13:70:8b:9c:
                    56:8c:75:fa:bc:ea:11:83:06:87:14:bb:9b:b9:bd:
                    52:f2:2a:9a:0f:cd:b8:65:3f:84:0f:3e:17:9e:d0:
                    c8:5b:ce:b4:ee:26:7f:b0:40:b1:8d:54:07:04:cf:
                    ee:62:4b:c9:7b:40:fb:f5:d4:9f:af:d5:bb:88:dc:
                    45:5e:ff:44:11:14:94:d2:0f:2a:8e:c8:6f:ef:1c:
                    08:38:c1:b5:8a:af:b8:66:8d:b4:45:0d:0a:2c:98:
                    ee:c2:e3:9c:62:02:60:9a:2c:38:db:86:c4:6a:dc:
                    61:1e:68:d3:25:c0:31:a5:72:36:e3:9f:96:0b:c6:
                    48:a9:64:93:1c:81:6a:0c:0a:a5:18:ad:bf:03:9a:
                    79:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:43:6D:9A:0D:D1:1B:A4:45:BE:E8:DF:A8:90:D0:3C:46:6F:0A:5B
            X509v3 Authority Key Identifier:
                keyid:0A:5B:DD:3B:4F:B9:F8:CB:E2:A2:0B:7B:47:FC:CB:4B:85:30:25:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E42C/0F8B6ACE001111F1892C277E406F56BC/ClvdO0-5-Mviogt7R_zLS4UwJTc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ClvdO0-5-Mviogt7R_zLS4UwJTc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E42C/0F8B6ACE001111F1892C277E406F56BC/ClvdO0-5-Mviogt7R_zLS4UwJTc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:12:20:3f:d2:ff:f8:96:16:44:d0:38:08:c8:d4:54:be:e5:
         56:f3:05:25:b0:45:be:3f:7f:94:c2:05:5c:a7:63:e0:14:60:
         5b:ae:3d:1d:94:10:6b:60:36:5e:31:f7:e5:92:e0:27:f7:60:
         74:6a:1f:43:8a:36:b1:07:eb:90:60:f0:04:4e:6d:58:20:40:
         40:5e:97:58:cd:5b:94:d7:ff:57:1a:72:62:9d:30:ff:c6:03:
         1d:b9:3b:61:2d:07:09:9e:0b:44:97:bb:1c:29:f5:8d:75:f0:
         bd:5b:2a:18:9b:3e:22:3f:d6:e4:a0:95:17:9e:3c:b6:3c:43:
         bc:83:47:d1:2a:18:5c:c8:b8:b7:d2:9e:47:ca:78:1b:c7:5e:
         e4:8b:af:ca:89:e6:01:f3:c4:17:17:6c:ca:b0:12:9f:33:0e:
         1d:09:53:0b:d0:33:78:64:17:cd:40:c4:42:c8:bf:4a:f3:4d:
         f0:7e:53:d0:5d:28:00:cb:6e:a4:a6:f7:a2:d9:58:a3:d0:7d:
         3f:94:4d:e8:0b:f9:1c:08:26:4b:f2:23:33:53:64:1a:f7:79:
         3e:99:bd:98:ce:66:4d:67:4e:01:68:c3:eb:ed:27:5c:58:74:
         c5:50:fb:08:23:20:ed:cb:08:de:50:2d:18:b1:91:a9:ef:5d:
         fb:be:6c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:57:43 2026 by rpki-client