Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF94/5029554C8A7911EE85441918C4F9AE02/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.mft
File:                     oeTwnS9HB4Z8-uJ-jxMjafuX0O0.mft (raw, json)
Hash identifier:          RXI/uQF2Xbm2xTWOOXa4/lHi80cnnBGUF2yHggew+ak=
Subject key identifier:   3A:75:92:29:80:4B:27:2A:37:12:C9:CC:C9:3B:BE:A7:2E:5D:8B:5E
Authority key identifier: A1:E4:F0:9D:2F:47:07:86:7C:FA:E2:7E:8F:13:23:69:FB:97:D0:ED
Certificate issuer:       /CN=A918EF94/serialNumber=A1E4F09D2F4707867CFAE27E8F132369FB97D0ED
Certificate serial:       01C8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EF94/5029554C8A7911EE85441918C4F9AE02/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.mft
Manifest number:          01C8
Signing time:             Sat 18 Apr 2026 17:34:49 +0000
Manifest this update:     Sat 18 Apr 2026 17:34:49 +0000
Manifest next update:     Sat 25 Apr 2026 17:34:49 +0000
Files and hashes:         1: oeTwnS9HB4Z8-uJ-jxMjafuX0O0.crl (hash: 0aVUdT2OrHmII1Nyq8s7mXLDzVB8iuQ4NXSKMwxKVOQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EF94/5029554C8A7911EE85441918C4F9AE02/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.crl
                          rsync://rpki.apnic.net/member_repository/A918EF94/5029554C8A7911EE85441918C4F9AE02/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 456 (0x1c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EF94, serialNumber=A1E4F09D2F4707867CFAE27E8F132369FB97D0ED
        Validity
            Not Before: Apr 18 17:34:49 2026 GMT
            Not After : Apr 25 17:34:49 2026 GMT
        Subject: CN=69e3c0b9-9f3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:24:83:26:47:2a:8f:ab:24:1d:cc:89:a1:65:
                    32:9e:56:d6:2a:39:ce:fa:cf:80:01:f7:70:0a:e7:
                    1b:19:a1:2c:50:8b:53:07:6f:a3:b8:ae:0b:cc:ed:
                    2d:b6:56:bf:7e:4f:c6:32:d6:34:11:b8:2a:1e:f4:
                    3b:9b:b7:4e:c4:91:36:92:c3:fd:75:2e:41:91:80:
                    e7:f0:15:38:72:cf:f8:21:99:22:1c:de:c1:0d:1d:
                    39:22:f9:1b:af:1e:df:e5:66:fc:36:31:5c:9b:0a:
                    88:e1:5c:05:a7:e1:77:da:64:4d:28:25:cf:45:7e:
                    23:40:fd:fd:1b:25:e4:be:75:19:eb:1c:4a:e6:71:
                    2d:89:02:20:54:ae:ea:ea:07:c3:21:32:6d:8c:7c:
                    90:31:02:25:99:3e:f3:0e:cd:bd:3e:78:f3:a4:01:
                    09:99:6a:42:c8:ff:d7:42:27:9d:c1:77:f2:fe:f9:
                    79:66:15:3a:68:bc:8e:5c:3b:f9:6d:7e:3a:cb:de:
                    70:0a:90:da:26:e2:66:2e:0b:c2:d7:61:e5:bd:40:
                    4d:67:4a:dd:30:8c:d3:1e:e4:26:ba:87:e1:52:4f:
                    0c:09:c5:60:5f:ca:ff:af:bf:f8:08:6b:c1:43:95:
                    c0:3a:19:94:a1:68:d3:d0:1d:55:82:84:dc:5e:82:
                    02:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:75:92:29:80:4B:27:2A:37:12:C9:CC:C9:3B:BE:A7:2E:5D:8B:5E
            X509v3 Authority Key Identifier:
                keyid:A1:E4:F0:9D:2F:47:07:86:7C:FA:E2:7E:8F:13:23:69:FB:97:D0:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EF94/5029554C8A7911EE85441918C4F9AE02/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF94/5029554C8A7911EE85441918C4F9AE02/oeTwnS9HB4Z8-uJ-jxMjafuX0O0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:f0:ef:18:59:cc:49:8a:8a:0d:9f:1c:6e:65:40:42:f1:c3:
         7b:ea:37:26:31:d1:cc:c5:8e:d7:6d:b0:d4:ca:3a:69:7f:d2:
         c3:cc:63:dc:26:83:a2:72:b3:31:6b:0b:1c:50:32:5c:0d:e9:
         a6:57:3a:23:2c:19:d7:c7:0c:ec:b1:71:15:2a:bb:83:82:f0:
         9f:37:03:54:82:66:40:e0:d2:4f:fe:2d:fc:93:a3:56:ed:98:
         d4:56:d9:b5:fa:26:17:26:f5:72:c7:3c:ac:b9:92:f9:9a:fb:
         a1:03:8d:c3:56:ec:80:de:26:fd:39:df:9a:ce:4e:b1:1f:c3:
         c1:dd:c8:59:c9:48:38:8f:f7:29:60:cc:ed:ae:55:5f:58:c8:
         e6:5a:23:3f:4d:3f:a0:82:95:e4:3e:b8:c6:2a:9e:1a:4d:0d:
         12:88:08:2e:b4:3c:86:97:49:91:fb:a7:2d:92:fc:77:1d:d9:
         46:52:8d:48:c9:0b:28:3a:0d:f0:35:57:3e:3c:1e:a2:24:0f:
         0a:d1:91:23:dc:d8:63:bb:d0:ab:f3:55:d5:9d:fa:e7:a2:86:
         72:2c:35:ac:83:50:72:19:f4:52:db:f6:0e:38:52:73:bf:6e:
         b4:33:8f:ec:66:1e:7d:60:28:dc:15:32:4b:28:a3:65:5b:b8:
         04:61:a7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:08:23 2026 by rpki-client