Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft
File:                     8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft (raw, json)
Hash identifier:          Eeah5OBNAMSESnzMwCAGFSF1ZyujC14LEieLXSu4x9Q=
Subject key identifier:   2E:75:02:98:D3:0D:3C:36:61:A3:28:07:E2:99:88:5D:93:A8:CF:97
Authority key identifier: F1:5C:5C:5B:A5:21:45:37:07:C8:1F:5F:EC:08:11:BF:21:CF:F4:0E
Certificate issuer:       /CN=A917E1FA/serialNumber=F15C5C5BA521453707C81F5FEC0811BF21CFF40E
Certificate serial:       B3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8VxcW6UhRTcHyB9f7AgRvyHP9A4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft
Manifest number:          AB
Signing time:             Fri 17 Apr 2026 07:00:21 +0000
Manifest this update:     Fri 17 Apr 2026 07:00:20 +0000
Manifest next update:     Fri 24 Apr 2026 07:00:20 +0000
Files and hashes:         1: 8VxcW6UhRTcHyB9f7AgRvyHP9A4.crl (hash: Yz73McMyOLesMZ7IebQiTHglG6sqX7H92MuajawauQM=)
                          2: FEC5694C482311F0B2B5E45DC4F9AE02.roa (hash: hSLC4NqqDun1gK6ZwRrsmJ/xEHmnvf+dUfJIiSua4bA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.crl
                          rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8VxcW6UhRTcHyB9f7AgRvyHP9A4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179 (0xb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E1FA, serialNumber=F15C5C5BA521453707C81F5FEC0811BF21CFF40E
        Validity
            Not Before: Apr 17 07:00:20 2026 GMT
            Not After : Apr 24 07:00:20 2026 GMT
        Subject: CN=69e1da84-bfc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:97:63:61:43:94:70:f3:2f:cd:68:eb:1c:1d:
                    4e:fe:4c:af:3f:1a:d1:c9:4f:27:78:cf:a0:6e:0a:
                    01:1c:d7:f3:0d:13:ed:96:13:7b:aa:16:22:81:24:
                    9d:92:b1:a7:ca:4d:30:dc:72:c3:ad:c6:89:d4:59:
                    ce:33:8b:1b:d1:1d:b1:1c:b3:a0:77:85:16:9d:09:
                    46:7a:61:91:d2:3f:2e:4c:79:40:9e:2e:f2:f3:77:
                    f7:b9:4d:e0:99:f1:01:05:3e:fa:c8:85:55:19:6d:
                    ce:32:39:7d:9c:38:7d:3c:98:63:41:41:bc:4e:43:
                    3f:0e:ff:03:d2:ff:6a:b9:72:c2:b3:1e:1e:21:5a:
                    8e:a9:21:a5:6f:a9:b9:b7:09:ad:48:62:f7:27:a7:
                    94:f3:0f:b6:af:ad:a3:c0:b3:f4:7a:69:f3:f4:56:
                    61:a8:3b:d8:27:ae:d0:44:33:c9:54:84:bd:fa:e0:
                    8f:c3:e9:cb:cc:94:d5:66:3c:b0:54:6f:fd:25:66:
                    7c:35:b0:3e:9a:51:c9:c4:c2:f8:1d:5a:50:2d:7e:
                    89:b9:32:25:2f:5f:74:dc:f3:45:87:2f:ef:3d:67:
                    a8:64:e1:6f:bb:ef:d8:a2:c4:e5:53:4d:5a:ba:95:
                    24:8d:7b:1b:a1:e3:72:50:8f:37:bc:2f:db:af:4f:
                    d1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:75:02:98:D3:0D:3C:36:61:A3:28:07:E2:99:88:5D:93:A8:CF:97
            X509v3 Authority Key Identifier:
                keyid:F1:5C:5C:5B:A5:21:45:37:07:C8:1F:5F:EC:08:11:BF:21:CF:F4:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8VxcW6UhRTcHyB9f7AgRvyHP9A4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:b0:9e:b9:04:a8:b3:b9:19:ef:41:a2:d7:7b:64:63:f9:b4:
         3c:79:57:68:5b:55:d6:ac:12:56:d3:8e:36:6e:7a:1e:ba:50:
         b4:70:64:91:4e:de:0f:3f:16:56:cb:4d:0a:c8:ba:ca:ee:6d:
         bd:5e:e8:78:60:dc:f2:f1:84:94:2a:dd:0e:1a:b4:a0:d1:97:
         76:c1:6d:de:6d:cd:0a:8f:19:45:6f:3e:de:71:60:4c:a8:dd:
         b8:11:cd:dd:ea:e4:1d:75:bf:fe:6b:99:6c:b9:5a:9b:4e:a2:
         91:b0:a9:43:5c:b1:53:c6:fe:aa:67:32:d1:4c:91:48:84:6c:
         23:8f:63:0b:6b:32:24:11:7a:25:09:d6:a1:c1:40:fb:9e:0a:
         37:f2:e6:01:f5:e4:38:1f:2b:2b:67:bc:e3:df:5b:dd:c4:2c:
         4f:7a:f3:86:e9:11:e0:de:eb:79:35:11:22:dc:69:ca:31:5c:
         d5:44:90:68:d1:65:a2:54:13:49:ad:f3:31:e2:1f:9c:c6:55:
         6a:89:ee:6e:b8:a8:69:e6:21:6d:91:2b:90:81:a6:51:97:0a:
         6f:4f:c5:2a:ad:66:b8:f8:1b:ba:9a:cc:84:6c:41:6c:df:3a:
         7e:42:ac:92:7c:1a:5e:4c:77:24:0f:09:ba:09:c3:4c:8b:fa:
         b2:b5:5a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 22:23:52 2026 by rpki-client