Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.mft
File:                     IdPtIffN68fQDxu3oJURuVze_iM.mft (raw, json)
Hash identifier:          W5+eFFHmDhkhkIlCwhTrvFwpGIckClmw9NwpAynRYfU=
Subject key identifier:   80:C1:CE:B4:43:BF:A0:E5:3E:8E:39:FA:77:07:C5:83:72:BF:33:FA
Authority key identifier: 21:D3:ED:21:F7:CD:EB:C7:D0:0F:1B:B7:A0:95:11:B9:5C:DE:FE:23
Certificate issuer:       /CN=A917336A/serialNumber=21D3ED21F7CDEBC7D00F1BB7A09511B95CDEFE23
Certificate serial:       014B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IdPtIffN68fQDxu3oJURuVze_iM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.mft
Manifest number:          013B
Signing time:             Sun 05 Apr 2026 04:51:00 +0000
Manifest this update:     Sun 05 Apr 2026 04:51:00 +0000
Manifest next update:     Sun 12 Apr 2026 04:51:00 +0000
Files and hashes:         1: IdPtIffN68fQDxu3oJURuVze_iM.crl (hash: i3DvMjp039Z4AQKk3DgU9aj4C45QvIQ1Rt5KQ4RNvnQ=)
                          2: 809F6BF2990511F090DACC2BC4F9AE02.roa (hash: ePh5F//jVgKgbKd9KhC0MLvbTZUoIXDojFlNTXr56Xo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.crl
                          rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IdPtIffN68fQDxu3oJURuVze_iM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 04:50:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 331 (0x14b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917336A, serialNumber=21D3ED21F7CDEBC7D00F1BB7A09511B95CDEFE23
        Validity
            Not Before: Apr  5 04:51:00 2026 GMT
            Not After : Apr 12 04:51:00 2026 GMT
        Subject: CN=69d1ea34-f5e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:45:26:f5:a6:08:ab:e5:d1:11:71:df:58:33:
                    cd:98:a1:ec:a0:df:0d:da:0a:20:03:ba:98:6b:eb:
                    79:ba:96:8b:86:67:99:c6:bf:01:e5:9c:7f:48:74:
                    d2:0b:b2:57:a8:1f:bd:0a:5e:b8:91:bc:1c:37:e1:
                    e2:c1:29:24:0c:e1:81:93:05:1d:97:39:19:c0:75:
                    ff:53:20:b1:15:c8:41:21:8e:39:3b:a4:2a:95:0e:
                    92:fa:28:90:32:2e:63:10:ca:6e:02:7e:46:fc:b0:
                    2c:6f:19:08:fa:40:b6:0d:d7:db:a0:9e:65:4b:ef:
                    95:58:9c:7c:cf:ab:56:df:72:50:8d:9f:8b:bd:0b:
                    35:a6:a8:e8:61:90:ac:95:04:2d:2e:3e:4f:ea:76:
                    29:bf:18:2f:44:4b:5e:68:4f:08:35:28:9c:27:90:
                    f4:c6:8f:0d:27:e1:76:1b:a2:07:7c:83:81:bc:55:
                    eb:6a:87:93:a5:6b:41:2f:83:ce:d0:c1:33:77:f1:
                    2b:19:1d:74:96:65:67:3f:28:d8:7a:8b:f2:16:d7:
                    05:a3:65:f1:13:72:13:62:36:bf:32:d6:bd:04:95:
                    11:ec:21:d0:a2:1f:36:8b:fc:67:94:be:8d:b2:a6:
                    7a:12:02:2b:ef:11:d6:5d:99:c2:1d:ce:26:d2:47:
                    8f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:C1:CE:B4:43:BF:A0:E5:3E:8E:39:FA:77:07:C5:83:72:BF:33:FA
            X509v3 Authority Key Identifier:
                keyid:21:D3:ED:21:F7:CD:EB:C7:D0:0F:1B:B7:A0:95:11:B9:5C:DE:FE:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IdPtIffN68fQDxu3oJURuVze_iM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:da:d8:bf:7f:1a:3e:17:db:96:05:f6:86:e7:de:8c:93:19:
         64:47:9a:10:48:1b:64:58:e4:82:8c:bd:2d:3d:b3:a9:ae:59:
         58:11:50:76:77:50:2a:fa:fa:d6:99:3e:7d:08:04:8c:7b:de:
         22:c2:1b:b2:55:f6:0a:89:8f:71:6d:26:49:bc:65:f5:95:92:
         92:d0:8b:02:1b:aa:49:d2:ce:fd:99:13:16:65:f1:b3:ee:f8:
         ac:57:9b:36:64:15:f9:4a:e7:2d:15:06:4f:ba:d7:eb:d1:39:
         54:e1:c4:d3:90:9c:8c:f4:cb:a8:35:d0:35:cc:86:4a:e3:90:
         52:39:2e:75:d9:c0:3b:72:50:15:79:5c:ea:a9:9e:f6:bc:aa:
         b1:f7:da:49:be:c2:b7:28:b7:da:4e:67:ab:61:04:7a:8f:63:
         0e:00:31:88:af:4e:af:04:05:76:92:a6:bf:a0:9b:cb:66:4b:
         e6:5b:c8:b6:38:ff:8c:73:26:b3:e6:3a:b3:08:d2:75:41:3d:
         40:11:c5:56:03:18:23:fb:c6:3c:68:8e:01:77:79:6b:c7:35:
         74:ec:02:42:8f:e2:a1:07:8c:25:ee:5a:d2:8e:24:27:94:de:
         f5:7b:bf:8d:9d:8a:16:11:d6:c2:1b:1d:cc:1b:ef:d3:65:3e:
         fc:5a:f2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:47 2026 by rpki-client