Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft
File:                     rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft (raw, json)
Hash identifier:          +qg4vc79NOF3qi9Bdy90dlXv4evMkxHitqMB9tyAsDQ=
Subject key identifier:   D3:5B:0F:D9:13:62:7A:EE:F1:BF:54:F2:E6:F8:87:62:FA:7F:A0:1D
Authority key identifier: AC:D4:F8:32:F6:D8:39:78:BE:69:59:D6:98:3F:E3:58:F3:B7:A9:25
Certificate issuer:       /CN=A9152C89/serialNumber=ACD4F832F6D83978BE6959D6983FE358F3B7A925
Certificate serial:       052A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft
Manifest number:          051C
Signing time:             Sat 04 Apr 2026 23:22:50 +0000
Manifest this update:     Sat 04 Apr 2026 23:22:49 +0000
Manifest next update:     Sat 11 Apr 2026 23:22:49 +0000
Files and hashes:         1: rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl (hash: F93hXQklxP8aJAKGEy4H2z+PHayQJjO2cuyY0flAeXE=)
                          2: 33DAC0AE640211EDA193F079C4F9AE02.roa (hash: ybViUyQ0AAqzvnSq9WOp3P59LX2uT96EcoWguD8yea0=)
                          3: 1291593861AC11ED9EFE1B4DC4F9AE02.roa (hash: JfzH8J7I3Xe9UEf/VNBPygrk3zbv7cEsEtGZ7BOGvr8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl
                          rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 23:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1322 (0x52a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152C89, serialNumber=ACD4F832F6D83978BE6959D6983FE358F3B7A925
        Validity
            Not Before: Apr  4 23:22:49 2026 GMT
            Not After : Apr 11 23:22:49 2026 GMT
        Subject: CN=69d19d4a-a481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:18:59:77:a7:4e:8a:15:e1:6c:68:57:a6:e4:
                    26:bd:b4:a5:7a:75:fb:2a:9c:c0:48:d1:bb:18:79:
                    ea:20:49:2a:2b:cd:be:e1:b5:f2:6f:55:63:87:5b:
                    05:91:22:09:9a:3d:8e:77:4b:06:83:cd:75:39:4b:
                    fe:20:62:5b:cc:97:b7:12:95:07:bb:e4:03:d6:27:
                    29:f5:de:50:d5:13:16:7c:1f:60:f0:76:2c:d9:f5:
                    f4:54:c6:8a:52:8d:0a:54:dc:16:a3:1f:15:25:6f:
                    08:0f:23:c9:58:c7:14:49:ea:80:25:33:f6:8d:bb:
                    6d:f4:82:17:46:5f:f1:89:a3:10:a2:ed:7a:b6:42:
                    d4:0e:41:52:ec:15:7c:31:34:6a:06:28:94:10:a0:
                    4e:0b:26:9c:36:4d:a2:12:8d:be:ad:7e:ef:42:b8:
                    0a:71:3e:76:22:8f:a7:a0:70:c4:68:bc:df:2c:b1:
                    8c:bd:9e:f2:8e:73:8e:9f:eb:d7:99:59:e0:da:8d:
                    e0:9a:d1:f5:35:57:ce:01:22:ca:51:ab:dc:81:54:
                    78:5b:88:e4:00:55:21:10:a7:c7:76:47:53:f5:3b:
                    bd:6d:6c:29:d7:92:5c:33:d9:f9:37:7f:fc:59:ba:
                    94:8a:b4:98:98:90:55:e4:ea:9e:7a:1f:d5:24:8c:
                    e5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:5B:0F:D9:13:62:7A:EE:F1:BF:54:F2:E6:F8:87:62:FA:7F:A0:1D
            X509v3 Authority Key Identifier:
                keyid:AC:D4:F8:32:F6:D8:39:78:BE:69:59:D6:98:3F:E3:58:F3:B7:A9:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:37:ed:ec:bf:25:b4:b3:ee:9f:cc:7e:18:be:c2:97:6a:ce:
         f7:1a:5e:dd:f6:ff:0f:85:b3:62:77:02:95:d4:b0:15:df:c4:
         27:ce:95:55:04:94:b0:e7:4e:e2:60:44:d2:90:bb:93:f3:c9:
         d5:4a:a7:93:46:76:74:7d:84:53:e7:47:3f:52:dc:ed:aa:ab:
         87:c8:ae:68:49:c6:ab:0b:f6:46:ee:50:32:25:9c:08:42:37:
         44:ac:99:d2:f5:57:ab:10:6f:82:0d:91:f4:69:d6:56:a6:78:
         f1:83:9e:da:30:39:bd:f1:cf:41:0b:33:d6:e5:a7:b7:69:d8:
         21:c1:27:4d:54:04:fa:08:f9:af:d0:ba:7e:93:90:39:02:ad:
         ea:cb:11:6e:b1:ec:04:fc:42:6d:94:6e:9e:08:ca:33:63:fe:
         2c:84:f7:fe:2f:99:a6:85:be:2c:74:fa:9a:7c:82:e0:1c:9f:
         e7:7b:18:58:3d:eb:33:b7:2d:e3:71:40:b5:f1:e3:3d:9c:95:
         80:2c:a5:13:09:5c:26:db:9c:29:71:38:9b:f0:b1:26:3a:0b:
         79:dc:86:01:bb:6b:04:1e:f3:87:4e:02:a8:7a:09:54:81:d8:
         93:85:4e:7b:fe:0f:65:e6:19:3f:1d:c6:4d:05:86:ce:5d:8e:
         46:88:4d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:28:56 2026 by rpki-client