Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.mft
File:                     4W5PZeLjl-n84FeFomXGGXyCIMk.mft (raw, json)
Hash identifier:          NiySzg7zIVG+Q+7S/tfHhnTlpTwpS6/8Cr1L2KFpvt4=
Subject key identifier:   52:D8:42:A1:E6:BA:39:5C:D2:8D:7C:91:12:27:B8:EC:E6:C2:31:04
Authority key identifier: E1:6E:4F:65:E2:E3:97:E9:FC:E0:57:85:A2:65:C6:19:7C:82:20:C9
Certificate issuer:       /CN=A916DED9/serialNumber=E16E4F65E2E397E9FCE05785A265C6197C8220C9
Certificate serial:       01C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4W5PZeLjl-n84FeFomXGGXyCIMk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.mft
Manifest number:          01BF
Signing time:             Sun 05 Apr 2026 03:19:12 +0000
Manifest this update:     Sun 05 Apr 2026 03:19:11 +0000
Manifest next update:     Sun 12 Apr 2026 03:19:11 +0000
Files and hashes:         1: 4W5PZeLjl-n84FeFomXGGXyCIMk.crl (hash: dLTmX/QJggeKfGezCD5skAa8E1ZNvw7YhcUhKDILmpo=)
                          2: 880E53BC852A11EE8B988A85C4F9AE02.roa (hash: k5DYksJixKDhcJPFopcX+J9k9P/tVTzxnGH1/taUbzM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.crl
                          rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4W5PZeLjl-n84FeFomXGGXyCIMk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 03:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 452 (0x1c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DED9, serialNumber=E16E4F65E2E397E9FCE05785A265C6197C8220C9
        Validity
            Not Before: Apr  5 03:19:11 2026 GMT
            Not After : Apr 12 03:19:11 2026 GMT
        Subject: CN=69d1d4af-56c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fc:9a:dc:fe:3c:60:a0:21:6b:1f:bb:ec:b2:
                    bf:e2:55:f5:d8:0b:c8:f5:85:40:80:f3:6b:35:ca:
                    29:b9:ba:2c:05:0d:2c:be:30:b8:e7:dc:62:b5:42:
                    df:3d:f1:18:2d:c0:ab:78:0f:32:14:71:99:5e:9e:
                    b8:17:26:5b:86:c9:c8:9d:07:e8:39:19:d6:3b:76:
                    79:b5:c3:2f:4b:91:67:0e:a8:2b:30:50:72:0b:7d:
                    89:5e:f2:52:db:b6:84:9b:30:98:c1:27:73:56:af:
                    12:2a:eb:66:7a:55:82:10:c8:cc:dd:af:85:0f:6f:
                    5d:ba:a6:80:77:49:9e:76:23:a0:06:a7:cf:c9:00:
                    2d:7d:9b:dd:2f:44:09:a2:8e:9e:b0:33:f9:c0:f8:
                    ff:4a:58:2d:b3:a0:07:ca:82:45:a7:29:04:e4:59:
                    de:1c:19:c2:63:70:1d:be:f5:19:a4:b7:8d:91:0e:
                    fd:50:58:87:44:c9:df:6b:a1:8a:0f:4a:00:91:a4:
                    af:08:c6:04:3f:88:b1:be:c8:3c:b5:b2:73:46:40:
                    04:80:d9:a1:d6:fa:f4:9c:52:16:45:7c:90:8c:e7:
                    4c:a8:f0:02:ce:32:4d:50:cf:e4:2e:c7:fc:d8:ae:
                    13:07:bc:3c:67:82:e1:9b:03:a8:32:74:71:fd:c9:
                    ce:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D8:42:A1:E6:BA:39:5C:D2:8D:7C:91:12:27:B8:EC:E6:C2:31:04
            X509v3 Authority Key Identifier:
                keyid:E1:6E:4F:65:E2:E3:97:E9:FC:E0:57:85:A2:65:C6:19:7C:82:20:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4W5PZeLjl-n84FeFomXGGXyCIMk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:cd:f8:b6:ae:cd:79:93:b4:bd:65:06:35:3d:e7:e3:ad:da:
         9f:31:d6:ee:29:97:a2:66:db:7f:82:b0:51:d4:78:d8:39:f1:
         65:f0:94:3b:a3:83:9e:0b:e2:ea:f3:bd:13:70:0b:3d:fe:a1:
         9c:87:09:d0:7b:d9:3e:39:c5:22:26:97:13:0a:11:8c:d1:1e:
         c6:52:2f:fb:4c:61:81:1c:8c:99:58:97:d0:8f:48:eb:46:4f:
         b4:1b:e2:82:d3:c5:1b:c7:8b:64:b8:37:c7:2c:d0:35:72:a6:
         0e:7a:aa:5f:92:0f:6e:e2:08:f2:9c:af:92:42:f8:88:28:8b:
         13:37:12:b1:5f:ea:31:3e:0b:63:cb:14:82:6a:bb:18:27:b6:
         09:eb:8a:b3:2b:8a:64:10:f4:a2:6e:24:53:d8:31:ba:0a:44:
         cf:6d:55:76:78:51:fb:b2:57:ef:56:c9:a9:31:fb:ff:19:c5:
         77:39:9c:96:99:97:71:86:76:a4:58:18:46:a1:ed:15:9f:c2:
         d1:57:87:67:21:27:b0:75:ae:66:e8:23:55:39:45:3d:9b:33:
         9c:bb:c5:6c:4e:24:17:02:ba:30:7d:8f:7b:ac:cb:75:40:f4:
         53:24:9d:26:e0:62:02:43:d0:c6:35:33:59:48:78:6a:16:2a:
         30:3b:26:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 11:19:40 2026 by rpki-client