Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.mft
File:                     apVIHOj0DdiJXR-3rukOWVm6g8E.mft (raw, json)
Hash identifier:          LFJCouGM5RauQcpp3wlpVW2/0ZM3dDpSNStl7Fpslm4=
Subject key identifier:   B8:65:0A:78:26:02:74:25:A5:AF:68:22:51:66:ED:99:80:46:AE:AC
Authority key identifier: 6A:95:48:1C:E8:F4:0D:D8:89:5D:1F:B7:AE:E9:0E:59:59:BA:83:C1
Certificate issuer:       /CN=A918DA0C/serialNumber=6A95481CE8F40DD8895D1FB7AEE90E5959BA83C1
Certificate serial:       05FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apVIHOj0DdiJXR-3rukOWVm6g8E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.mft
Manifest number:          05F1
Signing time:             Sat 04 Apr 2026 22:44:02 +0000
Manifest this update:     Sat 04 Apr 2026 22:44:02 +0000
Manifest next update:     Sat 11 Apr 2026 22:44:02 +0000
Files and hashes:         1: apVIHOj0DdiJXR-3rukOWVm6g8E.crl (hash: 0yTZU/iwTSC7cepct8M4jkYh0gwxtcrjIqtyCbPqYnQ=)
                          2: 0C3D8674345511EFA05D0C10C4F9AE02.roa (hash: HRou4YD/uzujxN885LS4SB7lyLQ56IuCpK60S++EpqE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.crl
                          rsync://rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apVIHOj0DdiJXR-3rukOWVm6g8E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 22:44:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1533 (0x5fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918DA0C, serialNumber=6A95481CE8F40DD8895D1FB7AEE90E5959BA83C1
        Validity
            Not Before: Apr  4 22:44:02 2026 GMT
            Not After : Apr 11 22:44:02 2026 GMT
        Subject: CN=69d19432-a7bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a3:33:47:45:74:38:73:49:fc:ef:2c:63:e9:
                    8a:c8:2a:3e:ef:71:6a:17:9d:e3:51:aa:b3:bd:ab:
                    cd:e0:f2:ea:8b:af:6e:76:96:0e:bf:23:0d:aa:50:
                    c3:e9:3e:72:14:ef:6e:f4:09:e6:c4:ba:17:ce:54:
                    64:ab:9d:89:cc:c2:8e:3d:5e:e0:64:0d:a5:27:6f:
                    68:44:67:da:11:5b:e6:67:39:ac:54:fc:13:22:f4:
                    ad:e7:44:a2:31:01:5b:53:e3:f4:f2:2c:d4:c5:82:
                    4c:df:28:b9:b3:0e:61:23:d9:b7:c5:80:54:e0:45:
                    eb:f9:20:df:7f:eb:4b:02:0a:b8:15:15:79:01:9f:
                    20:d2:91:b5:7e:ee:cb:ed:c3:1c:38:4f:37:49:ba:
                    b3:df:a2:c6:79:b1:02:1d:92:29:95:ae:cc:c0:5e:
                    a7:8e:8f:bf:24:c5:0a:d2:01:32:0e:57:51:44:f0:
                    28:be:78:0b:31:18:2d:7d:f2:6b:16:90:1e:40:7f:
                    71:4a:d4:b3:91:8c:70:ff:8b:80:0a:21:04:65:db:
                    8d:25:ba:46:3f:7d:44:f4:76:70:e5:f0:ee:76:25:
                    80:5f:35:a9:93:c5:8a:cc:7e:82:b0:4b:c9:a3:ab:
                    0f:92:15:3e:58:b5:86:58:ec:5e:49:f2:17:0b:26:
                    7e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:65:0A:78:26:02:74:25:A5:AF:68:22:51:66:ED:99:80:46:AE:AC
            X509v3 Authority Key Identifier:
                keyid:6A:95:48:1C:E8:F4:0D:D8:89:5D:1F:B7:AE:E9:0E:59:59:BA:83:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apVIHOj0DdiJXR-3rukOWVm6g8E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:ca:6f:08:f6:f5:d3:6e:02:05:84:1f:2c:fb:3f:67:12:d2:
         c3:34:d1:9b:ae:15:d2:0e:0b:40:09:63:50:08:fd:c0:6b:5c:
         56:bb:6f:de:c2:9c:6e:4b:ae:fe:68:c1:28:18:9c:ee:62:cc:
         44:09:82:3f:4e:56:9e:b2:e8:09:98:47:c0:8c:a2:2f:6a:a7:
         09:0e:0c:27:c9:cb:cc:84:de:0c:80:f7:20:cd:e2:8e:2b:2e:
         bb:70:6a:d4:b0:c1:25:2d:a1:d5:16:45:6e:28:6c:2b:7b:08:
         e5:bf:77:9a:62:91:0f:cc:b8:f5:19:8e:f7:a4:17:ec:f3:86:
         d1:fd:26:05:cb:2c:5d:36:67:b5:70:8a:f2:d3:b1:0d:fa:ba:
         9b:4b:fa:62:15:77:0d:81:ff:82:8b:08:dd:fa:32:dd:3a:70:
         13:ba:cc:1d:8e:6d:52:09:17:d5:c2:b9:d5:da:01:d5:0e:c3:
         9a:57:dd:a4:6e:b7:94:83:1f:8d:66:25:d8:9c:50:50:42:78:
         69:71:89:94:60:11:6e:f3:1c:cb:a7:44:f5:6a:4a:35:1e:23:
         e1:e7:08:1e:fc:33:b0:39:87:5d:86:88:94:aa:2f:70:7f:b0:
         74:16:6c:ff:2a:3f:7c:87:3a:89:28:8e:da:00:06:58:a6:68:
         b2:4c:e1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:51:51 2026 by rpki-client