Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft
File:                     iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft (raw, json)
Hash identifier:          Vgzm6igyC8/PiowNrU6We/9zZRq67jXYF/zOSi2zMro=
Subject key identifier:   D2:B2:1B:79:9C:50:9B:59:AC:7F:EB:45:14:F7:CF:1D:66:64:58:7E
Authority key identifier: 88:99:69:3E:93:13:50:C5:55:F2:BF:47:B1:51:DE:F8:73:42:B7:29
Certificate issuer:       /CN=A911A35E/serialNumber=8899693E931350C555F2BF47B151DEF87342B729
Certificate serial:       03E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft
Manifest number:          03D5
Signing time:             Fri 17 Apr 2026 00:28:05 +0000
Manifest this update:     Fri 17 Apr 2026 00:28:04 +0000
Manifest next update:     Fri 24 Apr 2026 00:28:04 +0000
Files and hashes:         1: iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl (hash: 33ihahQrspyWj0AOTNFgKqBvkqWB1NOFRIGzSgZzF7E=)
                          2: 3DCC89FAC6CB11ECB185E43EC4F9AE02.roa (hash: g/y6tyH2Gsq/YIingTE3FmjJMzDHLagvffaKtJeyX2M=)
                          3: 7FA7FFD6D54F11EF88D65E53C4F9AE02.roa (hash: PKziXo5JwfLo2oKzhtquW/s14RITw4Gju81cfabKo1g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl
                          rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:28:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 994 (0x3e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A35E, serialNumber=8899693E931350C555F2BF47B151DEF87342B729
        Validity
            Not Before: Apr 17 00:28:04 2026 GMT
            Not After : Apr 24 00:28:04 2026 GMT
        Subject: CN=69e17e94-ed08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d4:0e:d1:99:86:d0:8a:f5:89:41:42:69:e2:
                    b2:38:5f:4c:08:59:29:35:5b:12:f6:fd:75:19:39:
                    7c:34:4f:9b:99:08:e8:15:68:93:26:a7:87:82:90:
                    62:49:f5:d9:09:2d:d0:36:69:63:7d:ae:30:84:88:
                    2f:3c:42:72:c7:e6:72:58:e9:f6:0d:af:56:35:86:
                    32:03:df:41:b0:0a:f9:87:f1:d9:30:de:04:1b:ee:
                    17:f1:8f:c8:f5:3d:57:a1:b1:18:f1:a9:2d:e2:4d:
                    ad:48:87:a7:6f:45:4f:2b:b4:8d:64:e9:99:26:67:
                    bc:2a:ff:aa:d1:dc:e6:8c:b5:f2:ee:20:6b:ab:d2:
                    fc:27:d5:4f:58:d8:b9:69:31:39:14:a6:43:71:47:
                    73:00:eb:26:e6:51:a0:a8:d1:63:2c:03:fe:5b:5a:
                    37:fd:37:5c:cf:95:d5:52:4f:a5:b5:62:9d:be:d9:
                    98:c2:3c:78:9d:8f:81:30:ed:21:a7:f9:24:a5:94:
                    c1:cc:6c:75:98:5b:10:fd:e5:2d:7e:48:b7:e9:bb:
                    69:3e:7e:e7:22:05:21:9e:4a:8d:d0:dc:32:bd:e5:
                    fd:6d:cc:25:e9:de:f7:f0:cd:01:cf:47:70:70:97:
                    ce:53:cc:bc:ac:2e:cd:8d:82:e7:39:cc:02:b1:fd:
                    d5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B2:1B:79:9C:50:9B:59:AC:7F:EB:45:14:F7:CF:1D:66:64:58:7E
            X509v3 Authority Key Identifier:
                keyid:88:99:69:3E:93:13:50:C5:55:F2:BF:47:B1:51:DE:F8:73:42:B7:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:f4:d1:0f:2f:eb:d7:14:06:c9:67:84:37:58:05:e0:58:1d:
         9a:06:aa:9d:da:09:ef:da:9f:81:2c:76:37:36:f5:3c:7c:92:
         69:e8:81:44:8d:2c:e3:a6:97:75:49:40:0c:51:ed:a7:0f:38:
         40:dc:d7:28:dd:4f:1a:9d:9c:a9:bb:73:5b:6a:8c:b7:da:d6:
         35:ea:ac:e5:50:26:65:89:2e:62:28:42:0d:ff:b1:ab:85:ae:
         9f:5e:76:61:9b:df:3e:a7:c3:e9:93:33:29:a5:88:e1:74:c2:
         61:32:6f:b0:da:b6:c4:0c:62:21:2d:39:91:13:90:79:96:ff:
         0e:3f:31:d0:54:9e:49:ed:7f:bd:9b:00:40:2d:6e:bb:ce:6a:
         41:cc:9e:00:c0:72:26:a9:1c:f3:6b:dc:14:3e:1b:89:8b:a4:
         13:5e:14:69:af:1e:13:a1:dc:44:e3:dd:bf:92:a7:8f:8d:06:
         0a:8f:22:b7:95:be:ef:f2:a8:d5:6c:8c:e4:e0:07:a1:d7:92:
         d4:14:f9:cc:b2:21:96:41:02:77:fa:f5:1c:a2:02:d8:79:db:
         c6:a5:94:64:9d:60:78:68:e4:38:11:ec:da:db:6b:38:62:b9:
         d8:48:ea:23:e9:b3:95:ee:95:38:fe:ba:3d:f2:43:bd:ee:c4:
         fd:58:6d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:30:51 2026 by rpki-client