Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.mft
File:                     HdHLvF31vfq7s62vErACVrfxjRI.mft (raw, json)
Hash identifier:          Yaoxt4yV7ygRkUPpk2Zd4j+GsJtpcSqvFWgAQfrK+kk=
Subject key identifier:   FB:77:B9:F2:34:F7:E8:46:9D:32:CB:29:85:28:4F:F2:99:AE:39:3B
Authority key identifier: 1D:D1:CB:BC:5D:F5:BD:FA:BB:B3:AD:AF:12:B0:02:56:B7:F1:8D:12
Certificate issuer:       /CN=A915ADC4/serialNumber=1DD1CBBC5DF5BDFABBB3ADAF12B00256B7F18D12
Certificate serial:       01E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdHLvF31vfq7s62vErACVrfxjRI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.mft
Manifest number:          01CD
Signing time:             Sun 05 Apr 2026 03:33:23 +0000
Manifest this update:     Sun 05 Apr 2026 03:33:23 +0000
Manifest next update:     Sun 12 Apr 2026 03:33:23 +0000
Files and hashes:         1: HdHLvF31vfq7s62vErACVrfxjRI.crl (hash: E9OUL4EiQUefW6v1uX9zTj8VFn6u2kMi4Jxg2o7XsnM=)
                          2: AFC9F5324A0F11EF9E51BD7CC4F9AE02.roa (hash: PTeq8us0tqC/r2t8p4eO1k6gwaLZFpr1j07uDMJD5bY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.crl
                          rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdHLvF31vfq7s62vErACVrfxjRI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 03:33:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 482 (0x1e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915ADC4, serialNumber=1DD1CBBC5DF5BDFABBB3ADAF12B00256B7F18D12
        Validity
            Not Before: Apr  5 03:33:23 2026 GMT
            Not After : Apr 12 03:33:23 2026 GMT
        Subject: CN=69d1d803-efe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c6:14:be:2e:4d:c5:b2:cd:bb:a3:38:fd:9c:
                    8e:bc:5e:d3:80:65:cd:ba:30:5a:39:33:35:bc:ff:
                    a6:76:ce:7b:f4:17:1c:3c:65:f4:29:66:e8:e3:0a:
                    94:e5:4f:ed:ba:28:8e:ca:4b:5c:cf:06:4d:d7:6d:
                    52:06:cd:14:7a:0f:cb:6f:20:77:3f:c1:d3:2b:b5:
                    06:06:08:7a:f6:ec:e3:79:f1:f4:f2:e6:4c:b5:2c:
                    8d:10:39:81:5e:d4:38:14:2d:eb:90:78:bc:38:90:
                    16:6f:e1:95:60:76:e9:46:b1:17:21:76:ed:eb:52:
                    db:21:54:12:47:da:14:06:b5:55:7d:95:81:87:7c:
                    28:ec:bf:03:35:ab:e3:c7:4c:5b:4f:c9:41:08:ef:
                    b7:af:56:5f:86:4f:06:29:33:0f:57:57:bf:91:20:
                    08:0f:83:e3:95:e9:65:aa:02:62:e5:42:19:7e:fd:
                    2b:cd:29:66:8d:30:73:25:b7:d6:11:9e:b8:bd:75:
                    a9:26:df:3d:75:75:6a:eb:d8:39:b7:c0:7c:24:53:
                    04:9a:86:6d:d1:bc:e5:01:dc:be:39:24:2b:03:84:
                    ff:33:dc:90:00:10:61:aa:f9:66:45:e3:a9:b1:ea:
                    36:5f:66:89:a2:f6:a2:9c:86:a7:19:6a:a5:d6:9b:
                    f8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:77:B9:F2:34:F7:E8:46:9D:32:CB:29:85:28:4F:F2:99:AE:39:3B
            X509v3 Authority Key Identifier:
                keyid:1D:D1:CB:BC:5D:F5:BD:FA:BB:B3:AD:AF:12:B0:02:56:B7:F1:8D:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdHLvF31vfq7s62vErACVrfxjRI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:6e:cc:66:4d:13:22:5b:95:56:9b:ff:6f:70:ab:25:cc:21:
         93:0f:52:64:af:ca:05:7b:5a:c8:ef:fb:16:d3:63:6e:41:f3:
         31:57:14:67:5a:d7:f5:71:34:fa:bf:15:27:66:cf:4e:e4:3d:
         52:8f:cb:f5:b5:16:96:09:3f:ec:48:b5:aa:f8:53:9e:69:cd:
         00:e4:f4:db:38:e5:1a:20:d6:90:5e:76:59:48:31:0f:8b:08:
         b9:7b:ec:53:71:9a:01:a3:5a:06:98:06:de:93:06:b5:fb:37:
         01:fa:27:b9:ff:c7:0a:ca:38:e1:56:03:31:1e:72:3a:79:dc:
         8a:d4:ad:e4:61:05:77:60:2c:50:d1:65:bc:3e:ed:c7:2d:89:
         2f:d4:3d:34:f4:06:44:53:18:79:ce:93:d3:a9:c5:2c:92:70:
         0f:80:03:2f:20:a5:5e:09:6d:b6:0e:5d:0a:03:08:b1:e6:56:
         8f:fc:cd:5d:dc:fe:1d:b7:fd:9b:a6:0c:53:31:fe:23:4b:3b:
         df:a1:24:ea:ee:2a:d5:8b:ac:af:9e:07:67:04:94:91:69:66:
         95:cf:22:b2:74:59:ec:20:55:06:bd:e5:43:5d:36:28:22:45:
         9b:ef:90:f8:d3:dd:6a:6b:43:a5:46:66:26:14:6e:3e:8b:83:
         88:9a:d0:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:48:04 2026 by rpki-client