Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.mft
File:                     05oQ5hqMqVBO2xVIaTazd0OiTc4.mft (raw, json)
Hash identifier:          5fMiYqOkUhMNTqNbQcwtyd1MubiSJHrj8Q2Ok1hlJiI=
Subject key identifier:   38:7B:F2:BC:0B:E9:41:7E:CD:78:02:16:30:25:56:0A:33:C1:39:35
Authority key identifier: D3:9A:10:E6:1A:8C:A9:50:4E:DB:15:48:69:36:B3:77:43:A2:4D:CE
Certificate issuer:       /CN=A9110BE2/serialNumber=D39A10E61A8CA9504EDB15486936B37743A24DCE
Certificate serial:       01EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05oQ5hqMqVBO2xVIaTazd0OiTc4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.mft
Manifest number:          01E8
Signing time:             Fri 17 Apr 2026 03:05:30 +0000
Manifest this update:     Fri 17 Apr 2026 03:05:30 +0000
Manifest next update:     Fri 24 Apr 2026 03:05:30 +0000
Files and hashes:         1: 05oQ5hqMqVBO2xVIaTazd0OiTc4.crl (hash: 3CqhBj+1UqUUpMsGUFgeiXyj/DdbYust4LB4xWvUonc=)
                          2: A4FC1E34519311EE85CE2811C4F9AE02.roa (hash: JFxZryKyRP7LYifpbHK5u0FXhJggqQqYgD0OY/OYif4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.crl
                          rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05oQ5hqMqVBO2xVIaTazd0OiTc4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:05:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 494 (0x1ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110BE2, serialNumber=D39A10E61A8CA9504EDB15486936B37743A24DCE
        Validity
            Not Before: Apr 17 03:05:30 2026 GMT
            Not After : Apr 24 03:05:30 2026 GMT
        Subject: CN=69e1a37a-5e9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:be:94:4c:a6:dd:1b:d6:8e:d7:83:40:aa:9c:
                    e6:39:90:a3:e8:53:78:d8:b9:29:ce:8d:af:f2:36:
                    74:af:23:44:94:eb:a9:7d:21:9a:8d:02:09:ff:8d:
                    aa:02:2d:7a:2e:05:e8:f5:45:f0:1b:51:59:90:05:
                    86:e8:61:e9:d5:79:04:60:72:a9:c1:5d:64:56:a4:
                    cd:88:c2:e1:c4:53:c9:e7:c6:10:34:fa:00:76:e0:
                    66:38:50:68:46:06:3a:f1:49:f0:18:f5:40:e0:e5:
                    ca:5a:38:df:68:a4:00:ee:f4:6c:be:ec:fa:75:b9:
                    6d:ef:9a:d3:a7:b4:27:09:63:ad:d2:79:36:96:e6:
                    31:cb:c9:eb:f7:90:1b:4c:45:66:ab:74:fe:90:9e:
                    b6:e7:aa:d1:07:6a:38:18:b2:d9:11:80:08:62:19:
                    d8:6a:5d:e2:59:7a:ee:50:25:f7:29:82:80:60:bb:
                    81:7b:9e:4d:d6:2a:6a:da:f5:c9:e2:8c:9b:98:1b:
                    f6:dd:b2:86:a5:43:92:24:01:a4:3f:4c:52:82:f2:
                    88:9f:4c:bc:41:21:4c:bb:81:26:94:24:61:46:d1:
                    0f:0b:5b:8e:58:4e:c2:9d:6e:35:67:8d:31:46:0a:
                    9a:c2:83:a4:ee:7b:4d:04:6b:53:93:99:be:45:6e:
                    cd:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:7B:F2:BC:0B:E9:41:7E:CD:78:02:16:30:25:56:0A:33:C1:39:35
            X509v3 Authority Key Identifier:
                keyid:D3:9A:10:E6:1A:8C:A9:50:4E:DB:15:48:69:36:B3:77:43:A2:4D:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05oQ5hqMqVBO2xVIaTazd0OiTc4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:11:83:4a:5c:f6:3d:2c:53:f2:89:ea:9d:b6:a9:06:a4:db:
         67:48:2c:d3:9c:8c:c1:3c:53:50:89:4f:a5:a7:37:20:b8:6c:
         36:f4:74:0a:5d:6c:43:04:91:9a:0f:64:7a:b8:40:4a:89:eb:
         a8:ec:58:60:0b:ae:b7:de:1e:a9:8b:2b:c6:e3:32:4c:1f:24:
         e5:4e:cc:15:84:82:11:27:d5:0b:0f:32:96:cf:60:a7:11:b6:
         f5:f4:dd:b7:65:da:e9:9e:14:1f:f3:cf:d3:e3:df:c8:4e:c0:
         32:41:6c:c4:e9:48:8d:a8:f8:b9:4b:5c:2c:ff:c7:e5:9f:cf:
         76:98:1c:b1:49:00:87:dc:ed:20:79:af:67:4c:e0:c6:a3:6a:
         8e:72:74:9c:4a:83:96:72:3f:ee:c3:5e:3d:9c:cf:8b:ac:60:
         6f:09:26:f4:dd:02:0b:27:2d:fc:1a:a7:49:f5:f3:04:87:ef:
         fd:37:4d:d3:58:80:7f:c3:b0:0a:00:97:be:5c:cd:dc:d1:48:
         40:9d:58:ff:49:4e:c3:69:18:b6:6e:6b:9a:ee:aa:86:5e:e8:
         c3:d6:f9:cb:07:f5:eb:7b:56:a1:ec:c5:fd:77:b9:a8:28:7e:
         2e:29:92:44:95:91:09:98:0d:1f:76:2e:83:dd:0f:97:c3:e5:
         e5:7c:0d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:05:05 2026 by rpki-client