Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft
File:                     rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft (raw, json)
Hash identifier:          JhM33DNNzOtFVs9wvWblq5wRXYQvNqpeHqjWLgEhrDM=
Subject key identifier:   27:7A:5F:90:62:33:D0:E7:0E:65:A4:B6:FF:4F:03:0A:44:13:C9:30
Authority key identifier: AD:6D:47:B7:58:53:B6:8E:2F:14:AF:74:C6:5A:76:4E:E4:D1:D9:9C
Certificate issuer:       /CN=A918CD53/serialNumber=AD6D47B75853B68E2F14AF74C65A764EE4D1D99C
Certificate serial:       0298
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW1Ht1hTto4vFK90xlp2TuTR2Zw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft
Manifest number:          0290
Signing time:             Sun 05 Apr 2026 01:18:04 +0000
Manifest this update:     Sun 05 Apr 2026 01:18:04 +0000
Manifest next update:     Sun 12 Apr 2026 01:18:04 +0000
Files and hashes:         1: rW1Ht1hTto4vFK90xlp2TuTR2Zw.crl (hash: vCJ/JEs295kZ3lqE5VEU2bLDQj+Udd2X84G1l1a/lNc=)
                          2: 01F3383E4A1F11EDBFDEFE29C4F9AE02.roa (hash: 0dEgHfjdaDmXpIqs7bBG+Yt1VZ3EjEezx277VdYW0Gw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.crl
                          rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW1Ht1hTto4vFK90xlp2TuTR2Zw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 01:18:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 664 (0x298)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918CD53, serialNumber=AD6D47B75853B68E2F14AF74C65A764EE4D1D99C
        Validity
            Not Before: Apr  5 01:18:04 2026 GMT
            Not After : Apr 12 01:18:04 2026 GMT
        Subject: CN=69d1b84c-6f0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:43:c3:06:cb:a5:7c:3d:9c:e8:71:10:28:47:
                    39:98:cc:09:34:87:c1:45:78:16:e1:84:5a:48:f3:
                    d8:dc:cb:47:4d:29:2f:e1:27:34:aa:16:db:63:d7:
                    c5:e1:e4:c1:35:7e:18:d4:fa:f7:20:4c:22:ff:88:
                    4c:55:c5:d2:39:fe:bd:e1:c7:0f:97:ed:24:83:53:
                    ba:d1:fd:24:73:af:62:be:32:2b:ef:ba:ad:57:4f:
                    29:46:36:cd:8e:0f:03:a8:8f:c6:fd:23:94:ea:1e:
                    f4:e4:29:18:10:43:b8:8a:c9:da:05:f1:55:7c:8f:
                    67:e7:94:a0:51:f7:b1:58:24:be:8a:29:9f:a5:2f:
                    f2:68:62:00:15:a0:fb:dd:d8:b7:df:d2:68:10:9c:
                    f0:8f:fe:37:95:e4:d7:70:71:ba:51:ea:bd:1d:fc:
                    d2:ad:39:be:69:a1:dd:d9:a0:d9:7f:13:81:5d:f8:
                    bc:54:36:1e:1c:d2:df:59:82:ce:b5:2e:46:0d:43:
                    52:71:79:bd:dd:a3:37:d2:20:a2:51:cf:00:09:60:
                    00:90:c9:d9:a4:76:c6:c9:da:b9:51:65:bd:65:9a:
                    b0:ad:44:f9:7a:94:51:34:0b:b1:10:a6:52:31:73:
                    92:95:58:fe:cb:c7:36:f7:27:a2:78:ca:45:0d:fa:
                    a4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:7A:5F:90:62:33:D0:E7:0E:65:A4:B6:FF:4F:03:0A:44:13:C9:30
            X509v3 Authority Key Identifier:
                keyid:AD:6D:47:B7:58:53:B6:8E:2F:14:AF:74:C6:5A:76:4E:E4:D1:D9:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW1Ht1hTto4vFK90xlp2TuTR2Zw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:f8:2f:71:43:48:4e:fc:46:5a:91:99:e8:3b:39:33:79:12:
         78:3f:5f:29:ce:e1:62:c5:8f:c8:4d:86:16:d1:46:e5:e1:c8:
         e3:bb:f6:90:8f:3a:70:d3:fd:50:e8:e4:97:9d:1b:b6:53:c6:
         68:25:21:5c:fb:01:e8:b6:4d:6c:d1:25:85:50:18:df:a6:8b:
         3b:a7:a6:c8:b1:2d:fc:79:6d:64:b9:84:b4:ef:8f:e1:0e:19:
         60:4d:26:57:34:ff:06:43:0e:fb:c3:fc:17:ae:fc:ab:fd:16:
         a2:ff:a2:42:04:b3:41:49:02:20:61:1b:6f:db:69:8f:2f:1d:
         01:e5:3d:bb:4f:9b:05:cd:ca:a0:85:fc:c6:1d:68:47:1d:05:
         5c:7e:10:5a:77:ca:02:a7:9f:9f:61:b7:10:98:e1:d8:01:bc:
         a0:eb:65:1f:74:a2:da:7e:29:46:ce:53:2e:11:fd:96:2d:cf:
         1e:d9:1e:ab:42:57:8a:d8:d6:5e:22:6f:74:d1:ea:c5:01:87:
         b0:e8:ef:f9:d6:ba:68:51:65:3d:46:5b:6f:ac:bc:6e:00:15:
         3d:64:78:ab:bb:c9:3c:7e:f9:66:04:ae:f9:bd:c9:e2:da:bb:
         43:ce:3f:1b:a5:40:49:a8:f0:d0:db:88:56:ae:f6:83:64:64:
         e0:55:3c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:54:17 2026 by rpki-client