Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft
File:                     AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft (raw, json)
Hash identifier:          Oqyn+wMlJVlHZaZBgBtYN42BZYf2WeqZ9S/PIEWkwm0=
Subject key identifier:   F1:46:9B:73:1F:46:51:41:E1:EE:2A:B9:7D:BE:5C:43:83:87:68:EE
Authority key identifier: 00:84:F4:7A:43:72:C8:F8:A7:D5:11:83:D5:03:6C:59:3D:19:E1:C3
Certificate issuer:       /CN=A916E9E3/serialNumber=0084F47A4372C8F8A7D51183D5036C593D19E1C3
Certificate serial:       7B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AIT0ekNyyPin1RGD1QNsWT0Z4cM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft
Manifest number:          71
Signing time:             Fri 17 Apr 2026 07:40:04 +0000
Manifest this update:     Fri 17 Apr 2026 07:40:03 +0000
Manifest next update:     Fri 24 Apr 2026 07:40:03 +0000
Files and hashes:         1: AIT0ekNyyPin1RGD1QNsWT0Z4cM.crl (hash: 5G29J4uH5fXda0SK4mX/y1KHHlbLIyWzeHh91PFG2qw=)
                          2: 2A148C7E1D4211F1BDB413AD1B3D8C67.roa (hash: DOrKq68OV6bv6i78b+TQ33vm1VYkB4ogKWrurv8Roro=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.crl
                          rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AIT0ekNyyPin1RGD1QNsWT0Z4cM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:40:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123 (0x7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E9E3, serialNumber=0084F47A4372C8F8A7D51183D5036C593D19E1C3
        Validity
            Not Before: Apr 17 07:40:03 2026 GMT
            Not After : Apr 24 07:40:03 2026 GMT
        Subject: CN=69e1e3d3-9675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5e:06:07:14:69:6c:c0:16:42:c5:67:32:d5:
                    f5:c3:a8:b0:5e:65:e2:1c:07:45:78:cf:15:87:f8:
                    f5:df:ce:ed:3e:0e:de:3b:32:d3:47:61:74:52:03:
                    ce:a3:93:a4:14:b7:5e:8a:6c:9d:83:3e:eb:03:37:
                    e6:11:86:cb:5f:dc:6e:b3:1b:81:9e:4f:ed:ae:12:
                    e4:35:82:d6:fc:52:96:83:3a:77:ae:18:34:1a:6c:
                    c2:c8:92:22:3b:f5:b5:d3:fc:60:1b:21:18:ba:87:
                    36:a8:a5:6a:bb:aa:65:5c:24:c4:08:3b:0f:6e:32:
                    09:9a:cb:46:a1:69:a4:0a:b8:a6:c1:52:6b:5b:a7:
                    52:5e:0e:1b:8c:dd:e3:30:8b:e3:c8:94:e8:fa:17:
                    08:d7:8b:83:70:87:7a:7d:68:2d:d3:f7:00:ea:39:
                    8c:92:16:13:98:f2:b3:f1:3e:80:a5:ac:4f:bc:b1:
                    eb:81:a6:b4:5c:b1:3b:10:5b:14:a4:36:0d:60:ae:
                    38:3c:43:af:48:35:fe:b6:fd:bd:2e:f0:ac:3e:0c:
                    79:90:05:f6:e6:1a:36:55:e6:7e:62:92:23:ab:cf:
                    54:af:cc:34:a3:17:68:2c:7b:e0:1d:ed:17:3c:62:
                    c0:d6:c6:5f:be:84:a3:26:bd:88:23:e8:b6:8a:0e:
                    5a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:46:9B:73:1F:46:51:41:E1:EE:2A:B9:7D:BE:5C:43:83:87:68:EE
            X509v3 Authority Key Identifier:
                keyid:00:84:F4:7A:43:72:C8:F8:A7:D5:11:83:D5:03:6C:59:3D:19:E1:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AIT0ekNyyPin1RGD1QNsWT0Z4cM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:79:df:ab:6b:c4:4f:85:4d:82:8b:8d:e3:21:0c:cb:47:d7:
         84:ad:fb:79:81:8b:ba:a2:64:3e:6d:50:ff:4d:e8:4a:46:51:
         a2:08:48:33:54:7d:ed:76:ed:ee:19:2f:89:77:f2:de:0d:b5:
         dd:6e:2e:0f:9b:b6:e2:41:03:65:05:f7:dd:8c:bc:be:a2:85:
         e1:8e:3d:75:3d:96:85:50:99:0d:87:8c:c0:32:02:e7:2b:11:
         e0:82:4c:23:59:3d:dd:20:66:d6:82:b0:f9:e3:93:71:c9:d6:
         a0:e7:d6:65:d4:d9:5a:cb:57:29:61:0c:cf:51:ad:07:51:06:
         c4:d4:76:e8:fe:2a:65:9d:a1:a4:a3:8c:99:ad:4b:ff:27:b0:
         58:43:c4:d1:e1:28:08:15:22:85:88:62:53:64:9b:2d:28:70:
         d0:f7:82:48:08:ab:8b:10:8a:be:4a:27:ab:5c:54:64:c8:24:
         0c:14:84:da:4f:5e:de:46:c8:a7:17:3d:c1:24:d9:d4:69:bb:
         71:66:66:72:ad:d2:80:41:18:6c:c2:40:b9:23:4a:fb:af:ab:
         f7:07:f6:4f:da:bc:71:f5:98:0c:2b:1f:7a:22:68:aa:f8:d0:
         ae:b3:7e:a9:3c:16:86:2a:e0:7a:ec:a3:a4:f2:98:47:91:bb:
         bf:39:7a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:04:43 2026 by rpki-client