Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116297/6A58AD8EC5CB11F085A9BC58C4F9AE02/TI8rREM6tGSnFK2NOajxbkxQCnw.mft
File:                     TI8rREM6tGSnFK2NOajxbkxQCnw.mft (raw, json)
Hash identifier:          15YQI3HTSHvU7+G9xL8ouz0pMS2hHn2+6CMaPA2u7go=
Subject key identifier:   30:78:2F:A0:08:E2:BE:FF:9E:14:F3:B7:87:6C:A4:A0:11:91:30:98
Authority key identifier: 4C:8F:2B:44:43:3A:B4:64:A7:14:AD:8D:39:A8:F1:6E:4C:50:0A:7C
Certificate issuer:       /CN=A9116297/serialNumber=4C8F2B44433AB464A714AD8D39A8F16E4C500A7C
Certificate serial:       57
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TI8rREM6tGSnFK2NOajxbkxQCnw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116297/6A58AD8EC5CB11F085A9BC58C4F9AE02/TI8rREM6tGSnFK2NOajxbkxQCnw.mft
Manifest number:          53
Signing time:             Fri 17 Apr 2026 07:56:44 +0000
Manifest this update:     Fri 17 Apr 2026 07:56:43 +0000
Manifest next update:     Fri 24 Apr 2026 07:56:43 +0000
Files and hashes:         1: TI8rREM6tGSnFK2NOajxbkxQCnw.crl (hash: wZUYSxF1YKIGfDL81e55CTcNnIsJ9zTneoV4KcMhHQI=)
                          2: FE68D63A156B11F1B9AA1492393D8C67.roa (hash: mtMWlsAIdr5mwCsmbmpFSLhMEDfGKHPUCmKxgSWYGI4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116297/6A58AD8EC5CB11F085A9BC58C4F9AE02/TI8rREM6tGSnFK2NOajxbkxQCnw.crl
                          rsync://rpki.apnic.net/member_repository/A9116297/6A58AD8EC5CB11F085A9BC58C4F9AE02/TI8rREM6tGSnFK2NOajxbkxQCnw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TI8rREM6tGSnFK2NOajxbkxQCnw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:56:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87 (0x57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116297, serialNumber=4C8F2B44433AB464A714AD8D39A8F16E4C500A7C
        Validity
            Not Before: Apr 17 07:56:43 2026 GMT
            Not After : Apr 24 07:56:43 2026 GMT
        Subject: CN=69e1e7bc-e53a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:2f:f2:90:08:3c:12:e0:7b:e8:5d:61:fd:d5:
                    02:47:39:ce:14:e8:90:aa:54:d7:90:2b:e9:85:75:
                    75:95:eb:17:b2:a9:64:82:0d:2a:35:bb:5a:4e:41:
                    a9:77:bb:fb:56:a0:40:6e:5e:13:cf:b2:38:f1:94:
                    e6:a8:e0:cc:2a:a8:6c:e5:af:43:a8:15:08:18:87:
                    e6:8e:bc:ee:4f:0d:56:6a:a5:36:e2:e2:6c:43:2f:
                    d5:cf:dc:c9:96:5a:73:7a:05:8c:2a:f7:e2:0a:9d:
                    b2:b8:6e:5a:cc:28:22:e9:ca:7b:da:96:7f:6f:6d:
                    4d:8d:84:d3:ed:92:04:b1:d4:6f:42:38:1a:47:4d:
                    b8:74:b6:85:b0:f4:cb:16:5e:ff:5e:7e:a2:c7:a2:
                    f1:35:07:16:47:3c:20:0b:90:78:00:72:ce:ad:63:
                    a9:51:df:27:76:19:f3:43:0b:20:09:ff:77:39:c3:
                    9e:9b:c7:26:15:69:89:cb:b9:f0:b4:d6:56:86:9b:
                    19:52:ab:b2:c7:0f:5c:4d:66:75:cc:4e:fc:35:c6:
                    7a:85:5a:11:70:d5:30:c0:3d:98:37:50:02:91:2f:
                    f3:12:ff:3a:16:bb:45:a0:dc:1f:ce:df:cc:2e:eb:
                    99:b9:96:d7:f5:6d:55:22:60:69:fb:2d:e0:4b:d7:
                    88:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:78:2F:A0:08:E2:BE:FF:9E:14:F3:B7:87:6C:A4:A0:11:91:30:98
            X509v3 Authority Key Identifier:
                keyid:4C:8F:2B:44:43:3A:B4:64:A7:14:AD:8D:39:A8:F1:6E:4C:50:0A:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116297/6A58AD8EC5CB11F085A9BC58C4F9AE02/TI8rREM6tGSnFK2NOajxbkxQCnw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TI8rREM6tGSnFK2NOajxbkxQCnw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116297/6A58AD8EC5CB11F085A9BC58C4F9AE02/TI8rREM6tGSnFK2NOajxbkxQCnw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:64:56:39:99:6d:4e:d7:73:4c:aa:93:c2:02:75:48:8a:71:
         e2:66:71:26:7f:38:7c:0a:30:51:7c:19:4d:09:8b:68:19:d5:
         84:d8:9b:76:16:22:ce:47:bd:c4:cb:07:39:56:58:93:47:77:
         6a:e2:e9:ee:af:f2:31:64:24:d3:56:a6:a0:a7:bd:83:e3:91:
         bc:b9:f6:e2:fc:9d:63:8f:03:d7:e1:d1:b9:a0:95:7b:d4:5f:
         37:61:f6:cc:e7:f5:38:4f:30:a9:34:df:1e:66:a1:9b:83:49:
         fc:1a:54:78:59:d2:2c:03:af:10:47:50:6d:c2:56:15:84:cd:
         96:1d:06:c5:ad:1b:a5:f9:9f:4b:24:07:dd:17:f7:ff:95:8c:
         4c:ef:e1:34:c3:0d:62:bd:06:6e:70:1f:62:be:51:2c:9c:cb:
         4d:58:d8:bb:13:78:c5:2d:a0:56:42:a1:f9:61:30:49:b4:8e:
         85:6e:a5:83:ee:aa:70:a3:99:6e:86:5d:25:3e:2a:c1:41:87:
         40:91:0b:75:a0:af:c1:b0:51:39:b8:c9:ae:63:ed:54:a1:4b:
         bc:5a:74:d1:5f:9d:98:71:16:32:2b:62:c1:90:95:c1:fe:87:
         4c:1f:98:e2:31:16:1c:78:ba:8e:84:1b:0c:1d:ee:e1:c9:61:
         7e:95:f0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:42:38 2026 by rpki-client