Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
File:                     D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft (raw, json)
Hash identifier:          FIP2L749eYddFqeFRRGd5nYWB73uX/bLPuNm53yYs2Q=
Subject key identifier:   7E:91:5B:71:E2:D2:63:6F:B6:59:BD:8B:F6:7B:A9:E5:DC:7C:CF:B0
Authority key identifier: 0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86
Certificate issuer:       /CN=A918A05D/serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186
Certificate serial:       0229
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
Manifest number:          0207
Signing time:             Sun 05 Apr 2026 02:54:36 +0000
Manifest this update:     Sun 05 Apr 2026 02:54:36 +0000
Manifest next update:     Sun 12 Apr 2026 02:54:36 +0000
Files and hashes:         1: D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl (hash: 8bS6wIauYuHQM2+KPU5W+fDm2IQeAfMetHEW8kompHI=)
                          2: A045C92CB46611EEAFEE8758C4F9AE02.roa (hash: GGi4WKr5J/co8rUxY6XhZiQWpGv4cgJGL7H5da+yC00=)
                          3: E506BE2CF03811EFAD4C2257C4F9AE02.roa (hash: 4BghnC9zlIFOkenQJ/GFUUF/OmlIg8plx0INfrm7Jrc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl
                          rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 02:54:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 553 (0x229)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A05D, serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186
        Validity
            Not Before: Apr  5 02:54:36 2026 GMT
            Not After : Apr 12 02:54:36 2026 GMT
        Subject: CN=69d1ceec-631c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8a:61:2d:5a:e3:0e:7c:28:fb:02:1f:fc:ff:
                    8c:79:21:f3:14:40:ee:27:db:38:d0:af:88:a8:eb:
                    5e:de:cc:05:15:15:ad:bc:d8:d8:17:e8:e4:65:72:
                    ec:26:95:15:5a:9f:47:b9:cd:ad:d7:b7:80:65:36:
                    1b:a3:97:52:fc:f1:4c:bc:04:47:61:da:74:5b:92:
                    db:3a:9f:97:99:19:e6:fb:f1:65:24:aa:d6:65:c3:
                    d2:76:fc:15:d1:46:f8:3d:f5:fe:60:c6:08:c3:a9:
                    04:89:a2:d5:f5:74:0a:2e:e5:48:07:8b:6c:0b:b5:
                    2d:80:93:ba:ec:94:cf:bc:78:49:49:ae:f7:8d:1a:
                    b6:a4:58:06:00:39:ed:3a:3d:a9:98:de:8c:20:d7:
                    83:7b:9d:7c:e2:0d:a0:f7:ad:62:27:ca:71:66:d0:
                    de:c6:d2:6d:43:1b:c9:4b:cc:e0:21:41:c6:0f:b7:
                    97:f3:3e:7a:9b:9c:10:ac:7e:43:e4:80:ec:3a:65:
                    69:e1:e6:63:09:92:df:80:88:89:a0:70:e9:20:fe:
                    50:c0:9f:70:1a:3e:d0:40:67:eb:29:16:71:28:0d:
                    24:3d:18:18:20:a5:2f:5d:0c:6c:a5:35:32:fe:d5:
                    1f:1f:bf:eb:e4:24:94:00:03:bf:97:ed:fb:e3:ee:
                    f0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:91:5B:71:E2:D2:63:6F:B6:59:BD:8B:F6:7B:A9:E5:DC:7C:CF:B0
            X509v3 Authority Key Identifier:
                keyid:0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:1e:56:b5:c0:42:29:b1:40:21:6a:ff:a0:e3:17:6a:aa:58:
         13:77:ab:09:d5:a1:62:d5:c8:ef:46:e7:1a:01:35:c1:86:00:
         d7:86:14:57:79:1b:1c:84:27:88:77:a2:c0:7d:c4:8c:5a:80:
         83:13:c4:61:d3:d5:bd:53:b9:f8:b7:b3:a3:0b:7c:cb:f6:82:
         54:2f:47:e9:76:ad:62:e7:92:48:be:aa:f9:30:7f:1a:fa:a9:
         e3:b9:59:20:05:0f:ad:68:82:6a:87:a2:0b:97:dd:94:57:52:
         f8:8e:31:c5:00:d1:01:4c:5a:8d:9b:89:d7:ba:60:10:e5:10:
         46:e7:fb:e7:30:ba:32:75:ac:c4:9a:dd:86:fd:c5:b7:f5:2b:
         0f:e7:0f:d1:10:57:ec:40:81:a4:c2:ca:26:38:ae:ef:4b:73:
         88:43:fe:3b:10:2b:5d:e2:b4:1e:83:87:c7:34:38:9d:2e:8e:
         1b:72:e7:34:10:e9:d0:c7:61:cb:4a:4f:83:34:3c:58:30:eb:
         18:6b:fc:21:44:76:97:a4:df:d5:3e:23:88:19:3b:f8:47:e4:
         bd:27:fd:d6:a5:d9:66:bd:b1:2b:45:64:94:e9:e0:fe:fe:9d:
         68:1a:55:b8:ee:96:fa:ad:1f:0c:88:2c:3c:30:62:46:b5:07:
         ba:2c:59:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:52 2026 by rpki-client