Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft
File:                     70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft (raw, json)
Hash identifier:          7hA0tZeUFDKS8dV8i0ltFYCaTyApTDTbNyQ7InmIiOQ=
Subject key identifier:   22:45:44:E6:8C:94:AC:05:D6:08:CE:2F:40:47:5B:4A:95:C8:B7:5C
Authority key identifier: EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24
Certificate issuer:       /CN=A918BB4D/serialNumber=EF403643EA9820AE6D9D622F9AEFD7A4C9154F24
Certificate serial:       079D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft
Manifest number:          0767
Signing time:             Sun 26 Apr 2026 21:37:18 +0000
Manifest this update:     Sun 26 Apr 2026 21:37:17 +0000
Manifest next update:     Sun 03 May 2026 21:37:17 +0000
Files and hashes:         1: 70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl (hash: QzBir9IvUsLStrPWR+lDGzHpFQ62RGB46NT7LGxsX8I=)
                          2: 58EBEC82719A11EEBBA64415C4F9AE02.roa (hash: GtRv2G1MeWMHZlw+kEpfpaWB79CdGXzgFC1k73nj5d0=)
                          3: 5997C4D0719A11EEBBA64415C4F9AE02.roa (hash: aSxgIlw8nZiN+6lgLNU5XvZ1FdnFtkSevs0pTTJMvJY=)
                          4: 34956990D75511EF80E68A39C4F9AE02.roa (hash: t2VblrPsPkg3OLGXiwM69R4XdRcwB3mySF4/73qDgbo=)
                          5: C0681BF2CF4911EF8531B085C4F9AE02.roa (hash: 4thkndOJT3+vXRn8C465Fs6jq2L+GeTYNEVafFWoUXs=)
                          6: 3524F8BCD75511EF80E68A39C4F9AE02.roa (hash: vtp4YKFz/A5Vi0zg64GLZs1k3ocvwIIzZCuiJxmejGs=)
                          7: 8065DE3E355D11F0A8C7F559C4F9AE02.roa (hash: JyT9d9OOCJrRzpFBrxSBmC+CtEx3ZAy2eSQHymf45+s=)
                          8: 35A4EFE0D75511EF80E68A39C4F9AE02.roa (hash: hn072ZUt0QkiLvSmGaoI0bZ5eHexJ3APJASDMCiyA2M=)
                          9: 05F05106586011EE9399A92EC4F9AE02.roa (hash: d5Czd9F+MkzuB9PBir/JbWAghXpmJN+auVy0L4FfZfQ=)
                          10: 364089B4D75511EF80E68A39C4F9AE02.roa (hash: mr8KwOkVa8RAea/BYVd3YUG6na4L4IGVAN/w6VWKUIw=)
                          11: 80DE56F2355D11F0A8C7F559C4F9AE02.roa (hash: phlxZambGxwdatRQWNb2Yjt/alGa6e8xzyqiiNU2+mQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl
                          rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 03 May 2026 21:37:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1949 (0x79d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BB4D, serialNumber=EF403643EA9820AE6D9D622F9AEFD7A4C9154F24
        Validity
            Not Before: Apr 26 21:37:17 2026 GMT
            Not After : May  3 21:37:17 2026 GMT
        Subject: CN=69ee858e-5d74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:27:fa:d7:db:29:46:f0:30:54:07:15:e9:eb:
                    71:01:56:fa:46:6b:93:32:14:cf:98:dd:ed:71:9b:
                    0a:86:17:fd:c8:a1:46:a3:c8:e3:60:06:19:8e:3b:
                    30:fb:de:0a:e2:1d:99:08:54:28:17:84:58:52:b8:
                    a6:71:cf:cf:70:48:40:49:ac:db:8f:e3:96:51:94:
                    1f:bb:f4:e5:e2:aa:17:b9:15:37:da:d7:34:9c:90:
                    21:44:3d:8d:3c:13:ae:78:ba:5b:0b:b3:bf:69:76:
                    e7:34:7b:93:6d:9f:48:c1:89:06:ba:e4:38:ab:2a:
                    d8:23:94:5e:d6:cd:f4:69:a2:3a:7e:03:2a:19:9e:
                    e4:0c:50:1f:4b:4b:87:1f:4d:11:a4:66:dd:19:4a:
                    fa:63:8f:a7:3e:d8:f7:d6:16:14:6e:e5:04:73:41:
                    bf:fe:cc:d9:af:ad:57:ae:37:1d:1f:8b:f4:61:c0:
                    01:a1:bd:d3:65:e3:39:4f:2f:c1:08:f6:c7:ca:10:
                    1e:c8:07:a9:e2:48:e9:1a:43:8c:13:ff:77:62:d4:
                    a9:c9:bb:b8:c8:a7:f5:27:c6:3a:39:74:41:bf:04:
                    66:c1:8a:67:8d:a3:45:a6:1e:84:4d:ad:2c:b7:91:
                    2c:fc:6e:62:f6:9a:4a:2e:1d:a6:6e:1d:58:1a:bd:
                    53:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:45:44:E6:8C:94:AC:05:D6:08:CE:2F:40:47:5B:4A:95:C8:B7:5C
            X509v3 Authority Key Identifier:
                keyid:EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:a8:1c:a4:85:05:c1:9b:0c:9f:ce:05:a3:2f:ca:06:d0:86:
         ff:3b:3f:ca:4f:0f:a8:53:21:9d:5d:d7:a2:4f:b4:5e:aa:c6:
         4d:87:4d:03:b2:5d:20:98:6b:64:6a:4e:7f:30:f6:33:75:00:
         0a:7a:dc:01:b0:91:4b:06:7b:ef:05:32:46:52:ce:99:4f:a1:
         a0:67:27:6c:17:38:2d:d7:14:a3:52:0f:99:b1:35:35:d0:a5:
         1c:81:b5:9c:70:ea:96:81:b7:d1:ef:bb:8a:dc:37:33:e3:04:
         06:fc:3d:f6:c2:02:ae:4d:bf:37:11:31:22:da:f7:3d:26:72:
         a3:1c:82:2f:72:ec:a6:c9:8d:20:64:a9:30:9c:85:e3:61:48:
         bd:ec:4c:ba:39:dd:a9:17:46:5d:32:57:48:12:37:2d:57:67:
         43:c7:0e:e3:9d:fa:68:15:26:c9:07:bd:d4:90:ab:4d:ea:6b:
         64:90:7f:d6:cc:ba:24:a6:88:7f:45:81:95:1d:2b:92:3a:37:
         a4:2e:28:7f:c3:45:02:11:7a:9b:b8:ec:e1:0f:47:d6:ab:1f:
         8c:4f:f3:4c:8d:8d:f4:28:1a:18:68:0f:80:fd:5c:b9:71:09:
         35:72:c6:b0:2a:0b:93:7f:b9:69:b8:e1:72:18:01:79:a5:63:
         5d:4b:a7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 17:33:23 2026 by rpki-client