Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft
File:                     R8vvcL1VuVMzMbi8wumClWOizpQ.mft (raw, json)
Hash identifier:          xwVzW0HD7HkHLejKcc1lKu3Z1LJYLIM0vCsiEbJtxmw=
Subject key identifier:   FE:BF:82:64:81:63:BC:1B:1F:14:EC:87:81:15:B4:B9:B4:95:60:00
Authority key identifier: 47:CB:EF:70:BD:55:B9:53:33:31:B8:BC:C2:E9:82:95:63:A2:CE:94
Certificate issuer:       /CN=A9142A1D/serialNumber=47CBEF70BD55B9533331B8BCC2E9829563A2CE94
Certificate serial:       06EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft
Manifest number:          06D2
Signing time:             Sun 26 Apr 2026 22:14:23 +0000
Manifest this update:     Sun 26 Apr 2026 22:14:23 +0000
Manifest next update:     Sun 03 May 2026 22:14:23 +0000
Files and hashes:         1: R8vvcL1VuVMzMbi8wumClWOizpQ.crl (hash: cv0RblaoOL+7nZxkjcZqEnmjtajSTXCzreg+lLIyIzI=)
                          2: 440BBCC8D50411EB8AB09711C4F9AE02.roa (hash: ggYLAZLBkQHkBSRUA3z1VEuHuytE5FGiVTm9TlrkgRM=)
                          3: 2C9AF3A2659411EDA3257D0AC4F9AE02.roa (hash: Rlwd9V0UyAZ+wngxzGsVfDnfL9HwwVlxbBwY31cYYjQ=)
                          4: 0C65AFCECE8511ECAEF2C52BC4F9AE02.roa (hash: C9QuYAu99xYfQCc0kG7HsrANXXNYdfdra+AEIE1V61A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.crl
                          rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 03 May 2026 22:14:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1775 (0x6ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142A1D, serialNumber=47CBEF70BD55B9533331B8BCC2E9829563A2CE94
        Validity
            Not Before: Apr 26 22:14:23 2026 GMT
            Not After : May  3 22:14:23 2026 GMT
        Subject: CN=69ee8e3f-8891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:51:2c:6e:fc:06:40:74:6a:69:b0:ea:cc:d1:
                    80:04:d4:65:8e:b9:55:16:92:9d:b4:98:7a:fe:bf:
                    a3:e3:73:c7:05:81:b5:c5:d1:04:bb:18:0a:19:67:
                    9e:a6:38:f5:fd:db:ad:06:9d:57:94:68:82:4c:22:
                    de:20:27:97:ca:18:01:68:e7:7e:9f:de:e5:ef:fc:
                    82:8f:d6:2b:98:9d:dc:27:c3:2d:cc:b0:fc:9e:e4:
                    e3:9f:25:bb:b8:9e:cf:d2:d0:d6:c7:a3:80:7f:a5:
                    d8:d0:75:3b:ab:a7:4d:b2:66:e3:8d:22:91:a8:46:
                    11:18:b3:d4:a8:b7:93:4c:4c:d8:fc:7f:19:48:aa:
                    fe:bd:3c:a7:ad:73:32:30:5d:e0:02:99:c3:06:9b:
                    b9:51:3d:ad:dc:7f:e9:db:05:ea:17:c0:4f:91:9d:
                    8d:46:4f:41:e2:94:f6:8e:e1:fb:a8:33:30:35:79:
                    f2:d9:31:b4:49:71:1e:19:7c:53:2f:85:16:83:8b:
                    9c:48:ad:91:6e:47:38:97:cc:63:9b:e5:3c:15:a7:
                    b5:1f:a4:31:52:5b:5f:ac:ef:a3:b7:d0:ab:de:c4:
                    7e:b6:ce:ae:38:85:c1:e6:9c:76:25:f6:76:3c:c1:
                    0f:c2:b5:b8:ae:b4:ab:8a:65:d9:40:39:a4:0d:61:
                    45:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:BF:82:64:81:63:BC:1B:1F:14:EC:87:81:15:B4:B9:B4:95:60:00
            X509v3 Authority Key Identifier:
                keyid:47:CB:EF:70:BD:55:B9:53:33:31:B8:BC:C2:E9:82:95:63:A2:CE:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:57:15:ce:ea:8e:d3:7b:b4:66:09:5a:c6:f0:33:e8:7e:93:
         55:f6:61:a4:9b:ed:ca:ea:96:b1:a6:48:32:ed:53:6c:7c:a1:
         ec:ea:0d:0d:52:c7:cd:9e:5f:56:9c:b2:19:db:6c:de:ac:c0:
         b3:c8:01:ef:7e:fa:d8:0d:7b:83:06:fe:c7:3e:d4:cd:61:33:
         7d:72:9e:42:2e:b4:97:4a:16:82:31:f3:93:50:57:f7:c7:f9:
         b2:bc:f2:b7:90:8b:aa:5c:d7:eb:a7:3c:78:0a:24:f6:b5:91:
         ee:b0:ed:fd:8d:8a:20:0d:27:8f:13:73:62:eb:fa:f1:b3:4c:
         81:63:7c:60:d4:3c:ac:87:e1:48:13:40:50:a2:f1:d5:8f:8e:
         49:d2:ce:65:3b:62:2c:90:55:9f:e9:61:0a:ee:bb:d1:28:13:
         b5:e6:75:65:da:26:a2:ac:c4:88:3d:5c:6c:c5:d2:60:a8:2d:
         9d:77:49:7d:a8:f5:dd:db:e8:47:50:63:f5:b2:63:d1:2d:ea:
         63:26:00:76:67:91:61:46:90:8b:01:10:b4:bc:f5:b2:95:39:
         f5:6b:a9:62:7e:13:a6:c7:28:37:ff:6b:b2:27:0d:29:09:72:
         13:f2:dc:df:69:e7:96:b6:9b:15:ac:b5:d2:b4:d1:83:04:02:
         92:e6:d4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 04:42:12 2026 by rpki-client