Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
File:                     aRgc9FH4s_7GT8gpi1ItSIylyeY.mft (raw, json)
Hash identifier:          8qSzQawynQcf2LQF6qEHGDaiLUBQnwSlMV0l4JrE5G0=
Subject key identifier:   C4:91:2F:4C:B3:52:5D:6C:12:98:09:7E:88:6A:B1:A9:AA:3F:97:3B
Authority key identifier: 69:18:1C:F4:51:F8:B3:FE:C6:4F:C8:29:8B:52:2D:48:8C:A5:C9:E6
Certificate issuer:       /CN=A916DE3D/serialNumber=69181CF451F8B3FEC64FC8298B522D488CA5C9E6
Certificate serial:       017D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
Manifest number:          0133
Signing time:             Sun 05 Apr 2026 05:57:19 +0000
Manifest this update:     Sun 05 Apr 2026 05:57:18 +0000
Manifest next update:     Sun 12 Apr 2026 05:57:18 +0000
Files and hashes:         1: aRgc9FH4s_7GT8gpi1ItSIylyeY.crl (hash: d1sdqm/VmVm7B93QFawxbCjeAZ53IkmId+WJsq6WFxA=)
                          2: A609DABE064511F19E4E77B72C3D8C67.roa (hash: t305WJBrmTItbJa7N9zTDZCt2i0nTXvWuqgpxx54cOM=)
                          3: B7C4E510067111F1BC22D1653B3D8C67.roa (hash: KvlIwfCNinBDApUM0hPw82jOaBTrt/CmpdmsPJpgE8I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.crl
                          rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:57:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 381 (0x17d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DE3D, serialNumber=69181CF451F8B3FEC64FC8298B522D488CA5C9E6
        Validity
            Not Before: Apr  5 05:57:18 2026 GMT
            Not After : Apr 12 05:57:18 2026 GMT
        Subject: CN=69d1f9bf-7581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:83:06:2d:1d:8e:e2:fb:05:fd:33:5a:13:58:
                    c4:2e:ef:8b:ad:21:d9:f9:65:7d:97:2f:9a:a0:bd:
                    63:aa:45:a0:71:d8:f7:ca:d5:7c:5a:2f:31:f0:d5:
                    72:5f:72:54:cb:80:b0:33:03:db:83:8b:bf:9c:1b:
                    75:1c:15:05:85:3d:7d:65:8e:15:bd:83:c7:ac:e0:
                    29:ee:d4:28:61:31:a3:8b:95:2e:a2:b7:f4:fd:7b:
                    4a:fa:32:ac:fc:7b:60:9e:86:f3:43:87:0e:98:50:
                    15:2b:9a:42:51:20:8e:99:de:cd:71:1d:30:c8:dc:
                    52:11:35:c0:4a:22:9b:d2:5b:19:cf:43:87:33:5d:
                    9a:22:06:c7:cf:33:b7:7e:b5:e6:38:54:ad:34:d5:
                    5c:af:9b:ee:fc:3f:d5:31:72:12:4b:9f:01:50:5a:
                    b4:ac:d9:be:36:a7:b0:70:ed:1e:2f:57:9e:cc:31:
                    5e:69:a9:80:1e:53:c6:b8:80:9b:4c:f6:61:b3:cc:
                    3d:5e:90:c1:90:c8:af:94:40:1b:ef:85:14:cb:d0:
                    05:20:c9:2a:d5:e4:32:bd:0f:7e:0e:75:2c:75:c9:
                    c2:99:3e:0a:a4:80:eb:b3:f7:04:17:9d:43:ac:59:
                    e6:ae:8d:96:8d:9c:b6:1a:41:7a:77:e8:2b:40:c4:
                    78:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:91:2F:4C:B3:52:5D:6C:12:98:09:7E:88:6A:B1:A9:AA:3F:97:3B
            X509v3 Authority Key Identifier:
                keyid:69:18:1C:F4:51:F8:B3:FE:C6:4F:C8:29:8B:52:2D:48:8C:A5:C9:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:50:f7:ce:91:e4:27:75:34:f0:43:1e:40:73:86:86:0c:dd:
         5a:44:7a:db:92:9b:da:76:83:09:5f:4e:94:aa:aa:ed:de:0d:
         a1:db:05:0a:f5:f4:d2:02:ac:1d:d6:73:52:6f:c6:7c:70:d5:
         44:4d:72:35:e5:12:48:ec:8d:26:b0:ea:ed:e6:a5:fa:1f:23:
         3d:9c:bc:93:ad:7b:37:88:7b:89:c5:da:9a:e7:d4:70:52:23:
         e3:b9:10:34:44:e2:e9:69:d9:d6:0f:c9:b8:76:09:78:91:a0:
         73:7d:10:ec:6a:7a:af:5a:78:a8:ab:4a:c2:8f:78:94:6d:45:
         6a:a4:bc:d9:8f:2d:d3:7c:8e:fb:14:68:20:aa:3f:c0:b6:85:
         ae:49:39:7e:fc:b2:4d:bb:fe:28:68:a1:58:0e:f6:e3:48:9e:
         e6:c6:76:3b:0b:a4:81:01:83:9d:15:e4:e2:73:9e:c7:4c:e0:
         3a:27:ee:28:37:bc:7d:f5:03:d4:8d:a0:8e:d8:d3:87:a3:2d:
         a1:d9:10:f4:d0:51:d9:6e:de:59:39:13:f9:34:4d:6d:f0:b3:
         63:44:df:12:9d:4e:59:a0:f2:1f:85:32:f9:2b:7c:4b:17:d3:
         d3:06:07:37:88:e1:a7:86:d3:c9:21:35:15:4d:1c:6a:6b:82:
         3c:b0:fe:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:32:21 2026 by rpki-client