Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.mft
File:                     RIptgpdqVdxXC6WAN3Csat272IY.mft (raw, json)
Hash identifier:          6hpcDoWPDFSV4UDY/ZXiMpjGL1cBBAeVobqZzlodhN8=
Subject key identifier:   1D:F8:39:B4:58:6F:6C:B9:2D:DC:6B:11:54:41:87:51:61:A9:A1:0B
Authority key identifier: 44:8A:6D:82:97:6A:55:DC:57:0B:A5:80:37:70:AC:6A:DD:BB:D8:86
Certificate issuer:       /CN=A9194590/serialNumber=448A6D82976A55DC570BA5803770AC6ADDBBD886
Certificate serial:       0274
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIptgpdqVdxXC6WAN3Csat272IY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.mft
Manifest number:          0268
Signing time:             Mon 27 Apr 2026 01:57:17 +0000
Manifest this update:     Mon 27 Apr 2026 01:57:16 +0000
Manifest next update:     Mon 04 May 2026 01:57:16 +0000
Files and hashes:         1: RIptgpdqVdxXC6WAN3Csat272IY.crl (hash: WbqBEVqW4xOx2Sd7kgXUvO3KkDC36YhSWpk5uKokPOk=)
                          2: B4914F2E91A211EDA6B67334C4F9AE02.roa (hash: evtrgH99xTRhsjxDYSVy8xCMMoeXXNDwtZDEk4wJBb0=)
                          3: B3F895D691A211EDA6B67334C4F9AE02.roa (hash: 8Xdi8ir9IzionCTHsxTwuX8olpBr+epxWoFk8JYRHpY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.crl
                          rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIptgpdqVdxXC6WAN3Csat272IY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 04 May 2026 01:57:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 628 (0x274)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194590, serialNumber=448A6D82976A55DC570BA5803770AC6ADDBBD886
        Validity
            Not Before: Apr 27 01:57:16 2026 GMT
            Not After : May  4 01:57:16 2026 GMT
        Subject: CN=69eec27c-e081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:28:50:13:39:a0:38:97:4e:01:bf:66:3f:07:
                    50:01:cf:10:03:a6:28:da:ab:00:dc:25:95:36:65:
                    99:fe:85:f6:1d:5a:c5:91:c2:b4:f5:a1:86:fd:89:
                    eb:1c:e9:5f:2f:f2:95:7a:bc:4d:09:22:77:aa:f1:
                    a2:f7:dc:b3:ec:68:ec:52:e7:6e:02:ed:18:cf:c9:
                    2e:73:83:3b:a3:ab:59:05:46:c1:eb:2d:7f:23:b8:
                    65:1b:95:7a:e1:ee:2f:f6:48:f1:81:5c:df:7c:c7:
                    da:6e:ed:48:34:9d:f7:dd:3f:29:36:1c:48:0a:f8:
                    68:6a:51:57:42:53:f4:4f:a0:52:9f:5d:5c:0f:ed:
                    48:10:93:ae:ee:c1:1f:11:f6:10:ec:ef:49:ae:41:
                    3d:2f:ca:5b:16:bd:f3:af:90:c0:00:f0:2e:c2:6b:
                    e5:e0:ac:c4:4d:95:db:ab:a8:99:6e:f3:d1:67:4d:
                    bb:37:f7:4e:eb:dd:01:cb:c4:5a:a5:4c:0c:77:00:
                    b6:82:17:21:1e:11:5b:b5:32:02:44:df:d9:67:64:
                    b3:03:09:65:8a:4e:d4:1f:af:04:a5:90:0d:e0:c7:
                    54:cd:b9:18:e8:14:23:da:08:de:7e:ae:30:84:70:
                    82:b8:f4:a3:3c:8f:d3:c0:50:fe:a2:e1:22:d0:14:
                    02:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:F8:39:B4:58:6F:6C:B9:2D:DC:6B:11:54:41:87:51:61:A9:A1:0B
            X509v3 Authority Key Identifier:
                keyid:44:8A:6D:82:97:6A:55:DC:57:0B:A5:80:37:70:AC:6A:DD:BB:D8:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIptgpdqVdxXC6WAN3Csat272IY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:18:46:91:c2:2a:e9:0e:07:e9:41:67:6a:5d:6b:48:34:34:
         57:6e:f1:57:d7:aa:be:8f:cd:40:68:4e:8d:e8:70:67:75:87:
         3c:2c:bc:21:06:53:aa:a5:3a:85:a6:60:c1:b1:9e:a9:03:0f:
         4a:f2:dc:a8:77:b3:f9:47:49:a5:a8:cf:ac:03:7c:5c:14:dd:
         44:dd:96:1b:2b:cc:0d:fd:43:4b:fa:ef:9f:dc:e0:18:e2:2f:
         22:a1:58:ac:7e:8c:27:4e:5f:b2:b4:fa:71:9e:96:a7:cc:5b:
         85:ee:ea:05:6b:57:76:79:e0:5f:73:8d:66:16:5b:7b:a6:17:
         30:18:9d:56:3a:5f:1d:58:25:68:89:62:80:40:99:e8:4d:84:
         59:29:e7:eb:82:dd:be:da:92:fe:e7:41:3b:ba:2e:96:3b:cf:
         cc:2f:7f:e7:99:d0:fb:36:15:0d:c7:dc:eb:33:63:90:9c:a9:
         7e:c4:2e:ad:27:d9:26:7f:92:f2:6f:ba:e1:6b:49:10:4f:52:
         03:83:b7:b9:ab:ba:4a:57:5b:d2:fa:46:6d:6b:78:1d:f0:1a:
         41:2d:61:17:ca:75:bd:0e:71:77:9a:a0:5e:66:34:86:13:71:
         24:61:aa:31:19:8d:60:50:34:3b:35:ce:0b:20:5a:a5:60:f2:
         af:74:6c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 18:41:58 2026 by rpki-client