Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft
File:                     -6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft (raw, json)
Hash identifier:          d0HlNZQzRvFrJBaejyw0MLXxypERcqkQ1wpiBGoVsio=
Subject key identifier:   19:29:E2:E8:3C:89:B2:37:FB:FB:02:EC:81:19:72:8D:02:47:D3:D9
Authority key identifier: FB:A7:C3:AD:F0:7F:80:B3:56:C1:13:B8:52:56:F5:7A:40:69:EA:E6
Certificate issuer:       /CN=A918FD87/serialNumber=FBA7C3ADF07F80B356C113B85256F57A4069EAE6
Certificate serial:       08B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft
Manifest number:          08AD
Signing time:             Sat 04 Apr 2026 20:17:39 +0000
Manifest this update:     Sat 04 Apr 2026 20:17:38 +0000
Manifest next update:     Sat 11 Apr 2026 20:17:38 +0000
Files and hashes:         1: -6fDrfB_gLNWwRO4Ulb1ekBp6uY.crl (hash: mPf2ocZf6+sLooVYwnMyjrL8LgplVlSSTt1YyQ4XndI=)
                          2: 35167F34DE0911EAA8F7452CC4F9AE02.roa (hash: DoGtO0ioSkETngbYqtxgGr43fZyQW1n/adtL23ovKKA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.crl
                          rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 20:17:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2232 (0x8b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FD87, serialNumber=FBA7C3ADF07F80B356C113B85256F57A4069EAE6
        Validity
            Not Before: Apr  4 20:17:38 2026 GMT
            Not After : Apr 11 20:17:38 2026 GMT
        Subject: CN=69d171e3-20f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:bd:a2:64:82:02:48:df:a4:95:5f:6b:dd:31:
                    51:83:88:54:71:33:dc:14:fe:a3:76:e3:51:7b:91:
                    24:fd:53:7d:37:ff:12:1c:db:b1:d6:08:1a:96:93:
                    b9:21:3b:f5:e0:53:32:1b:d2:31:77:7e:89:f1:f7:
                    01:46:63:de:c7:c8:52:e4:73:5c:c8:6d:c2:ed:23:
                    02:78:cd:2b:9f:11:74:50:2e:4f:b0:e7:54:d2:e4:
                    7e:00:b7:e0:37:55:6f:54:39:f0:88:dd:3e:31:5c:
                    11:d6:1f:c4:3d:a0:ae:4f:42:88:29:65:78:68:a5:
                    cc:56:41:4b:e8:80:54:18:3c:f7:fd:2e:75:db:71:
                    b1:34:a9:40:56:c3:e5:70:54:e0:83:3f:54:40:e7:
                    e8:ad:ee:dc:8c:03:d0:66:d5:dd:04:d1:94:1e:df:
                    c4:7f:4a:56:d6:e6:33:73:e1:c4:dc:d8:38:79:b1:
                    8f:66:ca:d8:36:24:14:f3:70:94:bf:06:4d:cf:86:
                    b0:2d:63:70:d2:41:4d:d6:8c:04:8e:bc:d0:a9:89:
                    0e:2c:96:66:2a:4a:55:73:7e:ff:1c:ab:ef:8c:37:
                    c9:07:1d:35:be:61:bf:1e:9e:57:b7:80:95:8f:2b:
                    70:3a:3a:6f:0d:a7:68:b8:27:43:61:de:fb:b2:e2:
                    5f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:29:E2:E8:3C:89:B2:37:FB:FB:02:EC:81:19:72:8D:02:47:D3:D9
            X509v3 Authority Key Identifier:
                keyid:FB:A7:C3:AD:F0:7F:80:B3:56:C1:13:B8:52:56:F5:7A:40:69:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:66:8b:40:e6:e0:95:6f:43:b8:84:ab:11:ac:d3:85:24:b3:
         cc:1f:62:41:2b:a6:ab:a6:74:2a:8c:d2:8b:be:91:87:c2:56:
         df:29:fc:47:67:5a:ba:73:a3:0b:94:c6:a4:c0:ce:4c:59:cf:
         7b:c0:a4:f2:94:6f:e0:b3:79:70:92:5f:86:eb:34:0b:22:45:
         a7:d3:0d:a1:e5:e4:50:dc:57:21:a2:c5:59:72:9c:23:8f:a9:
         71:53:54:b4:b4:4a:d2:0a:54:25:0e:94:e5:f3:d1:8c:ac:a0:
         c0:d0:c6:1e:97:1b:5d:07:70:6c:f9:24:44:a0:a7:c9:ed:d1:
         5a:9f:38:dc:46:eb:12:e2:6d:6c:7f:17:70:00:1b:e2:a0:a4:
         0f:ce:ef:ef:c6:a3:60:5d:f7:24:91:66:7d:3d:4c:34:cf:f9:
         24:07:8b:08:73:ee:87:fe:ae:fe:0d:8f:b6:dd:d3:e7:21:18:
         83:77:df:16:94:41:18:42:8d:49:f9:4e:6d:7e:e6:42:7d:05:
         9b:2b:c0:34:79:4e:12:8c:d7:93:9b:3f:9f:84:c8:67:26:31:
         a3:c8:b7:83:45:83:ae:10:c2:e6:12:51:3a:85:92:f3:54:66:
         15:f4:5d:60:aa:8f:da:f4:7c:fd:87:aa:5b:dc:38:9e:84:35:
         cd:10:b6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:53:46 2026 by rpki-client