Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft
File:                     ihHrdksVeFOdbtOykDv2H0wIAHw.mft (raw, json)
Hash identifier:          TYvCJIvnorNIKdcKRqRRG3BHgqMwCcy75cLOBu2Nr2w=
Subject key identifier:   58:4D:11:F2:06:36:BB:10:19:4C:76:8C:2E:71:82:5A:1D:BA:C6:66
Authority key identifier: 8A:11:EB:76:4B:15:78:53:9D:6E:D3:B2:90:3B:F6:1F:4C:08:00:7C
Certificate issuer:       /CN=A914CC0F/serialNumber=8A11EB764B1578539D6ED3B2903BF61F4C08007C
Certificate serial:       B7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ihHrdksVeFOdbtOykDv2H0wIAHw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft
Manifest number:          B7
Signing time:             Sat 18 Apr 2026 19:42:03 +0000
Manifest this update:     Sat 18 Apr 2026 19:42:02 +0000
Manifest next update:     Sat 25 Apr 2026 19:42:02 +0000
Files and hashes:         1: ihHrdksVeFOdbtOykDv2H0wIAHw.crl (hash: z3oyzSqEb8F4xM2XLpJPrx9LcaAaF9olWXK8vl401q0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.crl
                          rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ihHrdksVeFOdbtOykDv2H0wIAHw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183 (0xb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CC0F, serialNumber=8A11EB764B1578539D6ED3B2903BF61F4C08007C
        Validity
            Not Before: Apr 18 19:42:02 2026 GMT
            Not After : Apr 25 19:42:02 2026 GMT
        Subject: CN=69e3de8b-9e6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:5a:6d:66:ce:2c:f1:d1:37:63:c7:08:b7:89:
                    01:4f:9f:ff:0e:74:87:4a:1d:d7:0a:3b:0a:92:c1:
                    87:c0:9e:2f:7f:eb:e3:b7:fc:67:b8:4b:9c:2b:34:
                    d8:68:41:5f:60:31:41:bb:83:1f:f6:7d:47:19:e5:
                    53:f4:9a:32:54:f0:c3:df:68:74:51:97:f3:33:ae:
                    c8:33:47:ca:40:1c:34:cc:79:8c:0b:a2:fd:eb:3f:
                    b1:ee:a0:85:58:bb:d3:28:a9:1d:3e:9e:5d:e0:59:
                    5a:b9:56:18:c1:c5:1e:f6:3f:93:87:f0:56:8e:27:
                    39:be:c8:cc:d2:1f:c7:ff:83:cd:86:76:4e:b7:9e:
                    50:8c:dd:5c:87:6e:0b:c1:d1:c5:01:e8:7b:78:1e:
                    fb:f0:89:48:44:0b:57:75:ab:f5:54:06:61:23:41:
                    79:86:f4:cb:20:96:78:f8:ad:ac:14:02:5f:65:0e:
                    08:65:0e:77:e2:2b:31:37:98:d7:0b:28:f4:71:c6:
                    4c:b3:a5:dc:00:91:34:1b:0f:38:6b:0b:af:52:b8:
                    24:a7:93:e5:4a:aa:52:b6:d8:b6:ca:e1:9c:59:d0:
                    81:c1:53:72:5e:a3:94:d2:53:1f:e2:af:6f:10:0c:
                    2b:48:31:da:11:18:33:41:98:11:ac:1c:23:2c:26:
                    05:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:4D:11:F2:06:36:BB:10:19:4C:76:8C:2E:71:82:5A:1D:BA:C6:66
            X509v3 Authority Key Identifier:
                keyid:8A:11:EB:76:4B:15:78:53:9D:6E:D3:B2:90:3B:F6:1F:4C:08:00:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ihHrdksVeFOdbtOykDv2H0wIAHw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:58:5e:b1:0a:ec:9c:f7:ea:7d:0f:b3:c8:cd:e2:ec:c3:07:
         4e:90:16:55:0c:81:d3:70:83:0f:f4:2e:cc:be:d0:99:d8:ec:
         db:c4:25:88:43:71:f7:09:d6:b3:9d:65:bd:16:80:46:70:a8:
         61:73:b8:f3:8e:2b:b7:c3:17:a3:5e:44:dd:92:f2:f1:0b:3d:
         00:d4:d6:40:69:55:f5:44:7c:c5:21:eb:8f:25:bf:3f:9d:2e:
         28:86:23:d5:fd:7a:5f:c1:90:04:e1:9e:24:70:cb:0c:5d:c7:
         2a:36:fa:8e:e0:a5:d2:8b:ab:97:94:ba:1b:46:bf:ba:b8:3e:
         66:8d:1e:dd:3e:97:da:6d:d2:af:72:be:1f:a0:a4:d8:35:0c:
         cf:8c:ed:c5:80:81:37:fb:f3:d8:d5:89:3c:cd:dc:9f:51:9c:
         4d:a4:47:bc:36:bc:bb:56:10:67:ee:04:4e:4e:ee:6d:be:de:
         37:be:53:0f:25:dd:b7:43:2c:99:e1:82:d9:ee:8b:49:8d:fd:
         2f:49:53:57:24:d6:87:9a:40:58:2b:bc:22:48:49:48:b9:0e:
         1d:ad:79:6d:04:d6:88:3f:c2:d6:7d:a1:a9:95:1c:d9:31:fc:
         44:87:e1:c3:54:52:55:26:db:1a:76:e2:39:4d:de:27:77:67:
         f2:c5:2f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:06:10 2026 by rpki-client