Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft
File:                     RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft (raw, json)
Hash identifier:          yP+9c1T3KkDWsFCHu+gt6+kccgAJKhNfBmKsmdvZeUk=
Subject key identifier:   58:20:74:C2:DB:A8:0B:F3:66:54:15:52:48:AE:1B:96:E2:DF:27:E4
Authority key identifier: 44:AB:E2:4B:70:A1:16:04:6F:74:42:11:D1:8D:02:65:05:B0:C7:B3
Certificate issuer:       /CN=A919C5FE/serialNumber=44ABE24B70A116046F744211D18D026505B0C7B3
Certificate serial:       1351
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RKviS3ChFgRvdEIR0Y0CZQWwx7M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft
Manifest number:          1333
Signing time:             Sat 04 Apr 2026 16:54:23 +0000
Manifest this update:     Sat 04 Apr 2026 16:54:23 +0000
Manifest next update:     Sat 11 Apr 2026 16:54:23 +0000
Files and hashes:         1: RKviS3ChFgRvdEIR0Y0CZQWwx7M.crl (hash: lnIneWbEr457629R0VzGVZb1nA8nFr8/aQFsbUGXD40=)
                          2: C3CD4B12C85411E8A5D4274BC4F9AE02.roa (hash: EzDx+kZUXYs4cl7Q2Kezjy72skBAtO5dib4eJqomtiw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.crl
                          rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RKviS3ChFgRvdEIR0Y0CZQWwx7M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 16:54:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4945 (0x1351)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C5FE, serialNumber=44ABE24B70A116046F744211D18D026505B0C7B3
        Validity
            Not Before: Apr  4 16:54:23 2026 GMT
            Not After : Apr 11 16:54:23 2026 GMT
        Subject: CN=69d1423f-4c1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:58:94:df:98:b7:fd:1d:78:ba:bd:f9:a3:50:
                    b1:e5:8b:4b:ff:08:3c:10:9f:c2:9d:40:2f:06:79:
                    47:88:2e:1a:10:5b:67:a1:7d:10:fb:1e:67:f7:c8:
                    14:a7:96:dc:39:f6:af:30:0b:36:8f:3e:46:8e:d7:
                    3e:26:36:b2:82:0b:21:f9:1b:8f:1f:4f:f9:d7:09:
                    51:11:7f:98:a1:b4:49:e7:77:a2:05:1f:e9:e8:82:
                    57:60:98:8e:e8:c6:3a:99:a2:a5:a3:93:86:67:97:
                    2c:c3:1f:34:04:6f:e9:bc:e1:b0:0f:ac:c3:6c:f1:
                    fe:31:db:9f:7b:4e:94:aa:e8:13:a8:66:c1:71:d4:
                    a4:3f:9f:1b:5f:4a:c1:26:f0:00:95:1f:10:f6:79:
                    5b:ae:44:4e:d7:bc:c3:47:bf:2a:c5:7c:5e:1f:ce:
                    e3:99:58:a2:8d:fc:ab:a7:87:f9:4a:37:54:45:3e:
                    cf:05:08:2e:b9:94:52:0d:ad:8f:05:4a:22:cc:a8:
                    a2:49:88:98:2c:55:2e:9b:bf:91:dd:ab:74:de:13:
                    e6:39:c7:96:a7:39:d6:de:29:bf:1b:cc:27:dd:2e:
                    5c:23:51:38:cf:30:86:ca:cf:60:32:2e:6b:40:3d:
                    75:46:ab:47:bf:c8:da:47:f4:86:78:e7:3f:85:ee:
                    32:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:20:74:C2:DB:A8:0B:F3:66:54:15:52:48:AE:1B:96:E2:DF:27:E4
            X509v3 Authority Key Identifier:
                keyid:44:AB:E2:4B:70:A1:16:04:6F:74:42:11:D1:8D:02:65:05:B0:C7:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RKviS3ChFgRvdEIR0Y0CZQWwx7M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:df:7f:ae:5a:2f:c1:ac:4d:92:b9:a5:c0:0f:fd:98:4c:19:
         e2:6d:c8:8e:39:7c:d2:4d:5b:3c:4e:ad:1f:b2:2b:b4:b1:eb:
         47:e8:c7:43:58:42:d8:c8:d3:8f:c2:81:e1:77:55:c6:fa:de:
         9a:c4:42:ab:d5:af:1a:c3:93:02:ff:32:62:f8:c5:8e:93:8c:
         32:00:92:4c:d3:6b:e8:56:0e:9a:d7:1f:2a:55:21:92:2b:40:
         5e:cd:36:d5:40:14:1e:bb:91:a8:d0:02:a7:8b:45:9f:a1:d5:
         2c:92:1b:27:6e:05:81:b3:6d:7d:02:32:15:fb:5c:57:41:3d:
         77:fa:d7:f0:00:33:36:77:f1:bd:f7:47:bf:b2:31:37:fe:ac:
         13:00:cf:92:6b:04:15:e0:a5:8c:d7:40:45:5b:83:97:ad:fd:
         d2:3d:69:a7:dc:51:17:92:81:bf:1c:a8:b5:60:7b:d4:ad:2d:
         f9:19:4e:e3:f9:c7:8e:a7:03:ff:5a:1e:65:68:f5:74:42:b0:
         fd:94:fe:75:9b:a9:3d:af:10:fd:31:8b:5b:d2:29:8f:12:81:
         4e:20:8d:a1:5c:30:71:5f:a9:d1:8d:20:87:36:46:3e:59:ea:
         7e:de:cc:8a:cf:77:23:60:2e:98:54:45:6e:f3:7e:dc:c7:21:
         95:4a:0c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 11:20:33 2026 by rpki-client