Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft
File:                     fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft (raw, json)
Hash identifier:          GqxZAP6FekUjlU5AWOzBgRolU+JReEn9Rs2/4WlP70w=
Subject key identifier:   E7:B7:9A:B4:14:FE:13:69:85:3A:39:33:4D:BA:1A:75:95:82:83:E5
Authority key identifier: 7C:B0:E5:82:51:01:C6:65:44:3F:2C:FA:B1:9E:84:D1:A7:79:75:97
Certificate issuer:       /CN=A9187E80/serialNumber=7CB0E5825101C665443F2CFAB19E84D1A7797597
Certificate serial:       06E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLDlglEBxmVEPyz6sZ6E0ad5dZc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft
Manifest number:          06CF
Signing time:             Sun 26 Apr 2026 22:13:56 +0000
Manifest this update:     Sun 26 Apr 2026 22:13:55 +0000
Manifest next update:     Sun 03 May 2026 22:13:55 +0000
Files and hashes:         1: fLDlglEBxmVEPyz6sZ6E0ad5dZc.crl (hash: ojl56Je+KGcPNS5inshQLHQw6tTCKa9qfQG/VuZYxJQ=)
                          2: 1B120B6E563B11EE9C93E334C4F9AE02.roa (hash: zx3SfNrsBStmAGKK4PT2fic35nMh12b91cF9VkyjT2E=)
                          3: 9F68F54067EF11F09584C157C4F9AE02.roa (hash: UzDPn/plAnRycbk9Qz1NVyr/2jrEf/+GzQ2KgWJxmuQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.crl
                          rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLDlglEBxmVEPyz6sZ6E0ad5dZc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 03 May 2026 22:13:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1762 (0x6e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187E80, serialNumber=7CB0E5825101C665443F2CFAB19E84D1A7797597
        Validity
            Not Before: Apr 26 22:13:55 2026 GMT
            Not After : May  3 22:13:55 2026 GMT
        Subject: CN=69ee8e24-fb95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:69:b0:23:42:67:47:3a:7a:a2:ef:4b:8a:93:
                    ae:ec:ca:3b:89:df:21:9a:7e:16:7d:58:69:6b:96:
                    06:11:05:77:cf:63:77:8f:7d:8e:1a:a7:b6:88:9b:
                    99:c0:cc:fe:d8:99:eb:d6:5c:52:7c:3f:f2:7f:1e:
                    e8:e7:81:4b:9c:0a:74:de:4d:46:ee:df:c6:d4:15:
                    21:55:39:a1:43:9a:51:ba:85:0b:ce:0c:6a:47:a5:
                    6e:d1:c1:b1:eb:99:8b:40:8c:03:f7:2f:a2:09:a0:
                    b0:48:59:41:ff:7a:04:a2:39:53:aa:45:e4:9b:c3:
                    ce:8b:b8:96:70:7b:88:ed:92:ff:d8:25:ca:fe:dd:
                    df:8f:40:64:64:d3:8f:00:80:20:8f:5c:46:d4:0c:
                    7d:67:d1:94:af:d7:ac:b6:58:31:8a:53:ce:86:e0:
                    56:30:6b:a1:ce:0d:67:3a:a4:ef:36:b4:68:d7:a8:
                    7c:09:58:65:d9:49:63:64:fa:a2:b7:48:8b:e3:41:
                    1a:c0:32:48:4f:6e:d4:ad:99:15:9f:e8:e8:57:ea:
                    18:84:0a:59:57:76:5f:e9:d9:10:79:55:0c:2f:71:
                    aa:53:5f:bf:64:ea:aa:7c:d9:fc:8d:db:34:39:af:
                    66:e3:7d:6a:9b:a4:48:dc:ed:92:82:61:b1:22:87:
                    71:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B7:9A:B4:14:FE:13:69:85:3A:39:33:4D:BA:1A:75:95:82:83:E5
            X509v3 Authority Key Identifier:
                keyid:7C:B0:E5:82:51:01:C6:65:44:3F:2C:FA:B1:9E:84:D1:A7:79:75:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLDlglEBxmVEPyz6sZ6E0ad5dZc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:26:0f:ab:f6:22:61:e7:14:e6:e1:ab:33:82:e9:93:fb:83:
         28:04:ce:63:99:2f:c3:55:41:2b:22:45:63:cc:cd:20:ea:f0:
         f5:67:8c:06:38:c5:13:98:df:42:97:79:94:aa:91:da:d0:33:
         6a:3c:e7:0e:07:1a:62:29:0d:e8:59:76:25:df:ad:60:58:44:
         df:66:71:2d:aa:96:e9:72:15:a4:89:17:da:09:51:97:58:70:
         7b:52:67:e0:59:1d:84:58:9f:84:87:a1:54:86:db:c4:dc:31:
         58:4f:ad:29:6d:16:fa:61:96:ed:cd:e3:76:b6:1e:e4:02:78:
         9a:66:11:14:c3:05:82:37:a3:f2:55:9e:5d:52:00:aa:3f:e3:
         ac:dc:08:fb:97:eb:cb:05:90:4d:cc:4f:68:7f:08:31:1a:42:
         5b:1f:c0:fd:0d:f3:3c:5e:59:48:03:fb:ce:61:cb:7a:c0:14:
         40:ef:35:54:0d:07:1d:bf:2d:7b:b2:c1:3b:c6:89:d5:c8:9d:
         c2:47:ad:9e:9c:6b:b7:d0:38:39:a6:cc:04:73:a2:dc:3d:32:
         1a:ff:59:4a:1d:72:68:1c:71:08:14:81:d6:a1:26:54:86:a6:
         23:13:c9:90:35:2f:2f:62:b8:dc:d8:0c:ad:fd:5f:f6:2d:1b:
         41:ec:ed:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:13:38 2026 by rpki-client