Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft
File:                     p878FwCk4YRmJQjHgV9-sdASnr4.mft (raw, json)
Hash identifier:          VmJpr4yQLvLKyQ899zxlDqEVxbRmxCiQBnsSyB75PRA=
Subject key identifier:   1C:D3:32:0B:A1:BA:DC:96:2D:FA:CE:43:CF:71:5E:CB:20:57:2E:52
Authority key identifier: A7:CE:FC:17:00:A4:E1:84:66:25:08:C7:81:5F:7E:B1:D0:12:9E:BE
Certificate issuer:       /CN=A9152B13/serialNumber=A7CEFC1700A4E184662508C7815F7EB1D0129EBE
Certificate serial:       0178
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft
Manifest number:          016B
Signing time:             Wed 29 Apr 2026 05:24:50 +0000
Manifest this update:     Wed 29 Apr 2026 05:24:49 +0000
Manifest next update:     Wed 06 May 2026 05:24:49 +0000
Files and hashes:         1: p878FwCk4YRmJQjHgV9-sdASnr4.crl (hash: ZQHbEbmIX+27q+CyGd7ood0bc+qlIR+4vYXP3v7+OMA=)
                          2: 0BBF212E1EC211EF82A61739C4F9AE02.roa (hash: B4ENBOCrcVu9vsQndhxBPW5NCETQQHs3UmACZhgsEgU=)
                          3: 479B58B21EC111EF9258717EC4F9AE02.roa (hash: QRkcZsDgIJjnFNUASfY5VIlKLs39JH6eip+JITXFwy0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.crl
                          rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 05:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 376 (0x178)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152B13, serialNumber=A7CEFC1700A4E184662508C7815F7EB1D0129EBE
        Validity
            Not Before: Apr 29 05:24:49 2026 GMT
            Not After : May  6 05:24:49 2026 GMT
        Subject: CN=69f19622-26d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:45:45:e1:b3:b9:2c:0b:57:db:07:dc:37:6a:
                    3b:a4:bb:f9:6e:50:68:bc:38:eb:f9:bf:69:d3:69:
                    98:5f:c4:0d:95:1d:47:07:e4:f2:74:c9:ae:f7:22:
                    cf:ef:cf:ce:e5:97:ab:4a:5e:0a:13:ba:a7:f0:fb:
                    76:8f:67:15:ee:00:03:8c:83:21:f4:c1:ed:a4:6c:
                    5d:ed:1b:6c:db:d7:1e:0f:b0:1d:63:56:45:9c:bd:
                    b0:f9:4c:e8:f5:3c:ec:e5:0f:5a:c4:69:72:0c:4c:
                    0c:d4:5e:5d:2f:07:62:70:70:75:82:50:66:9d:51:
                    67:59:43:1e:ea:6e:c2:92:6f:eb:e9:81:1e:d6:86:
                    f4:3c:dc:4e:46:cb:89:b1:f1:55:7f:eb:a0:51:3c:
                    20:3c:96:ef:d0:23:2e:d3:07:45:9c:92:a2:17:75:
                    f4:2d:97:c8:5b:67:18:af:27:31:20:c1:14:3c:1e:
                    cc:40:de:ff:4b:e8:3b:97:f8:32:85:7a:6f:d8:f0:
                    59:29:6a:a5:22:5a:6e:9a:7e:a4:91:43:c0:af:3d:
                    e1:30:a5:dd:29:b2:b8:a6:50:e3:fa:f5:18:6c:ab:
                    b7:03:d8:04:97:d2:39:21:9b:76:63:df:a8:b3:71:
                    91:3b:d6:8b:63:62:91:31:fc:fe:f3:be:d8:54:e3:
                    06:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D3:32:0B:A1:BA:DC:96:2D:FA:CE:43:CF:71:5E:CB:20:57:2E:52
            X509v3 Authority Key Identifier:
                keyid:A7:CE:FC:17:00:A4:E1:84:66:25:08:C7:81:5F:7E:B1:D0:12:9E:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:81:1d:e6:b7:bc:a9:3f:23:71:f6:9d:1d:d4:ef:99:62:44:
         79:57:80:ef:86:58:5b:8e:4d:fc:f5:fb:7a:18:9e:91:1f:7d:
         5c:c6:b9:74:60:59:19:64:a9:ca:af:c9:2f:c8:9d:98:05:08:
         14:d1:74:41:76:78:14:8c:8d:4d:37:a3:90:25:78:35:54:2a:
         7a:81:01:9d:4a:19:7a:ea:8b:26:db:67:70:c0:e0:b9:01:d6:
         04:ca:31:64:f6:9a:14:db:e7:88:df:b5:c5:c0:fc:9a:04:fc:
         27:25:a8:8b:20:f6:e7:6a:b6:53:6b:38:5b:d5:b5:49:c0:90:
         b0:d4:39:06:d1:60:c0:45:30:db:b9:8e:48:fd:8d:6c:7f:86:
         f3:a1:77:cf:2f:23:a3:a4:d4:41:37:39:7b:df:be:57:ad:d3:
         ad:d5:b7:27:dc:97:99:ad:7c:5b:30:9f:ea:35:af:8b:9f:5f:
         d2:79:f7:2d:be:95:c3:4c:e6:d4:ec:e0:93:b7:f8:d8:7c:4f:
         16:f1:09:f7:6b:b4:14:0e:8a:b9:c0:26:73:7f:98:22:3d:32:
         46:8b:ad:06:d1:4e:0c:72:2c:e7:93:fe:03:fd:d3:fd:00:91:
         55:bd:2a:63:ba:2e:df:66:ab:ab:d1:8f:f2:5d:ae:88:ba:86:
         68:b4:3d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 13:41:38 2026 by rpki-client