Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.mft
File:                     -_-IremTZomzJBRb_mO3TVeqrAs.mft (raw, json)
Hash identifier:          dCRVnvyidexptNogxu5z38/GmTfLURLLVTHcwrtI38s=
Subject key identifier:   97:99:FC:B0:24:F0:A0:A7:09:EF:8B:7F:25:98:8F:05:33:9F:99:6F
Authority key identifier: FB:FF:88:AD:E9:93:66:89:B3:24:14:5B:FE:63:B7:4D:57:AA:AC:0B
Certificate issuer:       /CN=A919F525/serialNumber=FBFF88ADE9936689B324145BFE63B74D57AAAC0B
Certificate serial:       012C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_-IremTZomzJBRb_mO3TVeqrAs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.mft
Manifest number:          0123
Signing time:             Sun 05 Apr 2026 05:12:38 +0000
Manifest this update:     Sun 05 Apr 2026 05:12:37 +0000
Manifest next update:     Sun 12 Apr 2026 05:12:37 +0000
Files and hashes:         1: -_-IremTZomzJBRb_mO3TVeqrAs.crl (hash: QNpAcvY0dnxMAYGYJHL/6wpFR5nGoJV0bhtd3/yvUgE=)
                          2: C276060084F011EF9D52F573C4F9AE02.roa (hash: bXHiUY7HCBEaQA+nusZ6DmYQdogq8krgBrFJi6+mw0s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.crl
                          rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_-IremTZomzJBRb_mO3TVeqrAs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:12:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 300 (0x12c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F525, serialNumber=FBFF88ADE9936689B324145BFE63B74D57AAAC0B
        Validity
            Not Before: Apr  5 05:12:37 2026 GMT
            Not After : Apr 12 05:12:37 2026 GMT
        Subject: CN=69d1ef45-c4a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c2:4b:e2:22:a3:3c:ab:85:74:e8:06:a4:1d:
                    d3:33:e4:13:7a:1a:55:0a:26:d7:be:2f:17:0f:2c:
                    3e:b2:b3:c7:78:ff:9a:ea:cc:20:34:b6:64:b3:52:
                    9b:6b:d7:fe:86:a7:32:58:34:15:a7:82:72:fb:70:
                    1d:26:16:9b:0a:7b:bf:16:ef:0e:3e:61:24:28:eb:
                    b3:22:b3:10:63:5b:a4:b7:53:c2:32:1e:ba:43:94:
                    ab:33:f7:33:91:f6:1e:c5:f4:69:59:e4:25:fb:dd:
                    8e:8e:af:69:04:b2:ae:18:e9:7a:32:d4:bb:0a:a0:
                    92:42:9c:24:a3:44:4c:8b:27:fc:b5:ef:ce:8f:2f:
                    f4:70:6c:6a:2c:f2:f1:fd:fb:20:5f:4b:af:ca:64:
                    c1:00:4f:79:3d:9e:7c:03:1e:bd:97:36:51:91:48:
                    ba:b1:92:8b:6d:c5:46:36:8f:f8:05:b8:78:32:ef:
                    56:3b:34:53:e7:54:3c:6b:b7:ea:13:2c:31:60:41:
                    5a:65:33:78:5e:ef:d1:0a:ac:40:46:11:bf:ae:1a:
                    33:c1:3f:30:7b:b8:ce:56:d4:31:54:f4:6d:4a:21:
                    c4:9d:98:7a:51:a6:cb:63:ee:86:7e:c0:c9:91:bc:
                    a1:6e:da:88:90:72:90:58:27:b4:8f:ed:c1:da:ad:
                    fe:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:99:FC:B0:24:F0:A0:A7:09:EF:8B:7F:25:98:8F:05:33:9F:99:6F
            X509v3 Authority Key Identifier:
                keyid:FB:FF:88:AD:E9:93:66:89:B3:24:14:5B:FE:63:B7:4D:57:AA:AC:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_-IremTZomzJBRb_mO3TVeqrAs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:e5:20:1a:20:e9:7f:ff:27:89:d3:6d:81:f2:c2:9d:3d:f5:
         2d:50:d2:dc:17:34:76:1b:ad:50:a0:5f:14:b5:6b:1a:42:c3:
         4f:20:44:ee:bf:5f:57:25:3f:d3:14:43:b8:f0:4c:ba:92:cb:
         cd:83:03:7a:8d:72:0c:d4:0b:65:1a:67:e5:70:ac:7b:84:78:
         d6:cd:91:c4:e1:fd:33:6a:1e:80:f2:aa:46:17:db:15:4d:92:
         23:fc:f4:e3:88:d7:13:9e:75:f6:77:b7:2e:1b:c4:9f:7e:31:
         d2:6c:32:1d:7a:15:f6:a1:d4:9a:3b:c9:f7:b2:a4:dd:ad:d7:
         e6:0d:ac:0d:83:f4:e4:0d:c6:ab:86:08:ef:96:9f:41:40:cb:
         81:80:27:9d:80:60:77:e2:ea:bb:a9:9c:03:c8:2b:49:33:8d:
         e6:08:5c:88:75:20:ed:af:9f:da:af:fd:00:d6:4e:f2:3f:eb:
         77:bb:ef:16:83:6a:df:6f:ae:25:ec:c2:2e:8d:a9:c6:9a:b5:
         fe:99:e5:02:96:60:54:a0:7b:9b:ab:48:00:f9:89:b8:bf:75:
         98:f9:37:ae:b7:d6:7d:84:64:fb:ab:77:a4:4c:9b:1d:2c:1e:
         0c:c6:f9:2e:9b:51:4f:3f:65:7f:bf:3f:9f:c2:7e:c0:61:29:
         4a:1d:e8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:40:58 2026 by rpki-client