Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft
File:                     hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft (raw, json)
Hash identifier:          i4zZP8QPjhofJ6uA/wPhVGiwsY8jdcciOf+PJVHtTtE=
Subject key identifier:   3E:27:8D:CD:AC:DE:0D:66:27:EB:51:CD:9B:88:76:82:C2:DF:4B:BC
Authority key identifier: 84:8A:79:AB:50:41:E7:1C:E6:22:50:B5:7F:C1:E0:F5:49:78:C9:3A
Certificate issuer:       /CN=A918EC78/serialNumber=848A79AB5041E71CE62250B57FC1E0F54978C93A
Certificate serial:       0B2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft
Manifest number:          0B1E
Signing time:             Sat 04 Apr 2026 19:06:52 +0000
Manifest this update:     Sat 04 Apr 2026 19:06:52 +0000
Manifest next update:     Sat 11 Apr 2026 19:06:52 +0000
Files and hashes:         1: hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.crl (hash: rXiVzLqXNXWHqqsHd69wlvlf936Tr4aKb4nrAF71glI=)
                          2: BF77D1785DCB11EA880A7643C4F9AE02.roa (hash: A0fYtG6N2BexE9W0qntrNVFN6Gcpgpfkbf4hLPy3YFQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.crl
                          rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 19:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2859 (0xb2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EC78, serialNumber=848A79AB5041E71CE62250B57FC1E0F54978C93A
        Validity
            Not Before: Apr  4 19:06:52 2026 GMT
            Not After : Apr 11 19:06:52 2026 GMT
        Subject: CN=69d1614c-a181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:11:96:e1:82:c8:ec:64:2a:5a:7d:3c:a7:ec:
                    cd:01:a0:6f:8f:c6:e6:1e:59:56:70:99:3c:73:94:
                    8f:e1:ee:63:c0:5c:8e:2d:50:7e:d7:4e:f5:cb:a5:
                    0b:2f:08:17:3f:99:56:72:4f:cc:54:53:bf:d3:d0:
                    92:30:1b:23:36:a8:19:ed:e5:39:cf:99:c2:13:9e:
                    55:ea:2b:34:77:a6:c9:2b:d2:e3:d6:48:87:04:c1:
                    8c:a1:21:4d:ac:92:76:42:3a:42:2c:71:d1:04:ee:
                    0f:1d:03:4a:b1:b2:6e:0f:c6:fa:23:12:c0:5f:e2:
                    66:d4:4d:b5:69:ca:eb:1b:f2:0e:6a:90:41:50:f4:
                    f0:07:bb:73:ab:b6:31:2b:cd:fd:6c:3d:5d:23:9e:
                    21:4b:22:bc:02:93:3d:81:32:af:ff:07:ab:25:e1:
                    4b:45:1b:cf:17:29:94:52:f7:04:95:aa:75:58:b8:
                    99:b1:3c:5e:29:7d:2f:6f:69:dd:de:14:e4:69:1d:
                    39:d4:6e:b2:12:d7:57:d1:b9:f7:f4:32:fd:3d:2a:
                    91:51:07:dd:bf:2f:20:d8:f8:2a:20:5e:3f:19:9c:
                    35:1b:a9:e0:8a:6a:6e:4e:09:1f:58:b3:a0:05:71:
                    f8:f0:9a:ab:f0:c4:5f:ce:db:a9:95:e9:6a:22:23:
                    bb:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:27:8D:CD:AC:DE:0D:66:27:EB:51:CD:9B:88:76:82:C2:DF:4B:BC
            X509v3 Authority Key Identifier:
                keyid:84:8A:79:AB:50:41:E7:1C:E6:22:50:B5:7F:C1:E0:F5:49:78:C9:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:8d:5e:66:f2:c9:9f:0b:57:0b:8f:0c:86:fc:05:b0:e3:80:
         9e:32:92:95:ef:b4:49:00:70:21:31:12:54:8a:d6:87:70:e4:
         96:69:ba:6f:0b:e3:42:9e:18:20:d8:1f:79:7b:53:c3:bc:58:
         32:15:72:79:ec:47:da:eb:92:88:14:08:7b:b6:c1:20:9f:ce:
         64:a1:69:27:09:c7:c5:c7:09:f0:75:a3:f6:12:48:86:da:90:
         d2:0b:9d:66:2f:62:0d:2a:3e:a1:88:ea:c5:c9:4a:26:03:b7:
         d9:3e:e7:ab:d7:27:b2:d0:e9:37:b1:ac:92:01:df:7a:7f:0e:
         34:1f:5e:da:37:94:7e:33:3f:20:a2:72:7b:05:ac:27:0f:c1:
         7e:6e:64:ea:bc:b7:23:5c:a3:85:ec:c3:b8:7b:d1:68:e3:4e:
         ec:5d:fd:35:e3:6f:61:5b:63:04:b5:81:92:65:75:0b:ca:73:
         92:58:66:75:96:49:4b:37:17:4a:10:cb:68:1a:95:04:e2:13:
         34:40:49:1c:c1:44:dd:40:29:0a:ef:83:d6:db:ad:63:e3:d4:
         be:88:b8:ab:55:fc:51:eb:22:9f:38:84:be:9e:cc:54:ac:1a:
         65:42:3d:cf:aa:e6:15:20:1b:e5:a4:38:2b:66:08:9a:90:85:
         67:48:b8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:23:44 2026 by rpki-client