Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft
File:                     k-dhjM_iZIDXknoYcbrYP--d9IQ.mft (raw, json)
Hash identifier:          dpAgvBhT8BKoKC7VErryfJNfCfdiqBn80wxNp9r5XYk=
Subject key identifier:   C4:80:4C:CE:2D:BA:C0:BB:38:90:68:78:6F:9C:2A:3E:36:43:52:57
Authority key identifier: 93:E7:61:8C:CF:E2:64:80:D7:92:7A:18:71:BA:D8:3F:EF:9D:F4:84
Certificate issuer:       /CN=A915F438/serialNumber=93E7618CCFE26480D7927A1871BAD83FEF9DF484
Certificate serial:       25D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-dhjM_iZIDXknoYcbrYP--d9IQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft
Manifest number:          25B6
Signing time:             Sat 04 Apr 2026 15:40:40 +0000
Manifest this update:     Sat 04 Apr 2026 15:40:39 +0000
Manifest next update:     Sat 11 Apr 2026 15:40:39 +0000
Files and hashes:         1: k-dhjM_iZIDXknoYcbrYP--d9IQ.crl (hash: SvhJABQQzRtvEd9GOMKGRTdS5r19oeR876Rzv+MfDEo=)
                          2: 657B47B61C2F11E880C4ED7BC4F9AE02.roa (hash: 1ghEv7poKGW1kihPQdkAbm84XN1Xrk7KTTqEVU0zlnI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.crl
                          rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-dhjM_iZIDXknoYcbrYP--d9IQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 15:40:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9681 (0x25d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F438, serialNumber=93E7618CCFE26480D7927A1871BAD83FEF9DF484
        Validity
            Not Before: Apr  4 15:40:39 2026 GMT
            Not After : Apr 11 15:40:39 2026 GMT
        Subject: CN=69d130f8-cd00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4f:00:52:22:6f:3e:76:7c:36:a7:90:20:4b:
                    90:5d:ab:22:16:c0:f6:cb:9e:be:10:f3:38:51:2d:
                    cc:da:ca:77:83:3e:0f:98:f7:ed:f0:b8:cc:9d:8b:
                    ce:8a:f1:fe:54:be:b0:a7:3a:d7:96:a4:df:46:c2:
                    8f:99:d9:61:78:12:6b:a5:be:94:c0:0d:8b:11:cc:
                    d7:ca:f9:c6:b7:dc:da:99:91:72:d4:8c:a7:95:dc:
                    dd:f0:05:10:c0:7a:fe:74:f2:c5:13:2a:a7:42:61:
                    c4:93:6a:14:bc:3a:73:85:96:39:ff:42:90:2b:04:
                    b4:e6:d6:e8:68:ce:a2:00:f6:df:7f:fe:3d:c8:29:
                    4b:dd:f5:c5:1a:d8:fd:e7:50:96:28:59:20:e3:96:
                    c9:ab:e4:f5:d6:46:f4:23:85:7d:c4:75:2a:ef:87:
                    05:81:fa:e2:97:51:51:35:9e:8d:a1:8b:a1:41:65:
                    da:e7:bb:45:5d:cb:d1:ca:1f:45:24:b2:c3:b1:ea:
                    bf:d8:ec:cf:bc:e5:50:8e:c8:5b:da:fb:78:fe:3a:
                    90:bd:4d:f5:c6:7b:ed:86:ea:bf:6d:e4:3e:1d:32:
                    8a:8e:5d:38:35:48:44:be:a1:49:0d:0c:ad:92:7b:
                    55:88:3c:cf:86:be:32:f2:10:02:e0:70:5d:c1:25:
                    1c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:80:4C:CE:2D:BA:C0:BB:38:90:68:78:6F:9C:2A:3E:36:43:52:57
            X509v3 Authority Key Identifier:
                keyid:93:E7:61:8C:CF:E2:64:80:D7:92:7A:18:71:BA:D8:3F:EF:9D:F4:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-dhjM_iZIDXknoYcbrYP--d9IQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:7d:ea:e6:45:55:c0:fb:c8:16:e1:72:26:d0:2e:3b:e3:5b:
         f4:82:c5:86:4f:4d:39:e1:30:b2:4f:8f:ff:64:94:85:ba:96:
         4c:44:da:6d:04:e9:84:e5:2e:f7:2b:6b:a0:45:bd:c9:c2:a1:
         d4:dd:4d:a6:33:5f:24:6f:a1:bc:99:54:bd:57:7a:7a:f4:3c:
         39:d1:93:78:a4:d3:3b:4c:70:f8:36:80:14:71:57:84:bc:10:
         fc:c8:2b:e0:86:f7:1b:04:5a:bc:7e:01:b1:0e:9c:3a:cd:7b:
         b0:9e:28:15:d8:7f:90:4e:71:eb:20:04:26:82:70:40:a9:ba:
         09:2d:d4:29:cc:b3:0d:8f:cf:68:87:34:09:d0:02:fb:6f:6f:
         37:9f:d1:21:97:c7:9a:64:2f:6a:eb:9e:4b:45:3a:5a:a5:3b:
         d4:a7:15:d5:f2:ab:ea:71:8c:bd:77:5f:71:37:71:ce:a9:9d:
         00:02:12:f3:7c:d8:89:96:50:f0:69:44:5a:7a:b1:c0:70:55:
         9f:97:59:e0:1f:20:9b:1b:c2:89:2f:84:87:c1:13:d4:42:92:
         d4:71:67:b0:ec:dc:36:2b:7c:65:5c:88:8b:b0:54:a3:30:95:
         04:84:56:cd:2a:05:48:61:04:43:5c:80:1f:8c:b1:e2:db:9d:
         e7:2a:a9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:36 2026 by rpki-client