Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.mft
File:                     _j2he1Sk1C98XJqKZ9N5Bnp2CA4.mft (raw, json)
Hash identifier:          1ZURrQ5VJescuJI/c4kwf32yW4D6aIBSt+vRvJ1VxOU=
Subject key identifier:   86:D3:DA:19:B3:7C:51:68:6A:EB:3E:41:80:77:71:7A:0E:55:81:B0
Authority key identifier: FE:3D:A1:7B:54:A4:D4:2F:7C:5C:9A:8A:67:D3:79:06:7A:76:08:0E
Certificate issuer:       /CN=A913FF2C/serialNumber=FE3DA17B54A4D42F7C5C9A8A67D379067A76080E
Certificate serial:       0504
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.mft
Manifest number:          04EE
Signing time:             Sat 04 Apr 2026 23:37:10 +0000
Manifest this update:     Sat 04 Apr 2026 23:37:09 +0000
Manifest next update:     Sat 11 Apr 2026 23:37:09 +0000
Files and hashes:         1: _j2he1Sk1C98XJqKZ9N5Bnp2CA4.crl (hash: LzuRrdkLiTjBIGCb6Rt/uOUykZbk+wonS0jJWglqOWc=)
                          2: A46DD938EF8D11EEAF47227BC4F9AE02.roa (hash: fhiAdGa4IPwNMr1C8st0hwPcHptchYq4f6e4udnEpd8=)
                          3: 3615B9806CB911EE91852F72C4F9AE02.roa (hash: 61Giy9BtVW5vUYKxIQpVLEtE+uQr+3ZeqDe9C2sRopM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.crl
                          rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 23:37:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1284 (0x504)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913FF2C, serialNumber=FE3DA17B54A4D42F7C5C9A8A67D379067A76080E
        Validity
            Not Before: Apr  4 23:37:09 2026 GMT
            Not After : Apr 11 23:37:09 2026 GMT
        Subject: CN=69d1a0a6-d060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:49:1e:b4:3d:78:50:50:8f:d3:39:3d:cb:0e:
                    59:fe:e3:27:76:b1:e0:be:af:78:03:6e:2a:f4:58:
                    e2:24:87:88:29:91:77:4b:61:74:31:05:ba:e9:aa:
                    63:c7:e1:17:0a:c2:c7:7e:9b:e0:f8:96:89:d0:61:
                    a3:a2:3d:3f:b0:90:3f:78:f6:73:1a:c5:f6:c9:37:
                    6e:40:c4:c6:af:fe:03:76:e9:2f:e9:db:e5:1a:ca:
                    87:40:42:d1:3e:c1:7e:34:e9:d6:cb:99:86:85:71:
                    a6:67:97:cb:3c:15:ed:4b:49:e9:23:33:53:7c:b9:
                    4d:aa:ff:99:23:0c:ea:78:5a:c7:f6:74:7c:8a:42:
                    80:d1:ba:70:4d:90:f3:e8:44:b5:f5:43:b9:b7:51:
                    c3:a3:2a:26:af:19:ed:9a:d3:3f:0f:cb:d6:18:30:
                    53:3e:67:83:69:be:59:e5:3a:db:8f:86:0b:2a:5f:
                    6a:d7:f8:76:c8:f8:b3:b4:ed:c4:9a:21:9a:81:88:
                    e0:b6:7b:68:96:4a:ca:df:ea:1a:26:82:8d:88:44:
                    f3:a9:a9:dd:c3:81:ea:56:b5:ca:a8:3d:4a:02:81:
                    f0:a1:c8:0b:87:df:34:e9:4c:55:70:c2:68:08:ed:
                    fc:22:f7:94:15:fd:08:a9:e7:4e:38:57:db:d9:0f:
                    f2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D3:DA:19:B3:7C:51:68:6A:EB:3E:41:80:77:71:7A:0E:55:81:B0
            X509v3 Authority Key Identifier:
                keyid:FE:3D:A1:7B:54:A4:D4:2F:7C:5C:9A:8A:67:D3:79:06:7A:76:08:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:2e:a2:11:a1:e9:c4:84:0d:73:5c:ff:dd:b7:af:ed:3f:59:
         27:ee:d9:2a:5f:53:c6:a5:e8:99:ee:d7:45:6e:05:44:7c:73:
         cb:62:86:3c:43:fe:a1:1c:65:cc:21:81:21:20:d1:98:b5:5b:
         53:d0:dc:da:58:f7:35:7e:a5:16:63:47:38:0d:d6:f8:3b:0f:
         f3:c8:ee:5b:e6:84:cc:f0:8f:8f:92:a8:70:7f:ce:7c:5f:d6:
         cb:d5:8f:88:ef:c9:70:d2:eb:2b:3d:bd:46:01:26:09:a9:da:
         e5:e7:c4:2f:dd:f8:eb:b3:b4:b9:d8:fc:e1:7d:c7:96:6d:d4:
         30:6b:fd:a2:c2:28:65:a2:5c:e0:47:11:6f:f0:03:35:41:11:
         d2:14:29:e7:04:9f:63:fa:b7:d3:de:ea:88:8c:09:2e:a3:7b:
         49:85:5b:ed:79:09:63:68:23:18:5c:da:57:f1:88:86:98:4b:
         cb:8d:d7:36:14:4b:09:6c:c3:83:76:dd:60:b5:a9:f4:b1:17:
         38:37:b3:8d:14:da:67:b8:39:f9:35:e3:df:da:6d:a9:23:b7:
         60:f4:75:73:49:cb:4d:59:0e:88:2b:7b:86:cf:19:35:f9:9f:
         ee:42:91:5b:0a:35:fd:07:4d:9b:5c:4a:d1:95:fb:52:fe:26:
         90:2e:10:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 11:19:28 2026 by rpki-client