Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft
File:                     28ptKqUoxLJFVtsH_LVpw2rC_rE.mft (raw, json)
Hash identifier:          JyJcXSz/GUffD7om7wKB6Cqokm/Rnu6+qFU94tj4Zi0=
Subject key identifier:   F9:9F:48:CD:04:B7:33:93:D8:52:DE:D0:7D:77:EF:7C:40:67:BB:C6
Authority key identifier: DB:CA:6D:2A:A5:28:C4:B2:45:56:DB:07:FC:B5:69:C3:6A:C2:FE:B1
Certificate issuer:       /CN=A918C477/serialNumber=DBCA6D2AA528C4B24556DB07FCB569C36AC2FEB1
Certificate serial:       031F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28ptKqUoxLJFVtsH_LVpw2rC_rE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft
Manifest number:          031A
Signing time:             Sun 05 Apr 2026 00:53:25 +0000
Manifest this update:     Sun 05 Apr 2026 00:53:24 +0000
Manifest next update:     Sun 12 Apr 2026 00:53:24 +0000
Files and hashes:         1: 28ptKqUoxLJFVtsH_LVpw2rC_rE.crl (hash: CCzLfnfrXnWwOOt1R1xRYMnoG2tWSQs+G0yT2OPzBYw=)
                          2: FB2262620C3111EDBD0F7137C4F9AE02.roa (hash: pwiKgtogbJLJ/RbRQdDDfmFN4XuwAJG68m5hiv5+D3A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.crl
                          rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28ptKqUoxLJFVtsH_LVpw2rC_rE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 00:53:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 799 (0x31f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C477, serialNumber=DBCA6D2AA528C4B24556DB07FCB569C36AC2FEB1
        Validity
            Not Before: Apr  5 00:53:24 2026 GMT
            Not After : Apr 12 00:53:24 2026 GMT
        Subject: CN=69d1b285-3d96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d9:85:b6:87:85:0b:3f:fd:4c:33:a8:2e:65:
                    6c:bf:8a:eb:03:0d:c2:2d:d9:13:ca:72:20:78:c2:
                    17:bc:84:ae:98:cb:a8:71:94:05:a9:7b:41:5b:3c:
                    32:59:b0:c3:9b:82:e0:76:e9:18:83:d1:de:5a:3c:
                    ad:19:94:a3:75:de:23:15:19:f4:5f:dd:7a:d2:0b:
                    1b:1a:42:52:c9:81:cb:23:60:b5:c2:06:11:ce:6f:
                    28:90:fe:e6:c5:82:81:ee:9a:cc:2d:1f:8c:d0:05:
                    27:96:3a:88:62:f4:89:b1:b1:bf:7d:22:20:f8:3f:
                    57:41:c8:bd:a8:56:74:ce:8a:ae:3b:90:62:aa:15:
                    1a:9a:77:f9:33:ea:c8:b0:f2:15:25:b1:70:fb:44:
                    90:68:5f:dd:0d:f0:e2:36:b4:ed:2e:e7:45:10:22:
                    0a:40:5e:b9:19:d2:ca:a3:5c:ef:23:0f:40:ef:7c:
                    00:b6:63:a0:46:28:8a:d5:b1:76:93:78:32:16:cc:
                    1d:35:0f:87:38:a0:14:b0:aa:ac:dd:c1:ce:8e:cf:
                    bc:63:6e:8d:54:55:ad:38:45:eb:10:96:c8:0c:6b:
                    be:19:28:75:a7:67:c1:80:a4:3e:32:67:00:d5:6a:
                    e3:7e:f6:02:3b:ce:7e:e9:4f:84:38:55:5f:08:f0:
                    6d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:9F:48:CD:04:B7:33:93:D8:52:DE:D0:7D:77:EF:7C:40:67:BB:C6
            X509v3 Authority Key Identifier:
                keyid:DB:CA:6D:2A:A5:28:C4:B2:45:56:DB:07:FC:B5:69:C3:6A:C2:FE:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28ptKqUoxLJFVtsH_LVpw2rC_rE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:02:15:28:d2:76:9b:bf:e2:53:34:c3:dc:2b:f7:63:b7:74:
         e9:83:a7:a2:d0:86:64:7c:20:7e:95:42:8d:d3:03:70:b2:c3:
         2b:fd:78:38:d5:30:32:29:b9:ea:47:af:c0:33:74:35:93:f3:
         07:f4:81:89:40:ee:40:8d:1b:2f:82:ca:b0:3d:c0:f6:04:c5:
         25:97:6a:12:f3:09:a1:da:aa:0e:12:c5:73:7e:91:cb:41:b1:
         2c:5d:63:a6:37:70:a9:bd:21:6b:00:c2:12:04:05:04:09:3a:
         c6:05:7b:d2:b9:cc:18:e9:46:ed:c0:d2:23:02:5f:c5:9c:ca:
         44:1a:f1:2d:1d:42:24:de:79:a8:dd:31:57:e1:a4:b3:63:8b:
         9d:22:e8:a1:c9:3b:b1:e6:3a:02:13:98:3e:b5:70:51:70:70:
         a9:63:4b:f6:b7:6d:16:cf:3a:7f:34:5c:6f:b6:b9:c0:29:e9:
         a7:36:f1:6e:90:d4:97:76:b4:be:93:0a:9a:af:6f:d9:80:f6:
         e8:d2:87:b3:5c:b6:5f:7c:47:3e:d7:b7:c9:db:8d:62:9b:bd:
         73:70:fd:a0:73:6c:d8:07:bc:73:19:87:ab:47:bb:87:cd:d5:
         8b:33:e1:85:ab:1c:dc:5a:be:21:0a:1d:75:d2:91:ab:2d:80:
         c5:4c:8a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:56:13 2026 by rpki-client