Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft
File:                     iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft (raw, json)
Hash identifier:          Lca3Z0IySlCQBXivHHfw8n1TPxhHAQy5P08VEnxue+0=
Subject key identifier:   78:93:3B:1C:0A:D6:0E:36:23:F2:1B:61:8D:EB:56:53:02:67:EF:B4
Authority key identifier: 88:C1:54:4D:7E:67:BC:D9:1D:48:DF:5D:11:FC:D1:02:1F:85:39:93
Certificate issuer:       /CN=A919821D/serialNumber=88C1544D7E67BCD91D48DF5D11FCD1021F853993
Certificate serial:       01C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iMFUTX5nvNkdSN9dEfzRAh-FOZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft
Manifest number:          01BE
Signing time:             Sun 05 Apr 2026 03:20:58 +0000
Manifest this update:     Sun 05 Apr 2026 03:20:57 +0000
Manifest next update:     Sun 12 Apr 2026 03:20:57 +0000
Files and hashes:         1: iMFUTX5nvNkdSN9dEfzRAh-FOZM.crl (hash: 5RawYX9XaNFYS9DqZF7FMy7EXN37K/wOtsO26dVd4mI=)
                          2: 51D4585A89B211EE9ADA615EC4F9AE02.roa (hash: mMNzjo+KW1b2ntUt0cKXNQz80BGQiuXIwjeasUtwgcM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.crl
                          rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iMFUTX5nvNkdSN9dEfzRAh-FOZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 03:20:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 452 (0x1c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919821D, serialNumber=88C1544D7E67BCD91D48DF5D11FCD1021F853993
        Validity
            Not Before: Apr  5 03:20:57 2026 GMT
            Not After : Apr 12 03:20:57 2026 GMT
        Subject: CN=69d1d519-07a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3d:bc:39:d1:a3:5f:ec:0e:c2:49:dd:e5:c0:
                    08:75:6d:34:05:d4:f7:0e:f6:7d:23:05:12:2d:21:
                    ce:99:86:e5:9b:6e:5f:74:13:a1:3e:4e:a9:e6:ef:
                    d8:3e:09:de:0a:51:c8:06:a9:70:61:02:4b:7d:53:
                    d6:c7:0f:b4:53:87:8f:f5:1b:95:74:8e:0d:56:d3:
                    fb:79:57:68:6b:cb:01:53:4a:e4:81:78:dc:c0:4e:
                    0d:6b:53:c8:d6:9d:6f:b8:79:57:40:8b:2b:84:a2:
                    39:26:36:2b:5b:ed:38:7b:df:fa:74:52:60:aa:e1:
                    40:b8:24:36:fd:e1:7f:19:c0:50:1f:fc:8b:48:b5:
                    8d:84:ea:3d:df:1d:ea:4c:9a:56:a3:2e:eb:6e:b0:
                    1c:01:0e:1f:04:96:01:14:4c:47:0c:cb:48:86:96:
                    34:a8:91:18:24:4e:ee:a9:c1:69:19:2d:f0:4d:3a:
                    4d:bc:76:bb:51:cd:bd:ff:e7:27:01:48:85:f8:59:
                    79:28:a6:38:9b:e7:41:a2:89:36:05:ad:8b:f3:38:
                    83:5e:f1:8c:6c:7f:45:82:3a:33:40:80:f2:d7:fb:
                    10:a9:71:16:2b:89:e5:d7:51:0d:26:3d:9c:64:c8:
                    d0:4e:7c:df:b7:e7:af:03:3d:99:9f:18:1d:f1:18:
                    d3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:93:3B:1C:0A:D6:0E:36:23:F2:1B:61:8D:EB:56:53:02:67:EF:B4
            X509v3 Authority Key Identifier:
                keyid:88:C1:54:4D:7E:67:BC:D9:1D:48:DF:5D:11:FC:D1:02:1F:85:39:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iMFUTX5nvNkdSN9dEfzRAh-FOZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:e8:1e:d0:a2:3f:3a:2a:0f:7c:64:53:c1:cd:f7:52:c6:78:
         bf:6a:e3:9c:d2:da:47:20:1b:7d:9b:54:27:b2:d6:e0:03:75:
         eb:33:e8:eb:c4:7e:61:f6:02:ad:15:29:83:9e:ec:f5:ee:4d:
         02:50:b9:ea:e9:1a:05:8e:a2:ad:4e:3c:0e:da:32:6a:71:c0:
         c1:9e:44:b8:39:c0:2e:81:0d:ca:b3:88:98:ee:7d:c5:05:c9:
         a8:b4:dc:c1:cb:9c:95:b3:ca:36:03:80:a5:0f:1b:ac:23:cf:
         25:1e:69:d5:e7:24:d5:cb:4e:81:60:e2:2f:42:ce:d3:b1:90:
         e7:ca:ef:3b:60:25:b1:2f:b3:35:be:d0:b1:8c:c1:44:2c:fa:
         88:7a:87:19:b8:75:73:dc:80:6d:88:43:f3:40:bf:76:26:7f:
         a4:0a:80:66:61:fc:98:88:ca:0c:2f:81:f7:cc:c1:f0:94:c4:
         85:3b:ce:2c:e3:07:3c:23:ac:b4:b3:02:f7:f5:ed:1f:86:d3:
         6a:cc:c1:ab:4b:42:0e:c7:2e:74:93:ae:15:5e:da:02:c8:22:
         9d:b6:a6:ad:3e:2f:04:14:5a:ba:bb:8f:72:0d:ab:64:98:7b:
         f8:5a:32:34:0f:d9:f0:17:19:d0:a1:d9:91:37:8e:cf:4a:92:
         2f:46:da:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:30 2026 by rpki-client